I'm actively trying to find the best way to migrate machine-level encryption to a new server that will be running SharePoint 2019.
We use the RSACryptoService.cs to encrypt data being stored in a SharePoint column.
We haven't made any changes to the web.config in relation to this. I'm also not able to find the key container using aspnet_regiis, so I'm assuming the crypto service creates it dynamically.
The only solution I can think that will work at the moment is to decrypt all of the data, move it to the new server, and then encrypt it on the new server.
Are there any other better options?