ClickOnce security

[Nikolay Podkolzin]

Good noon, community! Would you be so kind and help me solve my problem. I
need Deploy application through ClickOnce technology. I've configuration file
where I assign sensitive data about connection to the database. A VS
deploying solution all files have signing by certificate. When I'm installing
application i need immediately change this data (e.g. Server name or
password) How can i do this correctly?

Thanks in advance!

 

[Nicholas Paldino [.NET/C# MVP]]

Nikolay,

I don't think you can change this through ClickOnce, I think ClickOnce
will just get your files to the machine, and make sure they are
up-to-date/in synch with what is on the server. If you want to make changes
to the file, your program will have to do it (and that might be an issue if
you put your files in the program files directory, since only administrators
(should) have access to that).

If anything, you might want to look at storing this information in a
user-specific directory and then accessing that from your program.

 

[Nikolay Podkolzin]

If I modify a .manifest or .application file I will have to Sign it
again with the proper security key.
How can i do that? Which tool can help me?

Nikolay,

I don't think you can change this through ClickOnce, I think ClickOnce
will just get your files to the machine, and make sure they are
up-to-date/in synch with what is on the server. If you want to make changes
to the file, your program will have to do it (and that might be an issue if
you put your files in the program files directory, since only administrators
(should) have access to that).

If anything, you might want to look at storing this information in a
user-specific directory and then accessing that from your program.

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

Good noon, community! Would you be so kind and help me solve my problem. I
need Deploy application through ClickOnce technology. I've configuration
file
where I assign sensitive data about connection to the database. A VS
deploying solution all files have signing by certificate. When I'm
installing
application i need immediately change this data (e.g. Server name or
password) How can i do this correctly?

Thanks in advance!

 

[RobinS]

You can use MageUI to re-sign a manifest. On my computer, this is in
C:\Program FIles\Microsoft VIsual Studio 8\SDK\v2.0\Bin\.

RobinS.
goldmail.com
-------------------------------------

If I modify a .manifest or .application file I will have to Sign it
again with the proper security key.
How can i do that? Which tool can help me?

Nikolay,

I don't think you can change this through ClickOnce, I think
ClickOnce
will just get your files to the machine, and make sure they are
up-to-date/in synch with what is on the server. If you want to make
changes
to the file, your program will have to do it (and that might be an issue
if
you put your files in the program files directory, since only
administrators
(should) have access to that).

If anything, you might want to look at storing this information in a
user-specific directory and then accessing that from your program.

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

Good noon, community! Would you be so kind and help me solve my
problem. I
need Deploy application through ClickOnce technology. I've
configuration
file
where I assign sensitive data about connection to the database. A VS
deploying solution all files have signing by certificate. When I'm
installing
application i need immediately change this data (e.g. Server name or
password) How can i do this correctly?

Thanks in advance!