Edit this page

Home > Deployment > ASP.NET Core Data Protection

Version 5.x has been out of support since December 13, 2022, and this corresponding section of the documentation is no longer maintained. We strongly recommend upgrading to a supported version.

ASP.NET Core Data Protection

Duende IdentityServer relies on the built-in data protection feature of ASP.NET for

protecting keys at rest (if automatic key management is used and enabled)
protecting persisted grants at rest (if enabled)
session management (because ASP.NET Core cookies require it)

It is crucial that you setup ASP.NET Core data protection correctly before you start using your IdentityServer in production. Please consult the Microsoft documentation for more details.