One fix for 0x803F8006 errors in Windows 10 Mobile Store update on Lumia devices
This involves using Fiddler and FiddlerScript so download both from http://www.getfiddler.com and http://www.telerik.com/download/fiddler/fiddlerscript-editor
Install and open Fiddler then install the FiddlerScript Editor,
In Fiddler, tap on Tools->Fiddler Options. In the HTTPS tab, checkmark everything. Add fe3.delivery.mp.microsoft.com to the box under "Skip decryption for the following hosts"
In the Connections tab, checkmark "Allow remote computers to connect"
Point your phone to your computer's IP and listening port (8888 by default) [http://IP:8888], tap on the fiddler cert and install it to your phone.
Go into the WiFi settings on your phone, tap on the WiFi SSID that you're connected to and you should see a drop down for proxy configuration. Choose manual setup and enter in the same IP and port that was used above.
In the FiddlerScript editor, find the section "static function OnBeforeRequest(oSession: Session)" and add the following to the last line before the ending curly brace:
Lumia 1520,930:
Code:
if(oSession.uriContains("/licenses/content"))
{
oSession.utilDecodeRequest();
oSession.utilReplaceInRequest("MICROSOFT_CORPORATION","NOKIA");
}
Lumia 640,640 XL and others. Thanks @compu829
Code:
if(oSession.uriContains("/licenses/content"))
{
oSession.utilDecodeRequest();
//emulate a Lumia 630
oSession.utilReplaceInRequest("\"hardwareManufacturer\":\"Public\"","\"hardwareManufacturer\":\"NOKIA\"");
oSession.utilReplaceInRequest("\"hardwareType\":\"Public\"","\"hardwareType\":\"RM-976\"");
}
Click the Save Script button
Back on your phone, click on the Store and try to update any app giving you the 0x803F8006 error (by app in this case, I'm talking something like Glance, Network Settings, etc.. a Nokia OEM app).
You SHOULD (keyword here) achieve success. If not, sorry bro .
-snickler
Didn't work for me
I'm getting the error with "Rate Your Device" and "Network services"
mattman86 said:
Didn't work for me
I'm getting the error with "Rate Your Device" and "Network services"
Click to expand...
Click to collapse
Darn.. This is what l used to get past Network Services. You had fiddler up and running and your phone pointed to the fiddler machine as the proxy address right?
snickler said:
Darn.. This is what l used to get past Network Services. You had fiddler up and running and your phone pointed to the fiddler machine as the proxy address right?
Click to expand...
Click to collapse
How do I set the proxy address? I don't see a setting for it anywhere.
One thing I failed to add in OP, but thought it was obvious. You MUST set your phone's WiFi connection to use your computer's ip and fiddler port as the proxy address for any of this to potentially work
mattman86 said:
How do I set the proxy address? I don't see a setting for it anywhere.
Click to expand...
Click to collapse
Go back into the WiFi settings, tap on the WiFi SSID that you're connected to and you should see a drop down for proxy configuration. Choose manual setup and enter the information in there.
Tested on Lumia 930
snickler said:
Go back into the WiFi settings, tap on the WiFi SSID that you're connected to and you should see a drop down for proxy configuration. Choose manual setup and enter the information in there.
Click to expand...
Click to collapse
You are a freaking genius! It worked perfectly. Thank you so much.
No store connection. 640 xl.
I have no fiddler cert to install on phone...
Did it:
7. Open Internet Explorer on your phone and navigate to http://[pc.ip.add.ress]:8877 where [pc.ip.add.ress] is the IP address of the PC
8. Tap on the link at the bottom to the fiddler root certificate
9. When prompted click open and then install to trust the cert and ok at the confirmation
did it using this: http://forum.xda-developers.com/win...x-fix-0x803f8006-error-regedit-nokia-t3252827
work for some apps, but apps like motion data, network services, mixradio, here drive, etc dont work.
Not Working for Glance
titi66200 said:
Not Working for Glance
Click to expand...
Click to collapse
I reformatted some of the OP. Make sure there is no space in any characters in the word "CORPORATION".
works with Here Maps, here Transit, Aide et conseil, rate your device, networks service, tactile, affichage, hub d'appareils, audio
but not Glance
titi66200 said:
works with Here Maps, here Transit, Aide et conseil, rate your device, networks service, tactile, affichage, hub d'appareils, audio
but not Glance
Click to expand...
Click to collapse
Hmm. I never had an issue with glance. Probably because I uninstalled it, but it still works perfectly for me.
The ONLY way to uninstall it is by enabling the web management feature, goto to Apps, look in the drop down until you find Nokiacorporation blah blah glancescreen. Then press the button to uninstall it. After that, no more annoying update reminders
This is what my 640XL wants to send:
Code:
"deviceContext":{"hardwareManufacturer":"Public","hardwareType":"Public",
For me, this works for most apps, but NOT motion data:
Code:
oSession.utilReplaceInRequest("Public","NOKIA");
augustinionut said:
No store connection. 640 xl.
I have no fiddler cert to install on phone...
Did it:
7. Open Internet Explorer on your phone and navigate to http://[pc.ip.add.ress]:8877 where [pc.ip.add.ress] is the IP address of the PC
8. Tap on the link at the bottom to the fiddler root certificate
9. When prompted click open and then install to trust the cert and ok at the confirmation
did it using this: http://forum.xda-developers.com/win...x-fix-0x803f8006-error-regedit-nokia-t3252827
Click to expand...
Click to collapse
the address to install the root cert is the same address and port that you put in for the fiddler proxy.
---------- Post added at 06:03 PM ---------- Previous post was at 05:51 PM ----------
ok so, my brand new 640 is sending "public" for bot the phone manufacturer and model, so I used the following to fix all of my stuck downloads:
Code:
if(oSession.uriContains("/licenses/content"))
{
oSession.utilDecodeRequest();
//emulate a Lumia 630
oSession.utilReplaceInRequest("\"hardwareManufacturer\":\"Public\"","\"hardwareManufacturer\":\"NOKIA\"");
oSession.utilReplaceInRequest("\"hardwareType\":\"Public\"","\"hardwareType\":\"RM-976\"");
}
Work for me on Lumia 640 LTE but if I hard reset the phone some app don't have image in windows update.. and not update... probably for store new update on sd card
Regards
compu829 said:
the address to install the root cert is the same address and port that you put in for the fiddler proxy.
---------- Post added at 06:03 PM ---------- Previous post was at 05:51 PM ----------
ok so, my brand new 640 is sending "public" for bot the phone manufacturer and model, so I used the following to fix all of my stuck downloads:
Code:
if(oSession.uriContains("/licenses/content"))
{
oSession.utilDecodeRequest();
//emulate a Lumia 630
oSession.utilReplaceInRequest("\"hardwareManufacturer\":\"Public\"","\"hardwareManufacturer\":\"NOKIA\"");
oSession.utilReplaceInRequest("\"hardwareType\":\"Public\"","\"hardwareType\":\"RM-976\"");
}
Click to expand...
Click to collapse
With this i updated lumia camera.appxbundle previously installed from file.
Deltafox79 said:
Work for me on Lumia 640 LTE but if I hard reset the phone some app don't have image in windows update.. and not update... probably for store new update on sd card
Regards
Click to expand...
Click to collapse
That's an issue with MS and the store. For instance, I had to uninstall Lumia Help + Tips because it doesn't exist on the store for W10M. The only way to get everything without having issues is to get all the updates will on WP8.1 then upgrade. Its stupid. When you HR, it nukes everything
This worked on my Lumia 640:
Code:
if(oSession.uriContains("/licenses/content"))
{
oSession.utilDecodeRequest();
//emulate a Lumia 1520
oSession.utilReplaceInRequest("\"hardwareManufacturer\":\"Public\"","\"hardwareManufacturer\":\"NOKIA\"");
oSession.utilReplaceInRequest("\"hardwareType\":\"Public\"","\"hardwareType\":\"Lumia 1520\"");
oSession.utilReplaceInRequest("\"mobileOperator\":\"Public\"","\"mobileOperator\":\"att-us\"");
}
More importantly: THANK YOU to the OP for figuring out this workaround and sharing it with us.
Related
Hello, i am new here, and i will begin with this post
What do you need:
Android phone (obviously)
Windows 7 PC (XP are not tested, testers welcome)
X-Plore File Manager
Home WiFi Network
Steps:
1. Download X-Plore file manager at Play Market. (i cannot post links now)
2. Go to Control Panel > Network and Sharing center > Advanced sharing settings > click all to on. (if you are unsure / have an unsecured network just do this everytime you want to transfer!)
3. Connect your phone to your wifi network
4. Open X-Plore
5. Set up the LAN (if hidden click show > show LAN)
6. Add server. (Scan is not working on me.)
7. fill in the blanks. path and domain do not need to be filled. Username is your windows username and password if you use (blank if not used).
8. fill the IP with 192.168.1.2 (you can try with 192.168.1.3 / 1.4 etc.. 1.2 usually works if you connect the PC first.)
9. click test. (if connection failure go back to step 8!)
10. now you can open your Users directory! (if you want to open the C:/ D:/.. open the settings in X-Plore and switch Show Hidden Files to on)
now you can upload and download files from or to your PC!
if there is any questions you can ask here. I will reply as soon as i can.
i do all the steps correct, i find my server, but when i try to enter in the server i get wrong username password, i enter my windows user id and i dont have any password to my account.
good advice, but i find the SGY screen too small for browsing my PC.
I prefer using Samba Filesharing (https://play.google.com/store/apps/details?id=com.funkyfresh.samba) and access my SD Card from my windows PC
wifi file transfr pro
Sent from my GT-S5360 using xda app-developers app
Just use airdroid )
Sent from my GT-S5360 using xda premium
blackjack1942 said:
Just use airdroid )
Sent from my GT-S5360 using xda premium
Click to expand...
Click to collapse
Yep. Airdroid is the best of all Ive tried!
for me this is the best,full Access and exchange data whenever I want and when tethering.:good:give it a try,its awesome.
http://forum.xda-developers.com/showthread.php?t=1752928
LoL I'm always using bluetooth D:
Airdroid is better.
With airdroid you don't need to install nothing in your computer. And it's better because you can install apps, read your messages, call to somebody and it's all in your web browser.
but with the method from my post u have full acces of all files on the device,you can install apps,full acces of system files,send sms,costomize your phone,you can make all what you want and many more and thats all in tethering mode.with airdroid it doesnt go.for me tha best.and its all in your webbrowser too.
Tested and fully working on vista
thanks
Confirmed working on Win 8.1
however my setting is different
in X-plore windows, the fields need to be filled are Server; Username; Password
[Server]
you can find the IP by opening up cmd and type "ipconfig"
look at IPv4 Address, that's what you have to type in server field
[Username]
this field, type your windows ID (the ID you use with windows store)
[Password]
the password of your windows ID
Hope it helps for Win 8.1 user
revomalik said:
Confirmed working on Win 8.1
however my setting is different
in X-plore windows, the fields need to be filled are Server; Username; Password
[Server]
you can find the IP by opening up cmd and type "ipconfig"
look at IPv4 Address, that's what you have to type in server field
[Username]
this field, type your windows ID (the ID you use with windows store)
[Password]
the password of your windows ID
Hope it helps for Win 8.1 user
Click to expand...
Click to collapse
Thank you for the ipconfig info; I couldn't get it to work because I didn't know what the server address was. X-plore should include this information in their wiki page.
I constantly get 0xC00000BB error from X-Plore eventhough i properly configured my Windows 7 to be logged in.
Is there anyone having problems related to X-Plore's LAN feature that is not working properly?
kimiraikkonen85 said:
I constantly get 0xC00000BB error from X-Plore eventhough i properly configured my Windows 7 to be logged in.
Is there anyone having problems related to X-Plore's LAN feature that is not working properly?
Click to expand...
Click to collapse
I was using X-plore on my Xiaomi mi Box 4s without any issues but after reset my router X-plore doesn't find my pc on Lan network....
I didn't find a solution yet....
I've tried this guide, but t doesn't help. (yes .xap).
Head to Settings > Update & Recovery and tap on “For Developers“
You will find three options here. Choose the second one which lets you sideload apps from other sources.
Next, transfer/copy the appx file of the app to your Phone/SD Card storage.
Browse to the file via File Explorer, tap on the file and it will throw an install prompt.
If you really want to give it a try, tap Install else tap cancel.
If all goes well, you will find the app under the app list under 20 sec.
Click to expand...
Click to collapse
And this:
Head to Settings > Update & Recovery and tap on “For Developers“.
Under Device Portal, turn on remote diagnostics over USB and LAN connections.
You can either turn off Authentication or turn on it. Turning it off eases things a little bit.
After turning remote diagnostics On , It will provide an IP Address to connect to.
Enter that IP address either in W10 Mobile Edge browser or any PC Browser(depends on where you have appx to install). Make sure your phone is unlocked.
After authenticating to device portal page click Apps Section on the Top Left hand Side.
Under the Install App division Click Browse to select the Appx/Appxbundle you are about to install.
After adding the Appx/Appxbundle just Click “Go” button and that’s it.If all goes well you can find your app under app list.
Click to expand...
Click to collapse
That may be the problem?
You can't install xap by this way.
You must use
XapDeploy.exe from SDK 8.0 (xap 7.0, 7.1, 8.0)
or
AppDeploy.exe from SDK 8.1 (xap 8.1)
Thanks, now i'm happy
L2TP work as well.
IKEv2 not route , and can not get the vaild IP address.
Can anyone solve this problem?
0oVicero0 said:
L2TP work as well.
IKEv2 not route , and can not get the vaild IP address.
Can anyone solve this problem?
Click to expand...
Click to collapse
are you on Redstone build ?
seems VPN broken on Redstone , not only IKEV2
It's working fine for me. IKEv2 IPsec, Strongswan server.
Requires editing the connections file on the phone, though. Windows 10 mobile (same for PC) will not use the default route provided by the VPN server and there is no toggle to send all the traffic through the VPN like there was on Windows Phone 8/8.1 in the VPN connection settings GUI.
So, 'IpPrioritizeRemote=1' has to be set manually for the connection in rasphone.pbk on the phone. This can be achieved and requires an NTFS formatted SD card with the modified rasphone.pbk and a symbolic link to 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections' (you can make this symbolic link on the PC).
First you have to create a VPN connection on the phone, then delete it. This will make 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections\Pbk\' user writable and you can put a modified rasphone.pbk file in that location by accessing it through the symbolic link on the SD card.
If you don't know how to make the rasphone.pbk file, first configure the connection as it should be on the phone, then copy rasphone.pbk from the phone, edit it on PC and add 'IpPrioritizeRemote=1'. Delete the VPN connection from the phone, and put the modified rasphone file in its place.
Reboot might be required after copying the file manually.
^ This is for phones that can't be interop unlocked like my Lumia 950XL. It's much easier for other phones which can be unlocked and full FS access is achievable.
Pretty stupid omission on Microsoft's part. I've been shouting about it on windows feedback since Windows 10 Mobile was released to insiders, but no one listens.
VPN is broken in Windows 10. Period! Microsoft it's not going to fix it.
w.bogdan said:
VPN is broken in Windows 10. Period! Microsoft it's not going to fix it.
Click to expand...
Click to collapse
No period. It's broken, but it can be made to work. Who put you in charge of dropping the period?
DLS123 said:
No period. It's broken, but it can be made to work. Who put you in charge of dropping the period?
Click to expand...
Click to collapse
Search for "Windows 10 DNS resolution" or other VPN related issues in Windows 10. It's not a bug, it's a feature ... for NSA, the government of China and so on.
w.bogdan said:
Search for "Windows 10 DNS resolution" or other VPN related issues in Windows 10. It's not a bug, it's a feature ... for NSA, the government of China and so on.
Click to expand...
Click to collapse
I know about it and took measures against it. They call it Smart multi-homed name resolution. It can be disabled on Desktop and also the order of DNS servers used can be set for each VPN connection. This isn't really caused by the broken built-in VPN client, but the way Windows 10 itself works out of the box.
DLS123 said:
I know about it and took measures against it. They call it Smart multi-homed name resolution. It can be disabled on Desktop and also the order of DNS servers used can be set for each VPN connection. This isn't really caused by the broken built-in VPN client, but the way Windows 10 itself works out of the box.
Click to expand...
Click to collapse
It's not just desktop. On W10M, DNS leaks, VPN connected icon is barely visible and you don't get notified if the VPN connection drops. Is hard to believe Satya Nadella is so dumb not to notice.
w.bogdan said:
It's not just desktop. On W10M, DNS leaks, VPN connected icon is barely visible and you don't get notified if the VPN connection drops. Is hard to believe Satya Nadella is so dumb not to notice.
Click to expand...
Click to collapse
I know there are DNS leaks on W10Mobile and multi-homing can't be disabled, but I don't have a problem with that. The purpose of VPN for me is to gain access to other private networks and encrypt the communication with them. DNS leaks aren't that critical. It's not like I don't want my employer to know what websites I access while connecting to VPNs from their network. I couldn't care less to be honest that they're logging my DNS querries. And I also don't live in China.
Even if they have my DNS records they still won't ever be able to break the encrypted IPsec tunnels and get any glimpse of what's passing through them.
Wasn't able to download rasphone.pbk from the phone but could upload one.
I used my Windows 10 PC and created the connections there. Then I disabled IpPrioritizeRemote and used the powershell cmdlet Add-VpnConnectionRoute to add a route to the pbk file pointing to my local subnet.
I am now able to connect to the internet and access corporate resources at the same time.
I however couldn't connect from one particular app which worked in 8.1. There may be issues with non universal apps.
DLS123 said:
It's working fine for me. IKEv2 IPsec, Strongswan server.
Requires editing the connections file on the phone, though. Windows 10 mobile (same for PC) will not use the default route provided by the VPN server and there is no toggle to send all the traffic through the VPN like there was on Windows Phone 8/8.1 in the VPN connection settings GUI.
So, 'IpPrioritizeRemote=1' has to be set manually for the connection in rasphone.pbk on the phone. This can be achieved and requires an NTFS formatted SD card with the modified rasphone.pbk and a symbolic link to 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections' (you can make this symbolic link on the PC).
First you have to create a VPN connection on the phone, then delete it. This will make 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections\Pbk\' user writable and you can put a modified rasphone.pbk file in that location by accessing it through the symbolic link on the SD card.
If you don't know how to make the rasphone.pbk file, first configure the connection as it should be on the phone, then copy rasphone.pbk from the phone, edit it on PC and add 'IpPrioritizeRemote=1'. Delete the VPN connection from the phone, and put the modified rasphone file in its place.
Reboot might be required after copying the file manually.
^ This is for phones that can't be interop unlocked like my Lumia 950XL. It's much easier for other phones which can be unlocked and full FS access is achievable.
Pretty stupid omission on Microsoft's part. I've been shouting about it on windows feedback since Windows 10 Mobile was released to insiders, but no one listens.
Click to expand...
Click to collapse
Thanks!!! It's working fine!
I think Microsoft do not want to fix it.
0oVicero0 said:
I think Microsoft do not want to fix it.
Click to expand...
Click to collapse
Yeah, looks like that's the case. There is very little feedback in insider hub about VPN problems. Very few care about these issues so probably MS has no incentive to fix and prefer to rely on MDM for VPN configuration on these devices. Now if only that were an option for mere mortals...
How to import self-signed key or export builtin cert for a strongswan server?
DLS123 said:
It's working fine for me. IKEv2 IPsec, Strongswan server.
Click to expand...
Click to collapse
How did you get the VPN connection set up properly (aside from the IpPrioritizeRemote setting)?
I've set up a strongswan server and generated my own self-signed keys using ipsec pki, but when I import the key to my Lumia 1520 (by tapping it using the Files app and tapping import at the prompt), the VPN connection will not send that cert. Instead it sends a certificate issued by CN=Microsoft Genuine Windows Phone CA15" with an OU that looks like a GUID.
So I tried punting and just exporting that certificate to place on my strongswan server ... but I can't figure out how to get the certificate off the phone either. So how do I do either one?
rlively said:
How did you get the VPN connection set up properly (aside from the IpPrioritizeRemote setting)?
I've set up a strongswan server and generated my own self-signed keys using ipsec pki, but when I import the key to my Lumia 1520 (by tapping it using the Files app and tapping import at the prompt), the VPN connection will not send that cert. Instead it sends a certificate issued by CN=Microsoft Genuine Windows Phone CA15" with an OU that looks like a GUID.
So I tried punting and just exporting that certificate to place on my strongswan server ... but I can't figure out how to get the certificate off the phone either. So how do I do either one?
Click to expand...
Click to collapse
I don't know what self generated certificate your phone sends, but you shouldn't use that.
You should generate a client certificate on the strongswan server then you should include both the root CA and the client certificate and pack them together in a PKCS 12 file (.p12) which you open on the phone and import. The phone will choose the proper certificate stores to import to. Did you do that?
https://www.zeitgeist.se/2013/11/22/strongswan-howto-create-your-own-vpn/
Just follow this tutorial., with the only mention that you should add "--flag clientAuth" to the command line for generating the client certificate.
DLS123 said:
I don't know what self generated certificate your phone sends, but you shouldn't use that.
You should generate a client certificate on the strongswan server then you should include both the root CA and the client certificate and pack them together in a PKCS 12 file (.p12) which you open on the phone and import. The phone will choose the proper certificate stores to import to. Did you do that?
Just follow this tutorial., with the only mention that you should add "--flag clientAuth" to the command line for generating the client certificate.
Click to expand...
Click to collapse
Thanks, that is a good tutorial - I definitely did not use the clientAuth flag (the ipsec tutorial for openWRT didn't include it: openwrt doc/howto/vpn.ipsec.roadwarrior), so I tried generating new certs with clientAuth. Unfortunately I got the same results. My Win10 phone sent the same "Microsoft Genuine Windows Phone CA15" cert.
Did you import the PKCS 12 file just by tapping it in the Microsoft "Files" app on the phone or did you use another method? I'm verifying the certs with the Microsoft "Certificates" app, which does show that the original cert I generated has no "Enhanced usages" but the second has "Client Authentication." Still the builtin VPN client won't pick it to send to my strongSwan server.
I did away completely with my configuration and started over with the win7 configuration here: strongswan wiki: Win7CertReq but none of it will help if I can't get my phone to actually send the correct certificate ... this configuration did something a little different though:
My phone sent the correct certificate in the "received TLS peer certificate" line followed by these error messages:
no trusted certificate found for 'my-CN-here' to verify TLS peer
sending fatal TLS alert 'certificate unknown'
Despite the fact that I have the certificate pem in /etc/ipsec.d/certs ...
in any case it continues on and sends the Microsoft cert afterwards and then the server throws "no peer config found" (since I don't have the public cert loaded for that MS cert).
Followed up on the error here: strongswan wiki /issues/785
I also tried it with "eap_identity=%identity" instead of "eap_identity=%any".
Frustrating that it works great for Win7 but I just can't get a Win10 phone working. Any guides out there specifically for Windows phone + Strongswan?
rlively said:
Thanks, that is a good tutorial - I definitely did not use the clientAuth flag (the ipsec tutorial for openWRT didn't include it: openwrt doc/howto/vpn.ipsec.roadwarrior), so I tried generating new certs with clientAuth. Unfortunately I got the same results. My Win10 phone sent the same "Microsoft Genuine Windows Phone CA15" cert.
Did you import the PKCS 12 file just by tapping it in the Microsoft "Files" app on the phone or did you use another method? I'm verifying the certs with the Microsoft "Certificates" app, which does show that the original cert I generated has no "Enhanced usages" but the second has "Client Authentication." Still the builtin VPN client won't pick it to send to my strongSwan server.
I did away completely with my configuration and started over with the win7 configuration here: strongswan wiki: Win7CertReq but none of it will help if I can't get my phone to actually send the correct certificate ... this configuration did something a little different though:
My phone sent the correct certificate in the "received TLS peer certificate" line followed by these error messages:
no trusted certificate found for 'my-CN-here' to verify TLS peer
sending fatal TLS alert 'certificate unknown'
Despite the fact that I have the certificate pem in /etc/ipsec.d/certs ...
in any case it continues on and sends the Microsoft cert afterwards and then the server throws "no peer config found" (since I don't have the public cert loaded for that MS cert).
Followed up on the error here: strongswan wiki /issues/785
I also tried it with "eap_identity=%identity" instead of "eap_identity=%any".
Frustrating that it works great for Win7 but I just can't get a Win10 phone working. Any guides out there specifically for Windows phone + Strongswan?
Click to expand...
Click to collapse
I import the certificates from file explorer on phone or from the OneDrive app, doesn't matter.
Have you actually set the EAP identity correctly in the client certificate? CN has to be exactly the same as --san
That's the eap_identity which has to be known if you use EAP-TLS.
I don't know what else to say, maybe post your ipsec.conf with censored IPs
DLS123 said:
I import the certificates from file explorer on phone or from the OneDrive app, doesn't matter.
Have you actually set the EAP identity correctly in the client certificate? CN has to be exactly the same as --san
That's the eap_identity which has to be known if you use EAP-TLS.
I don't know what else to say, maybe post your ipsec.conf with censored IPs
Click to expand...
Click to collapse
For the moment I just have mschap authentication with no certificate and it works. The certificate is just giving me fits.
On my client certificate my CN is not the same as the san. My san is set to the FQDN of my VPN server ... the CN of my client certificate is an identifier for my client.
What does the VPN server use for eap_identity - the CN from the client certificate when set to eap_identity=%identity ?
---------- Post added at 10:01 PM ---------- Previous post was at 09:35 PM ----------
rlively said:
For the moment I just have mschap authentication with no certificate and it works. The certificate is just giving me fits.
On my client certificate my CN is not the same as the san. My san is set to the FQDN of my VPN server ... the CN of my client certificate is an identifier for my client.
What does the VPN server use for eap_identity - the CN from the client certificate when set to eap_identity=%identity ?
Click to expand...
Click to collapse
My server certificate does have a CN and san that match. I thought I read somewhere that having that same value in the client san would help the client match up the cert to send to the server, at least for Windows Phone. Of course I can't find that guide now, so maybe I misread. I do see that in the example on https://www.zeitgeist.se/2013/11/22/strongswan-howto-create-your-own-vpn/ that the server CN and san match and the client CN and san match each other.
In the client certificate you should have [email protected]_FQDN --san server_FQDN --flag clientAuth
the eap_identity used by strongswan is the part before @ from CN.
It won't match anything when using eap_idenity=%identity if you don't do it like this.
Are there any relevant registry files we can access with interop tools?
DLS123 said:
It's working fine for me. IKEv2 IPsec, Strongswan server.
Requires editing the connections file on the phone, though. Windows 10 mobile (same for PC) will not use the default route provided by the VPN server and there is no toggle to send all the traffic through the VPN like there was on Windows Phone 8/8.1 in the VPN connection settings GUI.
So, 'IpPrioritizeRemote=1' has to be set manually for the connection in rasphone.pbk on the phone. This can be achieved and requires an NTFS formatted SD card with the modified rasphone.pbk and a symbolic link to 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections' (you can make this symbolic link on the PC).
First you have to create a VPN connection on the phone, then delete it. This will make 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections\Pbk\' user writable and you can put a modified rasphone.pbk file in that location by accessing it through the symbolic link on the SD card.
If you don't know how to make the rasphone.pbk file, first configure the connection as it should be on the phone, then copy rasphone.pbk from the phone, edit it on PC and add 'IpPrioritizeRemote=1'. Delete the VPN connection from the phone, and put the modified rasphone file in its place.
Reboot might be required after copying the file manually.
^ This is for phones that can't be interop unlocked like my Lumia 950XL. It's much easier for other phones which can be unlocked and full FS access is achievable.
Pretty stupid omission on Microsoft's part. I've been shouting about it on windows feedback since Windows 10 Mobile was released to insiders, but no one listens.
Click to expand...
Click to collapse
Hi I tried your manual, unfortunately without any success
If I Read it correctly you do the following steps:
1) Format sd card on NTFS
2) On the sd card create symbolic link to: C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections
3) Insert sd in phone
4) Create a vpn connection on the phone
5) Delete al the vpn connections on the phone
6) Use the phone to put a new (modified) rasphone.pbk file on the sd card (though onedrive??). I cant access my sd om my pc when usb is connected
7) Reboot the phone
8) Make a new vpn connection (can it have a different name?)
Can someone verify if i miss something?
I'll be very happy if this works
Hello all..as i was saying that i can't add registry in my phone using interop tool. I am using interop tool L. i am getting this error
something went worng could not add specific key,no changes to phone registry were made.so i used registry editor but nothing changed there is no new registry created.here are screenshots....thank u
[email protected] said:
Hello all..as i was saying that i can't add registry in my phone using interop tool. I am using interop tool L. i am getting this error
something went worng could not add specific key,no changes to phone registry were made.so i used registry editor but nothing changed there is no new registry created.here are screenshots....thank u
Click to expand...
Click to collapse
I happen to have the same problem lately... If you try to read the key/value, it's gonna return the value/key value but, no registry is created.
xxJMarian said:
I happen to have the same problem lately... If you try to read the key/value, it's gonna return the value/key value but, no registry is created.
Click to expand...
Click to collapse
See if i read the value the operation says read but if i try to add registry it says no specific key added, no change to phone registry were made and i am not understanding why this is happening..
I have had imports fail but the Edit Registry option works. And vice versa. Depends on the device too. On the Nokia models I can edit almost anywhere just by installing and enabling interop unlock. If I use my 950 XL or a 650 which have some added security features it becomes hit or miss. Even if I push the generic ndtk cab to the device. Other times I have to do a hard reset before I can edit the registry where I need. Usually after a recent update or build version release.
EDIT: I just looked at your pics. You are trying to add Sirepuser to the system control key but why are you adding it that way? I am assuming the template is not working? Also why did you need to toggle Restore NDTKsvc? Was editing working before that and then stopped? Lastly which device model are you using Interop Tools on?
I get what you mean. Must be interop tools can add keys/values there using the template but can't read them.
nate0 said:
On the Nokia models I can edit almost anywhere
Click to expand...
Click to collapse
Can you edit or create keys/values inside HKCU? Registry editor shows that you "created" the key/value you want but, once you look at it with the browser, the value or key created is not there...
It seems the key or values under certain areas of the registry are either not supported or not accessible for read from InteropTools.
Edit: If I enable root access after unlocking the boot loader on my 1520 I can see the key values under HKLM\BCD00000001. Must be related to a plolicy interop tools cannot run past, and unlocking the security policies allows it to be unrestricted.
nate0 said:
It seems the key or values under certain areas of the registry are either not supported or not accessible for read from InteropTools.
Edit: If I enable root access after unlocking the boot loader on my 1520 I can see the key values under HKLM\BCD00000001. Must be related to a plolicy interop tools cannot run past, and unlocking the security policies allows it to be unrestricted.
Click to expand...
Click to collapse
Ok agree what you say this means interop tool can't read and write these keys but they are present then why i cant get cmd access.
I have no idea. That's a whole other topic...have you read thoroughly how to do it from the forums? What steps have you done?
nate0 said:
I have no idea. That's a whole other topic...have you read thoroughly how to do it from the forums? What steps have you done?
Click to expand...
Click to collapse
Yes i have read all the steps carefully and do as it says but nothing happened i am getting the same error i thinked there is no key under ssh that's why i am getting this error but after knowing that interop tool can't read these keys i don't know what to do ?. Were you able to get cmd access???
nate0 said:
I have had imports fail but the Edit Registry option works. And vice versa. Depends on the device too. On the Nokia models I can edit almost anywhere just by installing and enabling interop unlock. If I use my 950 XL or a 650 which have some added security features it becomes hit or miss. Even if I push the generic ndtk cab to the device. Other times I have to do a hard reset before I can edit the registry where I need. Usually after a recent update or build version release.
EDIT: I just looked at your pics. You are trying to add Sirepuser to the system control key but why are you adding it that way? I am assuming the template is not working? Also why did you need to toggle Restore NDTKsvc? Was editing working before that and then stopped? Lastly which device model are you using Interop Tools on?
I get what you mean. Must be interop tools can add keys/values there using the template but can't read them.
Click to expand...
Click to collapse
Its was in the tutorial it said on ndtksvc and reboot and i am using Microsoft Lumia 540 os build 10.0.15063.540 interop tool L version 2.0.79
[email protected] said:
Yes i have read all the steps carefully and do as it says but nothing happened i am getting the same error i thinked there is no key under ssh that's why i am getting this error but after knowing that interop tool can't read these keys i don't know what to do . Were you able to get cmd access???
Click to expand...
Click to collapse
Yes, but via ssh. CMD access from the IT app requires elevated privileges and some other tweaks. I can open that part of InteropTools with root enabled without error but was unable to type. You would need to check with gus33000 about that. I just use cmd over ssh for now.
---------- Post added at 03:56 PM ---------- Previous post was at 03:54 PM ----------
[email protected] said:
Its was in the tutorial it said on ndtksvc and reboot and i am using Microsoft Lumia 540 os build 10.0.15063.540 interop tool L version 2.0.79
Click to expand...
Click to collapse
You should only need to toggle the Restore NDTKsvc if you suddenly lose the ability to edit the registry after successfully getting access the first time. I have had this happen after an update or if system settings updated...
The registry browser has limited access to the registry, it can't enumerate every key, but that totally doesn't mean they aren't here, that's why you have a registry editor section in the page to actually add values where you can't see anything, in your screenshots you wrote fine to those values, so it worked.
gus33000 said:
The registry browser has limited access to the registry, it can't enumerate every key, but that totally doesn't mean they aren't here, that's why you have a registry editor section in the page to actually add values where you can't see anything, in your screenshots you wrote fine to those values, so it worked.
Click to expand...
Click to collapse
Then why i can't get cmd access i have tried everything....every step as it was in interop tool but nothing happened. I tried to connect to ssh server via ssh client on windows store but i can't get success. I just want to know where i am missing..
[email protected] said:
Then why i can't get cmd access i have tried everything....every step as it was in interop tool but nothing happened. I tried to connect to ssh server via ssh client on windows store but i can't get success. I just want to know where i am missing..
Click to expand...
Click to collapse
Did you set a custom password in interop tools and did you get cmd.exe and cmd.exe.mui via ssh on the device?
You also can't use a client on the device itself.
gus33000 said:
Did you set a custom password in interop tools and did you get cmd.exe and cmd.exe.mui via ssh on the device?
You also can't use a client on the device itself.
Click to expand...
Click to collapse
Yes i set custom password but didn't get cmd access via ssh
nate0 said:
Yes, but via ssh. CMD access from the IT app requires elevated privileges and some other tweaks. I can open that part of InteropTools with root enabled without error but was unable to type. You would need to check with gus33000 about that. I just use cmd over ssh for now.
---------- Post added at 03:56 PM ---------- Previous post was at 03:54 PM ----------
You should only need to toggle the Restore NDTKsvc if you suddenly lose the ability to edit the registry after successfully getting access the first time. I have had this happen after an update or if system settings updated...
Click to expand...
Click to collapse
Okk can you help to get cmd access via ssh please
nate0 said:
Yes, but via ssh. CMD access from the IT app requires elevated privileges and some other tweaks. I can open that part of InteropTools with root enabled without error but was unable to type. You would need to check with gus33000 about that. I just use cmd over ssh for now.
---------- Post added at 03:56 PM ---------- Previous post was at 03:54 PM ----------
You should only need to toggle the Restore NDTKsvc if you suddenly lose the ability to edit the registry after successfully getting access the first time. I have had this happen after an update or if system settings updated...
Click to expand...
Click to collapse
Okk can you help to get cmd access via ssh please
got success
finally got success access cmd via ssh.thanks everyone for helping me..so the conclusion i got:-
first some keys are protected so can't be access by interop tool but can be edit by registry editor.
Second you have to set custom password through ssh account manager but i don't know why system console in interop tool is not working but you can access cmd via ssh if you have done all the steps correctly and i finally i know where i was missing all the time it was not registry as i was thinking it is not present the thing i was missing was i tried to connect to ssh client on my device it didn'tworked but when i tried to connect to cmd with another device via ssh it worked and all credit goes to @gus33000 and @nate0 who helped me...Thank you:good:
I took off the file required due to missing registry entrys. will repackage the files needed and upload a new version. stay tuned.
Hey guys, attached is the file required to unlock VoLTE and WiFi-Calling on the Lumia 950DS and Lumia 950 (Att) for T-Mobile. Before attempting these step, you will first unlock Mass Storage mode, using HeathCliff74's method using wpinternals here.
If you need VoLTE and WiFi calling enabled on the Lumia 950XL's take a look at nate0's work here.
Disclaimer: Do this at your own risk. I am not responsible for damage incurred to your mobile device for these modifications. If you have problems, you can always replace the modified file with the originals and then use WDRT to reflash the NVI settings.
Things to Know:
-For the DUAL SIM Models, I turned off the 2nd SIM slot from displaying in the upper left corner as I do not use it. SO DO NOT USE THIS METHOD POSTED HERE IF YOU NEED THE 2ND SIM SLOT WORKING.
-Also, another limitation right now for this method is, the 5GHz Wi-fi Calling in "WIFI ONLY" mode currently does not work, but the 2.4GHz works for now in WiFi ONLY. I am still working on this, but because of school, i haven't had much time to look into this seeing how it's my last semester. The rest of the stuff should work perfectly, Cellular Prefered, Wifi preferred, Wifi Calling OFF with IMS registration, etc...
After successfully unlocking mass storage, boot to mass storage mode and replace the following files with the ones attached in the zip file.
1. Back up the entire ADC folder in \PROGRAMS\CommonFiles
2. Back up the modemconfiguration.cab file in \PROGRAMS\CommonFiles\OEM\Public\MMO\Multivariant
After backing up the files in Steps 1 and 2:
3. Delete the ADC folder in \PROGRAMS\CommonFiles and replace it with the ADC folder from the attached zip file.
4. Copy and replace the modemconfiguration.cab file from \PROGRAMS\CommonFiles\OEM\Public\MMO\Multivariant with the modemconfiguration.cab from the zip file.
5. Copy the MO_VoWiFi_Operator_Name_15818.dll file to \Windows\System32\ folder.
6. Restart the phone out of mass storage and wait for the prompt to restart your phone for a network update.
Thanks to HeathCliff74 for his awesome work with WPInterals and nate0 for findings on the Lumia 950XL's.
Cool. I found a method that worked for this for me on the XL model here. Use what you need from that if you want to make a guide...
So both americans....
nate0 said:
Cool. I found a method that worked for this for me on the XL model here. Use what you need from that if you want to make a guide...
Click to expand...
Click to collapse
Ok, i'll take a look thanks . Quick question thought, when you successfully unlocked VoLTE, when your in a call, did you have to set the HD Voice string manually? because for some reason the HD Voice string variable doesn't show up, even with the ims registration confirmed for the voice call.
anubis23 said:
Ok, i'll take a look thanks . Quick question thought, when you successfully unlocked VoLTE, when your in a call, did you have to set the HD Voice string manually? because for some reason the HD Voice string variable doesn't show up, even with the ims registration confirmed for the voice call.
Click to expand...
Click to collapse
No. It was provisoned already I belive from the ADC files I replaced. That key is burried somewhere in one of those files.
I am curious, how stable is your WiFi calling? VoLTE works flawlessy for me, on occassion I get kicked off of ims registration before a call, but it comes back (probably signal related). But I have it enabled without Wifi calling, meaning the modem file I use does not enable wifi calling... I ask because I could not find the final entries for the nvi file to make VoLTE and WiFi calling both work reliably, at least from my perspective...
nate0 said:
No. It was provisoned already I belive from the ADC files I replaced. That key is burried somewhere in one of those files.
I am curious, how stable is your WiFi calling? VoLTE works flawlessy for me, on occassion I get kicked off of ims registration before a call, but it comes back (probably signal related). But I have it enabled without Wifi calling, meaning the modem file I use does not enable wifi calling... I ask because I could not find the final entries for the nvi file to make VoLTE and WiFi calling both work reliably, at least from my perspective...
Click to expand...
Click to collapse
I haven't been able to extensively test the configuration yet, but I used the mcfg_sw/hw from the Alcatel Idol 4s files to strip out its modem settings, then recreate then in the nvi format. i just finished enabling the volte now im looking into the hd voice string.
anubis23 said:
I haven't been able to extensively test the configuration yet, but I used the mcfg_sw/hw from the Alcatel Idol 4s files to strip out its modem settings, then recreate then in the nvi format. i just finished enabling the volte now im looking into the hd voice string.
Click to expand...
Click to collapse
Ah nice. I used the 640 LTE tmobile nvi files....Yours might be better off since it is built more for W10M...Gonna keep an eye on this thread. Let me know if you need anything.
I have an Idol 4S if you need help. I really wish the 810 would work
Any update? Steps taken? Its great you got it working, but post the deets man!
Sorry about the wait. I uploaded the work that has been done so far. Haven't been able to continue with unlocking the 5ghz in WiFi Only mode because of school schedule so I posted what I have for now. Have fun .
Hi
Talon Pro said:
I have an Idol 4S if you need help. I really wish the 810 would work
Click to expand...
Click to collapse
I have a Lumia 810 but unfortunately, i kind of took it apart for a reason unknown, it was a wonderful phone. It shouldn't be too hard to get WiFi Calling and VoLTE working on it if wpinternals works on it.
anubis23 said:
I have a Lumia 810 but unfortunately, i kind of took it apart for a reason unknown, it was a wonderful phone. It shouldn't be too hard to get WiFi Calling and VoLTE working on it if wpinternals works on it.
Click to expand...
Click to collapse
Problem is, it doesnt do LTE, it has hardly any bands and none that are actually 4G Also, ive never been able to unlock it because i cant find the emergency files (i think its those), but havent tried with the 2.4 version yet.
Ok, so i followed your directions and after rebooting out of mass storage, i get the gears screen over and over and over. I do get the MS start image, but then gears and rebooting again. The progress bar doesnt move on the gear screen though.
@Talon Pro
You can access the full filesystem of the 950 or 950 XL using the sftp method. I have been using that since long before we had mass storage publicly available and it works well. Use swish sftp which integrates in windows explorer and directions from this guide here
In a nut shell:
Gain access to the file systems using Interop Tools app.
- In Interop Tools go the SSH--Account Manager and add an account. The account user name should be System.
- Tap the account System so it is highlighted and then tap templates to use.
- Tap enable full file system access with sftp. Then go to the template options and hit the authentication drop down setting it to password.
- Add the password (4 digit pin of your choice).
- Once your phone is on wifi, add an SFTP Connection under Swish. Set the user to system. Set the path to /c/. Once added double click it, trust the key, and login with the pin you set. Explorer will open with your phones files. The guide above is a bit more detail and additional info on sftp file system access made by snickler if you need.
nate0 said:
@Talon Pro
You can access the full filesystem of the 950 or 950 XL using the sftp method. I have been using that since long before we had mass storage publicly available and it works well. Use swish sftp which integrates in windows explorer and directions from this guide here
In a nut shell:
Gain access to the file systems using Interop Tools app.
- In Interop Tools go the SSH--Account Manager and add an account. The account user name should be System.
- Tap the account System so it is highlighted and then tap templates to use.
- Tap enable full file system access with sftp. Then go to the template options and hit the authentication drop down setting it to password.
- Add the password (4 digit pin of your choice).
- Once your phone is on wifi, add an SFTP Connection under Swish. Set the user to system. Set the path to /c/. Once added double click it, trust the key, and login with the pin you set. Explorer will open with your phones files. The guide above is a bit more detail and additional info on sftp file system access made by snickler if you need.
Click to expand...
Click to collapse
Accessing the files wasnt an issue, but how do i get it out of the boot loop cycle now? WPI cant see it even.
Nvm, i was able to force it into flash mode (up, down and power) and then reboot and WPI saw and grabbed it locked the boot loader and im back into windows and it wants to restart to do the install.
Talon Pro said:
Accessing the files wasnt an issue, but how do i get it out of the boot loop cycle now? WPI cant see it even.
Nvm, i was able to force it into flash mode (up, down and power) and then reboot and WPI saw and grabbed it locked the boot loader and im back into windows and it wants to restart to do the install.
Click to expand...
Click to collapse
There is always a risk to unlocking a boot loader and enabling mass storage mode for Windows phones using Heathcliff74's tools, so it is good to know at least there is alternate way to access the file system on the 950 if we have to.
Now that im back in, neither SIM works at all.
Talon Pro said:
Now that im back in, neither SIM works at all.
Click to expand...
Click to collapse
Hi there, which phone are you currently attempting this on? I remember something similar happened to me. I can try and recreate the problem later today after classes and I'll get back to you. I believe the steps included flashing the CustomerNVI file for the model via thor2 that fixed your issue. If you need your know back working asap, you can always replace the files and then restore the NVI data via thor2:
thor2 -mode uefiflash -ffufile "FFU FIle for your phone.ffu" -do_full_nvi_update -do_factory_reset -skip_flash -reboot
anubis23 said:
Hi there, which phone are you currently attempting this on? I remember something similar happened to me. I can try and recreate the problem later today after classes and I'll get back to you. I believe the steps included flashing the CustomerNVI file for the model via thor2 that fixed your issue. If you need your know back working asap, you can always replace the files and then restore the NVI data via thor2:
thor2 -mode uefiflash -ffufile "FFU FIle for your phone.ffu" -do_full_nvi_update -do_factory_reset -skip_flash -reboot
Click to expand...
Click to collapse
Um, the thread is titled 950DS lol. Its not my main phone so i can deal with waiting a bit for a fix. I just booted it back to Mass Storage so reverse it, but ill wait till you get back to me later.
Any update?