aspnet_setreg - HOWTO: Read encrypted data from registry

From: Matthew Griffore (Griffore_at_discussions.microsoft.com)
Date: 09/14/04


Date: Tue, 14 Sep 2004 11:45:05 -0700

I have used aspnet_setreg to encrypt a connection string in the registry.

aspnet_setreg -k:<subkey> -c:"CONNECTION STRING"

I then gave the ASPNET account read access to the <subkey> in the registry
using regedt32.

I added the sqlConnectionString application key in my web.config file. When
I tried to execute my code, I received the following error:
"Format of the initialization string does not conform to specification"

Can someone help me please?



Relevant Pages

  • Re: NT AUTHORITYANONYMOUS LOGON --- SQL server
    ... I have worked around the registry problem and added the computer name to the ... SQL as a valid log in with access to the correct databases. ... Now I have the following error message from the connection string: ... > NetworkService is designed to work across the network, ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Protecting Connection String Data from End-Users
    ... You could store the connection string in an encrypted format in the ... application configuration file or the registry and store the registry ... reference in your configuration file. ...
    (microsoft.public.sqlserver.programming)
  • Re: How to use ADO fast?
    ... I used to do the Registry thing but a lot of our clients don't ... config files. ... >> Cor, hardcoding connection string is silly by any mean, trust us. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Are Macros Evil?
    ...  > As to evil, I like Oscar Wilde's quote "There is no good or evil. ... I'd say that the Windows Registry is definately tedious ... The production connection string and the development ... connection string to an XML file. ...
    (comp.databases.ms-access)
  • RE: SQL connection string security
    ... There is a scriptable com object that can read from the registry which is ... We use appropriate permissions on both the registry ... > keys themselves (along with the obscurity of an attacker having ... > With the importance of not letting the connection string used to ...
    (Focus-Microsoft)