Difference between revisions of "Encrypting the web.config"
Thewikiadmin (talk | contribs) (Created page with " == [[|<span style="font-size:12.0pt" lang="EN-US"><span style="line-height:115%">Completing the Process</span></span>]] == == <span style="font-size:10.0pt" lang="EN-US"><sp...") |
Thewikiadmin (talk | contribs) |
||
| Line 1: | Line 1: | ||
| − | == | + | == Overview == |
== <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:115%">As the web.config contains sensitive information, it is important that it is encrypted.</span></span> == | == <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:115%">As the web.config contains sensitive information, it is important that it is encrypted.</span></span> == | ||
| Line 8: | Line 8: | ||
<span style="font-size:10.0pt" lang="EN-US"><span style="line-height:112%">Make a backup of the web.config</span></span> | <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:112%">Make a backup of the web.config</span></span> | ||
| − | <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:115%"> | + | <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:115%">Copy the web.config into a secure location. You must ensure that the password and any other information that is sensitive be extracted. This allows the administrator to make configuration changes in the future and provides a starting point.</span></span> |
== Prepare the Web.Config == | == Prepare the Web.Config == | ||
| Line 22: | Line 22: | ||
| | ||
| − | + | == <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:112%">Encrypt the web.config</span></span> == | |
<span style="font-size:10.0pt" lang="EN-US"><span style="line-height:115%">Open the command prompt as an administrator.</span></span> | <span style="font-size:10.0pt" lang="EN-US"><span style="line-height:115%">Open the command prompt as an administrator.</span></span> | ||
Revision as of 19:34, 16 January 2020
Contents
Overview
As the web.config contains sensitive information, it is important that it is encrypted.
The encryption should only occur once the validation of the application has been completed, as the encryption process is not easily reversible.
Make a backup of the web.config
Copy the web.config into a secure location. You must ensure that the password and any other information that is sensitive be extracted. This allows the administrator to make configuration changes in the future and provides a starting point.
Prepare the Web.Config
One line in the web.config has to be temporarily commented.
<section name="STSSettings" type="LiteSTS.Common.Configuration.STSConfig"/>
should be changed to
Encrypt the web.config
Open the command prompt as an administrator.
Navigate to "C:\Windows\Microsoft.NET\Framework\v4.0.30319"; e.g. "cd C:\Windows\Microsoft.NET\Framework\v4.0.30319"
Run the following command and change it to reflect the actual location of the web application:
aspnet_regiis.exe -pef STSSettings "D:\orbital-lite"
Verify the encryption of the web.config
Confirm that no sensitive data remains in the web.config
Finalize the Web.Config
We need to change back the line that was previously commented.
should be changed back to
<section name="STSSettings" type="LiteSTS.Common.Configuration.STSConfig"/>
