Bart Kindt

Oh, sigh. So it does not work from that location, but it does work from the Tools menu... (another bug) I got it done now, thanks Dave.

Thursday 8 February. https://getit-12.embarcadero.com is still not reachable, and I want to install the PATCH which has just come out! Bart

The problem is this. "Storage updates in Android 11 Android 11 (API level 30) further enhances the platform, giving better protection to app and user data on external storage. This release introduces several enhancements, such as raw file path access, batch edit operations for media, and an updated UI for the Storage Access Framework. The release also offers improvements to scoped storage, which makes it easier for developers to fulfill their storage use cases after they migrate to using this storage model. Scoped storage enforcement Apps that run on Android 11 but target Android 10 (API level 29) can still request the requestLegacyExternalStorage attribute. This flag allows apps to temporarily opt out of the changes associated with scoped storage, such as granting access to different directories and different types of media files. After you update your app to target Android 11, *the system ignores the requestLegacyExternalStorage flag*. " But in in 12 and 13 this got even worse. In 13 you now even must request special permissions to read Image files (seperately). Internet info states I am completely stuffed. The only way could be to use the external SDCard. But, there is no fixed access path to this. It seems to depend on the type of phone. I was hoping that somebody in this forum is an Android expert...

After upgrading to Delphi 12, I could no longer install my personal App (for myself only) on my phone, du to incompatible signature. So I had to un-install the App, then re-install it. Before I did this, I copies the master database stucture from the *public* Documents directory to the SDCard and also to my Windows PC using 'OwnFiles'. Both the 'OwlFiles' and the Android Files programs had full access to it. After re-installing my App, I no longer can open the database file. I can see it, it exists. But no matter what I try, I can no longer open the file. Android 13. Also after copying the files straight back from the Windows PC (therefore without any original ownership). Now, I don't care *where* the bloddy files are; I can change the location in my App anywhere. But there seems to be no way my app can access *ANY* PUBLIC directories anymore. But the 'File managers', they CAN have full access! How can I find ANY place on my Android device where I can read a file which is supplied by nother program, OR copied in place by a file manager (from Windows). How can I for example IMPORT the original files, and then copy them back in place? Bart

I installed from the ISO file. When I run the ISO install again, I do not get any options, except that it is *required* that I un-install the 'current' version first. Which is the *same* version.

No, I already switched to my 'normal' licence. The Beta license shows as expired.

That failed catastrophically. Did still go to Licencing box; escaped out of it; IDE failed with 'delphi.exe' not found; then an crash of the IDE, then nothing.

I installed RadStudio 12 while I still hade the Beta licence going, and I also activated C++. I was not aware that my *licence* does not cover C++ (I have never used it). Now I cannot start Delphi 12, because it says my licence does not cover C++. How to re change the installation to remove the C++ without having to wipe the entire installation (yet again) and have to completly start from scratch? Bart

One certifcate is already one too many for me...

That is not even required. I have now found Inno Setup does it all for you. We are getting way out of Delphi topic here, but this is what I now have in Inno Setup, and it does it all: Tools>Configure Sign Tools: signtool="C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x64\signtool" sign /a /fd SHA256 $f [Setup] SignTool=SignTool [Files] Source: "*.exe"; DestDir: "{userappdata}\SARTrack\exe"; Flags: recursesubdirs ignoreversion signonce Source: "*"; Excludes: "*.exe"; DestDir: "{userappdata}\SARTrack\exe"; Flags: recursesubdirs ignoreversion (where \SARTrack\exe is my destination dir) This signs *all* executables, then it signs itself.

What I don't understand is where the SignTool gets its access to the USB dongle to. From what I understand it must be installed for the signing to work. So, it is installed. And the Background application SafeNet Authotication Client is also running. So where in all the SignTool command line is the link to the actual USB dongle? .......... Well, I will never know how it does it, but this command: "signtool sign /a /fd SHA256 MyFile.exe" simply worked... I had to enter the USB Token password, and that was all. Obviousely the signtool detects the presence of the Token, connects to it (God knows how) and retrieves the required data. So last thing I now have to sort out is to program InnoSetup to also sign all executables inside the package, which seems to be possible. Big thanks to all who replied, I learned a lot! Bart, New Zealand

Good God. Well that explains a lot. In my case, the USB token is installed in my development laptop. I do not have to use a 'remote USB', So would I still have to use this VirtualHere software as mentioned in this link? Somehow I need to link the Delphi IDE directly to the Token, and it expects .pfx file. Not a .cer file. And the CE/EV (Extended Validation) token is required to be installed during compilation. So the compiler can load the certificate. I totally do not understand how this can be achieved in Delphi I am an absolute beginner here, if somebody can show me the steps I have to take; And please *backwards*, starting with what I should enter in the Delphi IDE. Then following that, how the required file can be loaded, live, during compilcation, into the final executable, all while this requirement is met that the USB Token is in fact installed during the very compilcation process. Thanks, Bart

Yes, it is a Code Signing certificate. I have to work my way through the other posts and software mentioned, but I also was thinking the same thing. The special software which I had to download (SafeNet Authentication Client, from Thales Group) to be able to manipulate the hardware token only has the option to "Install Certificate" which seems to be an "Import" not an export. I have never done this in my live, and I would have expected that the IDE can be pointed to the actual hardware USB token to read the required Certificate data and to add this to the executable. Why would I have to copy things to my local hard drive, why would I have to convert this file to yet another format, it does not many any sense! If it is copied onto my local drive, and the Hardware Token is not used at all, where is the security during final compilation?? Bart