[SOLVED/FYI] Active Sync with Wildcard Certificate - Windows Mobile

Dear Members,
It was bit frustrating that my office exchange email uses a wildcard certificate for validation. As we all know, the newer builds of WM does not allow connections using wildcard certs. So i was not able to configure my push email on my device when i used custom roms
(Ref: http://technet.microsoft.com/en-us/library/cc182301.aspx)
Windows Mobile 5.0 does not support the use of wildcard certificates for device-to-server authentication. This restriction applies to all communications, including Exchange ActiveSync.
Click to expand...
Click to collapse
However, i noticed that stock roms (i used 1.66, My device is Leo, SEA region) allow sync using wildcard certs (there will be a warning on initial sync, but syncs fine after that)
So, I flashed a stock rom, configured my activesync. Finally I extract all relevant entries from below registry keys:
[HKEY_CURRENT_USER\Security\Software\Microsoft\ActiveSync]
[HKEY_CURRENT_USER\Software\Microsoft\ActiveSync\Partners\"some GUID"
...
Click to expand...
Click to collapse
Note: To make life easier, after flashing stock rom, do a registry dump (before and after) using CeReg to PC. Then use compare in CeReg and export the regs into file.
I have put the reg settings as ext package and cooked it in. It syncs fine without warning. The prob is, now i am unable to select or change the additional folders to sync with. Would cooking in as ext mess up the ability to select Menu - Tools - Manage Folders... ?
Anyways, im posting this info here as i searched highs and lows on getting activesync to work with wildcard certs and found no solution. Im hoping someone out there with same problem could advice if there are any better solution or my somewhat usable solution may be helpful others as this does get the pushmail working. My solution syncs inbox just fine (only cant select additional folders to sync).
Any suggestions/ideas are most welcome.
Solution/Work around the problem is in post 1 to 3.
My current ROM info: SYS 21903 / Base TMOUS 2.13 / Manila 2.5.20121412.2

Well, about not being able to select the "Manage folders", i found a way around the prob:
1. Under active sync partnership - Option and uncheck the "Mail". It will ward about deleting the mails on device. Just choose OK.
2. Reboot device.
3. Similar to step 1, enable mail back. Upon sync, you will be able to select the manage folders option.
Apparently to get the list of folders, we need the synckey to be 0 in the request sent to server. I do not understand nor know how to make the device send synckey as 0. So, this temp solution works for me.
anyone with better solution? Guess next step is to find out whick key in reg exactly enables to bypass the wildcard certificate restriction.
Reference: http://blogs.msdn.com/b/openspecification/archive/2010/04/24/activesync-iii.aspx

Solved
Upon further experimentation, i discovered that active sync does not create any registry entries until first successful sync.
So, this lead t only 1 conclusion - We need to create the reg entry our self and merge it to registry during cooking process/cab/etc. Then, do as described in post #2.
Anyone with wildcard cert prob, and do not understand what im talking about here may drop me a PM and i'll provide with further details as im sure very very few of us are having this sort of problem!
I'm changing the title to SOLVED/FYI as i successfully cooked my exchange email settings and synced without prob.

Related

How to restore apps/ActiveSync/etc. after ROM upgrade?

I can't seem to figure out how people restore their apps, data, ActiveSync, etc. after updating their ROMs. It seems like people on this site replace their ROMs a few times a year at least, and with all the cleverness required to follow all the ROM issues, surely you can't all be manually re-installing every single app every time, etc. Are there some tools I don't know about that are useful for backing up/restoring files before/after ROM burn? Every backup program I see says you must not use it to restore after ROM update (which I understand, since you don't want to restore old versions of many key files). But surely someone could create a backup/restore app which knows which things should NOT be restored.
Thanks!
I do rom upgrades quite frequently, now I can have my device back with my settings and programs installed in around 10 minutes, here's what I did:
1)Install registry workshop on your desktop computer, this program allows you to remotely browse / export the registry on the PocketPC and compare current regitry settings on PocketPC with a previously dumped registry file.
2) Install RegDiff on your desktop computer, it allows you to generate .reg files out of two exported registry dumps done by registry workshop.
3) Spend a few hours going setting-by-setting and exporting the registry after changing each setting, compare and generate .reg file for that. Keep in mind that sometimes you need to power off the device for a while or soft reset for the registry setting to be permanently stored.
4) Once you have all the .reg files for your settings combine them in a single .reg file
5) Use WinCE Cab Manager to combine the cabs of all the programs you install, set the registry settings, and put shorcuts to all applications into the right places. This is the most "time consuming" part of the process.
Finally I end up with 2 big cab files:
- First one is around 9Mb which I install on pocketpc memory, this includes all today screen plugins, plus Net CF 2.1 and some registry settings (mostly WM5 settings and preferences from the today plugins)
- Second one is around 25Mb which i install on storage card, this includes all the other 3rd party apps I like and registry settings for those apps.
What I do after hard reset or rom upgrade: Install the two cab files, setup mail accounts and mms manually and use directpush to sync all my contacts and calendar items again.
The process of exporting all the registry settings is a PITA, but it is worth spending the time if you're going to switch roms frequently.
Look for an app called Sprite Backup.
pkx said:
Look for an app called Sprite Backup.
Click to expand...
Click to collapse
Yup, Sprite is the easiest. Be warned, however, that it isn't able to restore PIM databases over the AKU3 upgrade. See my Backup Bible, where I;ve explained this all.
Wow, thanks. That's a lot of work to get things set up! Clearly worth it if you can re-install everything in 10 minutes, though.
I started to investigate your recommendations, installed Cab Manager, and see how you use that.
How do you get the cabs if the install isn't directly via cab? In other words, if the install is initiated via ActiveSync, then are the necessary cabs always found under the Program Files\ActiveSync directory?
As for Sprite Backup, it looks great, and maybe that would be enough for me for now. I wasn't clear (I did search through and skim the Backup Bible and the WM5 backup software comparisons but couldn't find exactly where it talked about the issue regarding AKU3) is the PIM issue a known bug? Or some limitation/problem related to new security or something?
Quincy
quinxy said:
How do you get the cabs if the install isn't directly via cab? In other words, if the install is initiated via ActiveSync, then are the necessary cabs always found under the Program Files\ActiveSync directory?
Click to expand...
Click to collapse
If it's installed via activesync you can find them there, but generally what I do is extract the cab files from the exe using orange in Linux, don't know if there's a windows equivalent.
pof,
Don't know if you ever ActiveSync since you use Linux, but is there a way to NOT break your ActiveSync by upgrading your ROM? I thought I tried once, years ago, to set the device name back to the original name and ActiveSync still didn't recognize it as the old partnership.
quincy
quinxy said:
pof,
Don't know if you ever ActiveSync since you use Linux, but is there a way to NOT break your ActiveSync by upgrading your ROM? I thought I tried once, years ago, to set the device name back to the original name and ActiveSync still didn't recognize it as the old partnership.
quincy
Click to expand...
Click to collapse
If it doesn't recognize it, just delete the old partnership and recreate / reconfigure it . It's just some seconds.

Backing up Outlook/Exchange Certificates

Hello all. I am going to update my ROM, but have a quick question. My work email and calendar sync to my Mogul. Originally my works IT department had to install a certificate so I could sync. When I install the new ROM, I am betting this certificate will go away.
Is there anyway to backup the Certificates so I can reinstall them myself? I am not supposed to be on the exchange server per some stupid/outdated company policy but had a friend put me in there. I would like to not have to go back to IT as I don’t want to get anyone in trouble.
Thanks for the help.
I've exported HKCU\Comm\Security\SystemCertificates\.... into a cabfile and use this one after every new rom i'm flashing
and it's working very well.
If you export into reg-file and edit this file with an hex-editor you'll find your exchange certificate for sure. and under HKCU\Software\microsoft\ActiveSync you can find your Exchange settings (servername etc). after flashing a new rom the only thing i have to do is to enter my password and that's it....if you're unsure, you could try to import into an wince emulator and test if it's working the way you want....
hth
Problem with Exchange
I have been having challenges around Exchange. I am receiving emails and calendar correctly through the push.
When I reply to cal and emails. Multiple copies are being sent, sometimes up to 7.
Any ideas? Using 6.0 rom from FallingAngel, dcd first new rom. Have not tried 6.1 yet
petervbeck said:
I've exported HKCU\Comm\Security\SystemCertificates\.... into a cabfile and use this one after every new rom i'm flashing
and it's working very well.
If you export into reg-file and edit this file with an hex-editor you'll find your exchange certificate for sure. and under HKCU\Software\microsoft\ActiveSync you can find your Exchange settings (servername etc). after flashing a new rom the only thing i have to do is to enter my password and that's it....if you're unsure, you could try to import into an wince emulator and test if it's working the way you want....
hth
Click to expand...
Click to collapse
Peterv,
Sorry, quite a noobie. How do you export to cabfile ? What tool did u use ?
Cheers
fy
fylim said:
Sorry, quite a noobie. How do you export to cabfile ? What tool did u use ?
Click to expand...
Click to collapse
you could use dotfred's taskmanager for example (for PPC) or CERegeditor (for Windows Desktop) to export or import the registryentries.
Both tools are for free. Another solution could be SASHIMI which can also import registry files. Or you could create your own Mortscript, both are also for free.
if your ROM is supporting UC there is also a section for exchange (somewhere in the thread)
If you want to create a cab, WinCECabManager is easy, but not free.
hth
petervbeck said:
I've exported HKCU\Comm\Security\SystemCertificates\.... into a cabfile and use this one after every new rom i'm flashing
and it's working very well.
If you export into reg-file and edit this file with an hex-editor you'll find your exchange certificate for sure. and under HKCU\Software\microsoft\ActiveSync you can find your Exchange settings (servername etc). after flashing a new rom the only thing i have to do is to enter my password and that's it....if you're unsure, you could try to import into an wince emulator and test if it's working the way you want....
hth
Click to expand...
Click to collapse
HI Peter,
I tried exporting those reg keys out and after flashing my rom I managed to reimport them.
When I checked the certificates in Settings, they seem to be there. Checked Activesync settings, it is also there, however, when tried to sync, got this error
"The Microsoft Exchange Server requires a personal certificate to log on. Please obtain a certificate as directed by your corporation or service provider"
There was no option to key in password.
I had to re-enroll for a certificate going through my PC's WMDevice Center before able to sync with my Exchange server again.
So ... wonder whether I am still missing something that prevents me from restoring the certificates completely. Are there any physical certificate files that I need to back up as well ?
cheers
fy
fylim said:
So ... wonder whether I am still missing something that prevents me from restoring the certificates completely. Are there any physical certificate files that I need to back up as well ?
Click to expand...
Click to collapse
Bumpdibump, the same with me - although this is regarding a transfer from Rose to Polaris - this is the best post I have found so far...
Any luck on some specific files we need to copy in addition to the registry?
so i assume that the .cer used for the exchange server is no longer on the phone?
andason said:
so i assume that the .cer used for the exchange server is no longer on the phone?
Click to expand...
Click to collapse
I don't quite remember what happened, but for my part - not sure if the cer file was there, but it didn't help much anyway since whatever cer file I tried to validate with didn't work. I am looking into a different thread using rapiconfig to get the details from my phone, but I guess it ain't enough to only get the info from registry to get the darn thing to work.
Stuck...

Importing email settings when upgrading rom

When installing new roms which we'll now do a lot, is there a way to import your email settings to the new rom? Or do we have to reconfigure again every time we install a new rom?
It shouldn't be a problem to find the specific file which includes the configuration and copy it to the new rom, I just don't know which one is it.
Thanks.
check out SASHIMI... it can not only automate your email settings but also install your favorite programs (e.g., cab files). if you ask me it's a must have app for flash addicts!
Thanks Cortez.i !
Sashimi looks great but a couple questions:
1. When I press the link, I don't have a way to download it there (nor its documentation).
2. Does it know itself to import all the different registery files: emails, ringtones, shortcuts on home screen, favourites in ppl tab, etc. or do I need to manually find each of these registtery files and insert it there.
3. For the email he uses Makisu application. Is there a way to import my current emails configuration there or do I need to redo it (not a big deal)?
Thanks.
Sorry, ignore first point as was an idiot. One needs to register to be able to download.

[Q] RAPICONFIG (0x80042008) error

Hi guys,
I'm trying to provision a HTC Touch 2 with RAPI. After I run this:
Code:
rapiconfig /p config.xml
I get this:
Code:
Config failed (0x80042008): A fatal transaction failure has occurred. The device may be in an unknown state.
I'm clueless in what I can do to fix this, since the .xml holds the security policy settings for the device...
Ultimately, I need to install a few cabs through a script, with no UI during install. Which i'm running with rapistart by the way.
Some help would be greatly appreciated!
I don't know about this Rapi Neo, but you can use Dotfred's Taskmanager to import a xml.
Edit; no UI ok, so no way you can install Dotfred LoL, sorry.
Thanks Laurentius, I'll still have a look at that.
I'll explain my scenario a bit more.
I have to run a script which installs a few cabs (so no cab security etc) and then modify the start menu, so users are only able to run forementioned apps and a few standard things like contacts, sms, that sort of thing. Settings should be blocked or removed, so they won't be able to change any settings made before running the script.
The first problem arises with getting rid of the security. RAPIconfig usually was able to send a provisioning xml to the device (on wm6.1) and change the security policy keys in the registry. This time, i'm running it on a wm6.5 device. So i'm doing something wrong there.
And last but not least: I used to be able to run CeRun.exe in the script on wm6.1 (does almost the same as RAPIstart.exe, but is able to do multiple cab installs at the same time, without showing the installation on the device) and i'm wondering why it doesn't work in 6.5 anymore.
I guess no one ever used RAPI tools?

[Q] Advice sought for flashing Hermes 200

Hello all,
I am running a 64 bit Win 7 PC and an unlocked Hermes 200, with Win 6, which I wish to upgrade. I have used the Easy Hard-Spl v7 and the Hermes bootloader is showing an IPL 0f 1.04 and a SPL of 2.10 olipro. I have not flashed a phone ROM before and I wish to be safer than sorrier having bricked the Hermes.
I have the HTC_TyTN)WWE_3.54.255.3_6275_1.48.00.10_108.exe file which I wish to flash to the Hermes. I have renamed this file as a .zip file and extracted 8 files including RUU_Inside.exe (55,490kb). Again, I renamed this file as a .zip file and extracted another 8 files icluding RUU_signed.nbh (93,566kb). I am assuming that this is the file I need to flash.
To flash the Hermes ROM, I need to do:
1. have a 2Gb non-SHDC microSD card formatted to FAT32
2. rename RUU_signed.nbh to HERMIMG.nbh and copy this file to the root folder of the SD card
3. insert the SD card into the Hermes and start the bootloader
4. comfirm flashing on screen by pressing the power button
5. wait about 30 minutes
6. once flashing is confirmed as complete, do a soft reset
I am hoping that somebody that knows more than me, which is all of you, will confirm that my sequence of actions is correct or else point out my errors.
Many thanks for your help and advice,
Crag345
That is ok.
I think in step 4. that you will not confirm with power button, but with other one. Doesn't matters, it will tell you whitch one to press.
First flash AT&T ROM and than ROM image that you want, it is told on almost every [ROM] thread.
Searched high and low, can't find ROM
Before anyone bashes me for asking this, I've searched this forum and many others all evening and through the night and several times previously -- and EVERY SINGLE download link for any ROMs is broken. Can anyone help me locate a WM6.1 ROM that should work on a Cingular (now AT&T) 8525 (HTC Hermes)? By the way I'm no noob, I have successfully flashed ROMs to my HTC Wizard (AT&T 8125) and my HTC Apache and even cooked ROMs for it.
crag345, I'm in about the same boat as having thoroughly researched and being prepared to install a ROM for this thing (except still needing the ROM...hahaha) -- in general your approach seems solid, and those are the steps I've found too for flashing the Hermes from SD card.
Additional steps you might want to take, as found in some forum posts --
0. Make sure you have a ROM version that is compatible with your phone (you probably already did this, but extremely important so worth mentioning).
1.a) scan the SD card to verify integrity. Some have done this using a WM program called Storage Tools (I found Storage Card Tools, I think it is the same they were talking about, for $15). But in the wiki it says you can just use Properties, Tools, Error Checking (I found this on Windows desktop PC by right-clicking the drive letter first - they didn't mention that). I think the point of using Storage Card Tools was this guy had no access to a PC.
2.a) Copy or write down all the settings you can find in the phone, especially MEdia Net (this is from my own experience, after flashing you can't get internet, picture messaging, and similar stuff to work until this is re-entered). You can get there using Settings, Connections, Connections, and under MEdiaNet tap on Manage existing connections (might be called something else if you are with a carrier other than AT&T). Tap Edit, and go through each screen, capturing or writing down the settings.
2.b) Be sure your battery is charged, or phone plugged into charger.
7. Some forums on very similar HTC WM devices also advocate doing a hard reset after flashing a ROM. Not sure how necessary but it can't hurt. Possibly also of interest, if your carrier's ROM includes bloatware, you might be able to eliminate it by RIGHT BEFORE IT INSTALLS their customizations, hit soft reset button. Worked great for me on one phone, but on another phone it failed to stop the carrier customizations.
8. If pic msgs do not work, try going to MMS Options (in Messaging app), Menu, MMS server. (Menu and option names may vary depending on WM version). My notes are for AT&T -- Server name: type in anything. IP address: wireless.cingular.com. Port number: 80. Server address http://mmsc.cingular.com. Connect via: MEdia Net. send limit is 600KB.
---------- Post added at 08:31 AM ---------- Previous post was at 08:13 AM ----------
also, 2.a)1. Obviously, back up any data you have in the phone's internal memory. My Documents, and anything customized you've saved at the \ root level or another subfolder in internal memory. Also back up calendar and contacts -- if you are using Google exchange sync this won't be a problem, it will all come back when you re-establish the account settings and sync -- but if not, you might want to use a PIM backup utility. SK Tools is my favorite.
2.a)2. If you have a registry editor, you might want to use it to export some customized settings for your programs, then you can much more quickly restore those settings after flashing or hard resetting the device. I use an app TaskMgr.exe in the RegEdit screen for exporting subtrees, especially in HKCU, Software. You'll see folders the correspond to apps you've installed. One to not overlook if you customize button settings, is \Microsoft\Shell\Keys. You can inspect items to see if the data is something you care to quickly reinstall. Tap and hold and you can export. This way you can restore PORTIONS of the registry. The new OS will have a registry that is sure to be different in many significant ways so you don't want to export the whole registry and reimport it all. Once you have flashed &/or hard reset a device, you'll need a program that reads .reg files in order to easily reinstall your preferences. If you have SK Tools, even the lite version, once it is installed the system will recognize .reg files.
2.a)3. A few apps don't seem to store their settings in the registry or anywhere that can easily be saved. WkTask (an EXCELLENT task manager and task switcher program) is like this, and also TCPMP (awesome media player). So, look through the various settings and write down how you like it set up, makes restoring much easier later.
tsugaguy said:
Before anyone bashes me for asking this, I've searched this forum and many others all evening and through the night and several times previously -- and EVERY SINGLE download link for any ROMs is broken. Can anyone help me locate a WM6.1 ROM that should work on a Cingular (now AT&T) 8525 (HTC Hermes)? By the way I'm no noob, I have successfully flashed ROMs to my HTC Wizard (AT&T 8125) and my HTC Apache and even cooked ROMs for it.
crag345, I'm in about the same boat as having thoroughly researched and being prepared to install a ROM for this thing (except still needing the ROM...hahaha) -- in general your approach seems solid, and those are the steps I've found too for flashing the Hermes from SD card.
Additional steps you might want to take, as found in some forum posts --
0. Make sure you have a ROM version that is compatible with your phone (you probably already did this, but extremely important so worth mentioning).
1.a) scan the SD card to verify integrity. Some have done this using a WM program called Storage Tools (I found Storage Card Tools, I think it is the same they were talking about, for $15). But in the wiki it says you can just use Properties, Tools, Error Checking (I found this on Windows desktop PC by right-clicking the drive letter first - they didn't mention that). I think the point of using Storage Card Tools was this guy had no access to a PC.
2.a) Copy or write down all the settings you can find in the phone, especially MEdia Net (this is from my own experience, after flashing you can't get internet, picture messaging, and similar stuff to work until this is re-entered). You can get there using Settings, Connections, Connections, and under MEdiaNet tap on Manage existing connections (might be called something else if you are with a carrier other than AT&T). Tap Edit, and go through each screen, capturing or writing down the settings.
2.b) Be sure your battery is charged, or phone plugged into charger.
7. Some forums on very similar HTC WM devices also advocate doing a hard reset after flashing a ROM. Not sure how necessary but it can't hurt. Possibly also of interest, if your carrier's ROM includes bloatware, you might be able to eliminate it by RIGHT BEFORE IT INSTALLS their customizations, hit soft reset button. Worked great for me on one phone, but on another phone it failed to stop the carrier customizations.
8. If pic msgs do not work, try going to MMS Options (in Messaging app), Menu, MMS server. (Menu and option names may vary depending on WM version). My notes are for AT&T -- Server name: type in anything. IP address: wireless.cingular.com. Port number: 80. Server address http://mmsc.cingular.com. Connect via: MEdia Net. send limit is 600KB.
---------- Post added at 08:31 AM ---------- Previous post was at 08:13 AM ----------
also, 2.a)1. Obviously, back up any data you have in the phone's internal memory. My Documents, and anything customized you've saved at the \ root level or another subfolder in internal memory. Also back up calendar and contacts -- if you are using Google exchange sync this won't be a problem, it will all come back when you re-establish the account settings and sync -- but if not, you might want to use a PIM backup utility. SK Tools is my favorite.
2.a)2. If you have a registry editor, you might want to use it to export some customized settings for your programs, then you can much more quickly restore those settings after flashing or hard resetting the device. I use an app TaskMgr.exe in the RegEdit screen for exporting subtrees, especially in HKCU, Software. You'll see folders the correspond to apps you've installed. One to not overlook if you customize button settings, is \Microsoft\Shell\Keys. You can inspect items to see if the data is something you care to quickly reinstall. Tap and hold and you can export. This way you can restore PORTIONS of the registry. The new OS will have a registry that is sure to be different in many significant ways so you don't want to export the whole registry and reimport it all. Once you have flashed &/or hard reset a device, you'll need a program that reads .reg files in order to easily reinstall your preferences. If you have SK Tools, even the lite version, once it is installed the system will recognize .reg files.
2.a)3. A few apps don't seem to store their settings in the registry or anywhere that can easily be saved. WkTask (an EXCELLENT task manager and task switcher program) is like this, and also TCPMP (awesome media player). So, look through the various settings and write down how you like it set up, makes restoring much easier later.
Click to expand...
Click to collapse
I might have a few on my old hhd, I'll dig through tomorrow and let you know (;
do you just need oem?

Categories

Resources