Encrypting web.config files

[simonkane]

Hi.

I've been trying to encrypt the AppSettings section of the Web.Config file using the following code in the Application_Start event-handler, but it generates an exception. Is my code correct, or is it some other problem (e.g. my app doesn't have permission to modify its own config file).

Configuration config = WebConfigurationManager.OpenWebConfiguration(null);
SectionInformation secInfo = config.GetSection("appSettings").SectionInformation;
if (!secInfo.IsProtected)
{
         secInfo.ProtectSection("DataProtectionConfigurationProvider");
         secInfo.ForceSave = true;
         config.Save();
}

Is there some other way of achieving this?

Best wishes,
Simon.

[RFH Reseller: Wise Webs]

Funnily enough I have been looking at the very same issue of encrypting the config file.

I believe it cannot be done as the RFH servers run in Medium Trust and need to be Full Trust to do what you are after.

I am sure someone will either back me up on this (or shoot me down with a solution - to which I too would be grateful).

[RFH Reseller: askjim]

I reckon it will work in shared env

http://www.developerfusion.com/code/...-in-aspnet-20/

http://weblogs.asp.net/scottgu/archi...09/434893.aspx

Have never done it though but know of many paranoid people who appreciate the functionality