tag:blogger.com,1999:blog-8600848.post113171685515027261..comments2023-08-04T14:50:42.868+02:00Comments on msgoodies: Solution for adding own root certificates to Windows Mobile 5 devices - UpdatedAnonymoushttp://www.blogger.com/profile/14713138671966546640noreply@blogger.comBlogger21125tag:blogger.com,1999:blog-8600848.post-23072297111462598652007-05-05T22:49:00.000+02:002007-05-05T22:49:00.000+02:00Give http://www.digitallabs.net/mcb a try for buil...Give http://www.digitallabs.net/mcb a try for building your certificate for both ActiveSync and code / cab signing. Even includes a standalone installer for deploying to the end users.Unknownhttps://www.blogger.com/profile/08620796989279048895noreply@blogger.comtag:blogger.com,1999:blog-8600848.post-13070472001716856492007-04-24T11:00:00.000+02:002007-04-24T11:00:00.000+02:00I had hours of problems trying to get this working...I had hours of problems trying to get this working. I had replaced my imate JasJam because of intermitent, unrelated problems. I then attempted to connect to my exchange server again.<BR/><BR/>The solution I had forgotten I had used previously was to use<BR/><BR/>http://<I>certserver</I>/CertSrv/<BR/><BR/>to create the certificate. Worked first go. On my network, the certificate server and the exchange sverver are on the same machine.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1167935589453168702007-01-04T19:33:00.000+01:002007-01-04T19:33:00.000+01:00Brilliant! A solution that actually works! SPV C55...Brilliant! A solution that actually works! SPV C550 - worked first time, after 2 days messing around with other "solutions" that were not nearly as simple as this one. Thank you soooooo much!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1165339004156076192006-12-05T18:16:00.000+01:002006-12-05T18:16:00.000+01:00Very helpful post. It works on a Motorola Q from V...Very helpful post. It works on a Motorola Q from Verizon.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1163652387588582002006-11-16T05:46:00.000+01:002006-11-16T05:46:00.000+01:00This link was VERY useful...I spent nearly 7 hours...This link was VERY useful...I spent nearly 7 hours trying to get a Treo 700w to sync w/o any success. After unlocking reseting and installing the certificate it worked like a charm.<BR/><BR/>It is a shame that this feature doesn't work out of the box or that better help isn't provided by the vendors!<BR/><BR/>Thanks for sharing your findings.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1158004594344368902006-09-11T21:56:00.000+02:002006-09-11T21:56:00.000+02:00Thanks for a useful link. This made my day.Thanks for a useful link. This made my day.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1151939517483316262006-07-03T17:11:00.000+02:002006-07-03T17:11:00.000+02:00THANKS A LOTWith your description I was able to se...<B>THANKS A LOT</B><BR/>With your description I was able to set-up ActivSync on my new Qtek 8500!!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1146472419860018782006-05-01T10:33:00.000+02:002006-05-01T10:33:00.000+02:00Sure - I found it at http://www.modaco.com/INFO_De...Sure - I found it at http://www.modaco.com/INFO_Decert_SIM_Unlock_C550-t222786.htmlPer Østergaardhttps://www.blogger.com/profile/12128790394950237942noreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1146294129249764962006-04-29T09:02:00.000+02:002006-04-29T09:02:00.000+02:00I have been googling around to find regeditSTG.exe...I have been googling around to find regeditSTG.exe - but didn't succeed.<BR/>Could you tell me where to find it...Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1144892124960255252006-04-13T03:35:00.000+02:002006-04-13T03:35:00.000+02:00For my Dopod 818 Proand the error: "security permi...For my Dopod 818 Pro<BR/>and the error: "security permission was insufficient to update your device"<BR/><BR/>After emailing with dopodasia, they sent me a CAB file that updated the device and allowed me to import my cert for IEEE 802.1x PEAP tunnled EAP-MSCHAP-2 WiFi<BR/><BR/>See fix/cab file in my <B><A HREF="http://kingbob.itsmyland.com/blog/2006/04/12/dopod-818-pro-signed-cert-import-fix/" REL="nofollow">Blog</A></B><BR/><BR/>Hope it helps atleast someone!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1143683616528559992006-03-30T03:53:00.000+02:002006-03-30T03:53:00.000+02:00One of my users has an O2 XDA Atom - a very sweet ...One of my users has an O2 XDA Atom - a very sweet WM5 phone indeed - to which we needed to add the root CA cert for a cert server on our local network in order to enable Active Sync 4.1 for exchange 2003 using HTTPS.<BR/>I discovered that the RegeditSTG didn't work: i.e. the registry keys remained locked. Scratching around abit more, I found a link to Resco Explorer, a shareware Windows Mobile 2Kx package that bundles a signed registry viewer that DOES work with the Atom. <BR/>http://www.resco.net/pocketpc/explorer/default.asp<BR/>Changed Security keys as instructed and installed the certs for the CA and the Exch 2K3 server without a problem. Reset the keys and tested ActiveSync - all good!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1141351943701409232006-03-03T03:12:00.000+01:002006-03-03T03:12:00.000+01:00I had this issue with an o2 Atom when trying to in...I had this issue with an o2 Atom when trying to install a custom root certificate. Resolved it by changing the value of 00001017 to 144 but the trick was NOT to reboot before installing the certificate. 9When I rebooted the device it seemed to reset the registry keys back to the original settings)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1139421407640881872006-02-08T18:56:00.000+01:002006-02-08T18:56:00.000+01:00Thanks for your help.. Although it couldn't get m...Thanks for your help.. Although it couldn't get my SPV C600 Orange phone to unlock using the key below:-<BR/><BR/>KLM\Security\Policies\Policies\00001017 = 144<BR/><BR/>I left this value at 128 and changed a different key.<BR/><BR/>I changed the value from 0 to 1 as below:-<BR/><BR/>Privileged Apps Policy<BR/>[HKEY_LOCAL_MACHINE\Security\Policies\Policies]<BR/> "0000101b"=dword:1<BR/><BR/>I then did a restart and installed the certificate without any problems.<BR/><BR/>I then changed the key value back to 0 to protect the phone.<BR/><BR/>CheersAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1135691770380137672005-12-27T14:56:00.000+01:002005-12-27T14:56:00.000+01:00Hi cy,Thanks for your comment. It seems to work di...Hi cy,<BR/><BR/>Thanks for your comment. It seems to work differently depending on the phone and version of Windows Mobile. With AKU2 on the Qtek 8310 device I only need to set the Grant Manager registry key to 144 and then install the certificate (Without booting).Anonymoushttps://www.blogger.com/profile/14713138671966546640noreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1135664207529645962005-12-27T07:16:00.000+01:002005-12-27T07:16:00.000+01:00Hi, thanks for the tip. But I got mine working a b...Hi, thanks for the tip. But I got mine working a bit differently.<BR/>If I reboot the device after I made the reg change, it will be set back to the old restricted value. All I did was to make the reg change and run the certificate file and it imported sucessfully. I don't event need to use the HTC reg editor.<BR/>I am doing this on Dopod 818 pro (aka HTC prophet)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1133897489484927622005-12-06T20:31:00.000+01:002005-12-06T20:31:00.000+01:00Hi, one question, where in the registry do I find ...Hi, one question, where in the registry do I find the grant manager policy? I tried searching for it but didn't find it.<BR/>//ErikAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1132161982232669472005-11-16T18:26:00.000+01:002005-11-16T18:26:00.000+01:00Hi Michel, Thanks for your question. I'm curious d...Hi Michel, Thanks for your question. I'm curious did you reboot the device before trying to install the certificate ?<BR/><BR/>I do agree with your comment on SDA_ApplicationUnlock - maybe we could convince Mark to write a regmon version for WM5 ;-)Anonymoushttps://www.blogger.com/profile/14713138671966546640noreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1132135746870383212005-11-16T11:09:00.000+01:002005-11-16T11:09:00.000+01:00Working with a full-price, carrier-independent i-m...Working with a full-price, carrier-independent i-mate SP5 (bought from smartphoneshop.nl), I was not able to install the certificate using the workaround recommended here (changing the value of 00001017 to 144). I got the "phone may be locked" message.<BR/><BR/>However, I WAS able to install it after running SDA_ApplicationUnlock.<BR/><BR/>This indicates to me that SDA_ApplicationUnlock does something other than the change mentioned.<BR/><BR/>On the positive side, I now have air sync with Exchange working!<BR/><BR/>On the less positive side, as aptly noted in the post above, there has now been a change made to my phone and I have no idea what it is! So if anyone has any ideas what changes are really made by SDA_ApplicationUnlock, I'd love to hear about it.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1131757188023178552005-11-12T01:59:00.000+01:002005-11-12T01:59:00.000+01:00This is great. I unlocked my Qtek 8310 and install...This is great. I unlocked my Qtek 8310 and installed the root cert from http://cert.startcom.org/. I didn't even need to reboot the phone. Thanks.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1131724098481998082005-11-11T16:48:00.000+01:002005-11-11T16:48:00.000+01:00Excellent stuff! Thanks.Using this method I have s...Excellent stuff! Thanks.<BR/><BR/>Using this method I have successfully managed to unlock my SPV C550 when the tools provided by Orange were unable to do so.<BR/><BR/>I can now use ActiveSync without the need to disable certificate checking.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8600848.post-1131723901539083582005-11-11T16:45:00.000+01:002005-11-11T16:45:00.000+01:00It may be slightly different for the Smartphone fl...It may be slightly different for the Smartphone flavour of Windows Mobile 5.0 but we've successfully used the following process for the K-Jam and the XDA Exec:<BR/><BR/><A HREF="http://www.drewery.net/blog/2005/11/10/windows-mobile-50-activesync/" REL="nofollow">http://www.drewery.net/blog/2005/11/10/windows-mobile-50-activesync/</A>Anonymousnoreply@blogger.com