Windows Server 2022 IIS 10 Shared Config

Bogdan Cirlan 0 Reputation points
2025-01-29T10:21:44.5566667+00:00

I am trying to setup a farm of IIS 10 on 2(or more in the future) Windows 2022 servers. Enabling the Shared Config is not an issue, and it is located on D:\SharedConfig folder on each server. I am configuring the websites, application pools and all the other IIS settings on server 1, then copy over the files from D:\SharedConfig folder to server 2. But, because I am using a local user(member of local Administrators group) and it's password for the default Application Pools user, the websites on the server 2 do not work. The application pool for the websites stops while trying to brose the website locally on server 2. This is because the password used for the default application pool user is encrypted, and server 1 has different encryption keys than server 2. For IIS 7(Server 2012 R2) the problem was solved by exporting and importing the RSA keys using the aspnet_regiis command(aspnet_regiis -px "iisConfigurationKey" "D:\config_keys\iisConfigurationKey.xml" -pri and aspnet_regiis -pi "iisConfigurationKey" "D:\config_keys\iisConfigurationKey.xml"). But, IIS 10 uses a different encryption mechanism(CNG), and that export does not apply anymore. What would be the way to solve this, how can I have the same encryption keys on all servers so all them can read the passwords from applicationHost.config file ?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,773 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.