Encrypt ASP.NET Configuration in Web.config Using aspnet_regiis.exe

* Windows Server 2008 R2
* Run the commands from same directory as web.config:

* No need to decrypt in application code. The encrypted section will be automatically decrypted during runtime.

* Encrypt the whole appSettings section in web.config file.

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -pef appSettings . -prov DataProtectionConfigurationProvider

* After encryption:

<configuration>
<appSettings configProtectionProvider="DataProtectionConfigurationProvider">
  <EncryptedData>
   <CipherData>
    <CipherValue>...</CipherValue>
   </CipherData>
  </EncryptedData>
</appSettings>
..
</configuration>

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -pdf appSettings .

* Same approach can be used to encrypt/decrypt C# application config files.
* Follow the steps:
– Rename application config file to web.config
– Run encrypt/decrypt command
– Rename web.config back to application config file name

* ASP.NET IIS Registration Tool (Aspnet_regiis.exe)
* Encrypting and Decrypting Configuration Sections