I am currently working with integrating forms authentication in mvc4 application. Once a user is authenticated, an encrypted cookie is written to their PC.
My application will be installed on a load balanced environment where a user can hit any of the balanced web servers.
Question I have around encryption of cookies, will there be any issue if the cookie is encrypted on server A, and the next request the user makes is to server B and the cookie needs to be decrypted to proceed? Any problem regarding encrypting on one server and decrypting on the other?
You need to make sure machine keys are same across all servers. Follow this link for IIS7.