Security Server Encryption

Fleet Management Security Server hosts sensitive information like FidelioBK schema password and Key Encryption Key(KEK) key. It stores these two parameters in encrypted form in the configuration file. It uses Data Protection Application Programming Interface (DPAPI), a windows based encryption and machine level key for the encryption. Server should be run as Administrator.

FidelioBK schema password and Key Encryption Key(KEK) key in plain text :

<?xml version=1.0 encoding=utf-8 ?> 
<configuration>   
 <appSettings>
   <add key="FidelioBkPassword" value="" />
   <add key="KEKKey" value="" />
   <add key="ServiceUrl" value=" https://<machine_name>/FMSSecurityServer/FCTransactionsService.asmx" />
 </appSettings>

FidelioBK schema password and KEK key in encrypted form:

<?xml version=1.0 encoding=utf-8 ?> 
<configuration>   
   <appSettings configProtectionProvider=DataProtectionConfigurationProvider>     
    <EncryptedData>       
     <CipherData> 
<CipherValue>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 
</CipherValue>       
     </CipherData>     
    </EncryptedData>   
   </appSettings>