January 2003
Intermediate to advanced
620 pages
14h 58m
English
Web applications often need to store security-sensitive data, such as database connection strings and service account credentials in application configuration files. For security reasons, this type of information should never is stored in plain text and should always be encrypted prior to storage.
This How To describes how to use Data Protection API (DPAPI) from an ASP.NET application with Enterprise Services.
DPAPI can work with either the machine store or user store (which requires a loaded user profile). DPAPI defaults to the user store, although you can specify that the machine store be used by passing the CRYPTPROTECT_LOCAL_MACHINE flag to the DPAPI functions. ...
Read now
Unlock full access