How to get the decrypted connection string from the Web.config file to establish a connection between IIS and MSSQL servers using pattern-based discovery?

[Ihor Halytskyi]

There is an application should be discovered by Service Mapping that consists of F5 BIG-IP load balancer, three Microsoft IIS Servers, and Microsoft SQL Server. ADO.NET data provider used to establish a connection between IIS and MSSQL.

The problem I was faced during discovering is about encrypted configuration. For discovering connection IIS Virtual Directory pattern used. I tried to discover using the OOB pattern with "ADO .NET connectivity" section. I got an encrypted connection string on the "fetch encrypted connection strings section" step. Then I tried to use "decrypt configs" step, but I got empty results.

I tried to use Aspnet_regiis.exe native tool which is installed by default with .Net for IIS, but I got a message "Decrypting configuration section... The configuration for the physical path cannot be opened Failed!". I think it could be caused by lack of permissions.

How could I get the decrypted connection string from the Web.config file to establish a DB connection? What prerequisites are for using OOB pattern "IIS Virtual Discovery" for discovering the encrypted connection?

Thanks.

[Michael Bateman]

Thanks Richard, I'm still fairly new to this so that does help steer me in the right direction.

[komal37]

I'm currently running into the same issue. If anyone has fixed it please let me know.

[komal37]

Hello,

I'm currently running into the same issue. If anyone has fixed it please let me know.

Thanks!