Tip: Encrypt a Config Section Using .NET's Configuration Providers

Learn to encrypt a config section using .NET's configuration providers.

by Srinath MS

Apr 21, 2017

WEBINAR:

On-Demand

Application Security Testing: An Integral Part of DevOps

~~Watch~~→

var configFilePath = @"C:\Code\Classified\Configurations\app.config";
var sectionName = "appSettings";
EncryptConfigSection(configFilePath, sectionName);

private void EncryptConfigSection(string configFilePath, string sectionName)
{
   var configurationFileMap = new ExeConfigurationFileMap { ExeConfigFilename = configFilePath };
   var configuration = ConfigurationManager.OpenMappedExeConfiguration(configurationFileMap,   ConfigurationUserLevel.None);
   var configSection = configuration.GetSection(sectionName);
   var configurationProvider = new RsaProtectedConfigurationProvider();
   if (!configSection.SectionInformation.IsLocked)
   {
      configSection.SectionInformation.ProtectSection(configurationProvider.CspProviderName);
   }
   configuration.Save();
}

Visit the DevX Tip Bank