Security issue -> wish: non exe standalone

Enscape Requests
1

Hi,

example: my client is employed by a big company and it’s not allow to run exe files. A solution could be to install an Enscape viewer by the system admin.

Maybe the standalone exe could be renamed to an other ending and opened by an Enscape viewer. So, the standalone could be used in both cases, with and without preinstalled viewer.

Is there a chance to get a solution?

-Micha

2

Right now we don’t need to maintain a stable file format because we bundle the executable with all data into one file. This way the format of the data always matches the version of the executable. If we start installing a separate viewer, this will no longer be the case, meaning a large commitment from our side to maintain a stable file format. So I guess it won’t be happening any time soon.

Would it help your client, if the export produced a digitally signed exe file and a separate data file you would drag&drop onto the exe? This would be much more feasible for us.

3

I talked with my client and … I think he need it to test next week again. It sound like he can install software at his machine. So, it should work. Maybe it was an other problem with the antvir software. Best we wait now.

Danke,

Micha

4

We’ve had this issue in the past Micha. Most of the time its just a matter of getting the client to coordinate with the IT dep. to make sure the .exe is okayed on that users computer. Just an extra step that needs to get taken, but it happens a lot with any exe provided to the client.

This is where a web based walk-through is ideal.

5

The problem here is that each standalone is a new exe. Web based solution are a security problem too.

6

@Simon_Weinberger I waiting for a feedback from my client, but it is difficult in a big company. Simon, what do you think: couldn’t you provide a player installer and if player and VR version dosn’t match than a warning is shown? Also you could block the success, if the versions doesn’t match, but I would prefer a warning.

7

As a related tangent, would something like an in-built “team viewer” work? Instead of sending an exe you send an invite for them to view it on your machine?
For example the enscape website has a “request free personal demo”

Alternatively, could it be an installation msi file? I don’t know what implications that has. (I am one of the people who tells everyone else never to open exe files)

8

@Micha If you are willing to perform a few manual steps, there might be two short-term solutions for you:

  1. Sign the executable yourself.
  2. Repackage the standalone into a zip file:
    • Run the standalone yourself - it will extract a lot of files into %Temp%\EnscapeStandalone_abcdefgh.ijk\
    • Look for the correct folder - sorting by creation date can help you
    • Zip that whole folder for your client - make sure you don’t mix&match files from different versions
    • Client has to unzip and run Bin64\EnscapeClient.exe
    • Since version 2.1 all dll/exe files in Bin64 are signed, so client has to install the corresponding certificate
9

@Simon_Weinberger Vielen Dank, looks like a good solution for now. Only I don’t understand step 1. Also I’m not sure about “client has to install the corresponding certificate”. Do you have a hint, how this can be done? I want to tell my clients the details.

10
  1. was first alternative and everything under 2 is second alternative. The first alternative is technically more complex, but I’m pretty sure you find some good documentation on the internet.

I have attached the certificate, you should be able to install it by double-clicking.
enscape_gmbh.zip (1.46 KB)

11

Great, thank you.

12

Mostly big companies have a spy eye over employees systems and I hate it the most.