How to encrypt .config file Asp.net

Question

I want to encrypt common.config, not the Web.config file. Common.config is in a different location than the web.config. The web.config file is connected to the common.config.

web.config:

<appSettings file="C:\Users\ja\Documents\common.config">
    <add key="webpages:Version" value="3.0.0.0" />
    <add key="webpages:Enabled" value="false" />
    <add key="ClientValidationEnabled" value="true" />
    <add key="UnobtrusiveJavaScriptEnabled" value="true" />
</appSettings>

common.config:

<appSettings>
    <add key="myKey" value="This is the Value"/>
</appSettings>`

This works for the web.config file:

aspnet_regiis.exe -pef appSettings c:\Users\ja\Desktop\test\webapp\webapp -prov "RsaRpotectedConfigurationProvider"

But when I try to encrypt the common.config file:

aspnet_regiis.exe -pef appSettings c:\Users\ja\Document\ -prov "RsaRpotectedConfigurationProvider"

I get this error:

The configuration for physical path 'c:\Users\ja\Document\' cannot be opened

Pankaj Kapare · Answer 1 · 2015-01-20T18:15:02.967

1

I found workaround to solve this issue. Hope it helps.

Rename your common.config to web.config temporarily.
Add configuration as root element to this file. So your common.config will look like as follows.

<configuration>
  <appSettings>
    <add key="myKey" value="This is the Value"/>
  </appSettings>
</configuration>

Run encrypt command.

aspnet_regiis.exe -pef appSettings c:\Users\ja\Document\ -prov "RsaProtectedConfigurationProvider"
Open encrypted file and remove Configuration tags.
Rename file to Common.config PS: I deleted my original comments posted on this thread.

edited Jan 20 '15 at 18:15

answered Jan 20 '15 at 18:00

Pankaj Kapare

7,486
5
40
56

I get this error: `Unrecognized attribute 'configProtectionProvider'. Note that attribute names are case-sensitive.` In the common.config file were it says `` – User765876 Jan 20 '15 at 18:07
After encryption or while encrypting? – Pankaj Kapare Jan 20 '15 at 18:08
It encrypts fine, when I run the program that error comes up.` – User765876 Jan 20 '15 at 18:11
Try running encryption command without provider. like aspnet_regiis.exe -pef appSettings c:\Users\ja\Document\. Aslo could you post file contents after encryption? – Pankaj Kapare Jan 20 '15 at 18:12
It still automatically adds `configProtectionProvider="RsaProtectedConfigurationProvider"` – User765876 Jan 20 '15 at 18:15
That should be fine. It will need provider value after encryption. In your original post provider name was wrong hence I thought removing it from command so that it will pick default which is again RsaProtectedConfigurationProvider. – Pankaj Kapare Jan 20 '15 at 18:18
Can you please post encrypted file? – Pankaj Kapare Jan 20 '15 at 18:28

score 0 · Answer 2 · answered Jan 16 '15 at 19:37

0

It doesn't look like you supplied the full path:

c:\Users\ja\Document\

vs

C:\Users\ja\Documents\common.config

If the syntax requires the directory, Document is still missing the 's'

answered Jan 16 '15 at 19:37

David

137
1
2
10

It looks like the path parameter is supposed to point to a web application. Perhaps move the common.config to the root of an application rather than the Documents folder? – David Jan 16 '15 at 19:45
The same way it decrypts the web.config. – User765876 Jan 16 '15 at 20:21

How to encrypt .config file Asp.net

2 Answers2

Linked