From: Mr. Arnold on
Gregory A. Beamer wrote:
>
>
>
> "Gerhard" <Gerhard(a)community.nospam> wrote in message
> news:FAA1C991-FE3F-4BBF-8C37-85E68110CE10(a)microsoft.com...
>> Thanks. Is there a tutorial on how to encrypt the string with the
>> mechanisms
>> present in the web security namespace
>
> Not directly, but there are complementary methods that will
> automagically unencrypt on the server.
>
> This will work for a single machine (does not work for a farm, as it
> uses the machine's keys):
> http://msdn.microsoft.com/en-us/library/ms998280.aspx
>
> The above is very secure, but also takes a bit of work. The easier
> method is:
> http://wiki.asp.net/page.aspx/1155/encrypt-connectionstrings-section-of-webconfig/
>
>
> To set the machine keys easily:
> http://aspnetresources.com/tools/keycreator.aspx
>
> Also note that there is a facility in the Enterprise Library
> (http://msdn.microsoft.com/en-us/library/dd203099.aspx) for encrypting
> configuration elements, if you prefer to go that direction.
>

Also, when creating the EF model, it's asked do you want to encrypt the
connection string.

The psw for SQL Server login should be encrypted too with some kind of
shift-key none shift-key alph-numeric-special keys combination to even
login to SQL Server at the SQL Server Manager.