Re: Web.config Encryption

Tech-Archive recommends: Fix windows errors by optimizing your registry

this feature is builtin (since 1.1).

http://msdn2.microsoft.com/en-us/library/ms998280.aspx

-- bruce (sqlwork.com)



Jazza wrote:
Hi, I am an experienced .Net developer, but new to ASP.Net 2.0.
I have been using the Personal Web Site Starter Kit and have successfully uploaded the site to a shared hosting provider. I am connecting to the SQL database via SQL authentication rather than Windows authentication, as I have no control over the Windows user accounts. This means the SQL user name and password are in clear text in the connection string in web.config.
Therefore, best practice dictates that I encrypt the web.config file to hide the SQL login details. But the only way to encrypt a section of the config file is to run aspnet_regiis.exe on the server, to which I have no access.
What are my options, if any, for protecting my config file? Does anyone know of any resources on how to create a custom encryption scheme?
Regards,
Jazza

.

Relevant Pages

  • RE: local admin account password
    ... > encrypt the database and create alerts in the event of unsuccessful ... >> no more recovery console and don't think cached logins will work. ... >> The DB file would be encrypted with EFS so only the limited user SQL ... >> itself doesn't really need to be secure as the authentication is based ...
    (Focus-Microsoft)
  • Re: Help Encrypting Connection String
    ... but I have to do it on SQL Server instead of SQL ... If I'm retrieving the connection string in my own code, ... > in 2.0 you can encrypt nearly all config section out of the box using the ... >> the config file, but .NET 2.0 has more options. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: SQL Server 2000 / 2005 Encryption
    ... encrypting the connection makes sense to me. ... This is possible on SQL 2005 via built-in T-SQL statements and functions, but requires 3rd-party tools, usually some sort of extended procedures. ... to encrypt your SSL connections will be different. ... Excel does not know how to decrypt data stored in SQL Server 2005 in encrypted form. ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Server Encrypt, Failure..
    ... This function doesn't encrypt at ... (Not that I had too high of expectations for a undocumented SQL ... Declare @Password2 nvarchar ... > Bill Dodd ...
    (microsoft.public.sqlserver.server)
  • Re: Web.config encryption in shared hosting scenario
    ... I just begin to search for a solution because the customer does not allow ... like to encrypt the database connection string located in the web.config. ... I am connecting to the SQL ...
    (microsoft.public.dotnet.framework.aspnet.security)