Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have a SharePoint 2010 web part that communicates with an external service. The external service provider gave us a secret cryptographic key that we must use to sign our requests. Currently, the key is hard-coded in our source code (we're still in the development). What are some good alternatives for storing this cryptographic key?

If the key were to be compromised, we could potentially experience service interruptions while we retrieved a new key from the service provider. So, not a huge deal, but if you know of a better way to store this secret key in SharePoint 2010, let me know.

Thanks!

[EDIT] The answer doesn't have to be specific to a cryptographic keys. For example, if the service provider gave us a password instead, where would I want to store that?

share|improve this question
add comment

1 Answer

That is the role of the secure store service http://msdn.microsoft.com/en-us/library/ee557754.aspx

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.