RE: user/password for ActiveDirectoryMembershipProvider

Hello,

I think all these questions can be answered with one factor: In ASP.NET,
the connectionstrings section, in web.config, can be encrypted. ASP.NET
version 2.0 introduces protected configuration to enable you to encrypt
sections of your configuration files by using either DPAPI or RSA
encryption. This is particularly useful for encrypting connection strings
and account credentials.

How To: Encrypt Configuration Sections in ASP.NET 2.0 Using RSA
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html
/paght000006.asp

How To: Encrypt Configuration Sections in ASP.NET 2.0 Using DPAPI
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html
/paght000005.asp

Hope this help,

Luke Zhang
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

.

Relevant Pages

  • RE: Asp.net 2.0 deployment with encryption
    ... As for the ASP.NET 2.0 configuration section protection, ... encryption which use a single shared session key to encrypt and decrypte ... The RSA approach is just based on RSA asymmetric data encryption/decryption ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Unable to create virtual directory from file
    ... the exported configuration file has never been encrypted -- you ... will always get a valid XML file for export. ... What "encrypt configuration ... I'm trying to export/import a virtual directory in IIS6 running on a Windows ...
    (microsoft.public.inetserver.iis)
  • Re: Problem running app from network share
    ... I added some crude error logging to a text file ... // Open the configuration file and retrieve ... // the connectionStrings section. ... //Only encrypt it if not already encrypted. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Error with Encrypting identity section of web.config
    ... You cannot use protected configuration to encrypt the configProtectedData section of a configuration file. ... You also cannot use protected configuration to encrypt the configuration sections that do not employ a section handler or sections that are part of the managed cryptography configuration. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: ??? Which Key Encrypts .Config Files ???
    ... encryption and decryption key is stored when you encrypt the configuration ... mechanism, to encrypt the configurations. ... machine level key container by default. ... When we decrypt the configuration information, ...
    (microsoft.public.dotnet.framework)