Skip to content

Secure Database Connection Management

Introduction

This document provides comprehensive instructions for implementing secure database connection handling in CALUMO on-premises. The updated approach protects sensitive database credentials by storing connection strings in environment variables rather than plaintext configuration files, significantly enhancing security against unauthorized access.

Security Enhancement

Connection strings containing sensitive credentials are now stored in environment variables, which:

  • Reduces the attack surface by removing plaintext credentials from files
  • Prevents credentials from being included in code repositories or backups
  • Aligns with security best practices for credential management

Implementation Details

  • Configuration File Changes

    The master.config.json file has been updated to use environment variable placeholders instead of hardcoded credentials:

    Before:

    { "ConnectionString": "trusted_connection=false;uid=userid;pwd=password;data source=.; }

    After:

    { "ConnectionString": "%CALUMO_CONNECTION_STRING%" }

  • Setting the Environment Variable

    Manually Setting the Environment Variable

    1. Open System Properties:
    2. Right-click on “This PC” or “Computer” on the desktop or in File Explorer.
    3. Select “Properties”.
    4. Click on “Advanced system settings” on the left.

    5. In the System Properties window, click on the “Environment Variables” button.

    6. Add a New System Variable:

    7. In the Environment Variables window, under the “System variables” section, click “New”.
    8. Enter the variable name: CALUMO_CONNECTION_STRING.
    9. Enter the variable value: Ex: trusted_connection=false;uid=userId;pwd=password;data source=.;database=calumo_dev.

    10. Click “OK” to save the new variable.

    11. Apply and Close:

    12. Click “OK” to close the Environment Variables window.
    13. Click “OK” to close the System Properties window.
Back to top