Azure Cloud Service + IIS + CCS: the folder "%ProgramData%\Microsoft\Crypto\RSA\MachineKeys" grows in size until it saturates the OS disk space

dsmwb 6 Reputation points
2021-03-12T22:25:51.847+00:00

I recently implemented the Central Certificate Store (CCS) on IIS in our cloud service on Azure. Since I made this implementation, the folder "%ProgramData%\Microsoft\Crypto\RSA\MachineKeys" grows in size progressively until it saturates the entire disk space of the operating system and consequently generates errors in the instance and in the service offered (it's a production environment).

This condition never occurred before the use of the CCS.

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
669 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sam Wu-MSFT 7,211 Reputation points Microsoft Vendor
    2021-03-15T08:35:07.427+00:00

    Hi dsmwb-9168,

    This issue can be caused by the Equitrac DCS service not having the required components installed. This will cause DCS service to continuously restart, causing the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys to grow in size.

    On the Windows server, in the Add roles and services wizard, install the asp.net 4.5 feature from the .NET Framework 4.5 section, for Windows Server 2012 R2. For newer OS versions, the .NET Framework version will be newer.

    If the DCS hotfix is installed, .NET 4.6.1 must also be installed.

    The above will stop adding new files.

    Due to the nature of how Windows handles DCS machine keys in the folder, in order to remove them, assistance from Microsoft will be required to do so safely. Removing files may result in unexpected behavior. Open a ticket with Microsoft technical support.

    More information about this error you can refer to this link: MachineKeys Folder keeps growing in size.

    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.