是否有能可靠地使用，即使在一个虚拟机唯一的计算机标识符？ [英] Is there a unique computer identifier that can be used reliably even in a virtual machine?

问题描述

我正在写一个小的客户端程序可以在终端服务器上运行。我正在寻找一种方法来确保它只能运行指定的服务器上，并在情况下，它是从服务器将停止运行删除。

I'm writing a small client program to be run on a terminal server. I'm looking for a way to make sure that it will only run on specified server and in case it is removed from the server it will stop functioning.

据我所知，有没有方法，使之100％安全的，没有少我想，很难为大多数电力用户能够做到这一点。

I understand that there are no methods to make it 100% secure, none the less I want to make it difficult for most power users to be able to do it.

我一直在寻找不同的唯一标识符像处理器ID，Windows产品ID，电脑GUID和其他用户界面。由于终端服务器是一个虚拟机，我无法找到任何东西是完全独特到本机。

I was looking at different Unique Identifiers like Processor ID, Windows Product ID, Computer GUID and other UIs. Because the terminal server is a virtual machine, I cannot locate anything that is completely unique to this machine.

这是我应该考虑任何想法，使这个主要是安全的。我没有时间或者需要，使之尽可能的安全，因为它会打败应用程序本身的目的。

Any ideas on what I should look into to make this mostly secure. I do not have time or the need to make it as secure as possible, because it will defeat the purpose of the application itself.

我不想用户的MAC地址。即使它是独一无二的每台机器可以通过以下在互联网上找到的说明是虚假的。

I do not want to user MAC address. Even though it is unique to each machine it can be spoofed by following instructions found on internet.

据微软产品ID，因为我们的系统团队克隆VM服务器，我们使用企业音量键，我发现已经两台服务器，我有机会获得具有相同的产品ID号。我不知道有多少人在那里，有相同的产品ID

As far as Microsoft Product ID, because our system team clones VM servers and we use corporate volume key, I found already two servers that I have access to that have same Product ID Number. I have no Idea how many others out there that have same Product ID

另外，我可能会更好通过识别用户，并创建通过AD访问该软件处理组根据权限。

Alternatively instead of trying to identify the machine, I might be better off by identifying the user and create group based permission handled through AD for access to this software.

推荐答案

在设计上，唯一识别虚拟机是困难的;任何允许您唯一标识，将意味着它不是完​​全虚拟的（因为克隆虚拟机应该产生一个相同的机器）。

By design, uniquely identifying a virtual machine is difficult; anything that allowed you to uniquely identify it would imply that it was not fully virtual (because cloning a virtual machine should produce an identical machine).

1. 创建主机与虚拟机通过回环网络适配器通信的心跳应用程序。
2. 有心跳应用程序拒绝运行，如果它是不能够唯一标识主机。
3. 具备的主要应用程序拒绝运行，如果心跳应用程序没有运行。

您将需要找到一种方法来确保心跳应用程序不能太容易伪造。

You will need to find a way to ensure that the heartbeat application cannot be spoofed too easily.

有不能够保护终端程序100％。这个问题相当于试图prevent软件盗版行为。

It is not possible to protect the terminal program 100%. This question is equivalent to trying to prevent software piracy.

这篇关于是否有能可靠地使用，即使在一个虚拟机唯一的计算机标识符？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！