Certificate Copy on WM6.1 - General Questions and Answers

Hi,
is there a possibility to copy a Certificate from the Computer Store to the User Store on the device(WM6.1)
I need the Certificate fpr EAP-TLS WLAN connection.
Thanks

This is not Windows Mobile Software Development related so I moved this to Q & A.

Related

SSL Kerio Problem ...

Hello!
I have setup the source for my Windows Mobile 6 to do over the air OTA sync. I have already done it for a phone with Windows Mobile 5. I had to download the certificate from the Kerio server to my phone in Windows Mobile 5 in .cer format. I was able to successfully install the certificate in Windows Mobile 5. However in Windows Mobile 6, I download the certificate but it does not get installed. I have found that I have to unlock this feature. How can I unlock this feature and be able to install the certificate in Windows Mobile 6?
- TKN
Just open de .cer with your file exporer and the certificate will get installed the correct way.

Unable to sync with exchange

Hi all,
I tried almost everything but I cannot connect to my exchange account. With our IT we enabled OMA, OWA also, I installed the self-signed certificate on my Touch Pro, tried with and without SSL, erased the account on the device to create it from scratch, read all the posts, googled and tried what suggested but still get connecting for a while and then Error Synchronizing (built-in e-mail client), when I switch to active sync and view status I get "Synchronization couldn't be completed. Try again later" and Support code says 0x80072F17 (certificate related). WHen I set up my iPhone with the account details I sync without problem all the mails with subfolders...Any help?
snekoza said:
Hi all,
I tried almost everything but I cannot connect to my exchange account. With our IT we enabled OMA, OWA also, I installed the self-signed certificate on my Touch Pro, tried with and without SSL, erased the account on the device to create it from scratch, read all the posts, googled and tried what suggested but still get connecting for a while and then Error Synchronizing (built-in e-mail client), when I switch to active sync and view status I get "Synchronization couldn't be completed. Try again later" and Support code says 0x80072F17 (certificate related). WHen I set up my iPhone with the account details I sync without problem all the mails with subfolders...Any help?
Click to expand...
Click to collapse
i had the same problem and later i realized that there two different reasons for this problem. but before i can help i need to know two things. 1st what rom and build version r u using? 2nd what version of htcalbum r u using?
Thank you for the quick rsponse, I hope you can help me. The ROM version is 1.90.401.1 WWE, Radio 1.02.25.19, as for album I have the version that was originally distributed (I could find any version number), BTW it is very slow on loading.
snekoza said:
Thank you for the quick rsponse, I hope you can help me. The ROM version is 1.90.401.1 WWE, Radio 1.02.25.19, as for album I have the version that was originally distributed (I could find any version number), BTW it is very slow on loading.
Click to expand...
Click to collapse
so you don't have a cooked rom or an updated verison of htc album of 2.5 or 3.0?
nothing, everything as shipped.
snekoza said:
nothing, everything as shipped.
Click to expand...
Click to collapse
then i don't know, my problem had to do with a cooked rom and after upgrading to htcalbum 2.5, sorry
Make sure you have the correct root certificate as well. Im using a free ssl cert from Startcom and I have to have both the Intermediate and Root certs installed for it to work because by default the root cert isnt there. You can check this out by Start > Settings > Certificates.
Ren13B I have just intermediate cert installed, the one that OWA is using, self-signed. Can you tell me more about how to make it appear in ROOT tab?
snekoza said:
Ren13B I have just intermediate cert installed, the one that OWA is using, self-signed. Can you tell me more about how to make it appear in ROOT tab?
Click to expand...
Click to collapse
The fastest way I've seen to do this is search for a Microsoft tool called "SSLChainSaver". There are instructions on the site for using it, but the short form is:
Code:
sslchainsaver.exe [I]<exchange hostname>[/I]
This creates a directory with the certificates, and also creates two XML files containing the full certificate chain, one for Windows Mobile 5, and one for WinMo 6.
Find the XML file you want (<exch. server>.wm6.xml, probably), copy to _setup.xml, and make it a .CAB file:
Code:
copy exchserver.wm6.xml _setup.xml
makecab certs.cab _setup.xml
This creates a .CAB file you can download directly to your phone containing all the necessary SSL certificates for your server.
Hope that helps...
It seems there is something wrong with our OWA certificate, I found out that issuer has to be same as subject which is not, so even the tool work smoothly it could not get the root cert...Strange that iPhone has no problem with that but WM6 does:-(

[Q] Install trusted CA certificate on Android (HTC Vision / Desire Z / G2)

Hi there,
I have downloaded a root CA certificate and now I want to install it on my Android Froyo device (HTC Vision / Desire Z / G2), so that the device trusts the certificate and does not complain about an untrusted certificate every time I start an SSL connection.
Android stores CA certificates in its Java keystore in /system/etc/security/cacerts.bks. I copied the file to my computer, added my certificate using portecle 1.5 and pushed it back to the device.
Now, Android does not seem to reload the file automatically. I have read in several blog posts that I need to restart the device. Doing so results in the file being overwritten with the original one again.
My next try was to install the certificate from SD card by copying it and using the according option from the settings menu. The device tells me that the certificate has been installed, but apparently it does not trust the certificate. Moreover, when I try to copy the keystore to my computer, I still find the original stock cacerts.bks.
Is there any way to add my certificate to the trusted ones? What mechanism restores the original keystore on every boot? Can I reload the keystore without rebooting? This would be at least a preliminary solution. Is there a chance do do it programmatically?
Thanks in advance!

[Q] certificate (.crt files)

I am getting my first WP7 phone next week and I was wondering how to install a .crt file in WP7. I was unable to find any information in the forums for WP7. In Windows mobile 6.5 I installed the .crt file on the phone with activesynch, ran the file through File Exp and it installed the certificate. Does anyone know how this is done with WP7? Thanks
dsdmarin said:
I am getting my first WP7 phone next week and I was wondering how to install a .crt file in WP7. I was unable to find any information in the forums for WP7. In Windows mobile 6.5 I installed the .crt file on the phone with activesynch, ran the file through File Exp and it installed the certificate. Does anyone know how this is done with WP7? Thanks
Click to expand...
Click to collapse
You just email the Cert to yourself & than open the email & download the cert on your WP7 device. Once downloaded, click the shield in the e-mail to install it. I guess the main question would be why though as at current, I think the Chevron Unlocker is the only tool that required installing a custom cert.
iridium21 said:
EDIT: Thanks to Cendaryn we also have the required security certificate - the easiest way (thanks to Talys) to install the cert and unlock your WP7 is to do as follows:
1. Unzip file, and attach chevronwp7.cer (see below for file) to an e-mail to yourself
2. Open email in WP7
3. Tap attachment once, turns it into a shield, tap it again, goes to install certificate screen with white letters on black screen
4. Click install at the bottom
Click to expand...
Click to collapse
drkfngthdragnlrd said:
You just email the Cert to yourself & than open the email & download the cert on your WP7 device. Once downloaded, click the shield in the e-mail to install it. I guess the main question would be why though as at current, I think the Chevron Unlocker is the only tool that required installing a custom cert.
Click to expand...
Click to collapse
I am not sure exactly what the certificate does... But my company requires that it be installed in order for us to rec emails through Microsoft exchange. I think it has something to do with password protection on the phone and also to allow the emails to synch. I guess i will have to setup my personal email first download the file install then setup my work email.. Thanks for the quick reply!!!
dsdmarin said:
I am not sure exactly what the certificate does... But my company requires that it be installed in order for us to rec emails through Microsoft exchange. I think it has something to do with password protection on the phone and also to allow the emails to synch. I guess i will have to setup my personal email first download the file install then setup my work email.. Thanks for the quick reply!!!
Click to expand...
Click to collapse
Ah okay, never thought about that. Well I can tell you a cert is a form of authentication. In this case, your companies email service must require the cert to prove that is allowed access. It's like a drivers license/ID/Social Security card/etc., but for applications/servers/service/etc. My main reason for asking was that in WM, we had to unsign the DLL/MUI/EXE's to edit them & than resign them & have the cert we used to resign them installed on the device so it'd recognize the DLL/MUI/EXE. This is how we changed the topbar icons for example. If you didn't sign the file, WM wouldn't load it or allow it to run.

[Q] Difficulties with electonic bankinc certificate

Hi!
At Windows-Firefox I do as follows:
1. Logging into electronic banking site with user name and password
2. At my own profile settings there is a button for installing the CA certificate (direct import into Firefox, no download at PC first and no extra clicking on downloaded file)
3. Installing my own .p12 certificate-file from my PC, (I have the file from the bank)
4. Initializing and electronic signing of transactions etc.
Due to settings from the bank, it works, of course, only if I install the CA certificate from the site first, and after that I install my own .p12 certificate.
So, the same thing, I am trying to do at Android 4, Xperia Mini (not Xperia Mini X10), Android own build in browser.
Here are the steps:
1. Downloading the .crt (not .cer!) file of the CA certificate from the site into my PC, then copying the same .crt file into the main directory of my Xperia internal SD card.
2. Copying the .p12 certificate file from my PC into the main directory of my Xperia internal SD card.
3. Installing the CA certificate from the .crt file at the security settings of Android
4. Installing the .p12 certificate at the security settings of Android
5. Logging in at the Android own build in browser
The pop-up with the correctly installed certificate (.p12) shows normally by logging in. So I am able to get into initializing of a transaction.
But at the confirmation of the electronic signing of the transaction, I am getting a pop-up "unknown error"
Could someone help?
I have no idea about the certificate stuff, but have you tried if Firefox for Android handles them the same way?
[Q] Difficulties with electonic banking certificate
post-mortem said:
I have no idea about the certificate stuff, but have you tried if Firefox for Android handles them the same way?
Click to expand...
Click to collapse
FF for Android had only for the 13 Beta (Fennec) Version an addon (Cert Manager), which is no more compatible with Android 4...
I already contacted the developer... There are still no compatible updates, so we can temporarily forget about working with such certificates on Android-FF...

Categories

Resources