In a Windows console:
rem Set environment variables
SET CORECLR_ENABLE_PROFILING=1
SET CORECLR_PROFILER={846F5F1C-F9AE-4B07-969E-05C26BC060D8}
SET DD_APPSEC_ENABLED=true
rem Start application
dotnet.exe example.dll
Run the following PowerShell command as administrator to configure the necessary environment variables in the registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment and restart IIS.
$target=[System.EnvironmentVariableTarget]::Machine
[System.Environment]::SetEnvironmentVariable("DD_APPSEC_ENABLED","true",$target)
net stop was /y
net start w3svc
Or, for IIS services exclusively, on WAS and W3SVC with Powershell as an administrator, run:
$appsecPart = "DD_APPSEC_ENABLED=true"
[string[]] $defaultvariable = @("CORECLR_ENABLE_PROFILING=1", "CORECLR_PROFILER={846F5F1C-F9AE-4B07-969E-05C26BC060D8}", $appsecPart)
function Add-AppSec {
param (
$path
)
$v = (Get-ItemProperty -Path $path).Environment
If ($v -eq $null) {
Set-ItemProperty -Path $path -Name "Environment" -Value $defaultvariable
}
ElseIf (-not ($v -match $appsecPart)) {
$v += " " + $appsecPart;
Set-ItemProperty -Path $path -Name "Environment" -Value $v
}
}
Add-AppSec -path "HKLM:SYSTEM\CurrentControlSet\Services\WAS\"
Add-AppSec -path "HKLM:SYSTEM\CurrentControlSet\Services\W3SVC\"
net stop was /y
net start w3svc
Or, to avoid editing registry keys, edit the application settings in the web.config file of your application:
<configuration>
<appSettings>
<add key="DD_APPSEC_ENABLED" value="true"/>
</appSettings>
</configuration>
This can also be done at the IIS application pools level in the applicationHost.config file, usually in C:\Windows\System32\inetsrv\config\:
<system.applicationHost>
<applicationPools>
<add name="DefaultAppPool">
<environmentVariables>
<add name="DD_APPSEC_ENABLED" value="true" />
</environmentVariables>
(...)
Add the following to your application configuration:
Update your configuration container for APM by adding the following argument in your docker run command:
docker run [...] -e DD_APPSEC_ENABLED=true [...]
Add the following environment variable value to your container Dockerfile:
ENV DD_APPSEC_ENABLED=true
Update your deployment configuration file for APM and add the ASM environment variable:
spec:
template:
spec:
containers:
- name: <CONTAINER_NAME>
image: <CONTAINER_IMAGE>/<TAG>
env:
- name: DD_APPSEC_ENABLED
value: "true"
Update your ECS task definition JSON file, by adding this in the environment section:
"environment": [
...,
{
"name": "DD_APPSEC_ENABLED",
"value": "true"
}
]
Add the following line to your container Dockerfile:
ENV DD_APPSEC_ENABLED=true
