Encrypting .config files

[MCM]

This article explains how to encrypt sections of web.config:

http://msdn.microsoft.com/en-us/library/zhhddkxy.aspx

In my application I have this line in web.config:

<appSettings configSource="Config\AppSettings.config" />

My question is, how do I encrypt the entire AppSettings.config file?

 

[Jesse Houwing]

* MCM wrote, On 16-9-2009 21:54:

This article explains how to encrypt sections of web.config:

http://msdn.microsoft.com/en-us/library/zhhddkxy.aspx

In my application I have this line in web.config:

<appSettings configSource="Config\AppSettings.config" />

My question is, how do I encrypt the entire AppSettings.config file?

The not so nice answer is, put it in a web.config, encrypt the section
you want, extract it back into the AppSettings.config.

And you might be able to encrypt it through the programming API directly
from your application on first load.

 

[Allen Chen [MSFT]]

Hi,

My question is, how do I encrypt the entire AppSettings.config file?

Unfortunately it's not supported out of box. Even if you use built-in API
to encrypt it, the value will be extracted from the custom file and added
to web.config.

A straightforward workaround is to encrypt the value data of an appSettings
on your own. Then decrypt it in your code to get the correct value. You can
do this programatically:

http://msdn.microsoft.com/en-us/library/system.security.cryptography.rsacryp
toserviceprovider.aspx

Please let me know if it can solve this issue and feel free to ask if you
have additional questions.

Regards,
Allen Chen
Microsoft Online Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

Note: MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 2 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions. Issues of this
nature are best handled working with a dedicated Microsoft Support Engineer
by contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[MCM]

That's not the answer I was hoping for, but it is an answer.

My choices seem to be:

1. encrpyt/decrypt data myself

2. get rid of the external files and put it in web.config and use regiis to
encode the sections via the article I posted.

Neither is ideal, but what can ya do? Thanks for the help.

 

[Allen Chen [MSFT]]

Hi,

That's not the answer I was hoping for, but it is an answer.

My choices seem to be:

1. encrpyt/decrypt data myself

2. get rid of the external files and put it in web.config and use regiis to
encode the sections via the article I posted.

Neither is ideal, but what can ya do? Thanks for the help.

Thanks for your reply. Yes I believe they are the only options. This is not
a supported function. If we want to do that we probably have to
encrpt/decrypt ourselves.

Regards,
Allen Chen
Microsoft Online Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).

 

[Allen Chen [MSFT]]

Hi,

That's not the answer I was hoping for, but it is an answer.

My choices seem to be:

1. encrpyt/decrypt data myself

2. get rid of the external files and put it in web.config and use regiis to
encode the sections via the article I posted.

Neither is ideal, but what can ya do? Thanks for the help.

Do you have additional questions? If you have, please feel free to ask.


Regards,
Allen Chen
Microsoft Online Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).

 

[MCM]

Nope. All good here. Thanks.

Hi,







Do you have additional questions? If you have, please feel free to ask.


Regards,
Allen Chen
Microsoft Online Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).