
david.ondracek1.5524910960110198E12 asked a question.
Where does InstallShield store SQL Credentials entered by the user?
Installshield seems to store SQL Credentials entered during the installation and reuse them for maintance / uninstall if needed (i.e. if there are SQL-Components to reinstall / uninstall).
How / where is this information stored? Can I somehow access it or write it manually?
I beg to differ with you as my experience is different.
A while ago I wanted to ensure that InstallShield does actually encrypt those passwords as one of our clients had that requirement. It appears the SQL login credentials are available in plain text under Direct Editor > Property table > IS_SQLSERVER_PASSWORD as shown in screenshot below.
Unfortunately, we were told that InstallShield doesn't encrypt the passwords by default. In order to secure the SQL crendentials, we had to stop using the traditional 'IS_SQLSERVER_' properties and instead write our own protection classes and call those methods through custom actions.
Property(S): PackageCode = {3B00A3C2-44FE-42D4-9F77-33B951CD7D29}
Property(S): IS_SQLSERVER_PASSWORD = **********
Property(S): IS_SQLSERVER_SERVER = 192.168.1.1
Action ended 13:05:34: ExecuteAction. Return value 1.
Also, SQL credentials InstallShield stores in the registry during the initial installation and reuses for maintance/uninstall are encrypted.