locked
How to securely backup/store encryption key? RRS feed

  • Question

  • Hi,

    I am working on a web application that encyrpts some data and stores it in a database. I thought I'd just use DPAPI to encrypt/decrypt data but I cannot decyrpt data from a different machine than it was encrypted, even with current user option. I found this reference from MS website:

    http://msdn.microsoft.com/en-us/library/ms998372.aspx#pagpractices0001_sensitivedata

    I'll do this but now the question is how do I securely backup/store the private key that I have generated and pass it to release engineers so that they can install it on all web servers. Feels like back to square one.

    Thanks.

    Monday, May 3, 2010 11:55 PM