windows - DPAPI: Using CryptUnprotect before user logs in -
i using dpapi store xml data. data after cryptprotectdata stored in file. in 1 of use cases, data needs decrypted before user logs in workstation. since, cannot use user specific key in this, setting flag "cryptprotect_local_machine" while encrypting. entropy key static text.
unprotect working in scenarios except when calling before logon ( no user logged in). returning error 87 (the paramter incorrect).
i re-read entire dpapi documentation see how keys being generated. but, unfortunately, there not enough information specific flag.
will cryptunprotectdata work in scenario @ all? can called applications running under user session? appreciated.
thanks, d
we use dpapi store password required service:
encrypt cryptprotect_local_machine | cryptprotect_ui_forbidden.
decrypt cryptprotect_ui_forbidden
the service runs when machine boots (i.e. before logon); works fine.
Comments
Post a Comment