How to: Set or Change the Protection Level of Packages
To control access to the contents of packages and to the sensitive values that they contain, such as passwords, set the value of the ProtectionLevel property. For information about how to determine the ProtectionLevel settings that are appropriate for your packages at different stages in the package life cycle, see Setting the Protection Level of Packages. For an overview of security features in Integration Services, see Security Overview (Integration Services).
The procedures in this topic describe how to use either Business Intelligence Development Studio or the dtutil command prompt utility to change the ProtectionLevel property.
Note
In addition to the procedures in this topic, you can typically set or change the ProtectionLevel property of a package when you import or export the package. You can also change the ProtectionLevel property of a package when you use the SQL Server Import and Export Wizard to save a package.
To set or change the protection level of a package in Business Intelligence Development Studio
Review the available values for the ProtectionLevel property in the topic, Setting the Protection Level of Packages, and determine the appropriate value for your package.
In Business Intelligence Development Studio, open the Integration Services project that contains the package.
Open the package in the SSIS designer.
If the Properties window does not show the properties of the package, click the design surface.
In the Properties window, in the Security group, select the appropriate value for the ProtectionLevel property.
If you select a protection level that requires a password, enter the password as the value of the PackagePassword property.
On the File menu, select Save Selected Items to save the modified package.
To set or change the protection level of packages at the command prompt
Review the available values for the ProtectionLevel property in the topic, Setting the Protection Level of Packages, and determine the appropriate value for your package.
Review the mappings for the Encrypt option in the topic, dtutil Utility, and determine the appropriate integer to use as the value of the selected ProtectionLevel property.
Open a Command Prompt window.
At the command prompt, navigate to the folder that contains the package or packages for which you want to set the ProtectionLevel property.
The syntax examples shown in the following step assume that this folder is the current folder.
Set or change the protection level of the package or packages by using a command similar to the one of the following examples:
The following command sets the ProtectionLevel property of an individual package in the file system to level 2, "Encrypt sensitive with password", with the password, "strongpassword":
dtutil.exe /file "C:\Package.dtsx" /encrypt file;"C:\Package.dtsx";2;strongpassword
The following command sets the ProtectionLevel property of all packages in a particular folder in the file system to level 2, "Encrypt sensitive with password", with the password, "strongpassword":
for %f in (*.dtsx) do dtutil.exe /file %f /encrypt file;%f;2;strongpassword
If you use a similar command in a batch file, enter the file placeholder, "%f", as "%%f" in the batch file.