SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a SharePoint 2010 web part that communicates with an external service. The external service provider gave us a secret cryptographic key that we must use to sign our requests. Currently, the key is hard-coded in our source code (we're still in the development). What are some good alternatives for storing this cryptographic key?

If the key were to be compromised, we could potentially experience service interruptions while we retrieved a new key from the service provider. So, not a huge deal, but if you know of a better way to store this secret key in SharePoint 2010, let me know.


[EDIT] The answer doesn't have to be specific to a cryptographic keys. For example, if the service provider gave us a password instead, where would I want to store that?

share|improve this question

That is the role of the secure store service

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.