InstallShield

InstallShield
source
Name	InstallShield
Developer	Flexera (formerly Micro Focus, Macrovision)
Released	1990
Operating system	Microsoft Windows
Genre	Software installer authoring tool
License	Proprietary

InstallShield is a proprietary installer-authoring tool originally developed for Microsoft Windows that automates creation of setup packages, installation wizards, and application deployment packages. It has been used by independent software vendors, enterprises, and original equipment manufacturers to package desktop applications, services, device drivers, and enterprise suites. The product has evolved through multiple corporate owners and technological shifts in Windows deployment, setup customization, and enterprise software distribution.

History

InstallShield was created in the early 1990s as an installation solution for Windows developers, emerging alongside platforms such as Microsoft Windows 3.0, Microsoft Visual C++, Borland Delphi, Borland C++, and Microsoft Visual Basic. Early adoption grew among software publishers including Symantec, Adobe Systems, Corel, and McAfee to standardize setup behavior for consumer and enterprise releases. The product changed hands through acquisitions and corporate restructurings involving Macrovision, Acresso Software, Thoma Bravo, Micro Focus International, and Flexera; these ownership events intersected with consolidation trends in enterprise software and private equity investments in the 2000s and 2010s. InstallShield's roadmap responded to shifts introduced by Microsoft Windows Installer, Windows NT, Windows 2000, Windows XP, and later Windows 10 and Windows 11 release cycles, as well as to influences from installer technologies like Nullsoft Scriptable Install System and Advanced Installer.

Features and Architecture

InstallShield provides a graphical Integrated Development Environment for creating MSI-based installers, setup.exe launchers, merge modules, and transform (.mst) files compatible with Windows Installer. Core components include a project designer, component editor, feature tree, custom actions, and a script engine that can integrate with Microsoft .NET Framework, COM, and native Win32 code. It supports building InstallScript projects, Basic MSI projects, InstallScript MSI hybrid projects, and suites for multi-package orchestration compatible with MSIX-style containerization trends. Advanced features encompass support for digital signing with certificates from authorities such as DigiCert and Sectigo, Windows Update integration patterns informed by Windows Server Update Services, rollback and transactional semantics mapped to Windows Installer standards, and integration hooks for configuration management systems like Microsoft System Center Configuration Manager and Puppet (software). The architecture allows extensibility through custom actions, scriptable sequences, and binary embeds to accommodate third-party components from vendors like Intel Corporation and NVIDIA.

Editions and Licensing

Over time, InstallShield has been offered in multiple editions aimed at different audiences: Express and Professional editions for independent developers and small teams, Premier or Enterprise editions for large ISVs and integrators, and specialized OEM or corporate licensing for device manufacturers and channel partners. Licensing models have spanned perpetual node-locked licenses, concurrent-user licensing, and subscription-based maintenance contracts aligned with enterprise procurement practices used by organizations such as IBM, HP Inc., and Dell Technologies. Bundled offerings have been included in IDE integrations with Microsoft Visual Studio and toolchains used by development groups at companies like Oracle Corporation and SAP SE.

Usage and Integration

InstallShield projects integrate into continuous integration and build systems including Jenkins (software), TeamCity, Azure DevOps, and GitLab CI/CD. It supports command-line builds for automated release pipelines and can consume artifacts produced by compilers such as GNU Compiler Collection or MSVC. Enterprise deployment scenarios leverage integration with configuration management tools like Ansible (software), Chef (software), and SaltStack for orchestrated rollouts, while virtual machine and image-building workflows commonly incorporate InstallShield output in images managed by VMware vSphere and Microsoft Hyper-V. Installers produced by InstallShield can be customized to interoperate with licensing systems from vendors like Flexera Software itself, identity providers such as Okta, and telemetry backends including New Relic.

Version History and Release Notes

Major milestones in InstallShield's product history correspond with broader platform shifts: adoption of Windows Installer (MSI) standards in the late 1990s, the introduction of InstallScript and hybrid MSI models in the 2000s, enhanced support for .NET Framework assemblies and side-by-side installation in the 2000s and 2010s, and later adjustments for 64-bit Windows and UEFI firmware considerations. Significant releases often addressed compatibility with new Windows releases, changed code-signing requirements influenced by issuance practices at Certificate Authority Security Council members, and added automation features for DevOps toolchains popularized by companies like Atlassian, Microsoft, and GitHub.

Compatibility and System Requirements

InstallShield targets authoring installers for Microsoft Windows desktop and server editions, aligning with APIs present in Windows Server 2016, Windows Server 2019, Windows 10, and Windows 11. Build host requirements historically included support for Microsoft Visual Studio integration, Windows SDK components, and appropriate code-signing toolchains. Runtime installers produced by the tool must respect Windows Installer service versions, side-by-side DLL rules established by Microsoft Side-by-Side assembly technology, and driver signing policies enforced by Microsoft and hardware partners like Intel Corporation and AMD.

Criticism and Security Issues

Critics have noted InstallShield-produced installers can be complex, with bespoke custom actions that, if misused, introduce reliability or privilege-elevation risks discussed in advisories from organizations like CERT Coordination Center and documented in security analyses from vendors such as Symantec and Trend Micro. Past controversies around bundled third-party software and opaque telemetry have drawn scrutiny similar to debates involving Adobe Systems and Oracle Corporation bundling practices. Security guidance emphasizes code signing, least-privilege installation sequences aligned with Microsoft best practices, and supply-chain integrity measures advocated by initiatives like the Software Bill of Materials and standards promoted by NIST.

Category:Windows software