Encrypting configuration files

The files Smartsite.data.config and Smartsite.security.config contain sections with security sensitive information. You may encrypt these sections by using the ConfigEditor or the command line tool ConfigProtect. These tools will encrypt the files with either the RsaProtectedConfigurationProvider or the DataProtectionConfigurationProvider.

The RsaProtectedConfigurationProvider allows you to export the key on your system and import it on another server which is useful when running a single site in a webfarm. This way you can have a single encryption key on multiple servers.

When using the RsaProtectedConfigurationProvider, you may experience the error "The RSA key container could not be opened." when the user has insufficient rights to the RSA container. You can solve this by giving the user access to the container:

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727>aspnet_regiis -pa NetFrameworkConfigurationKey iis_wpg