Encrypt the Web.config File

To further enhance the security of Wavepoint and to prevent the use of plain text passwords, you can encrypt certain sections of the Web.config file using the Microsoft.NET encryption/decryption tool.

Encrypt

To encrypt the Web.config, follow these steps:

1. Open an admin command prompt window.

2. Navigate to the location of the aspnet_regiis.exe application. This is typically found in C:\Windows\Microsoft.NET\Framework64\v4.0xxxx

3. Enter the desired encryption/decryption command.

   1. Encrypting the appSettings section encrypts login information to services.

   2. Encrypting the connectionStrings section encrypts login information to the user database.

   3. The -app /Wavepoint part of the command tells the executable which application’s Web.config is to be modified.

Encryption Example:

aspnet_regiis -pe appSettings -app /Wavepoint aspnet_regiis -pe connectionStrings -app /Wavepoint

Decrypt

To decrypt any section that has been encrypted, follow the same steps above but replace the “pe” in the commands with “pd”.

Decryption Example:

aspnet_regiis -pd appSettings -app /Wavepoint aspnet_regiis -pd connectionStrings -app /Wavepoint