When the software is a major application designed and tested by a third party, that third party is required to install it on our servers and prove it working before it can be signed off (and they get paid).

No way would I get into that awful situation in the first place but well done for finding a solution.