Secure Communication Between Microsoft SQL & IIS

Internet Information Services is a Microsoft web hosting solution that lets you run ASP.NET programs. You can securely connect from the IIS web application to the SQL Server to protect your company data.

Function

When you connect to a database, the username and password are sent to the database for verification. You encrypt the connection to ensure that the username and password can't be hijacked by a hacker.

Identification

ASP.NET applications have a database connection string located in the "web.config" file. To encrypt the connection, type the following command into the MS DOS window and press "Enter:"

aspnet_regiis -pe "connectionStrings" -app "/MyWebsite" -prov "DataProtectionConfigurationProvider"

Replace "/MyWebsite" with your information, including the beginning slash mark.

Considerations

The SQL Server database administrator must secure the server by providing a good password. Passwords must be upper and lower case alphanumeric values. Adding special characters also helps protect the password from being hacked. This username and password blocks unauthorized users from connecting to the database.

References

• Microsoft: Connect to SQL Server Using Windows Authentication in ASP.NET 2.0