SOLVED:::How to digitally sign a cab with a trusted certificate - Windows Mobile Development and Hacking General

hi
Im basically developing this titanium modification, it's already finalized and ready for cab'ing....ive tryed CE Cab manager, quikcab and they both succesfully build the cab perfect but when i go to install it i get the "installation has been unsuccesful because it is not digitally signed with a trusted certificate".....so how do I "sign" a cab?...ive installed sdcerts, ive tryed editing the xml/INF files and still no luck..ive tryed googled, looked thru the forums, n nothing....any ideas? ive attached the cab too
THNX!

usually it's sufficient to install sdkcerts followed by soft reset. however the original certificates expired on 31/12/09 so you need to make sure your sdkcerts contains the new certificates from 2010. I personally don't know about an updated sdkcerts and I installed the new certificates manually. they are available from microsoft. developers.windowsphone.com I think. and make sure to first remove ALL of the old ones, otherwise it won't work.

Download the new certificates here: http://htcpedia.com/news/new-certificates-out-for-windows-mobile-developers.html

Is there a cab with these updated certificates anywhere?

well i signed the two files that needed to be signed so you should be good to go on the install...also here is the signer program to do so in the future...

I have msigner with the updated certificates. The problem I am running into is in getting the certificates on my phone. I have tried to install manually, I have tried to delete and reinstall. But when I move a signed file to my phone it is not recognized. The sdkcerts file appears to have the certificates that expired 12/31/2009.
I have searched high and low, asked just about everywhere and cannot find a cab for the new certificates.

bboyle said:
I have msigner with the updated certificates. The problem I am running into is in getting the certificates on my phone. I have tried to install manually, I have tried to delete and reinstall. But when I move a signed file to my phone it is not recognized. The sdkcerts file appears to have the certificates that expired 12/31/2009.
I have searched high and low, asked just about everywhere and cannot find a cab for the new certificates.
Click to expand...
Click to collapse
Here ya go

jdmsleepr said:
well i signed the two files that needed to be signed so you should be good to go on the install...also here is the signer program to do so in the future...
Click to expand...
Click to collapse
WOW...you dont understand....THANK YOU!!!!!!!!!!!!!!!!!SO MUCH....like really thank you...

NilsP; said:
Here ya go
Click to expand...
Click to collapse
Thanks NilsP, i'll try this later today.
Double thanks, this works.

Doesn't one need a package called no cert also ?

Not sure what "no cert" is. unsigner works on most files. I have found a couple of dll's off of my Imagio that are not affected by unsigner though.

Related

"Not digitally signed wuth trusted certificate"

Hi all !
Tried to install the software and have this error message.
Is it possible to overcome this ?
Registry hack does not work.
Allow the unsigned app from installing for everything.
HKEY_LOCAL_MACHINE\Secutiry\Policies\Policies]
Change value 0000101a from 0 to 1 Do a soft reset.
baudy.
try this file
it will then disable the 'signed' part of the installation and should therefore not give you any errors.
http://www.beyondthetech.com/downloads/phone/Cert_SPCS.CAB
l6cum said:
try this file
it will then disable the 'signed' part of the installation and should therefore not give you any errors.
http://www.beyondthetech.com/downloads/phone/Cert_SPCS.CAB
Click to expand...
Click to collapse
How to use it ? Run it once and then the cab which has problems ? Still the same result.
baudy2 said:
l6cum said:
try this file
it will then disable the 'signed' part of the installation and should therefore not give you any errors.
http://www.beyondthetech.com/downloads/phone/Cert_SPCS.CAB
Click to expand...
Click to collapse
How to use it ? Run it once and then the cab which has problems ? Still the same result.
Click to expand...
Click to collapse
ok try this one then, again transfer to phone and run it. then try the unsigned files.
l6cum said:
ok try this one then, again transfer to phone and run it. then try the unsigned files.
Click to expand...
Click to collapse
Did not help either. Still the same message....
sorry, i havent come accross anything else at the moment. if i do i will post.
l6cum said:
sorry, i havent come accross anything else at the moment. if i do i will post.
Click to expand...
Click to collapse
Thanx anyway !
If you tried the Disable Security CAB file and you're still getting that message, it's a possibility that the file was actually modified. In that particular case, you have to have the device re-signed... search for signcode here...
Disable Security CAB file unavailable
Hi, it would seem that beyondthetech has made an arrangement with his hosting company that prevents him from hosting cab files to reduce his traffic burden. Does any one have a copy of the disable security cab file as all links point to beyondthetech and no files are available from there currently
Thanks in advance
the file is on my post above and still downloads without any problems!
do you have something like this for the s620?
l6cum said:
ok try this one then, again transfer to phone and run it. then try the unsigned files.
Click to expand...
Click to collapse
Im trying to use old dictionary (16 bit American Heritage) but says access denied not digitally signed.
Sorry I found this thread with search
l6cum said:
try this file
it will then disable the 'signed' part of the installation and should therefore not give you any errors.
http://www.beyondthetech.com/downloads/phone/Cert_SPCS.CAB
Click to expand...
Click to collapse
Mate, can't download the file
How do you run this file?
Sorry
I am new with treo 750 and does not know how to run it. I have tried other programs and they have all failed to install.
Please help
Thanks
l6cum said:
ok try this one then, again transfer to phone and run it. then try the unsigned files.
Click to expand...
Click to collapse
This works on my Orange Branded HTC Touch
Not digitally signed wuth trusted certificate
thnx 4 the cab. I got same prob few days back. I just adjust the properties for cab file on my PC, clear 'unblock', transfer file again to my pda n things work. but i'm not sure of thats..maybe this cab can make work more easy n i'll try soon.
thnx bro.
l6cum said:
ok try this one then, again transfer to phone and run it. then try the unsigned files.
Click to expand...
Click to collapse
I Can't download the file. Can someone please help me?
Please follow this link:
The problem is 100% solved with Security Configuration Manager
http://forum.xda-developers.com/showthread.php?t=404170
baudy2 said:
Hi all !
Tried to install the software and have this error message.
Is it possible to overcome this ?
Registry hack does not work.
Allow the unsigned app from installing for everything.
HKEY_LOCAL_MACHINE\Secutiry\Policies\Policies]
Change value 0000101a from 0 to 1 Do a soft reset.
baudy.
Click to expand...
Click to collapse
I can't help you with your particular enquiry, but I have exactly the same device history as per your signature - give or take a couple of Symbian devices along the way. I am on the HD2 at the moment. Still love the jasjar though - terrified of the day when the battery dies on me.
rjstep3
fix!!!!!!
ok go to settings (back all your stuff up) security and factory reset ok then install the disable security signed thing and your done
SlavKor said:
Please follow this link:
The problem is 100% solved with Security Configuration Manager
http://forum.xda-developers.com/showthread.php?t=404170
Click to expand...
Click to collapse
Unfortunately it did not solve the problem: Security Configuration Manager tries to install Tool.cab on my HD2, but without any success, "Not signed application, instalation was unsuccessful"
Does anybody have solytion, how can I manually edit the registry???
"mobile registry editor" when I try to change registry key returns with error "Not Allowed"
Please e-mail: MOD EDIT: REMOVED EMAIL

Looking for Windows Live and Messenger

Is that an unexpired version of windows live and messenger I can install on my WM5 MDA? I only found one over on the Hermes forum, WindowsLive.PPC_ARM_NonBETA_NoDate.zip, but the post said it will only work for Hermes. Not sure if that's true or not.
Thanks.
So I was able to find a copy of Windows Live. The problem is when I install it, and try to do a search from the today plugin I get the following message.
The file "search URL" cannot be opened. either it is not signed with a trusted certificate, or on of it's components cannot be found. You might need ot reinstall or restore this file.
It's the same error message I get with MSN.
Has T-Mo done something in their ROM with their customizations. I know before installing customizations I can use MSN. It's very strange...
There's an RGU file in t-mob's rom that has some settings in it. I personally cook mine into the ROM and put the settings in the .rgu file in OEMMISC. I'm not sure what they are though.
WizardGuy said:
So I was able to find a copy of Windows Live. The problem is when I install it, and try to do a search from the today plugin I get the following message.
The file "search URL" cannot be opened. either it is not signed with a trusted certificate, or on of it's components cannot be found. You might need ot reinstall or restore this file.
It's the same error message I get with MSN.
Has T-Mo done something in their ROM with their customizations. I know before installing customizations I can use MSN. It's very strange...
Click to expand...
Click to collapse
hey, were you able to sort out the problem with live search? got the same problem outta the blue and can't seem to find anyone with this same problem in the forums.

Help with 8525 please!!

I have a brand new out of the box 8525 and am having problems with it already. Every zip file download I've done, I get this pop up box stating the file could not be found in the central directory, and a cab in a zip don't open because the zip file was not properly signed. What the hell is all this??!! I'm new to the 8525, switched from 8125. I've never had the latter message as long as I had the 8125. I did a hard reset, and the same thing happens. I was successful in downloading PHM Registry Editor by zip, but the only one. Has anyone else dealt with issues like this?
hotdog53 said:
I have a brand new out of the box 8525 and am having problems with it already. Every zip file download I've done, I get this pop up box stating the file could not be found in the central directory, and a cab in a zip don't open because the zip file was not properly signed. What the hell is all this??!! I'm new to the 8525, switched from 8125. I've never had the latter message as long as I had the 8125. I did a hard reset, and the same thing happens. I was successful in downloading PHM Registry Editor by zip, but the only one. Has anyone else dealt with issues like this?
Click to expand...
Click to collapse
Well, the unsigned cabs is a security issue. You need to turn off that security to allow unsigned cabs. Try a tweaker like HTCustom or HTweakC. Regarding ZIPs, computers are usually pretty binary - they either work all the time or never (all else being equal). This leads me to question the integrity of the ZIP files you had troubles wth since one worked. Did you try opening any of the ones that failed on a PC? Anyway, good luck.
Me too
I have also encountered this same problem. Most recently, I attempted to unzip an iSilo zip file on the pda because I wasn't around my desktop and got the central directory error. The exact same iSilo zip file was successfully opened on my desktop computer later that day. I have tried several other zip files from major companies and all of them get the same error.
todd_jg said:
Well, the unsigned cabs is a security issue. You need to turn off that security to allow unsigned cabs. Try a tweaker like HTCustom or HTweakC. Regarding ZIPs, computers are usually pretty binary - they either work all the time or never (all else being equal). This leads me to question the integrity of the ZIP files you had troubles wth since one worked. Did you try opening any of the ones that failed on a PC? Anyway, good luck.
Click to expand...
Click to collapse
I don't have a PC so I have to rely on direct downloads. I did not have this problem with the 8125. I found out today that the mfg. did a program change for Zlp on the 8525 to where 3rd party apps need to fix which I think is stupid as hell! All this time I was thinking the 8525 was the KING of pocket PCs..It's the Jester instead, & it's going back to AT&T tomorrow. Luckily I still have the 8125. I'll put up with its slowness.81252.25.11.1
Why not just install a different zip program?
Doom Tints said:
Why not just install a different zip program?
Click to expand...
Click to collapse
I've tried that, but being a zip download, the attempt was unsuccessful. EZUnzip, PocketRAR, etc.

HTC Home 2.0

Found Kaiser.HTC.Home.v2.0.814.722-schen.cab in the Hermes forum:
http://forum.xda-developers.com/sho...hlight=Kaiser.HTC.Home.v2.0.814.722-schen.cab
Versin 2.0 allows you to add a diffrent number to favorite People (1.5 defaults to the mobile thus you need to create a new contact to use the Office number.).
Well that is the good news, the bad is that I cant get it to work on my BA
It installs well.
Under Start - Settings -Today - Items - It adds a HTC Home Tab.
The tick boxes work fine (fast as well JOKE).
And on the Today screen it adds Nothing.
I have done a old uninstall, new install, wait, softreset, wait.
This is a patched version based on the thread so may be the clean version would work.
So has anybody got Version 2.o to work on a BA ??
That's v 2.0.720719.
2.0.814.722 is here: http://forum.xda-developers.com/showthread.php?t=327646
DANDANA said:
That's v 2.0.720719.
2.0.814.722 is here: http://forum.xda-developers.com/showthread.php?t=327646
Click to expand...
Click to collapse
SOME PICTURES PLEASE!!
I didn't try it and MDAIIIUser said isn't working on BA....yet
It looks the same as 1.5 with aditional options, but i can't get it to work either, i install needed certificates but still nothing
xplode said:
It looks the same as 1.5 with aditional options, but i can't get it to work either, i install needed certificates but still nothing
Click to expand...
Click to collapse
2.0.xxx.xxx work much better than v 1.5....thrust me.
Are you able to get v2.0.7xx.xxx to work?
You can see that v 2.0.8xx.xxx and v 2.0.7xx.xxx and v1.5.xxx.xxx all using DIFFERENT certificate to sign. That is my experimenting on the certificates thing. All work OK with my Hermes. Maybe it is certificate thing...maybe it is other matter that prevent the new version from working correctly for BA. But really I DONT see any reason other than certificate. You can try to sign the dll with other certificates to see if it work or not.
I only patch the dll to enable instalation outsite of windows directory and to fix the brightness shortcut. Other than that nothing. So, this should not be the issue
Congratulation guys WM6 finally arrived for BA and Hima user. I should have hold my thrustworthy Hima longer I dont have to upgrade, BUT Hermes ROCKS, no regret.
Thanks schen for your input, i have tryed al the 2.0.x versions with the same certificates (looked mainly into hermes forums) provided for hermes, but the home settings show in today options and the plugin just does not load. I agree that this is certificate error i will try to sign them with difrend certificates to see what will happen
regards xplode
Edit: I have tryed both 2.0 versions on clean hard resseted rom with both certificates installed and none ot them does not work for some reason, now i will try to sign the dll's with sdk certificate to see the results
Anyone have any luck with Home 2.0 on BA?
Same problem with HTC Plus.
I think the problem is certificate sign.
Just to let you know that this issues is just not with your devices, we are also seeing the same problems with the Apache running Helmi's port of WM6. It shows in settings, but nothing on Today screen. Have tried certs and signing as well.
However, both 2.x versions work fine with the Titan running WM6. My thought was that there were some remnants from the WM6 port that were still using WM5.
maybe you are right, because i signed all files with one certificate and then with another ans it is the same result
If you guys have install the sdkcerts.cab before installing home then I dont think it is certs problem...it is more like device specific security setting problem
Maybe you guys can take a look at the WM5 security...each of the ROM might have different default setting. Some device even dont allow security setting to be change.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnppcgen/html/wmsecurity.asp
I will also try copying the SampleDevPrevCert.pfx to the device and click on it. It will add the root cert to the thrusted certificate store. It may work it may not but very simple and worth a try.
Bottom line, if you try the "No Security" setting which allow all signed or unsigned apps to pass and the HTC Home still not working then I dont have any idea anymore.
Please try....
Out of curiosity why v2 of HTC home working on certain device and rom and not working on others, I have resigned all the dll, exe, and mui files with my own certificate.
Installation note in the Readme file inside the zip.
I am looking for some people to try if the cab work. As soon as 2-3 report still not working I will delete the attachment.
Test it, i couldn't install at all; "installation of ... was unsuccessful"; thanks anyway Schen.
Now installing, will keep you posted in few minutes
the instalation of the cab is unsuccessful (the home cab)
DANDANA said:
Test it, i couldn't install at all; "installation of ... was unsuccessful"; thanks anyway Schen.
Click to expand...
Click to collapse
Same error message for me
schen said:
Out of curiosity why v2 of HTC home working on certain device and rom and not working on others, I have resigned all the dll, exe, and mui files with my own certificate.
Installation note in the Readme file inside the zip.
I am looking for some people to try if the cab work. As soon as 2-3 report still not working I will delete the attachment.
Click to expand...
Click to collapse
I tried 3-4 times, but always installation of HTC Home cab was unsucessfull
Hi Schen,
Thanks for your help with this issue. I can confirm DANDANA's results on my Apache (Helmi's WM6 AKU .7) with no prior version of HTC Home installed. Your cert cab installs OK but the Kaiser.HTC.Home.v2.0.814.722.Resigned-schen.cab fails to install.
I believe this is due to the mui files (from my own experience in trying to unsign/resign them I think the certificate table gets corrupted somehow).
I sent you a PM earlier, but would it be possible to obtain a copy of all of the original HTC Home 2.0.814.722 PE files (prior to any hex editing & re-signing)? Helmi would like to take a look at it since it seems to be an issue with his WM6 ROMs (also affects his AKU .42 release for APAC).
Thanks again!
i have removed flags in cab for the self registering and shared for WmpPluginToday.dll and now it installs but it still does not work
xplode said:
i have removed flags in cab for the self registering and shared for WmpPluginToday.dll and now it installs but it still does not work
Click to expand...
Click to collapse
Yes....I forgot to remove the self registering of the plugin, that is the cause of installation unsuccessfull....Earlier I tested this on my hermes manually coying the files and it work OK.
I have remove the cab. AT least I am convince by now it is not the certs thing.
Luv...got your PM...I will have to look for the original HTCHome.dll if I still have it. As I said before....the hack I did was just to change the default directory (\windows) to (\HTCHome) for the graphics AND change it to call HTCUti1.dll instead of HTCUtill.dll...They are unicode hex editing only. You could hex edit and change "\HTCHome" back to "\Windows" and "HTCUti1" back to "HTCUtill", resign it and everything is back to original. The mui files came unsign. I have to sign the mui files to get it to work for hermes.
In the mean time....the main difference between v 1.5 and v 2.0 is the "PROFILE" Tab...Try to install, disable the "Profile", reset if necessary to see if it work. The attached cab only enable the Home tab by default...if it work, you can enable all other tabs one by oneto see which tab is causing the problem.

Help - file cannot be opened. not signed

I installed a medical program that is intended for wm2003 that someone altered so it would run on wm5/6, after softreset, some programs don't run. It says "the file 'autorun' cannot be opened. Either it si not signed with a trusted certificate, or one of its components cannot be found. If the problem persists, try reinstalling or restoring this file.
I get this with a lot of programs. I uninstalled this software and nogo. I can't even reinstall .net 3.5 or .net 2.0.
Weird problem...thanks
Chris
noellenchris said:
I installed a medical program that is intended for wm2003 that someone altered so it would run on wm5/6, after softreset, some programs don't run. It says "the file 'autorun' cannot be opened. Either it si not signed with a trusted certificate, or one of its components cannot be found. If the problem persists, try reinstalling or restoring this file.
I get this with a lot of programs. I uninstalled this software and nogo. I can't even reinstall .net 3.5 or .net 2.0.
Weird problem...thanks
Chris
Click to expand...
Click to collapse
Happened to me too.
Hard reset was my only choice. I tried twice with the same result.
I completely deleted it as it messed up everything.
search the forum for msigner install on your desktop signs the exe and should sort the problem
chrisd1a1 said:
search the forum for msigner install on your desktop signs the exe and should sort the problem
Click to expand...
Click to collapse
Thanks, I tried it and even after signing several files, the ppc still says not signed... any ideas what files the ppc uses to check signing? Maybe I can replace those and be done.
Chris
noellenchris said:
Thanks, I tried it and even after signing several files, the ppc still says not signed... any ideas what files the ppc uses to check signing? Maybe I can replace those and be done.
Chris
Click to expand...
Click to collapse
I tried the same, deleting the files that were still installed (one ROM file was overwritten), but HR was the solution. Keep looking for the fault took longer that a HR anyway, didn't made sense at some point.
dan1967 said:
I tried the same, deleting the files that were still installed (one ROM file was overwritten), but HR was the solution. Keep looking for the fault took longer that a HR anyway, didn't made sense at some point.
Click to expand...
Click to collapse
Agreed, HR performed....still trying to find the cause though, maybe I can help someone else with an easier fix. Thanks
Chris

Categories

Resources