Encrypted database connection information in Jitterbit App Builder

App Builder can load database connection information from one of several locations, including:

• bin\Connection.xml
• Config\ConnectionInfo.config
• Environment variables

Typically, the database connection information is stored in plain text. However, App Builder allows administrators to protect the database connection information while at rest. Specifically, App Builder leverages .Net's built-in support for encrypted configuration sections to protect connection information stored in the ConnectionInfo.config file.

App Builder provides several installation scripts that can be used to set and protect the connection information, including:

• SetConnectionInfo.ps1
• ProtectConfiguration.ps1
• UnprotectConfiguration.ps1

Consult the linked topics for additional information.

Known issues and limitations

App Builder uses the DataProtectionConfigurationProvider to encrypt the connection information. App Builder does not support the use of the RSAProtectedConfigurationProvider provider. The DataProtectionConfigurationProvider uses DPAPI with the Machine Store. This allows anyone with sufficient privileges on the machine to decrypt the connection information.

Only the ConnectionInfo.config file can be protected, not the Connection.xml file.