Isn't storing the administrator password for a server in the registry a terrible idea? This is setting off all kinds of alarm bells in my mind... Even if you "encrypt" it, I would think it would still be easy enough to recover the plaintext just by finding the key in the MSI file and then decrypting. I don't see how it offers any real security beyond shielding from casual prying eyes. I would think an installer that does this without telling could easily trap the unwary system administrator who wants to run a tight ship...
-----Original Message----- From: Rob Mensching [mailto:r...@robmensching.com] Sent: Wednesday, February 16, 2011 15:35 To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] Encrypt and store the SQL sa password in the windows registry Not today but it would be a great custom action to have. On Tue, Feb 15, 2011 at 2:40 PM, Thai-Hoa Nguyen <taiwa...@hotmail.com>wrote: > > > Hello > > I'm currently storing the SQL sa password so the database can be > uninstalled later. > > <RegistryValue Root='HKLM' Key='SOFTWARE\xyz\abcName='SQLPwd' > Value='[SQLPASSWORD]' Type='string' /> > > > <Property Id="SQLPASSWORD" Value="password"> <RegistrySearch > Id='SqlPwdReg' Key='SOFTWARE\xyz\abc' Name='SQLPwd' > Root='HKLM' Type='raw'/> > </Property> > > Is there a quick and easy way to encrypt and decypt the password in Wix? > > Thank you. > > ---------------------------------------------------------------------- > -------- The ultimate all-in-one performance toolkit: Intel(R) > Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > -- virtually, Rob Mensching - http://RobMensching.com LLC ---------------------------------------------------------------------------- -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
