Profile encryption

An exception occurred in the UPM Membership Provider: System.Web.Security.MembershipPasswordException: Invalid password answer was supplied.
at Microsoft.CommerceServer.Runtime.Profiles.UpmMembershipUser.ResetPassword(String passwordAnswer)
at System.Web.Security.MembershipUser.ResetPassword(String passwordAnswer, Boolean useAnswer, Boolean throwOnError)
at System.Web.UI.WebControls.PasswordRecovery.AttemptSendPasswordQuestionView()
at System.Web.UI.WebControls.PasswordRecovery.AttemptSendPassword()
at System.Web.UI.WebControls.PasswordRecovery.OnBubbleEvent(Object source, EventArgs e)
at System.Web.UI.Control.RaiseBubbleEvent(Object source, EventArgs args)
at System.Web.UI.WebControls.Button.OnCommand(CommandEventArgs e)
at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
at System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)
at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
at System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context)
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.forgotpassword_aspx.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at System.Web.HttpApplication.ApplicationStepManager.ResumeSteps(Exception error)
at System.Web.HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)
at System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
at System.Web.HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest wr)
at System.Web.Hosting.ISAPIRuntime.ProcessRequest(IntPtr ecb, Int32 iWRType)

<asp:PasswordRecovery ID="PasswordRecovery1" runat="server" MembershipProvider="UpmProvider" UserNameInstructionText="Enter your Email Address to receive your new password." UserNameLabelText="Email Address" UserNameRequiredErrorMessage="Email address is required.">
<MailDefinition From="[Email Address]" Priority="High" Subject="New Password" />
<UserNameTemplate>
<h2>Forgot your password?</h2>
<table border="0" cellspacing="0">
<tr>
<td colspan="2">Enter your email address to receive your new password</td>
</tr>
<tr>
<td>Email Address:</td>
<td><asp:TextBox ID="UserName" runat="server"></asp:TextBox><asp:RequiredFieldValidator ID="UserNameRequired" runat="server" ControlToValidate="UserName" ValidationGroup="UsernameGroup">*</asp:RequiredFieldValidator></td>
</tr>
<tr>
<td class="error" colspan="2"><asp:Literal ID="FailureText" runat="server"></asp:Literal></td>
</tr>
<tr>
<td> </td>
<td><asp:Button ID="SubmitButton" runat="server" CommandName="Submit" Text="Submit" ValidationGroup="UsernameGroup" /> <asp:Button ID="CancelButton" runat="server" Text="Cancel" OnClick="CancelButton_Click" CausesValidation="False" /></td>
</tr>
</table>
</UserNameTemplate>
<QuestionTemplate>
<h2>Identity Confirmation</h2>
<table border="0" cellspacing="0">
<tr>
<td colspan="2">Answer the following question to receive your password.</td>
</tr>
<tr>
<td><asp:Label ID="QuestionLabel" runat="server" AssociatedControlID="Question" >Question:</asp:Label></td>
<td><asp:Literal ID="Question" runat="server"></asp:Literal></td>
</tr>
<tr>
<td><asp:Label ID="AnswerLabel" runat="server" AssociatedControlID="Answer">Answer:</asp:Label></td>
<td><asp:TextBox ID="Answer" runat="server"></asp:TextBox><asp:RequiredFieldValidator ID="AnswerRequired" runat="server" ControlToValidate="Answer" ValidationGroup="QuestionGroup">*</asp:RequiredFieldValidator></td>
</tr>
<tr>
<td class="error" colspan="2"><asp:Literal ID="FailureText" runat="server"></asp:Literal></td>
</tr>
<tr>
<td> </td>
<td><asp:Button ID="SubmitButton" runat="server" CommandName="Submit" Text="Submit" ValidationGroup="QuestionGroup" /> <asp:Button ID="CancelButton" runat="server" Text="Cancel" OnClick="CancelButton_Click" CausesValidation="false" /></td>
</tr>
</table>
</QuestionTemplate>
<SuccessTemplate>
<table border="0" cellspacing="0">
<tr>
<td>Your new password has been email to <asp:Label ID="EmailLabel" runat="server" /></td>
</tr>
<tr>
<td>Click <asp:HyperLink ID="lnkLogin" runat="server" NavigateUrl="~/Login.aspx">here</asp:HyperLink> to login.</td>
</tr>
</table>
</SuccessTemplate>
</asp:PasswordRecovery>

<profiles>
<userProfile profileDefinition="UserObject" userIdProperty="GeneralInfo.user_id" organizationIdProperty="AccountInfo.org_id" catalogSetIdProperty="AccountInfo.user_catalog_set" userIdSource = "ASP.NET" userIdKey = "GeneralInfo.email_address" userIdTarget = "GeneralInfo.user_id" />
<organizationProfile profileDefintion="Organization" organizationIdProperty="GeneralInfo.org_id" catalogSetIdProperty="GeneralInfo.org_catalog_set" />
<encryption>
<keys keyIndex="1">
<add type="publicKey" value="registry:HKEY_LOCAL_MACHINE\Software\Microsoft\Commerce Server 2007 Keys\Default,PublicKey" />
<add type="privateKey1" value="registry:HKEY_LOCAL_MACHINE\Software\Microsoft\Commerce Server 2007 Keys\Default,PrivateKey" />
</keys>
</encryption>
</profiles>
<membership defaultProvider="UpmProvider" userIsOnlineTimeWindow="60">
<providers>
<clear/>
<add name="UpmProvider"
type="Microsoft.CommerceServer.Runtime.Profiles.UpmMembershipProvider"
enablePasswordReset="true"
enablePasswordRetrieval="false"
profileDefinitionName="UserObject"
logonNameProperty="GeneralInfo.email_address"
passwordFormat="Hashed"
requiresApproval="false"
requiresQuestionAndAnswer="true"
writeExceptionsToEvenLog="true"
/>
</providers>
</membership>
<system.net>
<mailSettings>
<smtp deliveryMethod="Network" from="[email address]">
<network host="[host]" userName="[username]" password="[password]" />
</smtp>
</mailSettings>
</system.net>