Dear forum users,
I had a daunting task to install a certificate manually to the phone. The Samsung is running Android 8.0 and the certificate is a SSL cert for a server with extension .cer.
I have managed to download the certificate from a secure website to the phone and now it sits in Files folder. Every time I try to install the certificate, the phone always says "no certificate to install".
Is there a limitation that what kind of certificate can be installed to different version of Android?
Thanks.
wangjueliang said:
Dear forum users,
I had a daunting task to install a certificate manually to the phone. The Samsung is running Android 8.0 and the certificate is a SSL cert for a server with extension .cer.
I have managed to download the certificate from a secure website to the phone and now it sits in Files folder. Every time I try to install the certificate, the phone always says "no certificate to install".
Is there a limitation that what kind of certificate can be installed to different version of Android?
Thanks.
Click to expand...
Click to collapse
How are you trying to install it? What method/process are you using?
You should be able to go your device's system settings>security settings, in your security settings you should have some kind of option that allows you to change security options, in there somewhere, you should find an option that allows install certificates.
Sent from my SM-S767VL using Tapatalk
Related
Hi all,
I tried almost everything but I cannot connect to my exchange account. With our IT we enabled OMA, OWA also, I installed the self-signed certificate on my Touch Pro, tried with and without SSL, erased the account on the device to create it from scratch, read all the posts, googled and tried what suggested but still get connecting for a while and then Error Synchronizing (built-in e-mail client), when I switch to active sync and view status I get "Synchronization couldn't be completed. Try again later" and Support code says 0x80072F17 (certificate related). WHen I set up my iPhone with the account details I sync without problem all the mails with subfolders...Any help?
snekoza said:
Hi all,
I tried almost everything but I cannot connect to my exchange account. With our IT we enabled OMA, OWA also, I installed the self-signed certificate on my Touch Pro, tried with and without SSL, erased the account on the device to create it from scratch, read all the posts, googled and tried what suggested but still get connecting for a while and then Error Synchronizing (built-in e-mail client), when I switch to active sync and view status I get "Synchronization couldn't be completed. Try again later" and Support code says 0x80072F17 (certificate related). WHen I set up my iPhone with the account details I sync without problem all the mails with subfolders...Any help?
Click to expand...
Click to collapse
i had the same problem and later i realized that there two different reasons for this problem. but before i can help i need to know two things. 1st what rom and build version r u using? 2nd what version of htcalbum r u using?
Thank you for the quick rsponse, I hope you can help me. The ROM version is 1.90.401.1 WWE, Radio 1.02.25.19, as for album I have the version that was originally distributed (I could find any version number), BTW it is very slow on loading.
snekoza said:
Thank you for the quick rsponse, I hope you can help me. The ROM version is 1.90.401.1 WWE, Radio 1.02.25.19, as for album I have the version that was originally distributed (I could find any version number), BTW it is very slow on loading.
Click to expand...
Click to collapse
so you don't have a cooked rom or an updated verison of htc album of 2.5 or 3.0?
nothing, everything as shipped.
snekoza said:
nothing, everything as shipped.
Click to expand...
Click to collapse
then i don't know, my problem had to do with a cooked rom and after upgrading to htcalbum 2.5, sorry
Make sure you have the correct root certificate as well. Im using a free ssl cert from Startcom and I have to have both the Intermediate and Root certs installed for it to work because by default the root cert isnt there. You can check this out by Start > Settings > Certificates.
Ren13B I have just intermediate cert installed, the one that OWA is using, self-signed. Can you tell me more about how to make it appear in ROOT tab?
snekoza said:
Ren13B I have just intermediate cert installed, the one that OWA is using, self-signed. Can you tell me more about how to make it appear in ROOT tab?
Click to expand...
Click to collapse
The fastest way I've seen to do this is search for a Microsoft tool called "SSLChainSaver". There are instructions on the site for using it, but the short form is:
Code:
sslchainsaver.exe [I]<exchange hostname>[/I]
This creates a directory with the certificates, and also creates two XML files containing the full certificate chain, one for Windows Mobile 5, and one for WinMo 6.
Find the XML file you want (<exch. server>.wm6.xml, probably), copy to _setup.xml, and make it a .CAB file:
Code:
copy exchserver.wm6.xml _setup.xml
makecab certs.cab _setup.xml
This creates a .CAB file you can download directly to your phone containing all the necessary SSL certificates for your server.
Hope that helps...
It seems there is something wrong with our OWA certificate, I found out that issuer has to be same as subject which is not, so even the tool work smoothly it could not get the root cert...Strange that iPhone has no problem with that but WM6 does:-(
can anybody help me how to install some certificates? I need one to connect to the wifi in my school.. I tried make a cab but it do not works..
Copy the certificate file to your device, open file explorer and click the file You should see message "Certificates were installed"... I think that's all, at least that's how it worked for me
It does not work for me .. I have tried it.. It says it can not open such file
Try using .cer files. If your school doesn't have those, try googling some converter from other formats to .cer
thank you a lot..it worked...don´t you know how should I use this certificate when I´am logging in to the wifi in school?
just turn on Wi-Fi and follow the instructions on screen. You will just have to choose correct encryption type, input username and password and then it will automatically use installed certificate to ensure that the connection is secure.
certificates - how to make your own?
Dear Forum, I really have problems with several apps, having .Net-framework 2.0 AND 3.5 installed at my devices - My problem: some apps simply don`t run, even by changing the Application policy from one to the other or to default.
I oftenly get the error - GNAgent.exe - .......
So if I would be able to create my own cert can I give allowences to several apps with problems?
thxs for answering
regards
seeraeuber said:
Dear Forum, I really have problems with several apps, having .Net-framework 2.0 AND 3.5 installed at my devices - My problem: some apps simply don`t run, even by changing the Application policy from one to the other or to default.
I oftenly get the error - GNAgent.exe - .......
So if I would be able to create my own cert can I give allowences to several apps with problems?
thxs for answering
regards
Click to expand...
Click to collapse
Hi, why do you think your own certificate will help?
GNAngent.exe is part of Google Navigator, maybe uninstalling (or reinstalling) it will solve your problems as well.
Anyway, here is a mention how to install self-signed cert: http://forum.xda-developers.com/showthread.php?t=281723
You can also try DisableCertChk utility.
Hi there,
I have downloaded a root CA certificate and now I want to install it on my Android Froyo device (HTC Vision / Desire Z / G2), so that the device trusts the certificate and does not complain about an untrusted certificate every time I start an SSL connection.
Android stores CA certificates in its Java keystore in /system/etc/security/cacerts.bks. I copied the file to my computer, added my certificate using portecle 1.5 and pushed it back to the device.
Now, Android does not seem to reload the file automatically. I have read in several blog posts that I need to restart the device. Doing so results in the file being overwritten with the original one again.
My next try was to install the certificate from SD card by copying it and using the according option from the settings menu. The device tells me that the certificate has been installed, but apparently it does not trust the certificate. Moreover, when I try to copy the keystore to my computer, I still find the original stock cacerts.bks.
Is there any way to add my certificate to the trusted ones? What mechanism restores the original keystore on every boot? Can I reload the keystore without rebooting? This would be at least a preliminary solution. Is there a chance do do it programmatically?
Thanks in advance!
I am getting my first WP7 phone next week and I was wondering how to install a .crt file in WP7. I was unable to find any information in the forums for WP7. In Windows mobile 6.5 I installed the .crt file on the phone with activesynch, ran the file through File Exp and it installed the certificate. Does anyone know how this is done with WP7? Thanks
dsdmarin said:
I am getting my first WP7 phone next week and I was wondering how to install a .crt file in WP7. I was unable to find any information in the forums for WP7. In Windows mobile 6.5 I installed the .crt file on the phone with activesynch, ran the file through File Exp and it installed the certificate. Does anyone know how this is done with WP7? Thanks
Click to expand...
Click to collapse
You just email the Cert to yourself & than open the email & download the cert on your WP7 device. Once downloaded, click the shield in the e-mail to install it. I guess the main question would be why though as at current, I think the Chevron Unlocker is the only tool that required installing a custom cert.
iridium21 said:
EDIT: Thanks to Cendaryn we also have the required security certificate - the easiest way (thanks to Talys) to install the cert and unlock your WP7 is to do as follows:
1. Unzip file, and attach chevronwp7.cer (see below for file) to an e-mail to yourself
2. Open email in WP7
3. Tap attachment once, turns it into a shield, tap it again, goes to install certificate screen with white letters on black screen
4. Click install at the bottom
Click to expand...
Click to collapse
drkfngthdragnlrd said:
You just email the Cert to yourself & than open the email & download the cert on your WP7 device. Once downloaded, click the shield in the e-mail to install it. I guess the main question would be why though as at current, I think the Chevron Unlocker is the only tool that required installing a custom cert.
Click to expand...
Click to collapse
I am not sure exactly what the certificate does... But my company requires that it be installed in order for us to rec emails through Microsoft exchange. I think it has something to do with password protection on the phone and also to allow the emails to synch. I guess i will have to setup my personal email first download the file install then setup my work email.. Thanks for the quick reply!!!
dsdmarin said:
I am not sure exactly what the certificate does... But my company requires that it be installed in order for us to rec emails through Microsoft exchange. I think it has something to do with password protection on the phone and also to allow the emails to synch. I guess i will have to setup my personal email first download the file install then setup my work email.. Thanks for the quick reply!!!
Click to expand...
Click to collapse
Ah okay, never thought about that. Well I can tell you a cert is a form of authentication. In this case, your companies email service must require the cert to prove that is allowed access. It's like a drivers license/ID/Social Security card/etc., but for applications/servers/service/etc. My main reason for asking was that in WM, we had to unsign the DLL/MUI/EXE's to edit them & than resign them & have the cert we used to resign them installed on the device so it'd recognize the DLL/MUI/EXE. This is how we changed the topbar icons for example. If you didn't sign the file, WM wouldn't load it or allow it to run.
Hi!
At Windows-Firefox I do as follows:
1. Logging into electronic banking site with user name and password
2. At my own profile settings there is a button for installing the CA certificate (direct import into Firefox, no download at PC first and no extra clicking on downloaded file)
3. Installing my own .p12 certificate-file from my PC, (I have the file from the bank)
4. Initializing and electronic signing of transactions etc.
Due to settings from the bank, it works, of course, only if I install the CA certificate from the site first, and after that I install my own .p12 certificate.
So, the same thing, I am trying to do at Android 4, Xperia Mini (not Xperia Mini X10), Android own build in browser.
Here are the steps:
1. Downloading the .crt (not .cer!) file of the CA certificate from the site into my PC, then copying the same .crt file into the main directory of my Xperia internal SD card.
2. Copying the .p12 certificate file from my PC into the main directory of my Xperia internal SD card.
3. Installing the CA certificate from the .crt file at the security settings of Android
4. Installing the .p12 certificate at the security settings of Android
5. Logging in at the Android own build in browser
The pop-up with the correctly installed certificate (.p12) shows normally by logging in. So I am able to get into initializing of a transaction.
But at the confirmation of the electronic signing of the transaction, I am getting a pop-up "unknown error"
Could someone help?
I have no idea about the certificate stuff, but have you tried if Firefox for Android handles them the same way?
[Q] Difficulties with electonic banking certificate
post-mortem said:
I have no idea about the certificate stuff, but have you tried if Firefox for Android handles them the same way?
Click to expand...
Click to collapse
FF for Android had only for the 13 Beta (Fennec) Version an addon (Cert Manager), which is no more compatible with Android 4...
I already contacted the developer... There are still no compatible updates, so we can temporarily forget about working with such certificates on Android-FF...