Don't sell a pig in a poke Trial Software – Protected by CodeMeter

COVER STORY
Don’t sell a pig in a poke
Trial Software – Protected by CodeMeter
TOPICS
WibuKey and CodeMeter – Ready for Windows Vista
Pay-Per-Change with CodeMeter – The most economical way
CodeMeter – One dongle in all cases
13
S P R I N G 2 0 0 7

Contents
PRODUCT
2
I N T R O
CodeMeter: Ready for Windows Vista 3
KNOW-HOW
Trial Software with CodeMeter 4
PRODUCT
CodeMeter Pay-Per-Change
The most economical way 6
CodeMeter: One for All 8
SERVICE
CodeMeter Services 10
PRODUCT
CodeMeter at the Terminal Server? 12
BILLBOARD
Brief Notes 13
SERVICE
WIBU on Tour 14
CASE STUDY
Manuals directly from the CodeMeter Stick 15
EVENTS
Hacker‘s Contest 16
Dear customers and partners,
How do you increase your sales revenues? By growing
with existing customers and winning new ones.
This is the proven theory. You have developed your
strategy to accomplish this and are improving it
continuously. We offer solutions for some of the problems
of software developers and content vendors.
Trial software should help you win new customers.
It should allow your customer a full evaluation,
because of unrestricted use, for a limited period
of time. Your customer should be able to get such
evaluation copies easier, faster and more economically.
After the expiration period, continued use must
not longer be possible.
A flexible licensing structure should increase your
target groups. Floating network licenses, time limited
licenses, pay per use or modular licenses are
examples of flexibility. Your customers will buy more
when you offer this many opportunities for new
licenses or upgrades.
No protection system can be one hundred percent
secure. Nevertheless, only a licensing system with a
high level of security guarantees that you get what
you are entitled to. A “voluntary license control“ as
offered by most of the software-only based licensing
systems, cannot be relied upon solely to protect
your income.
The Hacker’s Contest, started on February 1, 2007,
will demonstrate the level of protection you can
expect from us. The contest has high international
press coverage occurring at the same time as warnings
about intrusions into enterprise networks. Many
respected journalists in the USA, journalists in China
with CSDN, YESKY and IT168, with the BBC in
London, the Financial Times in Germany, with ARD,
commentators on many radio stations, as well as
writers in the technical and business press have
made note of our unique challenge.
Learn more about these topics, as well as additional
news, in this issue of KEYnote magazine. Please visit
our booth at CeBIT 2007, our Software Protection
Days in Germany or our SecureCodeUpdate seminars
in B, IE, NL or UK. I would be happy to learn about
your requirements and meet the challenge to offer
you solutions for them.
Sincerely, Oliver Winzenried

CodeMeter 3.20
CodeMeter doesn’t use any proprietary device
driver. Using instead the mass storage device
driver integrated in Microsoft Vista. You can
always count on a future-proof technology using
CodeMeter.
The new CodeMeter release 3.20 splits the
former CodeMeter.exe in two components:
The invisible service CodeMeter.exe
The CodeMeter Control Centre
The service runs in the background. It connects
the CodeMeter Stick with your application.
Further, it communicates with other CodeMeter
Application
Service
Driver
Hardware
“With Vista everything gets different.” But CodeMeter is more than ready.
The previous version of CodeMeter runs on Windows Vista. The new release
of CodeMeter is not only compatible, but is adapted especially to the in-
novations of Windows Vista.
services running in the network, i.e. in case of a
CodeMeter Stick connected to another computer
in the network.
The CodeMeter Control Centre is the new user
interface for a CodeMeter Stick. It is started with
a double click on the CodeMeter Symbol in the
taskbar notification area (next to date & time).
If the CodeMeter Stick is disabled, it invokes
the user password entry.
You can simply create remote context files or
apply remote update files using the CodeMeter
Control Center. The process is easy and transparent
in use. The CodeMeter WebAdmin utility is
started from the CodeMeter Control Center.
License Server Client
CodeMeter Control Center
CodeMeter.exe
Webadmin
Mass Storage Driver
Browser
TCP/IP
Browser
It displays all available and used licenses in a
CodeMeter Stick, either connected locally or on
the network. Further, the CodeMeter WebAdmin
feature allows changing of settings and other
useful functions like backup and restore of
CodeMeter Stick data.
CodeMeter Control Center
CodeMeter.exe
Webadmin
P R O D U C T
CodeMeter: Ready for
Windows Vista
WibuKey for Vista
WibuKey has been Vista ready since release
of version 5.20, in the fall 2006. WibuKey
uses drivers signed by
Microsoft; it is available
for 32 Bit and 64 Bit
and supports terminal
server.
CodeMeter
protected application
3

Trial Software with
CodeMeter
4
Your customers don‘t buy a pig in
a poke. Trial software should help
you win new customers. It should al-
low your customer a full evaluation,
because of unrestricted use, for a
limited period of time. Your cus-
tomer should be able to get such
evaluation copies easier, faster and
more economically.
My father bought his first Personal Computer
15 years ago. I asked him “Where is the mouse
for your PC?”. He answered: “A mouse? I have
fingers and a keyboard, why will I ever need
a mouse?”. A few days ago, he got a new
computer. This time I asked him “Where is your
CodeMeter Stick?” and he answered similarly
“I’m no software pirate, I won’t need one”.
Luckily, he doesn’t make his money as fortune
teller.
But what has this got to do with trail software?
A lot. The CodeMeter Stick is more than just
a “dongle” used to prevent software piracy,
it offers many more functions. One of the big
advantages is that many software vendors can
share one CodeMeter Stick. Imagine needing
to connect an additional mouse for every new
software product you purchase. So why be
forced to connect multiple dongles?
Once the CodeMeter Stick is connected to the
user’s PC, a new license can be transferred easily
to the CodeMeter Stick, either using the Internet
or using an update file. This license might be
limited by an expiration date which is checked
against the internal clock of the CodeMeter
Stick. In this case, the software can be used for
a limited time period.
You, as a software vendor, can now use Code-
Meter to protect your trial software against pirated
copies. Your customer, who might already
own a CodeMeter Stick, gets ”a fully-functional”
license for your software but with an expiration
date. The advantage: the clock in the CodeMeter
Stick cannot be tampered with. Your customers
benefit, too: software evaluation without functional
limitations during the trial period.
You might ask the legitimate question “Do all
my potential customers already own a CodeMeter
Stick?” or “Are my customers willing to buy a
CodeMeter Stick to evaluate my software?”. By
the end of 2006, more than 150,000 CodeMeter
Sticks were shipped to potential customers. The
likelihood of your potential customers already
having one depends on the market they are in.
Software for the music industry, for the construction
and architecture industries or CAD are in
such markets.

Winning new customers with
Trial Software
Nevertheless, we understand your concerns that
your customers might prefer to download a free
version of your trial software without needing
to buy a CodeMeter Stick first.
We agree, your customer should be able to get
your trial software as fast and easy as possible.
You should not rely only on potential customers
who already own a CodeMeter Stick.
This could be your strategy to increase your trial
software options
1) Your potential customers, who already
own a CodeMeter Stick, can obtain a
full-featured license for a trial period of
(for example) 30 days.
2) Your customers could get remote access
of your software running on your server.
Software and CodeMeter Stick reside at
your server.
3) Your customers install your protected
software on their PCs accessing a Code-
Meter Stick, connected to a server over
the Internet.
4) Your standard trial software can run
without a CodeMeter Stick, but with
limited or missing features.
Integration in your software
How much effort will it take to make these
trial options available? Let’s assume that your
software is already protected by CodeMeter or
you plan to use CodeMeter for licensing of your
software. The first question to ask is “How do
you want to sell your software?” Let’s use a
computer card game as an example:
1) The basic version of your software offers
free sets of demo game cards. If a Code-
Meter Stick with Product Code 10,000 is
available, protected sets of game cards
can be used, too.
2) Additional sets of game card are offered.
They are licensed using Product Code
20,xxx.
3) Another feature provides an editor, for
creating game card sets. It can be used,
if Product Code 11,000 is available.
4) Another feature provides the option to
play against your PC. It runs if Product
Code 12,000 is available.
However, you can choose any value for your
modules; the Product Code is stored in a 32
Bit value in the CodeMeter Stick.
Now you integrate the modular protection into
the software source code using the IxProtector.
You define code areas which will be encrypted
with the given Product Code. At runtime, these
program functions can be decrypted and used
only, if the corresponding Product Code is in
the CodeMeter Stick.
Additional to this code protection, you integrate
encryption and decryption of sets of game cards
in the “Save” and “Load” functions. Please
don’t mix that up with the encryption of program
code. You should now use encryption to
protect program code and to protect the data
of the sets of game cards as well.
Loading protected sets of game cards is supported
by the basic version of the application. The
function to load game cards is not protected,
the function to decrypt protected sets of game
cards is using Product Code 10,000. Saving
sets of game cards makes sense only with the
editor. So, the complete editor program code is
protected with Product Code 11,000.
Define CodeMeter trial versions
Up to now, we have defined a modular protection
of your software and did not spend any
special thoughts on a trial version. But this is
very easy now as it is already done. The functions
of the software now depend only on the license
in the CodeMeter Stick.
Expiration Time: ok, no problem
Restricted version: ok
Testing on Terminal Server: ok
Using a remote CodeMeter Stick: ok
The restricted version can use only free game
card sets, which has been our goal. The customer
should be able to use these restricted
K N O W - H O W
functions when running the software without
CodeMeter Stick.
At this point, you can be satisfied with the easy
integration and you can ship your software. If
you want to get the highest level of security
for your software, using the AxProtector as a
shell for your executable is recommended. It
implements full program encryption and effective
anti-debugging mechanisms at your
command. In this case you abandon the option
to run a trial version of your software without
a CodeMeter Stick.
This challenge can be solved, too. In this case, a
“lite” version is built using conditional compilation.
You can remove all functions which are
protected by IxProtector. This “Player”, the light
version, is delivered instead of a limited trial
version with the following advantages:
This lite version doesn’t require any
CodeMeter runtime software.
One source code for all versions saving
development time and cost.
Highest level of protection for the full
version using AxProtector.
The free distribution of the lite version
generates new potential customers.
Online License Transfer
The last step is to transfer licenses to customers
with a CodeMeter Stick or provide software for
online use. You can do this yourself or WIBU-
SYSTEMS can do it for you.
Use CodeMeter, make it a standard like a computer
mouse today. You like to know more?
Please contact us.
When do I use which Integration?
Full software with integrated demo version: IxProtector
Full software without demo version: IxProtector/AxProtector
Lite Version (special software version): no protection
Full software as online demo version: IxProtector/AxProtector
What is a...
Product Code: Defines a license stored in a CodeMeter Stick
AxProtector: Tool to protect an executable without source code change
IxProtector: Tool to protect individual functions within the source code
5

CodeMeter: Pay-Per-Change
The most economical way
6
Do you want a dongle for all purposes? Then
CodeMeter is your choice! You only need to
order one product to protect single licenses,
network licenses, modular licenses and timelimited
licenses.
This simplifies your inventory management – no
different SKUs with different prices and you
always have the right dongle ready to send
to your customer. But the best of all: you can
even convert a single license to multiple user
network licenses after shipping to a customer
by remote control.
The standard situation
The price for CodeMeter is the sum of the
hardware cost and the license it protects. It is
then up to you to program your licenses into
the CodeMeter Stick. This is comparable with
a license for a software product: not about CD-
ROM product cost but intellectual properties.
But why telling you this? You as the software
developer are familiar with this.
Independent of the CmStick variant, you receive
a cover product in different colors or, for the
metal variant, a cap. Usually you have three (or
two) positions on your calculation:
Finally you calculate with the whole price for
the dongle. The only other option which influences
the price of the hardware is the size of
the optional flash memory.
Inexpensive Start
In some cases you have the requirement
“I have only a single software package which is
activated once and for this I need a simple, very
cheap dongle. Do you have a light variant?”.
Technically spoken, no.
From the price, yes!
We provide you the complete hardware – including
network licenses and internal clock – as a
pay-per-use variant for inexpensive introductory
conditions: You buy the CmStick for about 60%
off the standard price.
And now the best part: You can later use the
same CodeMeter Stick for additional applications
or even network licenses by just buying
further licenses. Such licenses cost about 6% of
the full CodeMeter Stick price and include the
right to reprogram the CodeMeter Stick for a
single time. It is simply called a transaction.
Examples for such transactions are:
Adding a new Product Item
Modification of the Expiration Time of an
existing Product Item
Deleting an Expiration Time
Increasing the number of licenses
You don’t need a transaction for the following
operations:
Deleting a Product Item
Reactivating a CmStick after freezing by
detecting an illegal debugging attempt
Changing the item text
When I Should Use which model?
You decide between use of the Standard or
the Pay-Per-Change model. Usually the Standard
model is cheaper after reprogramming the
CodeMeter Stick more than 6 or 7 times. This
happens if you plan to activate many more fea-

tures or you update your licenses in short time
intervals, for example every six months.
If you have only a few products and you do not
need additional activation of licenses in the
CodeMeter Stick, the Pay-Per-Change model
is much cheaper.
Mixing is Impossible
A mix of the Standard and the Pay-Per-Change
License
more
transaction
Transaction
Hardware Hardware
CodeMeter Standard CodeMeter Pay-Per-Use
model is impossible. Each Firm Code has a
licensing variant which is a fixed value. But if
you discover for example after a year that you
have originally chosen the wrong variant or
wish to change it, then it is possible to switch
the variant by replacing the Master CodeMeter
Stick (the Firm Security Box).
How it Works
How does the Firm Security Box know which
CmStick you have bought? It does not have
to know!
You buy 100 empty CodeMeter Sticks along with
the rights to program them in any of the two
models. After that you receive a Field Activation
file that increases the Unit Counter in the Firm
Security Box by 100.
The programming of an empty CodeMeter
Stick is realized in two steps: First your “Firm
Item” will be created. After that you create the
desired “Product Item” within this Firm Item.
The Firm Item can be created only once in a
single CodeMeter Stick and is never deleted.
The Unit Counter in your Firm Security Box is
reduced with each creation of a Firm Item, by
one. Because this happens exactly once per
CodeMeter Stick, the Firm Security Box counts
the number of programmed CmSticks.
You can also program 100 other CodeMeter
Sticks instead the 100 empty sticks you bought,
but the number of sticks you can program does
not change. When you finally have your Firm
Item in the CodeMeter Stick, you can create,
modify or delete Product Items without restrictions.
This is the Standard model.
But with the Pay-Per-Change model, you buy
the licenses per “change” (transactions). The
counter in the Firm Security Box is reduced with
the creation or modification of Product Items.
You can create Firm Items and delete Product
Items without restrictions.
In this case you buy for example 100 CodeMeter
Sticks and 100 licenses per transaction.
You can then program each CodeMeter Stick
with exactly one Product Item:
You can also buy 200 licenses at once. Then
you can program each of your 100 CodeMeter
Sticks exactly twice or 99 CodeMeter Sticks
once and modify the last CodeMeter Stick 101
times differently – or any other combination
with a sum of 200.
If you need many options in your license solutions,
we provide a Reserve Firm Security with
the desired number of reserve transactions.
Use of Any CmStick
If your customer already owns a CodeMeter
Stick, you can reuse it: In this case you just buy
the license (transaction) and you save the cost
of the CodeMeter hardware.
CodeMeter Stick Metal Edition
The CodeMeter Stick/M, 1 GB and
2 GB, are now available with a new
chromium-plated metal case, in the
well-known CodeMeter award-win-
ning design.
It combines a flash disk and smart
card chip for user friendly license
management and personal security
functions like password manager,
virtual encrypted drive and secure
login.
Users benefit from a new level of
reliability and stability. The look and
feel is strong and fits our security
with top quality.
P R O D U C T
Laser engraving is highly flexible,
adoptable and guarantees durable
marking. The material is environ-
ment friendly, conforms to RoHS
and is recyclable.
7

CodeMeter: One for All
8
Does one universal dongle with all
functions makes sense? What are
the benefits? Do you pay too much
for functions you do not need? Why
do our competitors offer many dif-
ferent dongle types: for network
floating licenses, with clocks or with
larger memory? These are important
questions to ask if you are current-
ly evaluating software protection
solutions.
The WIBU-SYSTEMS philosophy (since 1989)
is offering the most universal dongle. Only
you, the software vendor, define the type of
the license you place in the dongle. Even the
first WibuBox supports added data storage,
expiration dates, modular licenses and network
floating licenses.
Our concept, to integrate the protection once in
your software and deliver the same executable
to all your customers is self-evident. Further, the
same executable can be a demo version, include
optional modules, include pay-per-use schemes,
time limited licenses and network floating licenses.
Our competitors call this “Protect Once,
Deliver Many”, 18 years later.
Network Floating Licenses
Flexible license management with only one
software-protection hardware, a dongle, in the
network, makes sense in all business applications.
Customers start often with a single user
license and upgrade later to a multi-user floating
license. In this case, it’s easy and convenient for
you: You simply program the network license
quantity into the WibuBox or CodeMeter Stick at
your customer site, i.e. by using a remote update
file, without replacement of the dongle.
Time Limited Licenses
WibuKey supports an expiration date in the
dongle, CodeMeter improves on this approach
with an internal clock but without a battery.
The clock is running with crystal precision and
is put forward by the PCs system time, but only
forward. To set the time backwards, you need to
get a time certificate, provided by the Internet in
a manipulation safe way. CodeMeter also takes
advantage of “certified time servers”.
Pay-Per-Use
WibuKey has up to 5 Limit Counters. CodeMeter
tops this again with hundreds of Unit Counters.
They can be decremented by 1 to 10,000 in
one step so that you can realize even the most
complex requirements and create benefits for
your customers.

License Memory & Flash Memory
WibuKey can store licenses for up to 240 different
applications or modules from up to 10
vendors; CodeMeter offers almost unlimited
license storage. WibuKey offers 16 kByte of
memory, CodeMeter reserves about 60 kByte
of secure storage on a smart card chip to store
this information. Additionally, there are up to
2 GByte of flash memory available.
Driverless Use, Multiple Platforms
You plan to run your application directly from a
CodeMeter Stick? Great idea! This really works
with CodeMeter. You put your application on
The most important features at a glance
CodeMeter’s flash memory, the license in the
CodeMeter chip and that’s it. No need for driver
installation, no need for administrative rights,
everything is mobile. You can use it on multiple
platforms as well, of course.
Benefits for your customer
Up to now, dongles only protected the vendor’s
software. Today CodeMeter offers benefits for
your customers. Your customer gets personal PC
security functions like a mobile password manager,
file encryption, authentication and more.
Further, he/she can buy software and eBooks at
lower prices at www.codemeter.com.
Our solutions pay off many times.
You get the best return on your investment
using WIBU-SYSTEMS solutions. Initial costs
might look more expensive but you get multiple
returns due to highest flexibility, lower inventory
costs, highest reliability and longest usage time.
Our customers say that their sales have been
increased since they began using WibuKey or
CodeMeter. Pirated copies have more or less
disappeared.
Please compare for yourself the most important
features in the following table.
Feature WibuBox/U+ WibuBox/RU+ CmStick CmStick (PpU)* Your Solution
Single Station x x x x
Network Floating Licenses x - x x
USB / PCCard / ExpressCard x/x/- x/-/- x/x/x x/x/x
LPT / COM x/x x/- -/- -/-
License Entries up to 10 1 > 1,000 > 1,000
Modules per Key up to 240 1 > 32,000 > 32,000
Internal Clock - - x x
License Memory 16 kByte 16 kByte 60 kByte 60 kByte
Unlimited combination of license options limited - x x
Windows 32-bit Runtime/API/Wrapper x/x/x x/x/x x/x/x x/x/x
Windows 64-bit Runtime/API/Wrapper x/x/x x/x/x x/x/x x/x/x
Linux 32-bit Runtime/API/Wrapper x/x/- x/x/- x/x/- x/x/-
Linux 64-bit Runtime/API/Wrapper x/x/- x/x/- x/x/- x/x/-
Mac OS X Runtime/API/Wrapper x/x/x x/x/x x/x/x x/x/x
Sun Solaris 10 Runtime/API/Wrapper x**/x**/- x**/x**/- x/x/- x/x/-
Java API/Wrapper x/x x/x x/x x/x
.NET 1.1 + 2.0 API/Wrapper -/- -/- x/x x/x
Driver in Source Code x*** x*** - -
No Kernel Driver necessary - - x x
Benefits for End User - - x x
File based Remote Update x x x x
Internet based Remote Update - - x x
Flash Disk Option - - up to 2 GByte up to 2 GByte
Encryption Algorithms FEAL FEAL AES, RSA, ECC AES, RSA, ECC
Encrypted Communication - - x x
Certificates and Approvals UL (Underwriter Laboratories), VDE, FCC, VCCI, CE
Individual Color/Print x x x x
Noble Chromium-plated Metal Case - - x x
Price/pcs (net, for quantities > 100 pcs) 49,00 € 30,00 € 56,90 € 32,70 €
P R O D U C T
*CmStick with one license, see article page 6 **With driver in source code ***Allows implementation and use on any operating system, i.e. HP
UX, AIX, Windows CE and realtime operating systems, subset of functions, available for WibuBox/ST

CodeMeter Services
10
If you choose CodeMeter, you get a
dongle and a complete service pack
with it. Our service starts with the
evaluation of your software protec-
tion and is also continued beyond
the purchase of the CodeMeter
license.
Seminars for the First Start
Get the chance to learn more about CodeMeter
on our spring road show across Germany, free
and without any obligations. The focus of the
spring road show is on license management
and network licenses.
In our CodeMeter Starter Seminar you get a
deeper view into the technical details and all the
knowledge for a secure, easy to implement software
protection scheme. Until end of June 2007,
we offer the starter kit – a combination of the
CodeMeter SDK and license and this Seminar
for a very special price: You save 50%. And: for
any other attendee, a price of 199 Euro.
Starter Package
CodeMeter Starter Seminar 399,00 €
CodeMeter SDK 100,00 €
Firm Security Box with own
Firm Code
100,00 €
Normal Price 599,00 €
Special Price
(until end of June 2007)
299,00 €
(ask your local distributor for similar offers)
Custom-Made Solutions
Beyond the Starter Seminar WibuConcepts offers
you a complete consulting seminar about the
CodeMeter concepts in your office.
You develop your protection strategy with our
security experts and we support you directly with
the implementation of the protection.
Lost Dongles
Frequently we receive questions from our
users about lost dongles. From free-of-charge
replacement or requiring another purchase of
the software license – each software company
has its own strategy. With CodeMeter you will
have totally new possibilities.
You can deactivate the “lost” CodeMeter Stick
and send a replacement secure in the knowledge
that the “lost” dongle cannot be used
illegally. How is this possible? We use a combination
of time algorithms and the Internet.
Each CodeMeter Stick has an internal clock.
This can be adjusted only via a time server at
WIBU-SYSTEMS, if the time is running behind.
In addition to the clock, the CodeMeter Stick
also stores a time stamp of the last “certified”
adjustment. You can read both values into your
software and compare both time stamps. If the

difference is too large a readjustment is required
and this can be done by your customer online.
You can also deactivate this feature if your
customer does not have an online access. But
the time will always be activated if the customer
buys additional software online, a backup file of
the CodeMeter Stick is done, or further onlinerelated
functions are executed.
If a CodeMeter Stick gets lost, you can send
the serial number of this stick to us and we
put this serial number into a “freeze-stick” list.
This list is also known by the time server – If
the customer tries to update his time with his
“lost or broken” CodeMeter Stick, the latter is
automatically frozen instead of receiving the
time adjustment.
In many cases just the announcement “we
set your CodeMeter Stick on the freezing list”
is enough. The “lost” CodeMeter Stick suddenly
reappears or the “broken” CodeMeter
just works again. The recommended phrase is
“for your security we set the CM-Stick on the
“black” list, so anyone who finds your CM-Stick
cannot use your licenses illegally”.
If you have registered the CodeMeter Stick
online, you get an automatic notification via
Mr. Maier‘s software is protected by dongle A,
Mr. Schulz is more clever.
3 months later.
Mr. Li says, the dongles has been stolen.
email when your CodeMeter Stick is frozen. The
connection between you and the CodeMeter
Stick is done by the unique serial number.
Activation of Demo Versions
Do you want to supply a demonstration version
of your software to a potential customer? You
can do this with a time-limited license in the
CodeMeter Stick (via the Expiration Time). We
offer a complete service to do this: We send
the CodeMeter Stick to your customer and he
activates his demonstration version for a limited
time via the CodeMeter portal (http://www.
codemeter.com).
Sales of CodeMeter-protected
Software
Beyond the activation of demonstration versions
we can also provide the complete online sales
of your products to you. For this we add your
product to the CodeMeter portal (http://www.
codemeter.com).
License Portability
If your customer has a CodeMeter Stick with
your license and he or she wants to move this
license into another CodeMeter Stick, we can
support your customer in this license moving:
You simply define the conditions and we do the
rest. Or, even better for your customer, he can
Mr. Li owns a big factory.
Mr. Maier sends a new one
for free.
Mr. Li has found the lost dongle again. Mr. Li orders an additional license from Mr. Schulz.
S E R V I C E
install your software on his office computer,
his laptop and home computer and “move”
the license by attaching the CodeMeter Stick
to the system he wants to work on.
Backup and Restore
Your customers have the ability to create a
backup file of all the licenses which are stored
in their CodeMeter Sticks. These can be stored
together with the last online-adjusted time
stamp on the customers’ PC.
The customers themselves cannot restore their
backups into a new CodeMeter Stick – because
they do not have the Firm Security Box (even
WIBU-SYSTEMS cannot do this because we
don’t know your Firm Key). But the customers
can send their backup files to you and you can
decide which parts of the backup should be
restored. In this case, the adjusted-time stamp
can be especially useful for the restoration of
pay-per-use information in Unit Counters.
Do you think that this manual method is too
difficult? Just define your rules for the license
restoration and we organize this process for
your products in our CodeMeter Portal. Such
centralized restoration also guarantees that the
CodeMeter Sticks that contained the original
licenses are put on the freeze list.
Maier and Schulz sell their software to Mr. Li.
Mr. Schulz locks the stolen dongle.
11

12
P R O D U C T
CodeMeter at the
Terminal Server?
Are your customers using your
software at a Microsoft Terminal
Server? Are you concerned that such
a use can duplicate your licenses
illegally?
To avoid this situation you have two choices:
(1) you can check in your software if a Terminal
Server is running and if so, stop your software
or (2) you can use the automatic handling
of CodeMeter. The same mechanism is also
implemented in WibuKey version 5.20 or later.
Automatic Session Handling
If your software runs on a Terminal Server, CodeMeter
assumes each single session is running
on its own computer. If you use UserLimit or
NoUserLimit as the access method, the behavior
is as expected – the number of concurrent runs
is limited to the number of “network” users or,
with NoUserLimit, all copies are running.
When using the StationShare access mode on a
Terminal Server, one license is used per session,
independent from the situation where applications
are running on the same computer. With
the Exclusive Mode, the customer can start the
software exactly once per session.
All these features are easy to use: You just select
the desired access mode in the AxProtector or
IxProtector and set the minimal driver version
to 3.20.
The behavior of WibuKey version 5.20 or higher
is nearly identical, with the exception that only
WkLAN supports the Terminal Server. The local
access always permits unrestricted use by
compatibility. Please note this if you use the
WibuKey API directly. Using AxProtector 6.10 or
later, the local access of WibuKey is no longer
permitted on a Terminal Server.
Future Development
Beyond the case “software on a Terminal Server
with a limited number of users… like in a
network” is also the case of “software on the
Terminal Server but the CodeMeter Stick is on
the user’s local PC”. This is a very relevant or
common practice. We will provide a programming
interface to realize this with the usual
Terminal Servers (Microsoft, Citrix) later in 2007.
If you are interested in a pre-release, please send
an email to our support (support@wibu.com).

AxProtector for .NET
The next AxProtector for .NET totally disassembles
your software, protects it with CodeMeter
and rebuilds it again. The former release had
protected the file as a black box totally. Beyond
the increase of protection against cracking the
new method is also more universal in use.
“Remoting” or “Reflection” can be used together
with the new AxProtector.
The AxProtector for .NET can be used for Executables
as well as for DLLs. We support .NET
version 1.1 and 2.0. A .NET 1.1 version is automatically
converted into a 2.0 version.
The AxProtector for .NET supports CodeMeter on
a local PC and also on the network. All known
network management implementations of CodeMeter
are available. These are StationShare,
UserLimit, Exclusive, NoUserLimit, server search
list and access limits of the CodeMeter network
server itself.
AxProtector for .NET also supports the configurable
run-time check, which permits the
detection of the removal of a CodeMeter Stick
during the software use.
Protected assemblies can be strongly named by
AxProtector for .NET, so they can be used in the
Global Assembly Cache of .NET.
Security Analysis
With the 4th Hacker’s Contest, we want to publicly
show that cracking a live program with a
“dongle” will be very difficult. You already have
a protected software application? Our security
analysis can show you how secure your current
implementation is. Just contact us; we will also
help you enhance your current protection and
licensing strategy.
Briefly Presented
CodeMeter under the Sun
CodeMeter in the
newest version 3.20
is also available for
Sun Solaris 10 on
SPARC processors.
We support almost the complete functionality
of CodeMeter on this platform.
The only limitations are the end user tools like
CodeMeter Password Manager. But who is using
a Sun Workstation in a private home?
CodeMeter architecture showed its high flexibility
during migration to Sun Solaris. The Web-
Admin, which is already available on Windows,
Mac OS, and Linux, is also fully available on
Sun Solaris.
You can alternatively use a Linux PC with a Sun
Workstation as a centralized license server. You
can also protect your local software products for
Sun Solaris against software piracy. We supply a
shared object which can be used to integrate the
CodeMeter API into your source code.
The runtime library for applications, which are
protected by AxProtector for Java, is available
for Sun Solaris 10. Encrypted Java applications
run immediately on Sun Workstations – as long
a suitable CodeMeter Stick is available.
Mittelstandsprogramm 2007
(Small Business in Germany)
Also, this year WIBU-SYSTEMS will be providing,
as a premium sponsor, more valuable awards.
They permit SMEs to have secure protection and
additional sales channels
for digital products
with a risk-free deployment
of the CodeMeter
DRM technology.
VitaBIT: Consortium awarded by
Bundeswirtschaftsministerium
On November 22, 2006, Dr. Walter Otremba,
the state secretary of BMWi, presented an award
to Oliver Winzenried, CEO of WIBU-SYSTEMS
AG, for the project “VitaBIT“. Together with
B I L L B O A R D
the consortium partner CAS Software AG,
Forschungszentrum Informatik (FZI), PTV AG and
the Sozial and Diakoniestation Weinstadt. We
earned the award during the “SimoBIT” technology
competition. The focus on this competition is
about secure application of mobile information
technology in business and government.
CodeMeter Password Manager
The CodeMeter Password Manager is enhanced
with some unique features. Automatic learning
and filling of passwords is available for FireFox
on Windows, Mac OS X and Linux, on Internet
Explorer for Windows and on Safari for Mac OS.
A new look and feel with different “themes” and
an enhanced intuitive usage complete the new
release. The CodeMeter Password Manager can
be used in a mobile and secure way directly from
the CodeMeter Stick without software installation
on the “borrowed” PC (like at a friend’s
house or wireless hotspot). For evaluation
purposes without CodeMeter Stick there is a
file-based demo version for Windows available
(but having less security than the CodeMeter
Stick version).
13

14
S E R V I C E
WIBU-SYSTEMS on Tour
Sell Software easier!
With new licensing strategies
After the huge success of our Software Protection Days in 2006 we will continue this series in
Belgium, Germany, Ireland, UK and the The Netherlands during the second quarter of 2007. Themes
of the first tour will be licensing strategies that will help you sell more software and to reach additional
customers by using flexible models and sales channels
Dates and Locations in Germany:
Monday, April 16: Karlsruhe
Tuesday, April 17: Darmstadt
Thursday, April 19: Dortmund
Friday, April 20: Bonn
Monday, May 7: Stuttgart
Wednesday, May 9: Ulm
Thursday, May 10: München
Friday, May 11: Bamberg
Monday, June 4: Leipzig
Tuesday, June 5: Braunschweig
Wednesday, June 6: Bremen
Please call +49-721-931720
or register at www.wibu.com/protdays
Customer Citations
Bayer Technologies Services GmbH,
Michael Sevestre: “Many thanks for the
very good and detailed information.”.
Track Test GmbH, Mr. Uwe Trier:
“Many thanks for the competent help
while switching from V 3.01 to V 4.10c.
You immediately gave me a good tip. I
had StationShare only at WkbAccess2, but
not at WkbOpen2. And now everything
works fine. Thank you very much again.
Big praise again! This is support at the
high-end. Many thanks.”.
Dates and Locations in B, IE, NL, UK:
Wednesday, March 28: Dublin (IE)
Thursday, March 29: Gand (B)
Wednesday, April 4: Glasgow (UK)
Wednesday, April 11: Utrecht (NL)
Tuesday, April 17: Brussels (B)
Friday, April 20: Eindhoven (NL)
Tuesday, April 24: London (UK)
Please call your local office or register online
Belgium: +32-3747 0347
Ireland: +353-1440 4497
United Kingdom: +44-1279 8881 30
The Netherlands: +31-747 501 495
www.wibu-systems.nl/securecodeupdate
Support at WIBU-SYSTEMS
Nearly every computer vendor supplies support for their own products with online documentation and interactive APIs. But
frequently there is a gap between concept and reality. We are sure you know the waiting lines in many support call centers
are not always a real help. At WIBU-SYSTEMS, competent consulting and technical support are highly ranked. This includes
the support during the conception planning phase and during the technical implementation. And even your customers – the
end users with licensed copies of your protected software and the CodeMeter Stick or WibuBox – can use our free-of charge
end-user support. Just read some of the feedback we received from our customers:
Frank Beckers IT + Service, Frank
Beckers: “At first, many thanks for your
support. There are only few companies
who help their customers like you do.”.
VNG - Verbundnetz Gas AG, Alexander
Ziehe: “Problem solved, computer
detects WibuBox. Software runs well!
Many, many thanks.”.
cui bono - soft GbR, Axel Gutzler:
“Many thanks for your quick answer on
a Saturday (!). We really appreciate that
quick answer.”.
Grafik & More, Alexander Wagner:
“you are always very fast! I don’t need
your support frequently, but when I did,
everything worked fine.”.
Alcatel-Lucent Deutschland AG,
Frank Adaschak: “many thanks for the
quick answer and the acceptance of a request
for a product change. We also liked
the idea with the additional parameter.”.

On the other hand, you don’t want your customers
seeing the price list including the margin
flexibility. Or even worse: Your direct competitor
receives the documents with all your secret
information!
If you find yourself in this situation,
then we have the right solution for you:
SmartShelter|PDF.
As usual with a good software protection strategy
you should have a plan before you implement
it: “Which persons get access rights?” is
the question to ask. After you have defined
different groups, you provide Product Codes:
PC* Feature
1 price list for external sales staff
2 price list for internal sales staff
3 price list for partners
4 technical documentation
*Product Code
After that you convert all documents into PDF (if
they are not already in this format) and protect
them with the Product Codes from the table
above. You can also open linked Excel tables
or movies, but they are not encrypted.
In the next step you program the CodeMeter
Sticks for your employees and partners. Each
of your employees can have more than one
Product Code on his or her CodeMeter Stick and
then use different types of documents without
changing the dongle. For programming you
can use the CmBoxPgm command line tool or
with CodeMeter Producer you have a database
application with a graphic user interface.
An item in the CodeMeter Stick can also optionally
receive an Expiration Time. Then the
employee has to extend his access rights after
a specific time or he or she loses the reading
capabilities for that document. Such an extension
can be done via Field Activation – the
employees do not need to come back to the
office with their CodeMeter Sticks.
The file location in general is not a security risk:
There are no security differences if you store the
encrypted documents on the CodeMeter Stick
or on the local hard disk.
Do you know that your sales man-
ager and your partners can securely
send you the newest sales manuals,
price lists, and any other propri-
etary information anywhere and
anytime?
C A S E S T U D Y
Manuals directly from
the CmStick
To further simplify the usage, we supply a start
program for the CodeMeter Stick: This program
searches for all PDF files, which are stored on
the stick, and shows these files if the required
license (the suitable Product Code) is found. A
simple double-click opens then the document
in the PDF viewer.
If you copy the freely available Acrobat Reader
on the CodeMeter Stick then our start program
opens this reader on the stick instead
of the (possibly) installed reader on the local
PC hard disk. As a result, nothing has to be
installed on a temporary or borrowed computer.
The protected documents can be used
anywhere, anytime (until the Expiration Time
stops it).
15

4th Hacker‘s Contest
32,728 Euro or 40,000 US-$ “real” money for cracking of an application, protected by Code-
Meter! This attractive amount of money will be received by the first person, who can execute
the complete application without a CodeMeter Stick attached.
What is unique about this
Hacker’s Contest?
Kügler: We take on the international hacker community for
forth time. But this time, everything is different. For the first
three challenges we shipped a protected software application
without the suitable protection hardware. This time the
hacker also receives the suitable CmStick.
What were the results of the past three
contests?
Kügler: Not one of over 1,000 hackers could bypass the
protection. So far, these challenges are unique in our industry.
Our competitors always complained our contest was
not realistic because the hacker didn’t receive the suitable
hardware. But besides this criticism, not one of the competitors
tried to imitate us. And this time, the hacker also receives
a suitable CmStick.
What is the advantage of a hardware
protection?
Kügler: Since 1989 WIBU-SYSTEMS delivers secure solutions
to protect software against piracy. The user receives
a so-named dongle, which is “married” with the protected
software. The software can be freely copied, but runs only
if the suitable dongle is plugged into the user’s computer.
Security backups are no problem. The user has additionally
the advantage of license portability (he or she can move the
software immediately from one computer to another).
What is distinctive at CodeMeter?
Kügler: A classic dongle has two drawbacks: The user needs
a separate dongle for each software product and this dongle
must be sent to the user. We have solved both problems
with the CodeMeter technology. The user needs only one
CmStick and can activate many licenses from many different
software providers – online, 24x7. And as with shareware, a
CodeMeter-protected application can be tested before the
buy, but the test interval – for example 30 days – is validated
by the internal clock on each CmStick.
How flexible are your license models?
Kügler: So far we can adapt any exotic license model to
CodeMeter. Beyond time-limited licenses we can supply
pay-per-use, downgrade, network or single-licenses but
also variants like “if you are student, you get the software
cheaper” model.
CodeMeter – The most secure protection system!
Smart Card Chip for hardware encryption with
AES 128-bit and ECC 224-bit.
Encrypted Communication.
Locking features with crack detection.
Polymorphic Encryption (changing keys at runtime)
Anti-Debug and Obfuscator mechanisms.
Private Key for each vendor.
Multiple times Finalist in the category “Best DRM
Solution“ at SIIA Codie Awards.
Learn more about the Hacker´s Contest and the unique features of CodeMeter like flexible license
management, easy logistics, simple integration and user benefits. Visit us at the following events:
Visit us at CeBIT
2007.
Hall 7 A 35
Join the SPD
2007. See page
14.
Interview with Rüdiger Kügler,
Director of sales
Seminars at many
different cities.
See page 14.
E V E N T
Imprint
KEYnote
13th edition, spring 2007
Publisher:
WIBU-SYSTEMS AG
Rueppurrer Strasse 52-54
76137 Karlsruhe, Germany
Tel. +49-721-93172-0
Fax +49-721-93172-22
info@wibu.com
www.wibu.com
Responsible for the
contents:
Oliver Winzenried
Editors:
Rüdiger Kügler
Iris Melcher
Jürgen Ockert
Rainer Opitz
Wolfgang Völker
Oliver Winzenried
Design and Production
Manuel Künstler
Gunnar Petersohn
Letters are welcome at any
time. They are protected by
the press secret. Articles identified
by name do not necessarily
reflect the opinion of
the editors.
WIBU, CodeMeter and Smart-
Shelter are international trademarks
of WIBU-SYSTEMS. All
other trademarks belong to
their respective holders.
© 2007 WIBU-SYSTEMS.
All rights reserved.