How to encrypt web.config

Discussion in 'General troubleshooting' started by fowlerra, Oct 26, 2010.

  1. I'm trying to use RSA keys to protect the "connectStrings" in my Web.config file.

    The instructions provided in "How to encrypt configuration.pdf" give the following encryption command line example:

    C:\WINDOWS\Microsoft.NET\Framework\[.NET Framework version]\aspnet_regiis.exe -pe "connectionStrings"
    -site "Default Web Site" -app "/WebSite1"

    I can't make the above work and I can't find documentation (that makes sense) that tells me what to put in -site or -app.

    On my computer, my website is located at "c:\Users\myname\My Web Sites\SiteName" and the web.config is at the root of the SiteName directory.

    On DiscountASP.NET it is at "http://ibcridgecrest.org"

    What do I use for -site and -app?

    Thanks for any help you can provide.

    (I'm a new Forum user, so let me know if this belongs in a different forum)
     
  2. Bruce

    Bruce DiscountASP.NET Staff

    do you have IIS installed on your computer?
     
  3. A different approach

    This - apparently - can be done via programmatic means

    http://blogs.techrepublic.com.com/programming-and-development/?p=448

    However, I tried this method and DASP chewed it up and spit it out, as in it tossed me a lecture about having custom errors turned off, when they were most certainly turned on, so it must have crapped the entire web.config file.

    FWIW, I verified the contents of the encrypted file, and they appeared to work on my localhost, so I'm not sure if I just got unlucky or what.
     

Share This Page