Looking for the v10 manual? Visit our new user's guide!
 
Search Descriptions Version
 
 
This article applies to: ML8

Change EncryptKey

From the Configuration Menu, click Maintenance → Change EncryptKey

If you are storing credit card information on your site, it is highly recommended that the web.config EncryptKey be changed at least every 90 days. That must be done through this page of the admin site, so that the software can update encrypted records with the new key information. EncryptKeys should be at least 8 characters long, and should not contain special characters (letters & numbers only).

NOTE: Before this change can be made, the .NET user account (typically ASPNET for WindowsXP or NETWORK SERVICE for Windows Server 2003/Vista or IIS_IUSRS for Windows Server 2008/Windows7) must be given read/write/modify access to the folder the web.config file resides in, and decrypt the web.config file in the Site Configuration Wizard. Contact your host for assistance with making that change, and backup the database and web.config file prior to changing the encrypt key.

This can take some time, do not stop the process once it has begun!