How to use a hashed password to impersonate ASP.NET

Question

I have an ASP.NET application that requires impersonation as an admin user. In web.config:

<identity impersonate="true" userName="administrator" password="password"/> 

The client complained about saving the password in text format. Is there a way to save the password here as hashed?

Answer 1

aspnet_regiis with the appropriate switch should do the trick, see this article.