(FIX) Problem 6734 - URL encoded event messaging in Event Manager raises CryptographicException: Error occurred during a cryptographic operation

Version 1

    Please read our Share IT Disclaimer  before continuing.

     

    Preface

    It is possible to raise events via opening (Get-Request) a specific URL for the Event Manger.

    All Parameter are part of the URL and will be used in the event created by the Event Manager

    e.g.

    http://localhost/ServiceDesk.Framework/sendmessage.aspx?source=mySource&type=Newtype&title=myTitle&desc=this%20is%20for%test

     

    In Ivanti Service Desk 2017.1 such an request will be answered by the Event Manager with an CryptographicException,the Event, however, is been logged successfully.

    2017-06-28_07-33-55.png

    This issue will be fixed in Ivanti Service Desk 2017.3. Due to the nature of the fix, a Patch (Service Update) cannot be provided by Ivanti.

    Please see next section on how to fix the issue in your environment.

     

    Fixing the issue

    To fix the issue the web.config file of the Framework needs to be altered

     

    The Fix is to remove the validation and decryption attributes from /configuration/system.web/machineKey

    <configuration>
    ...
      <system.web>
        ...
        <machineKey validationKey="AutoGenerate,IsolateApps" decryptionKey="AutoGenerate,IsolateApps" validation="3DES" decryption="3DES" />
    

     

    The new MachineKey should look like this

    <machineKey validationKey="AutoGenerate,IsolateApps" decryptionKey="AutoGenerate,IsolateApps" />
    

     

    All Frameworks on the server will share the web.config file in the Installation folder (Default: "C:\Program Files (x86)\LANDESK\FrameWork"). Therefore all Workspaces on the server will be fixed with this single alteration

     

    POC Script

    A PowerShell script has been generated to fix the issue during an automated installation.

    This Script has been attached to this Article for your reference.

    This Script is not fully tested, but did a very good job in the lab environment it had been designed for.