Encrypt Webconfig file

Question

User1649625797 posted

Hi all,

how to Encrypt Webconfig file other then aspnet_regiis.exe?,if other ways to encrypt webconfig file please give tricks.

thanking you

Answer 1

User607059406 posted

http://visualstudiomagazine.com/articles/2009/06/11/encrypting-the-web-config-file.aspx

or try thin

    public class Global : System.Web.HttpApplication
    {
        protected void Session_Start(object sender, EventArgs e)
        {
            EncryptSection("appSettings

");
        }

 

    
        private void EncryptSection(string sSection)
        {
            Configuration config = System.Web.Configuration
                                   .WebConfigurationManager
                                   .OpenWebConfiguration
                              (Context.Request.ApplicationPath);

            ConfigurationSection configSection =
                               config.GetSection(sSection);

            if (!configSection.SectionInformation.IsProtected)
            {
               configSection.SectionInformation.ProtectSection
                         ("DataProtectionConfigurationProvider

");
                config.Save();
            }
        }

Answer 2

User-744022866 posted

http://msdn.microsoft.com/en-us/library/zhhddkxy%28v=vs.100%29.aspx

Answer 3

User71929859 posted

Hello,

Check the below blog post

http://www.davidgiard.com/2012/06/05/EncryptingAndDecryptingApplicationConfigSections.aspx

Answer 4

User-166373564 posted

Hi Badgu

how to Encrypt Webconfig file other then aspnet_regiis.exe?,if other ways to encrypt webconfig file please give tricks.

You could refer the method about Encrypt web.config without command line tool here,<o:p></o:p>

http://stackoverflow.com/questions/11636578/encrypt-web-config-without-command-line-tool <o:p></o:p>

At the same time I think you could also consider using aspnet_regiis.exe tool, it’s a good way to encrypt web.config, and there are many tutorials available in MSDN.

hope it helps you,

Kind regards<o:p></o:p>

Answer 5

User1196771204 posted

hi badgu,

I am sure that the main intention for you to encrypt your web.config is to protect your connection string, do you?

If you do not want anyone to see your credentials, instead of putting your connection string on the web.config, you can simply code a connection.cs class and put it there

By doing so, you save time and all the headaches. When you compile your code, all the .CS will become DLL and no one can see it too. I have done it myself so many times and I believe this is always the best method

Please mark this response as an "answer" if it helps you. Thanks heaps!