Encrypting Custom Configuration Sections

Is this based on some unique machine identifier? Could I encrypt parts of a web.config on one machine and then deploy on another and expect it to work?

If so, that's smart!

Glyn

Glyn:

Well, no, not that smart.

The example I have in the post will use a machine-specific key.

If you want to encrypt once and share amoung servers you'll need to use custom keys and the RSA provider, more details here: http://msdn2.microsoft.com/en-us/library/68ze1hb2(en-US,VS.80).aspx

Use this below lines to enc and dec particular section in web.config file


For encrypt: aspnet_regiis.exe -pef "appSettings" "C:\temp"


For decrypt: aspnet_regiis.exe -pdf "appSettings" "C:\temp"


Here "C:\temp" is the physical location where the web.config file should exist

Scott,
i am having issue while encryption in custom section.following is the configuration setting

<configSections>
<section
name="Pawan"
type="System.Configuration.SingleTagSectionHandler"
/>
</configSections>

<Pawan>
<Resources>
<Properties>

</Properties>
<Resources>
<add name="ConnectionString"
connectionString="Initial Catalog=DB;
data source=localhost;user id=sa;password=sa;"/>
</Resources>
</Resources>
<pawan/>

when i am trying to encrypt above connection string i am getting error section not found here you go for command


aspnet_regiis -pef "connectionStrings" "D:\TestProject\EncryptandDecrypt" prov "DataProtectionConfigurationProvider"


could you please help on the same

Thanks
Pawan Pawar

I don't get it. You open a command prompt and navigate to a folder and run regiis and it looks for an app.config or a web.config automatically? Is the 'System.Configuration.SingleTagSectionHandler' required? I've never seen that.

PAWAN... why do you have a Resources node in a Resources node? I don't think that is supported.

This is very nice, thank you.

TIP: best to run this command from your root web folder (where your web.config resides)

C:\inetpub\wwwroot>C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis -pef "connectionStrings" .