Silverlight 5 - OOB With Elevated Trust

Question

To access local file system , I'm moving to Silverlight 5 from 4. I'm aware that we have now "In Browser" and "OOB" in Silverlight 5.

For "In Browser" local file system access, I came across certain mandatory deployment activities like signing a certificate, adding certificates to store and modifying registry to provide the elevated trust in order to access the local file system.

I would like to know, If I opt for Out Of Browser mode with Elevated trust in Silverlight 5, do i still need to do the exact steps like signing certificate , modifying registry etc or those are not required if it is a OOB application.

I'm completely aware of the security risks or potential harm of exposing data through OOB elevated app. However I'm interested only in whether OOB requires all that setups in deployment environment or it is only applicable for "In Browser" mode.

Thanks in advance.

Answer 1

Certificate signing or registry changes applies to - enabling trusted app(OOB) to run as in-browser (system admin now can do this starting SL5).Here is the reference msdn article

Coming to your question, OOB app doesn't require any such configuration because it is already having elevated trust as an app. it is applicable to in-browser elevated trust app explained in above article.