Secure Application Deployment

A method comprising:

• obtaining, by a distribution application, a first cryptographic key of a pair of asymmetric cryptographic keys, wherein a second cryptographic key of the pair of asymmetric cryptographic keys is stored by an on-premises computational instance;
• obtaining, by the distribution application, a selection of a software application for installation on the on-premises computational instance, wherein the software application is selected from a plurality of software applications installable on computational instances and stored by persistent storage;
• obtaining, by the distribution application, an identifier associated with the on-premises computational instance;
• encrypting, by the distribution application, the software application by way of a symmetric encryption algorithm and using a third cryptographic key;
• encrypting, by the distribution application, the third cryptographic key by way of an asymmetric encryption algorithm and using the first cryptographic key;
• and
• generating, by the distribution application, an installation file comprising the software application as encrypted, the third cryptographic key as encrypted, and a representation of the identifier, wherein the on-premises computational instance is configured to:
• (i) confirm that the representation of the identifier contained in the installation file corresponds to the identifier associated with the on-premises computational instance, and (ii) install the software application using the installation file.

A non-transitory computer-readable medium having stored thereon program instructions that, upon execution by a computing system, cause the computing system to perform operations comprising:

• obtaining a first cryptographic key of a pair of asymmetric cryptographic keys, wherein a second cryptographic key of the pair of asymmetric cryptographic keys is stored by an on-premises computational instance;
• obtaining a selection of a software application for installation on the on-premises computational instance, wherein the software application is selected from a plurality of software applications installable on computational instances and stored by persistent storage;
• obtaining an identifier associated with the on-premises computational instance;
• encrypting the software application by way of a symmetric encryption algorithm and using a third cryptographic key;
• encrypting the third cryptographic key by way of an asymmetric encryption algorithm and using the first cryptographic key;
• and
• generating an installation file comprising the software application as encrypted, the third cryptographic key as encrypted, and a representation of the identifier, wherein the on-premises computational instance is configured to:
• (i) confirm that the representation of the identifier contained in the installation file corresponds to the identifier associated with the on-premises computational instance, and (ii) install the software application using the installation file.