Company: Link Technologies
Case No: L10323. Project: 11.40: LinkSOFT Version 11.4
Logged By: Vineet (Link Business Solutions) on 18 Apr 2019 07:55AM
Priority: Medium
Product: Framework
Group: Enhancement
Time Taken: 28.00 (Weight: 28.25)
Version: 11.4.0302
Assigned To: Sanjay (Link Technologies)
Circulation: Alvis, Development, Rashna, Sanjay, Vineet
Resolve By: Tuesday, 26 November 2019 07:59 AM [1827 days since logged date]
Status: Closed
Subject: Add a digital signature to LinkSOFT so that Windows and other seurity management systems will trust the installer
Summary:    

--- Original Subject ---
Mitigating false Behaviour Monitoring detection related to the Ransomware module of Trend Micro Worry-Free Business Security (WFBS
-----------------------------

Bula Vinaka Sanjay

When the Ransomware module is enabled in WFBS, the Behaviour Monitoring falsely detects our Link Backoffice applications (i.e. linksoft.exe) as suspicious/malicious, and blocks it.

We have done some research and found that to solve the Behaviour Monitoring issue, the application can be submitted to Trend Micro support for verification and whitelisting. Once the application has been verified to be normal, it will be whitelisted to avoid further detection.

Link Technologies can apply for the Trend Micro GRID program where we can submit the application before public release. You may refer to The GRID: Goodware Resource and Information Database for more information - using the below link.

https://www.trendmicro.com/en_us/partners/alliance-partners/grid.html

 

Audit Notes:Edited by vineet on 29/11/19 16:03. Edited by alvis on 28/11/19 16:23. Edited by sanjay on 21/11/19 10:00. Edited by sanjay on 21/11/19 09:59. Edited by vineet on 21/11/19 09:28. Edited by vineet on 21/11/19 08:57. Edited by sanjay on 21/11/19 08:56. Edited by sanjay on 21/11/19 08:54. Edited by sanjay on 01/06/19 08:24. Edited by vineet on 16/05/19 09:23. 
01 Jun 201908:26AM Comment 1 by Sanjay (Link Technologies) Assigned To: Vineet (Link Business Solutions) Followup Date: 01-06-2019 08:26 AM Time Taken: 1.00
Hi Vineet, we will not be getting certification by Trend Micro as this is only one out of many antivirus companies that our clients may use. Instead, we are looking at digitally signing our install files. This will be implemented as part of the security enhancement programme we are undergoing at present.  The ETA will be provided once we have completed the current workset.

09 Oct 201908:17AM Comment 3 by Sanjay (Link Technologies) Quality control status: Pass. QC Not required - Cleared queue due to large number of calls
21 Nov 201908:54AM Comment 4 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 22-11-2019 08:51 AM Time Taken: 24.00

Development work for this case has been completed.

The change will be available in version:11.4.1121

1. The following changes were made(Include Database object names, Program classes and any other relevant information):

  1. To get around this issue, we have implemented a digital signature in our installation files. 

2. Affected Areas:

  1. LinkSOFT Installation

3. The issue was caused by:

  1. Improvement and Security Concerns

4. Notes
5. Next Step
: UAT


21 Nov 201908:54AM Comment 5 by Sanjay (Link Technologies) Case L10323 added to project 11.004
21 Nov 201908:54AM Comment 6 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 22-11-2019 08:54 AM
Status changed to UAT

21 Nov 201909:16AM Comment 7 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 22-11-2019 09:13 AM Time Taken: 1.00

Additional Information:

The digital signature can be verified as follows:

  1. Right-click on installer package
  2. Select Digital Signatures ~> View Details

Figure 1 - Digitally Signed Installer


21 Nov 201909:59AM Comment 8 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 22-11-2019 09:59 AM
Added to Version 10.154

21 Nov 201909:59AM Comment 9 by Sanjay (Link Technologies) Created new case L11835
21 Nov 201909:59AM Comment 10 by Sanjay (Link Technologies) Case L10323 added to project 10.1
21 Nov 201910:00AM Comment 11 by Sanjay (Link Technologies) Case L10323 added to project 11.004
25 Nov 201908:01AM Comment 12 by Rashna (Edge Business Solutions) Assigned To: Sanjay (Link Technologies) Followup Date: 26-11-2019 07:59 AM Time Taken: 1.00
Hi Sanjay
QA Results
Tests carried out according to requirements specified on the case header

Test Results Summary

Table 1 - Summarised list of issues
NoTest DescriptionPass/Fail
1

Enable "Windows Firewall".

Install LINKSOFT version 10 client and full installer.

The installation should be completed without errors. Validate that the Digital Signature is reflected in the installer

Pass
2Create a demo database and it should be created without errors.Pass
3Users should be able to log into POS, BO and reporter Pass

Environment Details

  1. OS version: Windows Server 2012
  2. Application version: 10.154
  3. Setup: Demo
  4. Server : 10.0.0.14
  5. Database: LINKSOFT-DEMO-10-RASHNA

Next Step

  1. Review

04 Dec 201908:12AM Comment 13 by Rashna (Edge Business Solutions) Assigned To: Sanjay (Link Technologies) Followup Date: 05-12-2019 08:09 AM Time Taken: 1.00

Hi Sanjay, 

Documentation has been updated at "Installation - Link Software Installation"

Thanks
Rashna


If you have any queries regarding this support incident, please email admin@linktechnologies.com.au and include the Case No: L10323 in the subject line of all emails regarding this issue.

Document size: 173.9 KB
For call complaints, please contact the Managing Director of the company using this form