[#1]

The information in this article applies to:

Product: Metastorm BPM
Version: 9.x

Issue

• Can database connections be encrypted?

Resolution

• Although not tested by Metastorm, it has been reported that the connections listed below can be encrypted using the Windows capability for encrypting SQL Server connections. Be sure to review the Microsoft article How to enable SSL encryption for an instance of SQL Server by using Microsoft Management Console for information on configuring SSL.
  
  
  1. Engine ODBC Connection
     [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Metastorm\e-work\Engine\Database\Connection]ODBC;DSN=Metastorm;UID=;PWD=; Encrypt=yes;
     
     
  2. Engine OLEDB Connection
     [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Metastorm\e-work\Engine\Database Connectors\SQL Server DBC\Connection]Provider=SQLOLEDB;Data Source=;Initial Catalog=Metastorm;User ID=;Password=;Trusted_Connection=Yes;Use Encryption for Data=True;
     
     
  3. Engine ADO.NET Connection
     [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Metastorm\e-work\Engine\Database Connectors\SQL Server DBC\ DotNetConnection]Data Source=;Initial Catalog=Metastorm;Integrated Security=SSPI;Encrypt=yes;"
     
     
  4. Administrative Tools Connection
     In the file C:\Program Files\Metastorm\BPM\Administrative Tools\Service\Web.config, add "Encrypt=yes;" to the connection string. For example:
     

       <connectionStrings>
           <add name="MetastormSQLConnectionString" connectionString="Data Source=localhost\sqlexpress;Initial Catalog=Metastorm;Persist Security Info=False;User ID=sa;Password=[password];Encrypt=yes;" providerName="System.Data.SqlClient"></add>
     	...
       </connectionStrings>
     

  5. Deployment Service Connection
     In the file C:\Program Files\Metastorm\BPM\Deployment\DeploymentService.exe.config, add "Encrypt=yes;" to the connection string. For example:
     

       <connectionStrings>
           <add name="Metastorm" connectionString="Data Source=localhost\sqlexpress;Initial Catalog=Metastorm;Persist Security Info=False;User ID=sa;Password=[password];Encrypt=yes;" providerName="System.Data.SqlClient"></add>
       </connectionStrings>