Reputation: 3451
I am facing some issues while encrypting/decrypting on a remote machine. For ex: when i run the below commands i am getting the following error.
Can anyone know how to resolve this issue?
[remote machine]: PS C:\> Add-Type -assembly System.Security
[remote machine]: PS C:\> $passwordBytes = [System.Text.Encoding]::Unicode.GetBytes("Password!")
[remote machine]: PS C:\> $entropy = [byte[]](1,2,3,4,5)
[remote machine]: PS C:\> $encrytpedData = [System.Security.Cryptography.ProtectedData]::Protect($passw
ordBytes, $entropy, "CurrentUser")
Exception calling "Protect" with "3" argument(s): "The requested operation cannot be completed. The computer must be tr
usted for delegation and the current user account must be configured to allow delegation.
"
At line:1 char:71
+ $encrytpedData = [System.Security.Cryptography.ProtectedData]::Protect <<<< ($passwordBytes, $entropy, "CurrentUser")
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException
regards, naresh
Upvotes: 1
Views: 4233
Reputation: 72640
You may have a look to Forwarding credentials in multihop environments in capter 13 of Bruce Payette nice book.
You perhaps need the CredSSP mechanism which enables you to securely pass your credentials to a target machine via a trusted intermediary.
Upvotes: 2