Setup security
Posted: Tue May 23, 2006 2:55 pm
by Mark Fulford
How secure is an MSI installation. If I write serial numbering code within the script, how easy is it for someone to decompile the code and find the algorithm? How easy is it to completely bypass the setup script in order to extract files?
Posted: Tue May 23, 2006 4:09 pm
by CandiceJones
Take the following measures to protect your code:
1) Define a global setup password. This encrypts your setup using 256 bit strong AES encryption.
2) Put all critical files inside web media blocks. This way they won't even be downloaded, save installed, if the authentication fails.
3) Authenticate users on-line (or with a serial mechanism) before proceeding with the main install phase. See the Online User Authentication and Serial Validation samples in the InstallAware IDE for ideas and implementation details (on the main menu, Click File | New | Samples).