Encrypting Sitecore Database Connection Strings

Posted 2/02/2012 by TerryHumphris

To encrypt your connection strings in connectionstrings.config, first make a copy of your existing web.config and connectionstrings.config files.

Next, on the web server, create a batch file in the same directory as the web.config. The batch file should contain the following text although you may need to tweak the location of aspnet_regiis.exe to match the framework on your server.

echo Encrypting database connection string in Sitecore

echo .

echo The Sitecore Web.Config contains the following file reference

echo <connectionStrings configSource="App_Config\ConnectionStrings.config" />

echo aspnet_regiis.exe will find this file and automatically encrypt the

echo connectionStrings section within it.

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pef connectionStrings . -prov DataProtectionConfigurationProvider


Note the changed connectionstrings.config file can only be used on the server that generated the file.