Database Users

certificate installation

Hi all,
I have just upgraded to ROM 2.17.7.6 FRF on my Qteck 9100, service provider SFR (France).
Big problem : I cannot sync anymore with my Exchange Server. I understood the source of the problem: the Exchange self signed certificate is missing on the device after the Rom update. I tried to install it manually (by copying the .cer file via AS onto the device) but when I double click on the .cer file in the device, I get the message "Access to the certificate is impossible" (translated from French). There seems to be some kind of protection againts installing root certificates.
Any idea to get around this ?
Thanks -- any help really really appreciated. I am quite desperate at this stage...

Did you make sure to export the root certifcate in binary not MIME encoded format?
For me it worked to import a binary root certificate.

Thanks TcT.
Well I am not sure of the content of the .cer file.
What I did was simply copy the original .cer from the Microsoft Server to my client PC and then via Active Sync to the device and then double click on it. Nothing else.
What did you do?

There are several ways to export that Cert so that you can copy it though. DER encoded binary is what you need to use. In my case, I used a copy of my server's root cert on IE on my desktop. I exported it in DER format then copied it onto my 8125. I then tapped it and chose "install certificate".
In fact, I just tested this again on my Qtek 2.17 equipped 8125 and it worked perfectly.

Thank you Sleuth,
sorry to ask dumb questions but how do you use IE to import the cert in the requested format? What I did is I went to the \clientapps directory of the server and simply copied the .cer file. I suppose this is wrong.

You can double click on the .cer file on your PC there should be an "export" or "copy" button somewhere in that dialog there you can export the .cer file in different formats/encodings.

TcT great it worked
10 000 thanks. That was the trick

Exchange Activesync with Certs enabled
Hi,
I also have a Qtec 9100 an am unable to sync with Exchange using Certificates
I can sync if i turn OFF SSL on the server, i can also sync if i add the appropriate reg key into the device to disable Cert checking however i am curious to know if others have been able to sync using a manually created Cert .
i have tried exporting the cert from the server and the Desktop PC in all available formats and i am able to import this into the Trusted Root folder on the Qtec however each time i try to sync i get the error :
0x80072F01
Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.
any assistance is greatly recieved
Jedismurf

Certificate Uility
There is a great certificate import utility available...
http://www.jacco2.dds.nl/networking/crtimprt.html
I have used the PFXimprt but the newer one - P12imprt does WM5 and WM 2003.

wifi with certificate

Dear All
I need to connect my htc tyn to my work wifi configuration. The problem is the wifi is based on a root certificate permission. Obviously i have the certiface but with wm5 i can't configure the wifi with the root certificate. I try to use odyssey client for windows mobile but it allow me to use only personal certificate. Can someone help me
Thanks for your great support
Bas

It can be done, it's just not much fun!!!
It's a bit of a convoluted process, but you can install a root certificate on a WM device - only problem is, you have to use a CAB file.
There is an article on one of the MSDN blogs that you can use (I've used it myself about 12 months ago and I still have the CAB on my SD card!). Have a look at >THIS PAGE< to find out how to do it! By the way, the "makecab" program is part of Windows XP, so you don't need to go downloading SDK's etc.
Have a go, hope this helps!
Mark.

I have loaded my certs by exporting them on WinXp to .CER files, copying them to my Jasjam and then opening them in file manager.
You should be prompted to install the cert.
Worked for me.

Dear all
The problem is not to import the "root" certificate to wm5, but how to use it with the wifi (weap) structure.

Certificate annoyance

I have written a java MIDlet which frequently ( once every 5 seconds ) accesses the file system to read and write files. On the windows mobile device on which I am testing, the unsigned application causes a security request for every file access. This makes the application useless.
My query is, if I purchase a java code signing certificate from verisign, will the option to grant file access be availble in 'per session' scope for all windows mobile JVM's ?

Certificate Enroller

I have been searching high and low for a GUI based Certificate enroller for
Windows Mobile devices. Essentially I want a GUI driven enroller similar to
the version found in the WM2003 SDK using enroll.exe and enroll.cfg or
something similar. Ideally this GUI based enroller would be standalone and
would not store any credentials after the enrollment process. The WM2003 SDK enroll utility currently requires you to pre-populate the enroll.cfg file
with a user name, password, domain, CA servername and cert template this file has to be transfered to the device then launched with enroll.exe. The file resides with all credentials after the enrollment process. Any
chance we can get this GUI based that would work for all WM devices?

802.1x eap-tls

Hello,
i'm trying to get 802.1x sorted with certificates. I've tried both winmo 6.1 and 6.5 and neither seems to support it. Windows CE 6.0 supports it.
I've found suplicants which will do eap-ttls but nothing which does eap-tls.
Does anyone have any suggestions? Motorola add a package to their devices called Fusion which provides eap-tls support - but you can't purchase that seperatly.
Many thanks.

i have the same problem i am using samsung jack WM6.5 and nothing works i also try with a personal certificate but nothing i cant connect to my office network wich is eap tls

http://msdn.microsoft.com/en-us/library/aa916394.aspx
quote
The EAP framework is implemented in a dynamic-link library (DLL), eap.dll. Specific authentication extensions are implemented in separate DLLs. For example, the EAP-MD5 authentication extension is implemented in eapchap.dll. A single extension DLL may support more than one authentication extension type. For a particular extension to be used successfully, both the client and server must support it.
end of quote
CE and WinMo binaries (dlls) are compatible, you should be able to use eaptls.dll (or whatever dll contains TLS authentication) in WinMo if there isn't one. It should only take to extract it from a CE image or build with CE platform builder, then add registry settings to enable it.
You may also need to use pfximport for WinMo to install your device certificate:
http://www.jacco2.dds.nl/networking/pfximprt.html
The author mentioned someone was able to use EAP-TLS on WM5/6, see
http://www.jacco2.dds.nl/networking/p12imprt.html#EAP-TLS
quote
I have received several reports that EAP-TLS works after you installed a personal certificate with P12imprt. There are reports that you may need to soft reset your device before the personal certificate can be used with EAP-TLS.
end of quote

stepw said:
http://msdn.microsoft.com/en-us/library/aa916394.aspx
CE and WinMo binaries (dlls) are compatible, you should be able to use eaptls.dll (or whatever dll contains TLS authentication) in WinMo if there isn't one. It should only take to extract it from a CE image or build with CE platform builder, then add registry settings to enable it.
Click to expand...
Click to collapse
I can't find anywere an eaptls.dll file. Don't suppose anyone has a windowsCE device handy to extract it?

Unfortunately I don't, you could build one using Windows CE platform builder