In this post I will show you how to Encrypt and Decrypt Sections of a Web.config file.

This function will encrypt a sections of a web.config file.

function Encrypt-ConfigurationSection([int] $id, [string] $app, [string] $section, [string] $version){
$currentDirectory = (Get-Location)
Set-Location "C:\windows\Microsoft.Net\Framework\$version\"
.\aspnet_regiis.exe -pe $section -app $app -site $id -prov "RsaProtectedConfigurationProvider"
Set-Location $currentDirectory
}

Example call

Encrypt-ConfigurationSection 1 ‘/WebApplication1’ ‘connectionStrings’ ‘v4.0.30319’

This function will decrypt a sections of a web.config file.

function Decrypt-ConfigurationSection([int] $id, [string] $app, [string] $section, [string] $version){
$currentDirectory = (Get-Location)
Set-Location "C:\windows\Microsoft.Net\Framework\$version\"
.\aspnet_regiis.exe -pd $section -app $app -site $id
Set-Location $currentDirectory
}

Example Call

Decrypt-ConfigurationSection 1 ‘/WebApplication1’ ‘connectionStrings’ ‘v4.0.30319’

Now, if you look at the functions you will notice that there is a $version variable. The $version variable is important. This is because if you are working with an ASP.net web application that uses an Application Pool with a Managed Runtime Version of v2.0, then you want to be using the aspnet_regiis application for that version. The same goes for Applications that use and Application Pool with a Managed Runtime Version of v4.0.

From the blog joshjoubert » CS@Worcester by Josh and used with permission of the author. All other rights reserved by the author.

In this post I will show you how to Encrypt and Decrypt Sections of a Web.config file.

This function will encrypt a sections of a web.config file.

function Encrypt-ConfigurationSection([int] $id, [string] $app, [string] $section, [string] $version){
$currentDirectory = (Get-Location)
Set-Location "C:\windows\Microsoft.Net\Framework\$version\"
.\aspnet_regiis.exe -pe $section -app $app -site $id -prov "RsaProtectedConfigurationProvider"
Set-Location $currentDirectory
}

Example call

Encrypt-ConfigurationSection 1 ‘/WebApplication1’ ‘connectionStrings’ ‘v4.0.30319’

This function will decrypt a sections of a web.config file.

function Decrypt-ConfigurationSection([int] $id, [string] $app, [string] $section, [string] $version){
$currentDirectory = (Get-Location)
Set-Location "C:\windows\Microsoft.Net\Framework\$version\"
.\aspnet_regiis.exe -pd $section -app $app -site $id
Set-Location $currentDirectory
}

Example Call

Decrypt-ConfigurationSection 1 ‘/WebApplication1’ ‘connectionStrings’ ‘v4.0.30319’

Now, if you look at the functions you will notice that there is a $version variable. The $version variable is important. This is because if you are working with an ASP.net web application that uses an Application Pool with a Managed Runtime Version of v2.0, then you want to be using the aspnet_regiis application for that version. The same goes for Applications that use and Application Pool with a Managed Runtime Version of v4.0.

From the blog joshjoubert » CS@Worcester by Josh and used with permission of the author. All other rights reserved by the author.