Related
I've got an XDAIIs, which has been updated to a 1.40 ROM. We install a new root certificate onto our devices, to allow us to use Activesync over SSL, but when you try and load a .cer file on a 1.4 ROM you get the oh-so-helpful message:
"Security permission was insufficient to update your device."
This process has worked fine on every other ROM and I suspect it's something new on the 1.40 ROM. My guess is that it won't work with the XDAIIi either, which has a 1.40 ROM out of the box...
Suggestions? Google / Microsoft didn't turn up a lot.
Daern
daern said:
I've got an XDAIIs, which has been updated to a 1.40 ROM. We install a new root certificate onto our devices, to allow us to use Activesync over SSL, but when you try and load a .cer file on a 1.4 ROM you get the oh-so-helpful message:
"Security permission was insufficient to update your device."
This process has worked fine on every other ROM and I suspect it's something new on the 1.40 ROM. My guess is that it won't work with the XDAIIi either, which has a 1.40 ROM out of the box...
Suggestions? Google / Microsoft didn't turn up a lot.
Daern
Click to expand...
Click to collapse
Interesting. how did you try and import the .cer file to the device?
deleted
....
therock112 said:
Interesting. how did you try and import the .cer file to the device?
Click to expand...
Click to collapse
Just click the file
Or run certinst.exe, which is what .cer file are associated with in PPC2003+
I've actually found some rather nice, useful code from Microsoft (gasp, shock, horror!):
Download this example:
http://support.microsoft.com/default.aspx?scid=kb;en-us;322956
...which is for PPC2002, but the sample code for inserting certificates works on 2003 and (more importantly) bypasses whatever additional locks that have been placed in this new ROM. In fact, it's even better 'cos certinst.exe threw up a non-suppressable confirmation box, whereas I can now embed all of the code into a setup.dll and wrap the cert into a self installing cab file, along with all of my CPF stuff.
I'll still try and find out why O2 have changed this though. That sucks...
Happy Daern the hax0r
Anyone know if personal exchange certificates are now working in WM6? I'd rather not pay $100/yr if I don't have to...
I believe so, I use a personal exchange certificate and never had a problem with it in WM6...
Hmm, well I wasted last night trying to get ours to work. I was able to export the .cer and install it, but it kept saying "invalid security certificate".
One other item to note, our webmail address is as follows blahblah.wahwah.com/exchange.
Is that causing the problem?
pkley said:
Hmm, well I wasted last night trying to get ours to work. I was able to export the .cer and install it, but it kept saying "invalid security certificate".
One other item to note, our webmail address is as follows blahblah.wahwah.com/exchange.
Is that causing the problem?
Click to expand...
Click to collapse
I doubt it..
Are you sure the backend (exchange/isa publishing) is all correct?
Next up, you'll probably need to export the root certificate and import that on to your device as well as the cert thats been used to publish exchange. You can use owa to test all this... If you browse to https owa url you need to see all green (eg name matches, certificate valid (eg not expired), and trusted (including any root certs)). Ensure root certs are in the correct store when you import (I usually deselect the place certs automatically option).
The other thing is to check on how the cert was exported... I dont have the process to hand, but its on isaserver.org and MS....
All I've ever done is install the root certificate on the phone and everything works fine WM5/WM6.
All I've ever done is install the root certificate on the phone and everything is ok (WM5/WM6) although I'm not behind ISA
Your certificate name would have to match exactly what you have set up on exchange/server. In your example, certificate is named blahblah.wahwah.com... it has to be exactly the same name. So in your PDA the server name would be blahblah.wahwah.com. not blahblah.wahwah.com/exchange
Good luck.
Personal certificate you mean : Client certificate ?
-> work fine with YES an easy install (no need anymore complicate activesync process or Jacco dds....)
Woldcard certificate (*.toto.com also working fine!)
-> yes after a missing feature in WM5!
Ok, here's what I did.
Opened up my webmail page which is abc.defg.com\exchange
Clicked on the Lock and opened up the certificate. Under Certification Path it says abc.defg.com - no \exchange
Under Details I clicked on Thumbprint and Copy to File as a .cer
I named that file root.cer and put it in the directory on my 8525 and ran it, it installed.
I'm sure I'm missing several steps, but a lot of the threads are way over my head or not applicable to my situation. Any advice, or step by step would be greatly appreciated.
I am having problems with applications under Windows Mobile 5.0. When i try to run them i get the following error.
The file 'foo' cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. You might need to reinstall or restore this file.
1)Is there anyway of disabling the checks for trusted applications in Windows Mobile 5.0 on the Wizard?
I think this error becuz u r trying to run wm6 applications under wm5
vodovodo said:
I think this error becuz u r trying to run wm6 applications under wm5
Click to expand...
Click to collapse
I have same problem for BA wm 6.1 5.2.19199.1.0.0 PV DVH. Some people offered solution of HR. I don't agree with this. because we have to lose what we've been installing and spend more time re-installing them. so much time-wasting?
Any other solutions, please?!
Thanks in advance.
Problem may be cause of your SD card if u r using WM6. SD card PowerManagment value is set("DisablePowerManagment") to 0 in your registry. This means after a while your device will set your SD card power off for savg batttery. This cause to unread your program files etc while u start any program on your form your SD card device.
I fixed this problem like that;
By any registry editor:
Find the Path:
"Hkey_local_machine>drivers>sdcard>clientdrivers> class >SDMemory_Class"
after that find;
""DisablePowerManagement"" key and set its value to "1" than save and exit. Than soft reset your device. Problem will be fixed.
Sorry for my bad english.
Windows Mobile powered devices are shipped with default security settings.
The security model enables Mobile Operators to make post-production changes to security settings.
This can place significant restrictions on software which has not been signed and approved.
However you can change the default settings.
Take control of applications on your phone.
"All listed settings are decimal"
1. Connect the phone through ActiveSync.
2. Run your favorite remote registry editor "CeRegEditor (Download)" "Mobile Registry Editor (Download)" on your PC. http://ceregeditor.mdsoft.pl/
3. Navigate to HKEY_LOCAL_MACHINE\Security\Policies\Policies
Unsigned Prompt Policy:
This policy indicates whether the user is prompted to accept or reject unsigned .cab, theme, .dll and .exe files.
HKEY_LOCAL_MACHINE\Security\Policies\Policies
DWord = 0000101a Data = Use the following-->
0 = Indicates user will be prompted.
1 = Indicates user will not be prompted.
you will set that register decimal 1. that is solved problem
I have a HTC Tytn II and i get the same error. However, When trying to alter data using the reg editor you recommended, i found the 0000101a was already set to 1. Any other ideas?
Hi All,
Would someone be so kind to me a explain how I can move a package from the EXT directory or one Kitchen to the EXT directory on this version of kitchen.
I thought I could just simply copy the directory? So I had a go compiling a version of youtube from a different kitchen It would seem mot to work thou as I get the dreaded The file 'xx' cannot be opened. Ether it is not signed with a trusted certificate, or one of its components cannot be found. If the problem persists, try reinstalling or restoring the file.
Any ideas how to get this to work?
Or look for the tool MsSigner, it can be found in most kitchens.
You'll be able to sign it with a signature that is accepted after you aply the enablyRapi and SPCCerts policies.
You're probably missing a key dependency package like dshow (mshow?) or concurrence manager. Also, make sure the shortcut path is valid. Lord knows why, but that's the message you get for bad shortcuts.
josephwsl said:
I am having problems with applications under Windows Mobile 5.0. When i try to run them i get the following error.
The file 'foo' cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. You might need to reinstall or restore this file.
1)Is there anyway of disabling the checks for trusted applications in Windows Mobile 5.0 on the Wizard?
Click to expand...
Click to collapse
maybe .NET CF is missing or not up-to-date?
RAMMANN said:
maybe .NET CF is missing or not up-to-date?
Click to expand...
Click to collapse
ahh i love you bro, u saved me an hassle i tried everything and it was the net.cf
damii said:
you will set that register decimal 1. that is solved problem
Click to expand...
Click to collapse
When I try that, I'm told I don't have the authority to access that. :-(
now what?
Yeah, me too!!!
All of a sudden too. Everything was fine then I got these certificate errors every time I try to run Haret.exe to run android. This happened last night. Did my provider change something on me?
I try to change that registry key and it won't let me.
Re:this post
I have same problem for BA wm 6.1 5.2.19199.1.0.0 PV DVH. Some people offered solution of HR. I don't agree with this. because we have to lose what we've been installing and spend more time re-installing them. so much time-wasting?
You need hard reset!
Same problem "certificate errors" and a hard reset wont work
Plz help
damii said:
Windows Mobile powered devices are shipped with default security settings.
The security model enables Mobile Operators to make post-production changes to security settings.
This can place significant restrictions on software which has not been signed and approved.
However you can change the default settings.
Take control of applications on your phone.
"All listed settings are decimal"
1. Connect the phone through ActiveSync.
2. Run your favorite remote registry editor "CeRegEditor (Download)" "Mobile Registry Editor (Download)" on your PC.
3. Navigate to HKEY_LOCAL_MACHINE\Security\Policies\Policies
Unsigned Prompt Policy:
This policy indicates whether the user is prompted to accept or reject unsigned .cab, theme, .dll and .exe files.
HKEY_LOCAL_MACHINE\Security\Policies\Policies
DWord = 0000101a Data = Use the following-->
0 = Indicates user will be prompted.
1 = Indicates user will not be prompted.
you will set that register decimal 1. that is solved problem
Click to expand...
Click to collapse
Thanks! That really helped me. You literally saved me a good night sleep. I was already desperate.
Wow, it works Thank you!!!
Awesome!!!
This worked perfectly. Thanks so much for the help. I've been racking my brain about this for over an hour now, then found this through a search.
Thanks!
OMG
I have the same problem and I tried :
1/ Hard Reset
2/ Rom Update
3/ installed NetCFv3.5
4/ editing values in the registry
what els ????!
plzz i need your help
Can do this using the Registry Viewer and Network Profile Tool. I will be making a tool for samsung that will allow you to provision any xml.
Sent from my OMNIA7 using Board Express
Awesome. Care to share how?
Indeed very good news. When do you think the tool will be ready ?
Okay here it goes, its very similar to the HTC method which requires alot of tinkering.
Firstly, you need to be Dev Unlocked. Search for Chevron Unlocker if you dont already have it.
Secondly, you will need Tom XAP Installer which can be found as a sticky at the top of the thread.
Lastly you will need nico's Registry Viewer XAP Package which can be found here: http://forum.xda-developers.com/showpost.php?p=10623201&postcount=19
Now when you have all the above done, Load up Registry Viewer and goto:
HKLM\System\State\Samsung\Phone\Operator\Base
You will see some numbered subkeys. You can edit any of these but I reccommend editing [1].
Now navigate to [1] and tap FileName this is where you enter the desired xml.
Now I have a UK Omnia 7 but I flashed the Unbranded XENJK1 ROM which is for Netherlands. So whenever you run the Network Profile App you will see the Network for the sim card you are currently using plus 4 other networks to choose from which will be Netherlands Phone Operators.
Here is a little example to run your desired provxml file. Remember we tapped on FileName in the [1] subkey, now clear the current filename thats already there and type in: UK_XEU_BASE.xml
Exit Registry Viewer and startup the Network Profile App and Tap on the Top Profile. (This is why we edited [1]). You will see the loading dots in the middle of the screen to tell you the device is busy (thats the provxml installing). When its done, exit the Network Profile App and restart it. You will now notice that ALL the UK network providers are now in the Profile list.
So this definately works, we just now need a way to create our own provxml files and copy them to the Windows folder on our Omnia 7!
So this in effect is the same as what I found/hit in this thread. The problem is, we don't have a way of writing to the \windows directory. I've tried all sorts of things to read the provxml from other locations but it doesn't want to.
RustyGrom said:
So this in effect is the same as what I found/hit in this thread. The problem is, we don't have a way of writing to the \windows directory. I've tried all sorts of things to read the provxml from other locations but it doesn't want to.
Click to expand...
Click to collapse
If what he described (anyone tested it with a custom provxml file yet?) works, then maybe the network profile app doesn't need a provxml file within the Windows folder (to test too).
Patch network setup dll to apply provxml from the xap install folder.
i 've do this on my htc provxml deployer by this way you can deploy custom provxml.
RustyGrom said:
So this in effect is the same as what I found/hit in this thread. The problem is, we don't have a way of writing to the \windows directory. I've tried all sorts of things to read the provxml from other locations but it doesn't want to.
Click to expand...
Click to collapse
Yes its more or less the same, also the method everyone is using for Interop to use native DLLs in their code is only for using Subs/Functions inside of Interfaces. Now to call an Exported Function in a native DLL requires a different approach. We first have to build a DLL using C++ in Visual Studio 2008 for Windows Mobile 6 (yes you heard me right! ) and create an interface for the functions we wish to use in the native DLL we want to call. We then use C# to use the ComBridge method to load the custom made native DLL which will then provide us the access to the Subs/Functions so when these are called, our custom made DLL will then call the Exported Function in our target DLL.
Now this will also enable us to use the Exported Functions in Coredll.dll which have all the juicy functions that we used and loved in Windows Mobile, including Registry read and write and file access and IO operations.
Now, Any C++ Volunteers???
martani said:
If what he described (anyone tested it with a custom provxml file yet?) works, then maybe the network profile app doesn't need a provxml file within the Windows folder (to test too).
Click to expand...
Click to collapse
It definately works with xml in windows folder but not tried a custom one yet.
lyriquidperfection said:
Now when you have all the above done, Load up Registry Viewer and goto:
HKLM\System\State\Samsung\Phone\Operator\Base
..........................
Click to expand...
Click to collapse
We can do the same by runnig "/windows/AppPreInstaller.exe path_to_provxml_file" (using l3v5y.WP7DT.RemoteExecute).
The problem is that AppPreInstaller.exe refuses any attempts to install provxml from any place outside /windows folder.
xboxmod said:
Patch network setup dll to apply provxml from the xap install folder.
i 've do this on my htc provxml deployer by this way you can deploy custom provxml.
Click to expand...
Click to collapse
But aren't the DLLs signed? Did you just resign it with a different cert?
lyriquidperfection said:
Yes its more or less the same, also the method everyone is using for Interop to use native DLLs in their code is only for using Subs/Functions inside of Interfaces. Now to call an Exported Function in a native DLL requires a different approach. We first have to build a DLL using C++ in Visual Studio 2008 for Windows Mobile 6 (yes you heard me right! ) and create an interface for the functions we wish to use in the native DLL we want to call. We then use C# to use the ComBridge method to load the custom made native DLL which will then provide us the access to the Subs/Functions so when these are called, our custom made DLL will then call the Exported Function in our target DLL.
Now this will also enable us to use the Exported Functions in Coredll.dll which have all the juicy functions that we used and loved in Windows Mobile, including Registry read and write and file access and IO operations.
Now, Any C++ Volunteers???
Click to expand...
Click to collapse
I know some people (davux) have started this. I wrote a simple one but I suck at C++ so didn't get very far.
lyriquidperfection said:
It definately works with xml in windows folder but not tried a custom one yet.
Click to expand...
Click to collapse
That reg key doesn't include a path, just a file name. I guess you could throw in DiagnosisApp_1.provxml and see if it launches it (it just installs the Diagnosis app).
denominator77 said:
We can do the same by runnig "/windows/AppPreInstaller.exe path_to_provxml_file" (using l3v5y.WP7DT.RemoteExecute).
The problem is that AppPreInstaller.exe refuses any attempts to install provxml from any place outside /windows folder.
Click to expand...
Click to collapse
yes and this apps doesn't deploy custom provxml!
i've try on my Htc by editing provxml called by this apps.
apppreinstaller is run on 1st boot to install in rom Xap's via a provxml.
RustyGrom said:
That reg key doesn't include a path, just a file name. I guess you could throw in DiagnosisApp_1.provxml and see if it launches it (it just installs the Diagnosis app).
Click to expand...
Click to collapse
Ha! I entered DiagnosisApp_1.provxml into the FileName value and when I applied the modified profile, it did indeed install the Diagnosis App but not launch it. The provxml is for installation only as when I did this, Diagnosis appeared in my app list without keying in ##634# in the dialer!
lyriquidperfection said:
Ha! I entered DiagnosisApp_1.provxml into the FileName value and when I applied the modified profile, it did indeed install the Diagnosis App but not launch it. The provxml is for installation only as when I did this, Diagnosis appeared in my app list without keying in ##634# in the dialer!
Click to expand...
Click to collapse
Cool so as best I can tell looking at the disassembled code SetNetworkSetting(string settingName, out int bRet) from NwProfDLL.dll does that with "settingName" being the provxml file or the name assigned to the provxml file, leaning towards the latter.
Edit... maybe not... doesn't seem to work to launch DiagnosisApp_1.provxml. Might be due to my phone being carrier locked?
RustyGrom said:
Cool so as best I can tell looking at the disassembled code SetNetworkSetting(string settingName, out int bRet) from NwProfDLL.dll does that with "settingName" being the provxml file or the name assigned to the provxml file, leaning towards the latter.
Edit... maybe not... doesn't seem to work to launch DiagnosisApp_1.provxml. Might be due to my phone being carrier locked?
Click to expand...
Click to collapse
I have the same problem, too. My OMNIA 7 is still carrier locked (bad bootloader version...). I will try to unlock it tomorrow.
Doesnt matter if it is locked or unlocked. It doesnt launch it only installs it. It adds the icon to the app list if it wasnt there already.
Sent from my OMNIA7 using Board Express
lyriquidperfection said:
Doesnt matter if it is locked or unlocked. It doesnt launch it only installs it. It adds the icon to the app list if it wasnt there already.
Sent from my OMNIA7 using Board Express
Click to expand...
Click to collapse
In the NetworkProfile app, I can't choose a profile. It just says "This application can not be used if the device is in network locked state by mobile operator."
I tried bypassing it and just calling the function from my own code but it didn't work. That doesn't mean it won't work as I may be doing something wrong but the COM DLL could be checking the phone's lock status before trying to run the provxml.
RustyGrom said:
In the NetworkProfile app, I can't choose a profile. It just says "This application can not be used if the device is in network locked state by mobile operator."
I tried bypassing it and just calling the function from my own code but it didn't work. That doesn't mean it won't work as I may be doing something wrong but the COM DLL could be checking the phone's lock status before trying to run the provxml.
Click to expand...
Click to collapse
I don't think it's so much if the device is carrier-locked, but if the device is carrier-branded. I couldn't use the Network Profile tool with my original T-Mobile UK ROM, but since flashing it with the generic ROM that leaked, I can now use it, despite still being carrier-locked.
guys on your samsung device operator xml are deployed by configxml.exe in the windows folder called by AutoSim.exe imself run by coldinit.exe
the operator provxml are named like this FRANCE_SFR_BASE.xml
i'm looking if i find somethink.
i think autosim is also run by NetworkProfile.
RustyGrom said:
In the NetworkProfile app, I can't choose a profile. It just says "This application can not be used if the device is in network locked state by mobile operator."
I tried bypassing it and just calling the function from my own code but it didn't work. That doesn't mean it won't work as I may be doing something wrong but the COM DLL could be checking the phone's lock status before trying to run the provxml.
Click to expand...
Click to collapse
I can confirm that it works on my carrier locked OMNIA 7 !.
I edited the filename in the registry, then I launched the Network profile app.
If the first profile is allready choosen on your device, choose the second one and then the first one. It works only for the [1] registry filename so you have to choose the first profile of the list.
After that the diagnosis app appears on your device...
Edit: my device is T-Mobile Germany branded...
I bought a Samsung Saga i770 from eBay since it also works in GSM network. Sure it was locked to US Verizon Wireless. I discovered that there
is a easy to unlock this phone for free using the same way as unlocking Samsung i780 and Omnia i9xx. I believe it may work for Blackjack and other Samsung smartphones with Windows Mobile OS.
Download and copy attached archive into your smartphone and follow the guide. And if you find this guide useful make a little donation since
I really need a better Windows Mobile smartphone
gintasdx said:
I bought a Samsung Saga i770 from eBay since it also works in GSM network. Sure it was locked to US Verizon Wireless. I discovered that there
is a easy to unlock this phone for free using the same way as unlocking Samsung i780 and Omnia i9xx. I believe it may work for Blackjack and other Samsung smartphones with Windows Mobile OS.
Download and copy attached archive into your smartphone and follow the guide. And if you find this guide useful make a little donation since
I really need a better Windows Mobile smartphone
Click to expand...
Click to collapse
Hi,
I cant use this on the Saga i770 locked to verizon. If click any of the lnk files it gives me an error that the file is not certified or something like that. Can you advise?
Thanks
braindia said:
Hi,
I cant use this on the Saga i770 locked to verizon. If click any of the lnk files it gives me an error that the file is not certified or something like that. Can you advise?
Thanks
Click to expand...
Click to collapse
All you need to is to select Yes when you see a message
"The program is from unknown publisher". It's from Omnia ROM.
gintasdx said:
All you need to is to select Yes when you see a message
"The program is from unknown publisher". It's from Omnia ROM.
Click to expand...
Click to collapse
Hi Thanks a lot for your response. This program actually doesnt work, it throws up a window and says
The file "Personalize" cannot be opened. Either it is not signed with a trusted certificate or one of its components cannot be found. If the problem persists, try reinstallling or restoring this file.
All three lnk files give the same error.
Thanks again
It's weird since you only need to extract the all files and open link files. Those link files are pointing into "Personalize.exe" near the .lnk files.
Try to copy "Personalize.exe" into Windows directory and lunch the .lnk files again.
gintasdx said:
It's weird since you only need to extract the all files and open link files. Those link files are pointing into "Personalize.exe" near the .lnk files.
Try to copy "Personalize.exe" into Windows directory and lunch the .lnk files again.
Click to expand...
Click to collapse
same error for me but last month i did use this method to unlock a phone and it worked fine and not i cant remember how i did get pass the error.
any help any body?
braindia said:
Hi Thanks a lot for your response. This program actually doesnt work, it throws up a window and says
The file "Personalize" cannot be opened. Either it is not signed with a trusted certificate or one of its components cannot be found. If the problem persists, try reinstallling or restoring this file.
All three lnk files give the same error.
Thanks again
Click to expand...
Click to collapse
ok ok i just unlock it again. copy all the files to the windows folder and they will work fine then follow the pdf file. DONE!