This site is sponsored by Corporate Systems & Solutions and Real World Software Architecture.

 

There are two encryption tools.  One is for web config files and the other is for windows forms config files.  Get them here.

 

Both use the machine config machineKey setting to encrypt and decrypt.  If you are using a web farm, you can generate a machine key using the windows form configuration encryption tool that you can use on all the servers.

 

 

 

To encrypt a windows form config file select the exe that the config file belongs to and then select the area you want to encrypt.  Currently there are only 2 choices appSettings and connectionStrings.  Then click encrypt or decrypt.

 

The web config tool is just an aspx page that needs to be deployed to the site you want to encrypt the web config on.  It is a stripped down version of a Microsoft sample (http://msdn.microsoft.com/msdnmag/issues/06/05/ExtremeASPNET/).  You will only use the top two sections appSettings and connectionStrings.