Home > Deployment > ASP.NET Core Data Protection

ASP.NET Core Data Protection

Duende IdentityServer relies on the built-in data protection feature of ASP.NET for

protecting keys at rest (if automatic key management is used and enabled)
protecting persisted grants at rest (if enabled)
session management (because ASP.NET Core cookies require it)

It is crucial that you setup ASP.NET Core data protection correctly before you start using your IdentityServer in production. Please consult the Microsoft documentation for more details.