How can I easily see which Permissions are already assigned to the NetFrameworkConfiguration RSA Machine Key?

Follow
    Applies to:
  • SecureAuth Identity Platform
  • Legacy SecureAuth IdP
Deployment model:
  • Cloud
  • Hybrid
  • On Premises
  • Version Affected:  All

    Description:  
    How can I easily see which Permissions are already assigned to the NetFrameworkConfiguration RSA Machine Key?

    Cause:  
    Sometimes it is required to find out which Permissions are already assigned to the NetFrameworkConfiguration RSA Machine Key, this can be done quickly and easily via a Powershell Console

    Resolution:  
    Run the below in a Powershell Console (run as Administrator)

    $NFCKHex = (certutil -key NetFrameworkConfigurationKey)[2].Trim()
    $icacls=(icacls.exe $env:ProgramData\Microsoft\Crypto\RSA\MachineKeys\$NFCKHex)-Replace('^\S*','')
    $ii = $icacls.length-3;
    foreach ($i in $icacls[0..$ii]){$i.Trim() | Write-Host}


    This will give you an output similar to the below:



    R - Read Permission
    W - Write Permission
    RX - Read and Execute Permission
    M - Modify Permission
    F - Full Permission

     

    SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

    Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.

    0 out of 0 found this helpful

    Comments

    0 comments

    Please sign in to leave a comment.