Home/ Questions/Q 7984731
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-04T11:21:58+00:00

I am trying to encrypt connection string in my web.config. I have followed the

  • 0

I am trying to encrypt connection string in my web.config. I have followed the guidelines by microsoft, but it doesn’t work. http://msdn.microsoft.com/en-us/library/ff650304.aspx#paght000006_step3

After I got “encrypting configuration sections succeeded!” in command prompt. I deleted “connectionStrings” section from my web.config and kept the newly added “connectionStrings” with encrypted data.

I had two MSSQL database connection strings for Entity Framework, but I am getting an error on runtime compile saying “The specified named connection is either not found in the configuration, not intended to be used with the EntityClient provider, or not valid.“

When you open up the model edmx file, and update model from database. Visual Studio displays error saying “Failed to decrypt using provider RSAProtectedConfigurationProvider….The RSA key container could not be opened.”

    <connectionStrings configProtectionProvider="RsaProtectedConfigurationProvider">
      <EncryptedData Type="http://www.w3.org/2001/04/xmlenc#Element"
        xmlns="http://www.w3.org/2001/04/xmlenc#">
        <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#">
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" />
            <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
              <KeyName>Rsa Key</KeyName>
            </KeyInfo>
            <CipherData>
              <CipherValue>..........</CipherValue>
            </CipherData>
          </EncryptedKey>
        </KeyInfo>
        <CipherData>
          <CipherValue>........</CipherValue>
        </CipherData>
      </EncryptedData>
    </connectionStrings>

——– solved, answer below. ——

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    When you run aspnet commands, the encrypted data should replace the “connectionStrings”, if it doesn’t, then it failed. aspnet_regiis -pe “connectionStrings” -app “/” -location “subfolder” -site “2”

    I ran that command, but it turns out I don’t need -location and that was incorrect.

    I should have known, when the cipher Value XML field was so small.

    However, these two commands do the trick…

    aspnet_regiis -pe “connectionStrings” -app “/” -site “2”

    aspnet_regiis -pa “NetFrameworkConfigurationKey” “IIS APPPOOL\MyApp”

    • 0