asp.net mvc 3 - Using asp_regiis.exe to secure connection string -


using asp4 mvc 3 building web app.

i deploying web app outside company firewall, want secure connection string database in way. connection string in web config.

  1. do need anything? meaning there built in stuff, sitting on windows server 2008, using iis7.

  2. one option have been looking @ using asp_regiis.exe tool, have questions due conflicting info in tutorials:

    a. if code on box , run tool, need rerun after deployed server?

    b. tutorials decrypt built framework, once 1 time encryption using tool, don't have worry it, 1 or 2 talk how decrypt, not sure if automated. it?

    c. have setup on server @ all, tell app pool using encrypted web config file?

  3. is there way encrypt password? maybe on creation of model.edmx file? more happy delete , recreate if there is.

the best option use aspnet_regiis tool encrypt configuration, per walkthrough: creating , exporting rsa key container.

to run down list:

  1. yes
  2. good option!
    • a. you'll need import key container on server, can decrypt configuration. remember grant apppool user access container.
    • b. yes, decryption automatic when application starts up.
    • c. apart deploying encrypted configuration , importing key container, no.
  3. that cumbersome, you'd have manage encryption keys yourself. go encrypted configuration section instead.

Comments

Popular posts from this blog

Why does Ruby on Rails generate add a blank line to the end of a file? -

keyboard - Smiles and long press feature in Android -

node.js - Bad Request - node js ajax post -