Encrypt or Decrypt Sections of the web.config File

Data stored in the application's web.config file is highly sensitive. Therefore, you may want to keep it secure by encrypting its contents. Encryption provides greater security because it converts the contents into an unreadable format.

Note: You must have Diocesan Admin permissions to view this page.

  1. Under Administration, click Utilities button.png. Select Encryption to display the Encryption and Decryption page:
  2. Set encryption settings for the following sections in the web.config file:
    • appSettings: this section stores connection strings, server names, file paths, and other settings that enable the application to perform.
    • connectionStrings: This section stores the information a provider needs to connect to your database or data files. The connection string may include the server and database names, as well as security information such as the username and password. If anyone needs to access the database information for your application, they will look first in the web.config file.
  3. Do one of the following:
    • Click Protect button.png to encrypt the contents of the section. Encryption provides more security because the contents are changed into an unreadable format.
    • Click Unprotect Button.png to decrypt the contents of the section. Decryption offers no security because the contents are in their original plain text format, which makes them easily readable. If you need to see the specific value for a setting, you can decrypt the section.

Updated

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

If you have an issue that requires help or feedback, please Contact Support.