Some disadvantages of Parallels Desktop 4

Examiner · Oct 2, 2009

Hello,
I had tested the latest build (6578) of Parallels Desktop 4.
There are some disadvantages.
1. It would be quite reasonable to add on some kind of protection from unauthorized utilization of Parallels Desktop and from observation of VMs processes.
2. I had noticed that special fdd image was connected after virtual machine was created. As I had found it has some kind of device drivers. And I had tried to install Windows XP (both 32 and 64 bit) on SCSI type virtual HDD. I had used F6 method to call appropriated dialog. But windows installer had not detected any HDDs.
3. I dont care about mac-address types made by integrated generator. But the problem is Parallels Desktop application doesnt allow desired mac-address.
Best regards.

tacit_one · Oct 6, 2009

Thank you for your feedback!

Examiner said:
1. It would be quite reasonable to add on some kind of protection from unauthorized utilization of Parallels Desktop and from observation of VMs processes.

I'm not sure i understand what you mean here. What kind of scenario are you trying to cover?

Examiner said:
2. I had noticed that special fdd image was connected after virtual machine was created. As I had found it has some kind of device drivers. And I had tried to install Windows XP (both 32 and 64 bit) on SCSI type virtual HDD. I had used F6 method to call appropriated dialog. But windows installer had not detected any HDDs.

Please refer to the Help for description on how to install SCSI drivers. My recommendation is to use IDE as default option for Windows guests.

Examiner said:
3. I dont care about mac-address types made by integrated generator. But the problem is Parallels Desktop application doesnt allow desired mac-address.

This limitation is indeed artificial, but has some security reasoning.
Can you please clarify, what scenario requires you to set arbitrary mac-address?

Regards,
Max

Examiner · Oct 6, 2009

Hi,
1.

I'm not sure i understand what you mean here. What kind of scenario are you trying to cover?

I'd like to use a few virtual machines for different purposes:
for safe internet surfing
for safe financial transactions
for some kind of testing
Parallels provides us a useful command line utility for easy automation. I am going to auto start some of the VMs with my personal and confidential data (I need to make some internet payments in time). My computer is running in 24/7 mode. But I am not at home 24/7. And my sister and her friends sometimes work on my PC.
So, I can not protect my VMs by Windows logon because of auto start. I need to protect it from unauthorized access/observation by Parallels Desktop password option.
2.

Please refer to the Help for description on how to install SCSI drivers. My recommendation is to use IDE as default option for Windows guests.

Is it possible to install OS (Windows XP) on SCSI type virtual HDD?
3.

This limitation is indeed artificial, but has some security reasoning.
Can you please clarify, what scenario requires you to set arbitrary mac-address?

Some of internet service providers use mac-address identification and a user needs to make phone call (or even to visit ISP office) to register new mac-address. It would be convenient to use the same mac for host and guest.

Examiner · Oct 8, 2009

Hi,
There is one more suggestion. Parallels command line utility has "start" command only ( "prlctl start ID|name" ). It would be useful to add on "safemode(start)" command to run VM in safe mode.
Best regards.

tacit_one · Oct 8, 2009

Examiner said:
1.
I'd like to use a few virtual machines for different purposes:
for safe internet surfing
for safe financial transactions
for some kind of testing
Parallels provides us a useful command line utility for easy automation. I am going to auto start some of the VMs with my personal and confidential data (I need to make some internet payments in time). My computer is running in 24/7 mode. But I am not at home 24/7. And my sister and her friends sometimes work on my PC.
So, I can not protect my VMs by Windows logon because of auto start. I need to protect it from unauthorized access/observation by Parallels Desktop password option.

We probably can protect access to the virtual machine with password, but as long as someone else works in your user account - it will not be truly secure. Didn't you consider creating multiple user-accounts and running virtual machines in your own (with file-level protection of VM files)? This way you'll be likely able to achieve desired behavior right now. What do you think?

Examiner said:
2. Is it possible to install OS (Windows XP) on SCSI type virtual HDD?

Yes, sure. Drivers for SCSI are located on "drivers.fdd" floppy drive in the Tools folder of Parallels Desktop installation.

Examiner said:
3. Some of internet service providers use mac-address identification and a user needs to make phone call (or even to visit ISP office) to register new mac-address. It would be convenient to use the same mac for host and guest.

Thank you for sharing - this scenario is definitely required for Bridged networking mode. We will consider removing limitation on MAC addresses range in that mode. But in Shared (NAT) mode your VMs will not have such problem (as MAC address is shared with host OS) - since this is the default mode, i believe it should work for you out of the box.

Examiner · Oct 8, 2009

Hi,

We probably can protect access to the virtual machine with password, but as long as someone else works in your user account - it will not be truly secure. Didn't you consider creating multiple user-accounts and running virtual machines in your own (with file-level protection of VM files)? This way you'll be likely able to achieve desired behavior right now. What do you think?

Yes, I know this way. My computer work in 24/7 mode (as I had noticed). That means some automated procedures execute from time to time and sometimes I use torrent. How my VM's scheduled tasks will be run under my sister's account?
Is it possible to assign strict correspondence between VM's virtual HDD and VM's configuration file with encrypting configuration file by a password? If so, there will be no way to run such "assigned" virtual HDD on another virtual machine. I suppose it would be quite enough protection level (and please, don't forget to add on password option to command line utility ("prlctl start(safemodestart) PASSWORD ID|name")) Also I'd like to protect VM from observation under Desktop Management Console when it is running.

Yes, sure. Drivers for SCSI are located on "drivers.fdd" floppy drive in the Tools folder of Parallels Desktop installation.

Yes, it really works! Thank you.

... this scenario is definitely required for Bridged networking mode...

Yes, that is what I was saying.

Best regards

Examiner · Mar 31, 2010

Hi!
Are you going to fix issues noticed above?

James DonovanJ · Aug 3, 2012

Examiner said:
Hi,

Yes, I know this way. My computer work in 24/7 mode (as I had noticed). That means some automated procedures execute from time to time and sometimes I use torrent. How my VM's scheduled tasks will be run under my sister's account?
Is it possible to assign strict correspondence between VM's virtual HDD and VM's configuration file with encrypting configuration file by a password? If so, there will be no way to run such "assigned" virtual HDD on another virtual machine. I suppose it would be quite enough protection level (and please, don't forget to add on password option to command line utility ("prlctl start(safemodestart) PASSWORD ID|name")) Also I'd like to protect VM from observation under Desktop Management Console when it is running.

Yes, it really works! Thank you.

Yes, that is what I was saying.

Best regards

Thanks for share valuable information....

James DonovanJ · Aug 10, 2012

Examiner said:
Hello,
I had tested the latest build (6578) of Parallels Desktop 4.
There are some disadvantages.
1. It would be quite reasonable to add on some kind of protection from unauthorized utilization of Parallels Desktop and from observation of VMs processes.
2. I had noticed that special fdd image was connected after virtual machine was created. As I had found it has some kind of device drivers. And I had tried to install Windows XP (both 32 and 64 bit) on SCSI type virtual HDD. I had used F6 method to call appropriated dialog. But windows installer had not detected any HDDs.
3. I dont care about mac-address types made by integrated generator. But the problem is Parallels Desktop application doesnt allow desired mac-address.
Best regards.

Thanks for share valuable information.