AppOnChip Settings (Windows NG Engine)
Sentinel LDK Envelope incorporates "AppOnChip" functionality. This functionality is only applicable when the application is protected using a Sentinel HL (Driverless configuration) key.
NOTE An application that is protected using AppOnChip is not compatible with Sentinel SL keys or with any HL keys other than Sentinel HL (Driverless configuration) keys.
If the protected application will be licensed using a Sentinel HL Basic key or Sentinel HL Pro key, you must connect a Sentinel Developer key that contains the AppOnChip module at the time that you protect the application. For more information, see the description of AppOnChip in the
To enable AppOnChip functionality for the protected application:
1.On the
NOTE In the Advanced tab of the Settings dialog box, you can select static libraries whose functions should be excluded from the list of functions that are eligible for protection.
2.If one of the following occurs:
• The map file is not located in the same directory as the EXE file to protect.
•The map file does not exist.
•The map file was not generated by a supported compiler.
You are prompted to indicate how to proceed (either locate the map file or use exported functions).
3.Review the list of functions. (To filter the list, you can enter a value in the search list box above the list.)
The following information is provided for each function:
Column | Description |
---|---|
Protect | Check box to select which functions to protect using AppOnChip. |
Function name | Function name from the map table. |
Est. upload time | Estimated time required to upload the function to the Sentinel HL key. |
Protectable code | Relative size of the code block. |
Envelope examines all the functions that are compatible with AppOnChip protection and uses advanced heuristics to select by default those functions that will provide the best increase in security with the least impact on performance.
You can move the Performance - Security slider bar to give greater weight to higher security or to better performance. The functions selected by default will change accordingly. When you move the slider bar, functions that were cleared are moved to the bottom of the list.
You can lock individual functions. (The icon is displayed for locked functions.) The setting (whether selected or clear) for functions that are locked is not changed by any of these actions:
•Moving the Performance - Security slider bar.
•Clicking Select all or Clear all.
To lock or unlock a function, right-click the row and then click Lock function.
If you have generated a Performance Profiling log file for the application, the Select functions based on profiling log check box is accessible. Select the check box if you want Envelope to select functions automatically based on performance profiling.
NOTE If a time-critical function is protected with AppOnChip, this could lead to a significant drop in performance for your application. This type of assessment can only be made by a developer who is familiar with the application code. Be sure to review the functions that are selected for protection to ensure that only appropriate functions are chosen.
4. Modify the list of selected functions to be protected using the AppOnChip functionality. For more information, see
If your binary and map files change after you have selected Enable AppOnChip, click to refresh the list of eligible functions. (This does not affect your list of selections.)
NOTE Do not select crtexe.obj::__tmainCRTStartup functions. These are initialization functions. If these functions are selected, the protected application may fail.
5.(Optional) If you have not yet done so, you can click Inject profiling code to generate a version of your application that accumulates usage information for the list of selected functions. (If no functions are selected, this button is disabled.) For more information, see AppOnChip - Performance Profiling .
Related Topics
Defining Windows Program Protection Details
Windows Protection Settings Screen
Locating the Map File for AppOnChip
Using AppOnChip to Protect an Application Without a Map File
Locating the Map File for AppOnChip