Problem with security signature of WM5 - Windows Mobile Development and Hacking General

Hi,
i have development one device driver for Windows Mobile 2005.
I have add the standard registry key on HKLM\Drivers\Builtin for load the device driver on startup of pocketpc. With PB5.0 emulator is all ok and start on bootstrap of device. With Device Emulator of VS2005 the device driver don't start (the kernel don't call never DllMain). If i sign the driver with SDKSamplePrivDeveloper.pfx certificate, the application is load on startup the emulator and work 100%.
Can i disable the security signature certificate of device emulator?
The custom himalaya rom is cooked with the feature: the security signature is disabled. I suppose that it can be disable, can you help me ?
Thanks Massimo

Related

MachinaGod RAPI Unlocker - certificate disable on WM5 v0.1

Hi,
Just an util I got together in no time.
Rapi Enabler, certificate disabler.
Enable all the security on your Windows Mobile 5 phone.
Credits to the author of the ce remote tools.
Instructions:
1. Download the attached file (you have to be logged into xda-dev);
2. Extract it somewhere in your computer
3. Connect your phone via activesync
4. Run the EnableRapi.bat (on your computer)
5. Done.
Have fun,
Ricardo
How does it differ from this CAB file I pulled off the HTC Apache?
I use this in my Extended ROM so that I can run unsigned applications, CAB files, and CPF files during the initialization procedure after a hard reset.
Hi BTT,
This is based on that exact cab. The only difference in enabling RAPI calls also, and doing it without needing user interaction, only needing a activesync connection.
Is a little utility I use for integration into batch files.
Bye,
Ricardo
Certificate disabler..
Probably a dumb question, but is it a replacement fort certchk on 2003 devices? Still looking for such a program.
Thx
Thanks Machinegod, this worked well. I used it on an XDA exec will it work with all WM5 devices?
Hi Machinagod
Is there a way i can call your routine from code?
I have developed software for WM5 but cannot access the database with the standard MS settings. I would like to give my users the option to unlock the rapi calls and install automatically.
Thanks in advance
Steve
ronaldovic said:
Certificate disabler..
Probably a dumb question, but is it a replacement fort certchk on 2003 devices? Still looking for such a program.
Thx
Click to expand...
Click to collapse
to ronaldovic: I believe this utility is for disabling signed applications so you can install apps that have not been signed. I have used BTT cert cab in my extended rom since he posted it (Thanks BTT, It has been very usefull)
If you are looking for disable cert check so you can activesync with MS exchange without a a SSL . Certificate connection, Micro$oft still offers a download to disable the cert sync check..
see http://www.microsoft.com/downloads/...b8-8b3a-4f1d-8e94-530a67614df1&displaylang=en
Miracle Registry
i checked many registry of "Security policies" in different device, and also SDK.
http://asukal.seesaa.net/article/12583144.html
You can understand how change it for your neccesity.
this was for your refference.
and also i got made one registry file which has many "Certificate Sotre"
from different setting devicees and CABs and SDK Emu.
This registry make your device to enable working many kinds of dll and exe or any other files without digital signed(not for all)
multi user interface files also can effect without digital signatures.
(shellress still can not, but worked with Smartphone signature)
The security revel will be same or lower than SDK emu.
but not completely finish to edit it.
so possibility of some side-effect or unkown problem.
Hope understand this point and use it as test.
But once you use this registry, you got understand why i said it miracle.
just import this registry and make soft reset.
"syntac error" displayed when you import this, but works.i will cheking the reason of this error.
lets test it.
Re: MachinaGod RAPI Unlocker - certificate disable on WM5 v0
I try to use it on my new Jamin but nothing happen.... Prog still not work.
Pls I'm a newbe, Can you help me ?
Thanks a l ot
Hi MachinaGod,
Could you tell me please what exactly this RAPI unclocker is doing? Is it possible to undo it? RAPI locker or something? Is there any security threat after you execute tis program?
Thank you!
cingular
please tell me what tool can unlock (simlock) my cingular 8525, Thank you very much!
hmmmmmmmmytfghvghdgfgfdtrsdr
unlocking spv m1500
hello,
i tried the RAPI unlocker but it did not work,
could it be because my Pocket pc is running 2003 CE?
hi
someone can send me the file i can download him pls
and one qwuestion this unlock mi simlock???
htc 8125 need help please
machinagod said:
Hi,
Just an util I got together in no time.
Rapi Enabler, certificate disabler.
Enable all the security on your Windows Mobile 5 phone.
Credits to the author of the ce remote tools.
Instructions:
1. Download the attached file (you have to be logged into xda-dev);
2. Extract it somewhere in your computer
3. Connect your phone via activesync
4. Run the EnableRapi.bat (on your computer)
5. Done.
Have fun,
Ricardo
Click to expand...
Click to collapse
i have a htc 8125 and tried your method and it never gave me a code but when i put my sim card in it says sim lock and unlock? explain how to unlock this d$$m phone.It is a cingular phone but i dont have that service.it is version 2.25
[email protected]

CAB file help - "Installation unsuccessful" on HTC

Hello all,
Attached is a simple CAB file that should have set the PIE user-agent stuff to be identifying the thing as IE6. I think there may be others around, I know I've seen it in a larger cab, so don't worry about this specific function. My question is regarding the fact that when I try to run it on my HTC Wizard (running WM5), I get "Installation of PIE_as_IE6.cab was unsuccessful".
I built the CAB off of the "CAB Template.cab" from http://forum.xda-developers.com/viewtopic.php?p=113615#113615 - just in case I'd run into that version issue with WM5.
Any thoughts out there on what's wrong with the CAB? Or is there a different reason it won't install?
Hi, what CSP are you using to change those settings and how are you deploying it to the device? Chances are access to that provider is restricted to a higher security role than what the cab file has permissions to do. RAPI still has access to most service providers by default but if you're downloading the cab over the air to the device it'll probably need to be signed with a suitable certificate before it's allowed to make setting changes. Mobile 5.0 security has been beefed up and its now a bit of a mission to do what was reasonable simple to do on 2003. All cpf files need to be signed if not deployed over RAPI as well, for even something trivial like adding a browser favourite.
editor is OCP Software's WinCe Cab Manager (version: 1.1)
deploy method is copy over USB cable by ActiveSync through Total Commander+WinCe Device access plugin. Execution of CAB is on the device itself through Total Commander CE or Explorer.
No CSP in use (err.. afaik).
You may be right that the part of the registry in question may simply be unavailable to access without special signing. I'll have to dig for those keywords a bit.
Yeah...the more I research Mobile 5.0 security the steeper it gets. It seems security permissions extend all the way to file IO access. Writing certain recognized system files (like theme files) without adequit permissions effectively renders those files as untrusted and they stop behaving in their expected manner. Its a pain.

Diffrence between signe and unsigned?

I some page when I want to download/buy software you can select between signe and unsigned? What's the diffrens?
One install with prompt and one without prompt for WM5?
The difference is WM 5 requires programs to be digitally signed, or it will pop up the prompt "do you want to install this, bla bla bla...".
Also if this particular program needs to access some 'protected functions' it may need to be signed.
WM 2003 ignores the signature on the app it self but it can not install signed CABs.
In short: If you have a WM 5 device download signed. If you have earlier version go for the unsigned.
ok thanks i understand.

Program is not a valid Pocket PC application 'Help'

Hey everyone I got this 8525 from a friend he switched over to the Iphone for whatever reason anyways I work on an application that is java based. I have Pimp my Black v0.1 and HTweakc 2.1 on this phone. I went and download to my phone our application its a normal install wizard but when i try to run it I get that error "is not a valid Pocket PC application" I have turned on the Security Tweaks to allow non-certified applications. is there another application I can install to the phone that will allow me to run this java program?
if you make it jad extention i guess you can run it in a midlet manager

ROM for debuggin in Visual Studio 2010

Is there any HD2 ROM that works for debug in Visual Studio?
XBmod-Yuki v2 not found, ""The application could not be launched for debugging. Ensure that the target device screen is unlocked and that the application is installed."
Dev_unlock.cab not found.
I'm in the same boat. I found this post from ultrashot:
http://forum.xda-developers.com/showthread.php?t=1336137
and I tried to use the provxml method to set these keys, but it didn't take. My guess is it's not working because the parent registry keys are locked.
Do these keys need to be baked into the ROM? It seems like it would be possible to just create a CAB file, similar to the existing DEVUNLOCK.cab.

Categories

Resources