You may have noticed that when your ASP.NET pages are running in a hosted environment, there are issues with preserving and parsing postbacks.
An ASP.NET application is not particularly well-equipped for handling postbacks on hosted servers out of the box. The reason for this is that postbacks (and ViewState) normally get encrypted (hashed) so that they cannot be tampered with on the way back to the server.
The keys used to encrypt the information stored in ViewState are supplied by the configuration files. Say hello to decryptionKey and validationKey.
Just as all other configuration properties, system.web.machineKey is normally specified in Machine.config, which—as its name implies—is unique to every machine. You do not have to provide your own hashing codes – they are supplied (randomized) by the IIS installer. »Read More