DB Connection String

[A.M]

Hi,

I need to store the database connection string inside web.config file. What
would be the best way to encrypt and decrypt it?

Thanks,
Ali

[Joe Kaplan \(MVP - ADSI\)]

The Configuration Management Application Block has nice built in support for
this as well as some other useful features. You might give that a swing.

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/cmab.asp?frame=true[/url]

Joe K.

"A.M" <IHateSpam@sapm123.com> wrote in message
news:%23exvUji3DHA.2168@TK2MSFTNGP12.phx.gbl...

> Hi,
>
> I need to store the database connection string inside web.config file.

What

> would be the best way to encrypt and decrypt it?
>
> Thanks,
> Ali
>
>

[Alek Davis]

Ali,

Check this tool: [url]http://www.obviex.com/cipherlite/[/url]. It is not very secure,
though (but neither is Configuration Management Application Block, since -
if I understand it correctly - it requires the encryption key to be stored
in plain text on the same system). Anyway, either option is still better
than keeping data unencrypted.

Alek

"A.M" <IHateSpam@sapm123.com> wrote in message
news:%23exvUji3DHA.2168@TK2MSFTNGP12.phx.gbl...

> Hi,
>
> I need to store the database connection string inside web.config file.

What

> would be the best way to encrypt and decrypt it?
>
> Thanks,
> Ali
>
>

[Hernan de Lahitte]

Actually, the CMAB have a built-in security provider (DPAPIDataProtection
implementation) that no needs any key management to protect sensitive data.

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/cmab.asp[/url]




--
Hernan de Lahitte - MSDE
Lagash Systems S.A. - Buenos Aires, Argentina
[url]http://www.lagash.com[/url]



"Alek Davis" <alek_xDOTx_davis_xATx_intel_xDOTx_com> wrote in message
news:#fqIjsv3DHA.2404@TK2MSFTNGP12.phx.gbl...

> Ali,
>
> Check this tool: [url]http://www.obviex.com/cipherlite/[/url]. It is not very secure,
> though (but neither is Configuration Management Application Block, since -
> if I understand it correctly - it requires the encryption key to be stored
> in plain text on the same system). Anyway, either option is still better
> than keeping data unencrypted.
>
> Alek
>
> "A.M" <IHateSpam@sapm123.com> wrote in message
> news:%23exvUji3DHA.2168@TK2MSFTNGP12.phx.gbl...

> > Hi,
> >
> > I need to store the database connection string inside web.config file.

> What

> > would be the best way to encrypt and decrypt it?
> >
> > Thanks,
> > Ali
> >
> >

>
>

[Alek Davis]

Yes, but DPAPI has quite a few limitations. For example, in the plain form,
it cannot be used by ASP.NET (or any other Web) applications, and the
question was about Web.config, so DPAPI is not going to help here.

Alek

"Hernan de Lahitte" <hernan@lagash.com> wrote in message
news:uGPyVz13DHA.1804@TK2MSFTNGP12.phx.gbl...

> Actually, the CMAB have a built-in security provider (DPAPIDataProtection
> implementation) that no needs any key management to protect sensitive

data.

>
>

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/cmab.asp[/url]

>
>
>
>
> --
> Hernan de Lahitte - MSDE
> Lagash Systems S.A. - Buenos Aires, Argentina
> [url]http://www.lagash.com[/url]
>
>
>
> "Alek Davis" <alek_xDOTx_davis_xATx_intel_xDOTx_com> wrote in message
> news:#fqIjsv3DHA.2404@TK2MSFTNGP12.phx.gbl...

> > Ali,
> >
> > Check this tool: [url]http://www.obviex.com/cipherlite/[/url]. It is not very

secure,

> > though (but neither is Configuration Management Application Block,

since -

> > if I understand it correctly - it requires the encryption key to be

stored

> > in plain text on the same system). Anyway, either option is still better
> > than keeping data unencrypted.
> >
> > Alek
> >
> > "A.M" <IHateSpam@sapm123.com> wrote in message
> > news:%23exvUji3DHA.2168@TK2MSFTNGP12.phx.gbl...

> > > Hi,
> > >
> > > I need to store the database connection string inside web.config file.

> > What

> > > would be the best way to encrypt and decrypt it?
> > >
> > > Thanks,
> > > Ali
> > >
> > >

> >
> >

>
>