Password generated for AES encryption key when using Windows MSI?

[Rod Widdowson]

All the passwords are created by calling into the OS to create a guid.  Of the top of my head I don't know if it's crypto-random or random but it's 128 bytes of unguessability.

We don't obfuscate anything (this is just an expedited normal install) that's the passwords that're generated in the properties file. We do put an ACL on all the sensitive directories however.