0

I have a SharePoint 2010 web part that communicates with an external service. The external service provider gave us a secret cryptographic key that we must use to sign our requests. Currently, the key is hard-coded in our source code (we're still in the development). What are some good alternatives for storing this cryptographic key?

If the key were to be compromised, we could potentially experience service interruptions while we retrieved a new key from the service provider. So, not a huge deal, but if you know of a better way to store this secret key in SharePoint 2010, let me know.

Thanks!

[EDIT] The answer doesn't have to be specific to a cryptographic keys. For example, if the service provider gave us a password instead, where would I want to store that?

Improve this question

1 Answer 1

Reset to default
2

That is the role of the secure store service http://msdn.microsoft.com/en-us/library/ee557754.aspx

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.