PS 远程处理失败：必须信任计算机进行委派，并且必须将当前用户帐户配置为允许委派。

Question

我在远程机器上加密/解密时遇到一些问题。例如：当我运行以下命令时，我会得到以下错误。

有人知道如何解决这个问题吗？

[remote machine]: PS C:> Add-Type -assembly System.Security
[remote machine]: PS C:> $passwordBytes = [System.Text.Encoding]::Unicode.GetBytes("Password!")
[remote machine]: PS C:> $entropy = [byte[]](1,2,3,4,5)
[remote machine]: PS C:> $encrytpedData = [System.Security.Cryptography.ProtectedData]::Protect($passw
ordBytes, $entropy, "CurrentUser")
Exception calling "Protect" with "3" argument(s): "The requested operation cannot be completed. The computer must be tr
usted for delegation and the current user account must be configured to allow delegation.
"
At line:1 char:71
+ $encrytpedData = [System.Security.Cryptography.ProtectedData]::Protect <<<< ($passwordBytes, $entropy, "CurrentUser")
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : DotNetMethodException

问候，naresh

Answer 1

您可能会在Bruce Payette漂亮的书的capter 13中看到在多跳环境中转发凭据。

您可能需要CredSSP机制，该机制使您能够通过可信的中介将凭据安全地传递到目标计算机。