› Security
Trust you can check for yourself.
Remote support asks a lot of the person being helped. This page sets out what Kshan Setu does to deserve it, and how you can verify each part.
Check that a download is genuine
Every Kshan Setu program and installer is signed with an Authenticode code-signing certificate issued to Vinay Enterprises by Certum, and every signature is timestamped. A genuine file shows:
Publisher: Vinay Enterprises Signer: CN=Vinay Enterprises, O=Vinay Enterprises, L=Ahmedabad, ST=Gujarat, C=IN Issued by: Certum Code Signing 2021 CA
To check a file on Windows, right-click it, choose Properties, then Digital Signatures. Or run this in PowerShell, in the folder that holds the file:
Get-AuthenticodeSignature .\KshanSetu-482913.exe | Format-List Status, SignerCertificate
Status must be Valid and the signer must be Vinay Enterprises. Check on Windows: macOS and Linux tools may report a chain error because they do not carry the Certum root.
Download Kshan Setu only from join.kshansetu.in or from a technician's console. If anyone sends you a Kshan Setu file from anywhere else, do not open it.
Your permission comes first
- Nobody can see or control a PC until the person at that PC presses Allow.
- Allow is never the default button, so a stray Enter refuses. An unanswered request is refused after a minute.
- A banner is shown for the whole session, on code sessions and on unattended PCs alike. It can pause or end the session.
- Administrator rights come only through the Windows prompt, one session at a time, and are removed when the session ends.
- File transfer is off until the client turns it on, and the technician never browses the client's disk.
Private by design
- The connection is encrypted from end to end, whichever network it crosses.
- Kshan Setu runs on servers in India.
- The helper a client downloads holds no passwords or keys. After the session it cannot connect again.
Accountable technicians
- Technicians sign in with strong authentication: a password plus a one-time code, a hardware key, or single sign-on.
- Every session, consent decision and file transfer is recorded, so the support team can always say who did what, and when.
Unattended PCs install only genuine updates
PCs enrolled for unattended access update from the console. Before an update installs, the PC itself confirms that it is a genuine Kshan Setu release, exactly as published, and signed by Vinay Enterprises. Anything else is refused and the PC stays as it was.
If a new version does not start correctly, the PC goes back to the version it had, on its own.
Report a concern
If you see a Kshan Setu file signed by anyone other than Vinay Enterprises, a session you did not ask for, or anything else that looks wrong, email hello@kshansetu.in. We read every report.