<div>
I haven't confirmed the parameters of your command, but yes, you would use <i>aspnet_regiis</i> for this purpose.
</div>


I haven't confirmed the parameters of your command, but yes, you would use aspnet_regiis for this purpose.

<div>
<div class="content wysiwyg-content">
I would like to encrypt the database connection string so our developers do not know what the password is to connect to our production database.<br />
We have 3 environments. Dev, test and Prod. &nbsp;Dev and Test I have no issues with the Developer seeing the username and passwords unencrypted in the web.config file. &nbsp;But when moving to the production environment I would like to hide this information from the developer. &nbsp;Do I do the following?<br />
<br />
run<br />
C:\Windows\Microsoft.NET\F<wbr />ramework\v<wbr />2.0.50727&gt;<wbr />aspnet_reg<wbr />iis.exe -pe &quot;connectionStrings&quot; -prov &quot;DataProtectionConfigurati<wbr />onProvider<wbr />&quot; -app &quot;/&quot;<br />
Encrypting configuration section...<br />
Succeeded!<br />
<br />
and then copy the resulting results to the web.config? &nbsp;Or is their another solution?
</div>
</div>


I would like to encrypt the database connection string so our developers do not know what the password is to connect to our production database.
We have 3 environments. Dev, test and Prod.  Dev and Test I have no issues with the Developer seeing the username and passwords unencrypted in the web.config file.  But when moving to the production environment I would like to hide this information from the developer.  Do I do the following?

run
C:\Windows\Microsoft.NET\Framework\v2.0.50727>aspnet_regiis.exe -pe "connectionStrings" -prov "DataProtectionConfigurationProvider" -app "/"
Encrypting configuration section...
Succeeded!

and then copy the resulting results to the web.config?  Or is their another solution?

How to hide the database connection string in the web.config

The successor to Active Server Pages, ASP.NET websites utilize the .NET framework to produce dynamic, data and content-driven web applications and services. ASP.NET code can be written using any .NET supported language. As of 2009, ASP.NET can also apply the Model-View-Controller (MVC) pattern to web applications

ASP.NET

The .NET Framework is not specific to any one programming language; rather, it includes a library of functions that allows developers to rapidly build applications. Several supported languages include C#, VB.NET, C++ or ASP.NET.

.NET Programming

Visual Basic .NET (VB.NET) is an object-oriented programming language implemented on the .NET framework, but also supported on other platforms such as Mono and Silverlight. Microsoft launched VB.NET as the successor to the Visual Basic language. Though it is similar in syntax to  Visual Basic pre-2002, it is not the same technology,