Share via

ASP.NET IIS Registration Tool (Aspnet_regiis.exe)

  • Article

When multiple versions of the .NET Framework are executing side-by-side on a single computer, the ASP.NET ISAPI version mapped to an ASP.NET application determines which version of the common language runtime (CLR) is used for the application. The ASP.NET IIS Registration Tool (Aspnet_regiis.exe) allows an administrator or installation program to easily update the script maps for an ASP.NET application to point to the ASP.NET ISAPI version that is associated with the tool. The tool can also be used to display the status of all installed versions of ASP. NET, register the ASP.NET version that is coupled with the tool, create client-script directories, and perform other configuration operations.

Note

There are two IIS Registration Tools that ship with the .NET Framework; one for standard systems and one for 64-bit system. The tool for 64-bit systems in located in the Framework64 directory of the Microsoft.NET directory inside the Windows folder; for example C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727 would contain the IIS Registration Tool.

aspnet_regiis [options]

Options

Option Description

-c

Installs the client-side scripts for ASP.NET, such as client-side validation scripts, to the aspnet_client subdirectory of each Internet Information Services (IIS) site directory.

Only the client-side scripts for the ASP.NET version that is associated with Aspnet_regiis.exe are installed.

-disable

Disables ASP.NET in the IIS Security Console.

This option can be combined only with the -i, -ir, or -r options. It is not available with IIS versions earlier than IIS 6.0.

-e

Removes the client-side scripts for ASP.NET from the aspnet_client subdirectory of each IIS site directory.

Only the client-side scripts for the ASP.NET version associated with Aspnet_regiis.exe are removed.

-ea

Removes the client-side scripts for all versions of ASP.NET from the aspnet_client subdirectory of each IIS site directory.

-enable

Enables ASP.NET in the IIS Security Console.

This option can be combined only with the -i, -ir, or -r options. It is not available with IIS versions earlier than IIS 6.0 or with ASP.NET versions earlier than ASP.NET version 2.0.

-ga user

Grants the specified user or group access to the IIS metabase and other directories that are used by ASP.NET.

This option is not available with ASP.NET versions earlier than ASP.NET 2.0.

-i

Installs the version of ASP.NET that is associated with Aspnet_regiis.exe and updates the script maps at the IIS metabase root and below.

Only the script maps for applications that use an earlier version of ASP.NET are updated. Applications that use a later version are not affected.

-ir

Installs the version of ASP.NET that is associated with Aspnet_regiis.exe and only registers ASP.NET in IIS.

This option does not update the script maps. To install ASP.NET and update the script maps, use the -i option.

-k path

Removes the script maps to all versions of ASP.NET from all ASP.NET applications at the specified application root path and its subdirectories.

-kn path

Removes the script maps to all versions of ASP.NET from the ASP.NET application only at the specified application root path.

This option does not affect applications in subdirectories of the specified path.

-lk

Lists the path and version of all IIS metabase keys where ASP.NET is mapped.

The keys that inherit ASP.NET script maps from a parent key are not displayed.

-lv

Lists the status and installation path of all versions of ASP.NET that are installed on the computer.

-norestart

Inhibits the restart of the World Wide Web Publishing Service after installing or updating ASP.NET script maps. If you do not use this option, all application pools are recycled.

Use this option with the -i or -r options when the IIS worker process will be restarted manually.

-r

Updates all of the script maps in the IIS metabase and below to point to the ASP.NET ISAPI version that is associated with Aspnet_regiis.exe.

All existing script maps are updated to point to the ASP.NET ISAPI version that is associated with the ASP.NET IIS Registration tool, regardless of the current version.

-s path

Installs the script map that points to the ASP.NET ISAPI version associated with Aspnet_regiis.exe to all ASP.NET applications at the specified application root path and its subdirectories. All existing script maps in the specified path and below that use an earlier version of the ASP.NET ISAPI are updated.

-sn path

Installs the script map that points to the ASP.NET ISAPI version associated with the tool to the ASP.NET application at the specified application root path. All existing script maps in the specified path that use an earlier version of the ASP.NET ISAPI are updated.

This option does not affect applications in subdirectories of path.

-u

Uninstalls the version of ASP.NET that is associated with the ASP.NET IIS Registration tool from the computer. Existing script maps to this version of the ASP.NET ISAPI are automatically remapped to the most recent remaining ASP.NET ISAPI version installed.

-ua

Uninstalls all versions of ASP.NET from the computer.

-?

Displays the command syntax and options for the ASP.NET IIS Registration tool.

Configuration Options

Option Description

-config+

Enables remote access to ASP.NET configuration on the computer.

-config-

Disables remote access to ASP.NET configuration on the computer.

-pa container account

Grants permission for the specified user or group account to access the specified key container. This argument takes the following optional modifiers:

  • -pku   Substitutes a user-specified container for the default machine container.

  • -csp provider   Specifies the container provider to use.

  • -full   Specifies that full access should be added, rather than the default read-only access.

-pc container

Creates an RSA public/private key pair in the specified container. This argument takes the following optional modifiers:

  • -size keySize   Specifies the key size. The default is 1024 bytes.

  • -pku   Substitutes a user-specified container for the default key container on the computer.

  • -exp   Specifies that private keys must be able to be exported.

  • -csp provider   Specifies the container provider to use.

-pd section

Decrypts the configuration section. This argument takes the following optional parameters:

  • -app virtualPath   Specifies that decryption should occur at the level of the included path.

  • -location subPath   Specifies the subdirectory to decrypt.

  • -pkm   Specifies that the Machine.config file should be decrypted instead of the Web.config file.

-pdf section webApplicationDirectory

Decrypts the specified configuration section of the Web.config file in the specified physical (not virtual) directory.

-pe section

Encrypts the specified configuration section. This argument takes the following optional modifiers:

  • -prov provider   Specifies the encryption provider to use.

  • -app virtualPath    Specifies that encryption should occur at the level of the included path.

  • -location subPath   Specifies the subdirectory to encrypt.

  • -pkm   Specifies that the Machine.config file should be encrypted instead of the Web.config file.

-pef section webApplicationDirectory

Encrypts the specified configuration section of the Web.config file in the specified physical (not virtual) directory.

-pi container file

Imports an RSA public/private key pair to the specified container from the specified XML file. This argument takes the following optional modifiers:

  • -pku   Substitutes a user-specified container for the default machine container.

  • -exp   Specifies that private keys can be exported.

  • -csp provider   Specifies the container provider to use.

-pr container account

Removes permission for the specified user or group account to access the specified key container. This argument takes the following optional modifiers:

  • -pku   Substitutes a user-specified container for the default machine container.

  • -csp provider   Specifies the container provider to use.

-px container file

Exports an RSA public/private key pair from the specified container to the specified XML file. This argument takes the following optional modifiers:

  • -pku   Substitutes a user-specified container for the default machine container.

  • -csp provider   Specifies the container provider to use.

-pz container

Deletes the specified key container. This argument takes the following optional modifier:

  • -pku   Substitutes a user-specified container for the default machine container.

Remarks

When multiple versions of ASP.NET are installed on a computer, ASP.NET is said to be running side-by-side. In this setup, Internet Information Services (IIS) needs to know which version of the ASP.NET ISAPI (aspnet_isapi.dll) should process a page in an ASP.NET application. The ASP.NET ISAPI version that is associated with an ASP.NET application determines which version of the CLR is used for the application. An ASP.NET application is associated with an ASP.NET ISAPI version using a script map in IIS. To simplify the configuration process for an ASP.NET application, each version of ASP.NET comes with a linked version of Aspnet_regiis.exe.

Note

A unique version of Aspnet_regiis.exe is included with each version of the .NET Framework. Since each version of the tool applies only to its associated version of the .NET Framework, be sure to use the appropriate version of the tool to configure an ASP.NET application.

The ASP.NET IIS Registration tool is commonly used with the -s or -sn option to remap an ASP.NET application to the version of the .NET Framework with which it is associated. Use the -s option to update an application at the specified root path and in all of its subdirectories. If you do not want applications in subdirectories to be updated, use the -sn option. To update the script maps of all existing ASP.NET applications on the computer at one time, use the -r option.

Note

The path parameter refers to the root path of the application, not the physical path. For example, W3SVC/1/ROOT/SampleApp1.

Conversely, you can use the ASP.NET IIS Registration tool to remove the script maps to any version of ASP.NET from an application by using the -k or -kn option and specifying the root path of the application. If the root path specified inherits its script map from a parent root path, the -k and -kn options have no effect.

The -norestart option prevents a restart of the World Wide Web Publishing Service after ASP.NET script maps are installed or updated. You should use this option if you do not want all application pools to be recycled. If you are running multiple websites in IIS, in various application pools, and you do not want all of them to be restarted, you should use this option.

Note that any changes made using the ASP.NET tab on the Internet Information Service console application also cause all application pools to be recycled. If you want to change the ASP.NET version an application uses without causing all application pools to be recycled, run the following two commands to change the version.

aspnet_regiis -s w3svc/<instance>/root -norestart
iisapp /a <app pool> /r

The ASP.NET IIS Registration tool can also be used to install and uninstall the linked version of ASP.NET. Use the -i option to install ASP.NET and to update the script maps of all existing ASP.NET applications. Use the -ir option to install ASP.NET without updating the script maps. To uninstall the ASP.NET version that is associated with the tool, use the -u option. If you want to uninstall all versions of ASP.NET from the computer, use the -ua option.

You can also use the ASP.NET IIS Registration tool to view information about ASP.NET. To list the status and installation path of all of the versions of ASP.NET that are installed on your computer, use the -lv option. If you want to see the paths to all of the IIS metabase keys where ASP.NET is mapped, use the -lk option.

Client-side script, such as client-side validation, can be installed and removed by using Aspnet_regiis.exe. Use the -c option to install the client-side script for the version of ASP.NET that is associated with the tool to the Aspnet_client subdirectory of each IIS site directory. To remove the client-side script for just the ASP.NET version associated with the tool, use the -e option. To remove the client-side script for all installed versions of ASP.NET, use the -ea option.

When you are using impersonation, if the impersonation account does not have Read access to the IIS metabase, a COMException exception with the message "Access is denied" is thrown when you try to access DirectoryEntry. This can occur when the Code subdirectory of the application exists in the application root directory. This error can also occur when an application is mapped to a UNC share and the UNC account does not have Read access to the metabase. In both cases, running the ASP.NET IIS Registration tool with the **-ga **user option for the impersonation or UNC account fixes the issue.

For more information about side-by-side execution in ASP.NET, see Side-by-Side Support in ASP.NET. For more information about script maps and application root paths, see the IIS documentation on the Microsoft Web site.

Examples

The following command installs the script maps pointing to the ASP.NET version that is associated with the tool to the SampleApp1 application and all of its sub-applications.

aspnet_regiis -s W3SVC/1/ROOT/SampleApp1

The following command only updates the script maps for the SampleApp1 application, without affecting applications in subdirectories.

aspnet_regiis -sn W3SVC/1/ROOT/SampleApp1

The following command installs the ASP.NET version that is associated with the ASP.NET IIS Registration tool and updates the script maps of all existing ASP.NET applications. Note that only applications that are currently mapped to an earlier version of ASP.NET are affected.

aspnet_regiis -i

The following command installs the ASP.NET version that is associated with the tool, but it does not update the script maps of existing ASP.NET applications.

aspnet_regiis -ir

The following command displays the status and installation path of all versions of ASP.NET that are installed on the computer.

aspnet_regiis -lv

See Also

Reference

.NET Framework Tools

Other Resources

Side-by-Side Support in ASP.NET
Side-by-Side Execution