{"action":"created","comment":{"url":"https://api.github.com/repos/ravendb/docs/pulls/comments/173146784","pull_request_review_id":102285373,"id":173146784,"diff_hunk":"@@ -40,8 +40,44 @@ Another way to provide a master key is to use a file containing the raw key byte\n \n If a master key is not provided by the user, RavenDB will use the following default behavior:\n \n-In **Windows**, secret keys are encrypted and stored using the [Data Protection API](https://msdn.microsoft.com/en-us/library/ms995355.aspx), which means they can only be retrieved by the user who stored them.\n+In **Windows**, secret keys are encrypted and stored using the [Data Protection API (DPAPI)](https://msdn.microsoft.com/en-us/library/ms995355.aspx), which means they can only be retrieved by the user who stored them.\n \n In **Unix**, RavenDB will generate a random master key and store it in the user's Home folder with read/write permissions (octal 1600) only for the user who stored it. Then, RavenDB will use this master key to encrypt the secret keys of encrypted databases.\n \n+## Changing/Resetting a Windows user password\r\n+\r\n+This section is relevant only on Windows and only if you didn't supply a master key and chose to rely on the Windows protection methods.  \r\n+\r\n+Windows uses the **user password** to encrypt secrets in [DPAPI](https://msdn.microsoft.com/en-us/library/ms995355.aspx).\r\n+When a Windows password is **changed** the following actions are taken:  \r\n+\r\n+- DPAPI receives notification from Winlogon during a password change operation.\r\n+- DPAPI decrypts all the secrets that were encrypted with the user's old passwords.\r\n+- DPAPI re-encrypts all the secrets with the user's new password.\r\n+\r\n+Changing a password this way is supported, and RavenDB is not affected.\r\n+\r\n+On the other hand, if the password was **reset** (either by you or by the administrator) secrets **cannot be decrypted anymore**.\r\n+Please see the [Microsoft Support article](https://support.microsoft.com/en-us/help/309408/how-to-troubleshoot-the-data-protection-api-dpapi#7) to understand the issue.\r\n+\n+If you still need to reset the password for some reason, please follow these steps to ensure that secret keys which are protected with DPAPI aren't lost.\n \n+Navigate to the RavenDB application folder where you can find the `rvn` tool. \r","path":"Documentation/4.0/Raven.Documentation.Pages/server/security/encryption/secret-key-management.markdown","position":27,"original_position":27,"commit_id":"fa011d099e05970be4fb86ef7b8949c32872e98c","original_commit_id":"fa011d099e05970be4fb86ef7b8949c32872e98c","user":{"login":"ppekrol","id":446555,"avatar_url":"https://avatars2.githubusercontent.com/u/446555?v=4","gravatar_id":"","url":"https://api.github.com/users/ppekrol","html_url":"https://github.com/ppekrol","followers_url":"https://api.github.com/users/ppekrol/followers","following_url":"https://api.github.com/users/ppekrol/following{/other_user}","gists_url":"https://api.github.com/users/ppekrol/gists{/gist_id}","starred_url":"https://api.github.com/users/ppekrol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ppekrol/subscriptions","organizations_url":"https://api.github.com/users/ppekrol/orgs","repos_url":"https://api.github.com/users/ppekrol/repos","events_url":"https://api.github.com/users/ppekrol/events{/privacy}","received_events_url":"https://api.github.com/users/ppekrol/received_events","type":"User","site_admin":false},"body":"introduce points here? 1. Do this 2. Do that 3. Next...","created_at":"2018-03-08T12:43:29Z","updated_at":"2018-03-08T12:54:00Z","html_url":"https://github.com/ravendb/docs/pull/633#discussion_r173146784","pull_request_url":"https://api.github.com/repos/ravendb/docs/pulls/633","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/ravendb/docs/pulls/comments/173146784"},"html":{"href":"https://github.com/ravendb/docs/pull/633#discussion_r173146784"},"pull_request":{"href":"https://api.github.com/repos/ravendb/docs/pulls/633"}}},"pull_request":{"url":"https://api.github.com/repos/ravendb/docs/pulls/633","id":173469694,"html_url":"https://github.com/ravendb/docs/pull/633","diff_url":"https://github.com/ravendb/docs/pull/633.diff","patch_url":"https://github.com/ravendb/docs/pull/633.patch","issue_url":"https://api.github.com/repos/ravendb/docs/issues/633","number":633,"state":"open","locked":false,"title":"RDoc-699 Server Store Encryption","user":{"login":"iftahbe","id":12386147,"avatar_url":"https://avatars0.githubusercontent.com/u/12386147?v=4","gravatar_id":"","url":"https://api.github.com/users/iftahbe","html_url":"https://github.com/iftahbe","followers_url":"https://api.github.com/users/iftahbe/followers","following_url":"https://api.github.com/users/iftahbe/following{/other_user}","gists_url":"https://api.github.com/users/iftahbe/gists{/gist_id}","starred_url":"https://api.github.com/users/iftahbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iftahbe/subscriptions","organizations_url":"https://api.github.com/users/iftahbe/orgs","repos_url":"https://api.github.com/users/iftahbe/repos","events_url":"https://api.github.com/users/iftahbe/events{/privacy}","received_events_url":"https://api.github.com/users/iftahbe/received_events","type":"User","site_admin":false},"body":"@ppekrol this was not trivial to explain, if it's not too hard I want you to follow the process to encrypt the server store and move it to a new machine... then make your comments.","created_at":"2018-03-07T14:35:25Z","updated_at":"2018-03-08T12:54:00Z","closed_at":null,"merged_at":null,"merge_commit_sha":"abfae197f468d0ab01c32b04a2c1a7ad16f2a223","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/ravendb/docs/pulls/633/commits","review_comments_url":"https://api.github.com/repos/ravendb/docs/pulls/633/comments","review_comment_url":"https://api.github.com/repos/ravendb/docs/pulls/comments{/number}","comments_url":"https://api.github.com/repos/ravendb/docs/issues/633/comments","statuses_url":"https://api.github.com/repos/ravendb/docs/statuses/fa011d099e05970be4fb86ef7b8949c32872e98c","head":{"label":"iftahbe:RDoc-699-security","ref":"RDoc-699-security","sha":"fa011d099e05970be4fb86ef7b8949c32872e98c","user":{"login":"iftahbe","id":12386147,"avatar_url":"https://avatars0.githubusercontent.com/u/12386147?v=4","gravatar_id":"","url":"https://api.github.com/users/iftahbe","html_url":"https://github.com/iftahbe","followers_url":"https://api.github.com/users/iftahbe/followers","following_url":"https://api.github.com/users/iftahbe/following{/other_user}","gists_url":"https://api.github.com/users/iftahbe/gists{/gist_id}","starred_url":"https://api.github.com/users/iftahbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iftahbe/subscriptions","organizations_url":"https://api.github.com/users/iftahbe/orgs","repos_url":"https://api.github.com/users/iftahbe/repos","events_url":"https://api.github.com/users/iftahbe/events{/privacy}","received_events_url":"https://api.github.com/users/iftahbe/received_events","type":"User","site_admin":false},"repo":{"id":61271596,"name":"docs","full_name":"iftahbe/docs","owner":{"login":"iftahbe","id":12386147,"avatar_url":"https://avatars0.githubusercontent.com/u/12386147?v=4","gravatar_id":"","url":"https://api.github.com/users/iftahbe","html_url":"https://github.com/iftahbe","followers_url":"https://api.github.com/users/iftahbe/followers","following_url":"https://api.github.com/users/iftahbe/following{/other_user}","gists_url":"https://api.github.com/users/iftahbe/gists{/gist_id}","starred_url":"https://api.github.com/users/iftahbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iftahbe/subscriptions","organizations_url":"https://api.github.com/users/iftahbe/orgs","repos_url":"https://api.github.com/users/iftahbe/repos","events_url":"https://api.github.com/users/iftahbe/events{/privacy}","received_events_url":"https://api.github.com/users/iftahbe/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/iftahbe/docs","description":"Documenation book for RavenDB","fork":true,"url":"https://api.github.com/repos/iftahbe/docs","forks_url":"https://api.github.com/repos/iftahbe/docs/forks","keys_url":"https://api.github.com/repos/iftahbe/docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/iftahbe/docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/iftahbe/docs/teams","hooks_url":"https://api.github.com/repos/iftahbe/docs/hooks","issue_events_url":"https://api.github.com/repos/iftahbe/docs/issues/events{/number}","events_url":"https://api.github.com/repos/iftahbe/docs/events","assignees_url":"https://api.github.com/repos/iftahbe/docs/assignees{/user}","branches_url":"https://api.github.com/repos/iftahbe/docs/branches{/branch}","tags_url":"https://api.github.com/repos/iftahbe/docs/tags","blobs_url":"https://api.github.com/repos/iftahbe/docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/iftahbe/docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/iftahbe/docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/iftahbe/docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/iftahbe/docs/statuses/{sha}","languages_url":"https://api.github.com/repos/iftahbe/docs/languages","stargazers_url":"https://api.github.com/repos/iftahbe/docs/stargazers","contributors_url":"https://api.github.com/repos/iftahbe/docs/contributors","subscribers_url":"https://api.github.com/repos/iftahbe/docs/subscribers","subscription_url":"https://api.github.com/repos/iftahbe/docs/subscription","commits_url":"https://api.github.com/repos/iftahbe/docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/iftahbe/docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/iftahbe/docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/iftahbe/docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/iftahbe/docs/contents/{+path}","compare_url":"https://api.github.com/repos/iftahbe/docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/iftahbe/docs/merges","archive_url":"https://api.github.com/repos/iftahbe/docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/iftahbe/docs/downloads","issues_url":"https://api.github.com/repos/iftahbe/docs/issues{/number}","pulls_url":"https://api.github.com/repos/iftahbe/docs/pulls{/number}","milestones_url":"https://api.github.com/repos/iftahbe/docs/milestones{/number}","notifications_url":"https://api.github.com/repos/iftahbe/docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/iftahbe/docs/labels{/name}","releases_url":"https://api.github.com/repos/iftahbe/docs/releases{/id}","deployments_url":"https://api.github.com/repos/iftahbe/docs/deployments","created_at":"2016-06-16T07:28:49Z","updated_at":"2016-06-16T07:28:55Z","pushed_at":"2018-03-07T14:32:18Z","git_url":"git://github.com/iftahbe/docs.git","ssh_url":"git@github.com:iftahbe/docs.git","clone_url":"https://github.com/iftahbe/docs.git","svn_url":"https://github.com/iftahbe/docs","homepage":"http://ravendb.net","size":65455,"stargazers_count":0,"watchers_count":0,"language":"C#","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":null,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"ravendb:master","ref":"master","sha":"586bee42c88aa28b312ae1bb29173300846323ae","user":{"login":"ravendb","id":213792,"avatar_url":"https://avatars0.githubusercontent.com/u/213792?v=4","gravatar_id":"","url":"https://api.github.com/users/ravendb","html_url":"https://github.com/ravendb","followers_url":"https://api.github.com/users/ravendb/followers","following_url":"https://api.github.com/users/ravendb/following{/other_user}","gists_url":"https://api.github.com/users/ravendb/gists{/gist_id}","starred_url":"https://api.github.com/users/ravendb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ravendb/subscriptions","organizations_url":"https://api.github.com/users/ravendb/orgs","repos_url":"https://api.github.com/users/ravendb/repos","events_url":"https://api.github.com/users/ravendb/events{/privacy}","received_events_url":"https://api.github.com/users/ravendb/received_events","type":"Organization","site_admin":false},"repo":{"id":961487,"name":"docs","full_name":"ravendb/docs","owner":{"login":"ravendb","id":213792,"avatar_url":"https://avatars0.githubusercontent.com/u/213792?v=4","gravatar_id":"","url":"https://api.github.com/users/ravendb","html_url":"https://github.com/ravendb","followers_url":"https://api.github.com/users/ravendb/followers","following_url":"https://api.github.com/users/ravendb/following{/other_user}","gists_url":"https://api.github.com/users/ravendb/gists{/gist_id}","starred_url":"https://api.github.com/users/ravendb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ravendb/subscriptions","organizations_url":"https://api.github.com/users/ravendb/orgs","repos_url":"https://api.github.com/users/ravendb/repos","events_url":"https://api.github.com/users/ravendb/events{/privacy}","received_events_url":"https://api.github.com/users/ravendb/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/ravendb/docs","description":"Docs for RavenDB","fork":false,"url":"https://api.github.com/repos/ravendb/docs","forks_url":"https://api.github.com/repos/ravendb/docs/forks","keys_url":"https://api.github.com/repos/ravendb/docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ravendb/docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ravendb/docs/teams","hooks_url":"https://api.github.com/repos/ravendb/docs/hooks","issue_events_url":"https://api.github.com/repos/ravendb/docs/issues/events{/number}","events_url":"https://api.github.com/repos/ravendb/docs/events","assignees_url":"https://api.github.com/repos/ravendb/docs/assignees{/user}","branches_url":"https://api.github.com/repos/ravendb/docs/branches{/branch}","tags_url":"https://api.github.com/repos/ravendb/docs/tags","blobs_url":"https://api.github.com/repos/ravendb/docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ravendb/docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ravendb/docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/ravendb/docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ravendb/docs/statuses/{sha}","languages_url":"https://api.github.com/repos/ravendb/docs/languages","stargazers_url":"https://api.github.com/repos/ravendb/docs/stargazers","contributors_url":"https://api.github.com/repos/ravendb/docs/contributors","subscribers_url":"https://api.github.com/repos/ravendb/docs/subscribers","subscription_url":"https://api.github.com/repos/ravendb/docs/subscription","commits_url":"https://api.github.com/repos/ravendb/docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/ravendb/docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/ravendb/docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/ravendb/docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/ravendb/docs/contents/{+path}","compare_url":"https://api.github.com/repos/ravendb/docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ravendb/docs/merges","archive_url":"https://api.github.com/repos/ravendb/docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ravendb/docs/downloads","issues_url":"https://api.github.com/repos/ravendb/docs/issues{/number}","pulls_url":"https://api.github.com/repos/ravendb/docs/pulls{/number}","milestones_url":"https://api.github.com/repos/ravendb/docs/milestones{/number}","notifications_url":"https://api.github.com/repos/ravendb/docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ravendb/docs/labels{/name}","releases_url":"https://api.github.com/repos/ravendb/docs/releases{/id}","deployments_url":"https://api.github.com/repos/ravendb/docs/deployments","created_at":"2010-10-04T19:12:52Z","updated_at":"2018-02-20T09:59:11Z","pushed_at":"2018-03-08T08:50:39Z","git_url":"git://github.com/ravendb/docs.git","ssh_url":"git@github.com:ravendb/docs.git","clone_url":"https://github.com/ravendb/docs.git","svn_url":"https://github.com/ravendb/docs","homepage":"https://ravendb.net","size":67690,"stargazers_count":90,"watchers_count":90,"language":"C#","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":105,"mirror_url":null,"archived":false,"open_issues_count":4,"license":null,"forks":105,"open_issues":4,"watchers":90,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/ravendb/docs/pulls/633"},"html":{"href":"https://github.com/ravendb/docs/pull/633"},"issue":{"href":"https://api.github.com/repos/ravendb/docs/issues/633"},"comments":{"href":"https://api.github.com/repos/ravendb/docs/issues/633/comments"},"review_comments":{"href":"https://api.github.com/repos/ravendb/docs/pulls/633/comments"},"review_comment":{"href":"https://api.github.com/repos/ravendb/docs/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/ravendb/docs/pulls/633/commits"},"statuses":{"href":"https://api.github.com/repos/ravendb/docs/statuses/fa011d099e05970be4fb86ef7b8949c32872e98c"}},"author_association":"MEMBER"}}
{"actor":{"display_login":"ppekrol"}}