Encrypt Connectionstring in web.config file

5. Encrypt Connectionstring in web.config file

Never ever keep clear plain connectionstring in web.config file. The risk and consequences of this is self expalanatory.All you need to do is follow below steps and you are through with this.

Steps to be followed.

   1. Go to Visual Studio Command prompt in the “C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\”path.
   2. Install ASP.NET using aspnet_regiis –I command
   3. Encrypt Web.Config connectionStrings using below command;
   4. aspnet_regiis -pef "connectionStrings" path of the physical folder where web.config resides (e.g. aspnet_regiis -pef "connectionStrings" D:\Apps\NewBeeWebsite)
   5. You will get the message “Encrypting configuration section... Succeeded!”
   6. Run Following Commands;
   7. aspnet_regiis -pa "NetFrameworkConfigurationKey" "ASPNET"
   8. aspnet_regiis -pa "NetFrameworkConfigurationKey" "NETWORK SERVICE"
   9. aspnet_regiis -pa "NetFrameworkConfigurationKey" "NT AUTHORITY\NETWORK SERVICE"
  10. Restart IIS