Security issue -> wish: non exe standalone

    Hi,


    example: my client is employed by a big company and it's not allow to run exe files. A solution could be to install an Enscape viewer by the system admin.


    Maybe the standalone exe could be renamed to an other ending and opened by an Enscape viewer. So, the standalone could be used in both cases, with and without preinstalled viewer.


    Is there a chance to get a solution?


    -Micha

    Right now we don't need to maintain a stable file format because we bundle the executable with all data into one file. This way the format of the data always matches the version of the executable. If we start installing a separate viewer, this will no longer be the case, meaning a large commitment from our side to maintain a stable file format. So I guess it won't be happening any time soon.


    Would it help your client, if the export produced a digitally signed exe file and a separate data file you would drag&drop onto the exe? This would be much more feasible for us.

    We've had this issue in the past Micha. Most of the time its just a matter of getting the client to coordinate with the IT dep. to make sure the .exe is okayed on that users computer. Just an extra step that needs to get taken, but it happens a lot with any exe provided to the client.


    This is where a web based walk-through is ideal.

    Quote from Simon Weinberger

    Right now we don't need to maintain a stable file format because we bundle the executable with all data into one file. This way the format of the data always matches the version of the executable. If we start installing a separate viewer, this will no longer be the case, meaning a large commitment from our side to maintain a stable file format. So I guess it won't be happening any time soon.


    Would it help your client, if the export produced a digitally signed exe file and a separate data file you would drag&drop onto the exe? This would be much more feasible for us.

    Simon Weinberger I waiting for a feedback from my client, but it is difficult in a big company. Simon, what do you think: couldn't you provide a player installer and if player and VR version dosn't match than a warning is shown? Also you could block the success, if the versions doesn't match, but I would prefer a warning.

    Quote from Ted.Vitale

    This is where a web based walk-through is ideal.

    As a related tangent, would something like an in-built "team viewer" work? Instead of sending an exe you send an invite for them to view it on your machine?
    For example the enscape website has a "request free personal demo"

    Alternatively, could it be an installation msi file? I don't know what implications that has. (I am one of the people who tells everyone else never to open exe files)

    Micha If you are willing to perform a few manual steps, there might be two short-term solutions for you:

    1. Sign the executable yourself.
    2. Repackage the standalone into a zip file:
      • Run the standalone yourself - it will extract a lot of files into %Temp%\EnscapeStandalone_abcdefgh.ijk\
      • Look for the correct folder - sorting by creation date can help you
      • Zip that whole folder for your client - make sure you don't mix&match files from different versions
      • Client has to unzip and run Bin64\EnscapeClient.exe
      • Since version 2.1 all dll/exe files in Bin64 are signed, so client has to install the corresponding certificate

    1. was first alternative and everything under 2 is second alternative. The first alternative is technically more complex, but I'm pretty sure you find some good documentation on the internet.


    I have attached the certificate, you should be able to install it by double-clicking.