how to use hashed password in impersonate of ASP.NET

Question

I have an ASP.NET application that requires impersonation as an administrator user. In web.config:

<identity impersonate="true" userName="administrator" password="password"/>

The customer complained about saving the password in clear text format. Is there a way to save the password here as hashed?

Answer 1

aspnet_regiis with the appropriate switch should do the trick, see this article.