Re: Where/How to Securely Store ID and Password?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Peter Bromberg [C# MVP] (pbromberg_at_yahoo.com)
Date: 02/21/04 

Date: Fri, 20 Feb 2004 21:51:22 -0500

See Chris Falter's article on our site here:

http://www.eggheadcafe.com/articles/20021211.asp

Note that there may have been some improvements to this
scheme since the article was originally published.

--Peter

"Guadala Harry" <gh8434@aol.com> wrote in message
news:O8ennnA%23DHA.3880@TK2MSFTNGP11.phx.gbl...
> What are my options for *securely* storing/retrieving the ID and password
> used by an ASP.NET application for accessing a SQL Server (using SQL
> Server
> authentication)? Please note that this ID and password would be different
> than the one the user enters for ASP.NET forms authentication. The
> ID/password in question is used by the application, itself, for accessing
> the SQL Server.
>
> Thanks in advance.
>
>

Relevant Pages

  • Re: Problem of MSDE 2000 Release A Installation
    ... Regards ... Chris ... >>> talk to SQL Server. ... >>> Authentication, the new default, lets anyone with a Windows login talk to ...
    (microsoft.public.sqlserver.msde)
  • Re: "Access Denied" to sql server ....help...
    ... which attempts to connect to the sql server (which exists ... using the login and password that the user inputs on the ... >Impersonation is for authentication to other resources - ... >Chris Jackson ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows Authentication in asp.net 2005 to SQL Server?
    ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: I dont want to re-invent the Login/Login Wheel - Help with utilities
    ... Yes, if you use .NET1.1, there isn't built-in login control, and more importanltly there isn't ready-to-use membership component to use. ... the membership provider uses SQL Server or SQL Server Express. ... We feel that having the capability to force password change would be a better benefit in securing our application and data access. ... Both Windows authentication and authorization wolud be be fine if we wanted the world to have access to our application data, but not very intuitive for maintaining integrity over our data. ...
    (microsoft.public.vstudio.general)
  • RE: IIS (ASP) -> SQLServer Authentication Issue
    ... I understand that you'd like to use IIS Intergration authentication in the ... and ASP "impersonates" authencitaed users to access SQL Server on ... only kerberos authentication allows double-hops from clients ...
    (microsoft.public.sqlserver.security)