Optional Protection Options: Advanced
The table below describes the advanced protection options available.
Option | Description | Default Setting |
---|---|---|
--msg-out:<val> |
Sets the output mode at run-time Possible Values: > 0=quiet >1=gui >4=stderr >5=stderr+gui |
Default=1 |
-0 --stk | Enables moderate protection through partial obfuscation of the original application’s entry point. |
The original application’s entry point is fully obfuscated. |
-C --csum |
Disables the checksum-based integrity check. |
Enabled. |
-customFunction:<name> |
Sets the custom locking function name. The maximum length of the custom function name is 32 characters. The custom function name must match the name defined in the custom library. |
Optional. |
-customLib:<name> |
Sets the absolute path of the customized Allows locking licenses to a hardware device or software-based implementation, to generate a unique extended custom value for each machine. For more information about extended custom locking, refer to the Callback API section of the Sentinel RMS API Reference Guide. Notes >Provide the path of the customized library. >Make sure that the customized library is available under the Sentinel RMS Envelope directory when the protected application is executed. >The maximum length of the custom library name is 32 characters. >To protect a 64-bit application/ |
Optional. |
-d --debug |
Allows debugging of the protected application. |
Enabled. |
-e --oep |
Disables obfuscation of the original application's entry point. |
Enabled. |
-H --nhook | Disallows hook API functions. | Allowed. |
-i --imp |
Disables the protection of import of an application or DLL. If you are trying to protect the import of system DLLs, use the -u (--unkimp) option. Use this option only if you have encountered specific problems and Thales Technical Support has advised you to use it. If this option is used, the level of security for the application or DLL is significantly reduced.
|
Enabled. |
-I --noig |
Enables modification in the manner in which function calls are handled in the application. However, if the program code contains non-standard function calls, the application may not work correctly. If this occurs, do not use this option. If the protected application executes successfully after using this option, it is recommended to use it for achieving a higher level of security.
|
Disabled. |
-ig: --ignore:<count> |
Defines the number of times an application can be resumed in absence of a valid license. Possible values are: > 0= Abort or Retry >1...254 - Ignore count value. For example, if the ignore count value is 5, your can ignore the license unavailability error 5 times. >255= No limit NOTE If the value of --msg-out:<val> option is specified as console, this option is not supported for console applications. |
0 |
-O --dlx |
Allows data encryption support for overlays. Use this option to protect programs that use overlays. Protected programs that utilize overlays do not execute properly if this option is not used. This option is only available for executables, not for DLLs. |
Disabled. |
-P --exp |
Removes exports functions from the executable file. The executable files sometimes use export functions. If these export functions are used by a statically-linked DLL (such as Borland Runtime), the application will crash. |
The exports functions are not removed from executable. |
-q --quiet | Displays error and warning messages only. | Optional. |
-R --res | Disables PE32 resource encryption. | The resource encryption is enabled. |
-s --sdbg |
Allows system debugging of the protected application. This option should be used only when the protected program is executed in a development environment. |
The protected program is enabled to counter system debugging. |
-S: --seed:<val> |
Sets the seed value. >If set to 0, Sentinel RMS Envelope uses a random seed when protecting an application. >If set to any other value, Sentinel RMS Envelope uses the specified value as the seed. This ensures that each time that Sentinel RMS Envelope protects a given application using the same options, the generated binary will be identical. |
0 |
-t: --enable-ts:<val> |
Enables protected application to run on terminal server or RDP. Possible Values: > 0= Both disabled >1= Only RDP enabled >2= Both enabled |
Default=1 |
-U --nsuspend |
Allows execution of the protected application even when the application fails to renew a license from the Sentinel RMS License Manager. However, the protected application displayS an error due to unavailability of a license. Notes>This option is available for >If the application fails to get a license on launch, it will be terminated. |
The application suspends when it fails to renew license from the Sentinel RMS License Manager. |
-u --unkimp | Disables the import of system DLLs. | Enabled. |