Signing Key

From version Bizview 8.0 we've implemented "remember me", which will allow us to store credentials for future use in the Bizview application. However, since we don't want to store the users' passwords as plaintext in the web-browser, we opted to use cryptographically signed tokens that can be sent to the server and verified without containing the users actual credentials. 

Caution: These tokens require a key for signing and should be unique for each Bizview Application. Do not copy the signing key from one installation to another.

Since we want our "Remember Me" tokens to persist across reboots, restores, or upgrades of the application the key needs to be persisted in a configuration file.

The signing key is automatically created and added in the bizview.config file when you run DBWizard. 

If, for some reason, the DBWizard doesn't create the signing key, send a ticket to bizviewsupport@insightsoftware.com.

You will receive a signing key in the ticket, copy the key, open the file bizview.config file as an administrator, and add a row where you enter: <bizview_signing key="PASTE THE SIGNING KEY"/>

Remember to save the file after you add the signing key.

Caution: You need to restart the Bizview application pool in IIS after the databases have been created and a new signing key has been inserted into the bizview.config file.