Encrypting config files for deployment .NET

Question

I have a windows service that reads from app.config

I want some settings to be encrypted, however, I don\'t want to use the ProtectedConfigurationProvider classes pr

Answer 1

You can use user-level RSA keys and export them to each machine. then the config file can be encrypted ahead of time, and the target machines already have the key.

Answer 2

Perhaps your central server can maintains a database of the private keys for all the end points, then it could use the specific machine key for that.

A shared private key for all the machines is not going to be that secure.