We are currently developing a software that is supposed to run on every computer of a world wide company which has many domains. We are thinking about security as we want the software to be used only on a company computer.
A particular remark is that we don't want any online security measure, as the software may be run offline only.
Thinking about serial key is nearly useless as a client who leaves the company may take with him the software (with an already validated serial key) with him and use it in another context.
We thought about checking certificate issuer for a specific certificate in the store each time the software is launched (as for all computers of the company, this specific certificate issuer will be the company name). However, using a fake certificate issuer from a non-company computer will also work...
We know that there is no perfect solution, but we just want the most effective solution.