> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/da/knowledge-base/how-to-articles/allow-devolutions-scheduler-to-read-encrypted-connection-strings.md).

# Tillad, at Devolutions Scheduler læser krypterede forbindelsesstrenge

Giv tjenesten Devolutions Scheduler tilladelse til at læse krypterede forbindelsesstrenge i appsettings.json ved hjælp af RSA-nøglekommandoen aspnet\_regiis.

### Brug af SQL Server-logonkonti

Når der bruges SQL Server-logonkonti, er det yderst vigtigt, at serverens konfigurationsfil (**appsettings.json**) krypteres, fordi den gemmer databasens forbindelsesstrenge. De omfatter HostName for databaseserveren, navnet på databasen (Initial Catalogue) og legitimationsoplysningerne (User ID og Password).

Da krypteringen af filen **appsettings.json** kræver brug af ***RsaProtectedConfigurationProvider*** fra .NET Framework, er der dog brug for yderligere tilladelser for at få adgang til beholderen ***NetFrameworkConfigurationKey***, som RSA Provider bruger.

Hvis disse tilladelser ikke indhentes, forhindres ***DevolutionsSchedulerService*** i at starte, og der returneres en fejlmeddelelse, hvis indstillingen ***Deaktiver kryptering af forbindelsesstreng*** er deaktiveret i Devolutions Server Console (højreklik på en instans, og vælg derefter ***Rediger –*** ***IIS** –* ***Deaktiver kryptering af forbindelsesstreng***).

{% hint style="danger" %}
At give adgang til beholderen ***NetFrameworkConfigurationKey*** kan være et sikkerhedsproblem, og derfor anbefales det ikke at give denne tilladelse til ***Network Service*** eller ***Local Service***.
{% endhint %}

Vi anbefaler at bruge en dedikeret konto til tjenesten ***DevolutionsSchedulerService*** og indstille tjenesten til at køre under den.

Kør derefter følgende kommando fra en kommandoprompt med udvidede privilegier:

```bash
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis" -pa "NetFrameworkConfigurationKey" "SchedSvcLocalAccount"
```

Dette bør returnere:

```
Microsoft (R) ASP.NET RegIIS version 4.0.30319.0
Administration utility to install and uninstall ASP.NET on the local machine.
Copyright (C) Microsoft Corporation.  All rights reserved.
Adding ACL for access to the RSA Key container...
Succeeded!
```

### Brug af SQL Server-domænekonti (integreret sikkerhed)

Ligesom med logonkonti forhindrer manglende tilladelser til beholderen ***NetFrameworkConfigurationKey***, som RSA Provider bruger, ***DevolutionsSchedulerService*** i at starte, og Windows Services Console returnerer sandsynligvis denne fejl.

Kontoen, der er angivet på ***DevolutionsSchedulerService*** (omtalt som VaultDBScheduler-kontoen i kontoundersøgelsen før udrulning), skal have tilladelse til at læse beholderen ***NetFrameworkConfigurationKey***.

For at få dem skal De køre følgende kommando fra en kommandoprompt med udvidede privilegier:

```
"C:\"Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis" -pa "NetFrameworkConfigurationKey" "<YourDomain>\<VaultDBSchedulerAccount>"
```

Dette bør returnere:

```
Microsoft (R) ASP.NET RegIIS version 4.0.30319.0
Administration utility to install and uninstall ASP.NET on the local machine.
Copyright (C) Microsoft Corporation.  All rights reserved.
Adding ACL for access to the RSA Key container...
Succeeded!
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.devolutions.net/server/da/knowledge-base/how-to-articles/allow-devolutions-scheduler-to-read-encrypted-connection-strings.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.