Installating Certificates on WM2005 for smartphones - HTC Typhoon

By default WM2005 is locked so certificate installations fail (for ActiveSync with Exchange server etc).
To unlock:
1. Change the policies in regedit on the device as follows:
a. HKLM\Security\Policies\Policies\
b. click "Values" soft-key
c. Change 00001001 value to 1
d. Change 00001005 value to 40
e. Reboot device.
2. Run SDA Security Unlocker (attached to this message, or search for SDA_ApplicationUnlock.exe on Google) with the device connected by ActiveSync and turned on normally. Click Remove-Lock. Reboot.
Now certificates will install correctly.

Related

MachinaGod RAPI Unlocker - certificate disable on WM5 v0.1

Hi,
Just an util I got together in no time.
Rapi Enabler, certificate disabler.
Enable all the security on your Windows Mobile 5 phone.
Credits to the author of the ce remote tools.
Instructions:
1. Download the attached file (you have to be logged into xda-dev);
2. Extract it somewhere in your computer
3. Connect your phone via activesync
4. Run the EnableRapi.bat (on your computer)
5. Done.
Have fun,
Ricardo
How does it differ from this CAB file I pulled off the HTC Apache?
I use this in my Extended ROM so that I can run unsigned applications, CAB files, and CPF files during the initialization procedure after a hard reset.
Hi BTT,
This is based on that exact cab. The only difference in enabling RAPI calls also, and doing it without needing user interaction, only needing a activesync connection.
Is a little utility I use for integration into batch files.
Bye,
Ricardo
Certificate disabler..
Probably a dumb question, but is it a replacement fort certchk on 2003 devices? Still looking for such a program.
Thx
Thanks Machinegod, this worked well. I used it on an XDA exec will it work with all WM5 devices?
Hi Machinagod
Is there a way i can call your routine from code?
I have developed software for WM5 but cannot access the database with the standard MS settings. I would like to give my users the option to unlock the rapi calls and install automatically.
Thanks in advance
Steve
ronaldovic said:
Certificate disabler..
Probably a dumb question, but is it a replacement fort certchk on 2003 devices? Still looking for such a program.
Thx
Click to expand...
Click to collapse
to ronaldovic: I believe this utility is for disabling signed applications so you can install apps that have not been signed. I have used BTT cert cab in my extended rom since he posted it (Thanks BTT, It has been very usefull)
If you are looking for disable cert check so you can activesync with MS exchange without a a SSL . Certificate connection, Micro$oft still offers a download to disable the cert sync check..
see http://www.microsoft.com/downloads/...b8-8b3a-4f1d-8e94-530a67614df1&displaylang=en
Miracle Registry
i checked many registry of "Security policies" in different device, and also SDK.
http://asukal.seesaa.net/article/12583144.html
You can understand how change it for your neccesity.
this was for your refference.
and also i got made one registry file which has many "Certificate Sotre"
from different setting devicees and CABs and SDK Emu.
This registry make your device to enable working many kinds of dll and exe or any other files without digital signed(not for all)
multi user interface files also can effect without digital signatures.
(shellress still can not, but worked with Smartphone signature)
The security revel will be same or lower than SDK emu.
but not completely finish to edit it.
so possibility of some side-effect or unkown problem.
Hope understand this point and use it as test.
But once you use this registry, you got understand why i said it miracle.
just import this registry and make soft reset.
"syntac error" displayed when you import this, but works.i will cheking the reason of this error.
lets test it.
Re: MachinaGod RAPI Unlocker - certificate disable on WM5 v0
I try to use it on my new Jamin but nothing happen.... Prog still not work.
Pls I'm a newbe, Can you help me ?
Thanks a l ot
Hi MachinaGod,
Could you tell me please what exactly this RAPI unclocker is doing? Is it possible to undo it? RAPI locker or something? Is there any security threat after you execute tis program?
Thank you!
cingular
please tell me what tool can unlock (simlock) my cingular 8525, Thank you very much!
hmmmmmmmmytfghvghdgfgfdtrsdr
unlocking spv m1500
hello,
i tried the RAPI unlocker but it did not work,
could it be because my Pocket pc is running 2003 CE?
hi
someone can send me the file i can download him pls
and one qwuestion this unlock mi simlock???
htc 8125 need help please
machinagod said:
Hi,
Just an util I got together in no time.
Rapi Enabler, certificate disabler.
Enable all the security on your Windows Mobile 5 phone.
Credits to the author of the ce remote tools.
Instructions:
1. Download the attached file (you have to be logged into xda-dev);
2. Extract it somewhere in your computer
3. Connect your phone via activesync
4. Run the EnableRapi.bat (on your computer)
5. Done.
Have fun,
Ricardo
Click to expand...
Click to collapse
i have a htc 8125 and tried your method and it never gave me a code but when i put my sim card in it says sim lock and unlock? explain how to unlock this d$$m phone.It is a cingular phone but i dont have that service.it is version 2.25
[email protected]

Certificate-issues when attempting to install on QTEK 9100

I've recieved a QTEK9100 (HTC Wizard) from my employer. The ROM-version is 2.18.7.4 NOR.
This unit seems to be application locked in some way.
Among other things, I have tried to install two different sharewhare GPS-programs on this unit (PTGMAP and OZIExplorer). When installing or running the .exe files i get error messages like:
- "Cannot open the file PTGMAP. It either lacks a signed certificate or cannot find one of the components" (my translation).
- ".. can not be installed because it does not have a digitally signed certificate" (also my translation)
- or simply "cannot be installed"
I've searched this forum and quite a few others, but I have not been able to find a solution. I've found some .cab files, but these have been for other units that the QTEK 9100/HTC Wizard. I was even able to install this one, but it seems to have made no difference:
ftp://[email protected]/Universal/Extended_ROMs/Default_Signed_DisableSecurity.CAB
(I do realise this is for another unit)
I've also tried SignCode - It's says that the executable is certified, but I still get the same error message when I try to run the programe.
Finally, because my ROM has been configured (by an external supplier) with Pylon Anywhere for syncronization, I guess I can't install another ROM, as I will lose this software which I need.
Can anyone help me here? --- Please!?! ---
Try this reg tweak
Disable the security warning when installing non-certified application
To disable the security warning when installing a non-certfied application, set:
HKLM\Security\Policies\Policies\0000101a = 1 (DWORD decimal)
To restore the warnings:
HKLM\Security\Policies\Policies\0000101a = 0 (DWORD decimal)
Registry editor
but... I've tried to install the registry wizard:
http://forum.xda-developers.com/viewtopic.php?t=39725&highlight=registrywizard
But I get the same error-message "cannot install RegistryWizard_PPC_ARMV4.cab"..
Any ideas?
Copy this exe to your device via activesync and click on file through file explorer. It is a registry editor and go to those keys i described.
Still doesn't work
I've tried this in every possible way now:
- I've copied the file to my "mobile unit" in windows explorer with ActiveSync running.
- I've put the file in the file-sync and synced.
- I've copied the file to my storage-card using a card-reader.
... Everytime I try to run the file, I still get the message "Cannot open regedit_463. It is either not signed with a signed certificate and so on..."
I am considering a ROm-update, but if I install a new ROM, I'll lose all the syncronization software from my employer, right?
Any futher help is greatly appreciated! Thanks!
Re: Still doesn't work
kloksa said:
I've tried this in every possible way now:
- I've copied the file to my "mobile unit" in windows explorer with ActiveSync running.
- I've put the file in the file-sync and synced.
- I've copied the file to my storage-card using a card-reader.
... Everytime I try to run the file, I still get the message "Cannot open regedit_463. It is either not signed with a signed certificate and so on..."
I am considering a ROm-update, but if I install a new ROM, I'll lose all the syncronization software from my employer, right?
Any futher help is greatly appreciated! Thanks!
Click to expand...
Click to collapse
Try the above file in main memory - take your storage card out and soft reset. Then click on the file again - sometimes it is a corrupt storage card that causes that error. Otherwise its some software thats caused this security error and you will need to hard reset or update rom. Yes you would have to reinstall all your software.

Security Configuration Manager Issue

I was trying to upgrade my MIDLET Manager to 11.1.7.1023 using Risidoro_Intent_MIDlet_Manager_v11.zip and following instructions given in
http://forum.xda-developers.com/showthread.php?t=286604&page=3
Risidoro says:
-> download MS Certificate Powertoy from HERE.
-> install it in your PC, connect the phone to usb and run the program
-> Choose the 'No security' (i don't remember the exact name) configuration and apply
-> reinstall the Midlet manager
Performed all the above steps but the midlet manager still gave the security issue. Anyways that wasnt much of a concern but the following are now definitely a concern:
a) I cant connect to MS Communicator :
Error: The file 'Communicator' cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. You might need to reinstall or restore this file.
b) I cant connect to PIM Backup :
Error: Same as above
c) The Security Configuration Manager installed on the PC can no longer provision security back from "No Security". It cannot retrieve the mobile configuration which it was able to before i had provisioned it to "No Security" following the above steps by Risidoro.
Please advise ?

Unlocking Windows Mobile

I was reading and searching, when i saw this:
Some Windows Mobile smartphones have a safety lock that prevents the installation of "non-certified" (eg MIGSoft SmartTweaks) or editing the content of the record. But beware: this block has nothing to do with those that prevent the use of a device outside of a particular operator.
To perform the unlock, just change two registry keys using a registry editor (but read the specific topic on hacks and the care you must have):
1. Go to: hkey_local_machine \ security \ policies \ policies
2. Change the value of key "00001005" to "40" (without quotes);
3. Change the value of key "00001001" to "1" (without quotes);
In my first Motorola MotoQ CDMA Windows Mobile 5.0 could make this change without any major problems. However, after returning from service, which has changed the board and the ROM version of the device, this key Windows Mobile could not be changed. After some research, I found the procedure that allows the release of ROMs where the editing of this registry key can not be changed - by remembering that this is a hack I'm not responsible for any damage that might do to the system. Test at your own risk:
1. Download and install Device Security Manager Powertoy for Windows Mobile 5.0 from Microsoft. http://www.microsoft.com/downloads/...8c-d587-47e0-908b-09fee6ea517a&displaylang=en
This application shows the type of security policy in the existing Windows Mobile device connected to the PC. Warning:
this software crashes on Vista, but you can use it according to the desired result;
2. Connect the Q to the PC, wait for sync and run the program. You will see "two tier" in the "security policy" if the device has the protection of editing the registry;
3. Download the file secpolicies.cab http://sems.org/content/download/secpolicies.cab amending the security policy. This file is from Telus States
United States;
4. Install the file, moving it into the device and using the file manager of Windows Mobile, click it (run it);
5. Run the application again Device Security Manager Powertoy for Windows Mobile that should now show the value "tier one".
It is done.
Original Post from http://www.seidimobile.com.br/2008/06/05/desbloqueio-do-windows-mobile/

How to install .xap files on upgraded lg optimus 7

Hello everyone,
I have recently bought a Lg optimus e900 and upgraded it to Windows phone 7.5 . The thing is I can not manage to install any .xap files from my windows 7 pc. I have tried various xap installing apps. they all tell me that my device is not correctly connected, that zune is not launched,or that it is not developper unlocked even though it is unlocked via MFG. Can someone that has managed to install third-party xap files for free on their upgraded lg optimus e900 explain me a precise procedure.
Thanks,
GenieEte0 said:
Hello everyone,
I have recently bought a Lg optimus e900 and upgraded it to Windows phone 7.5 . The thing is I can not manage to install any .xap files from my windows 7 pc. I have tried various xap installing apps. they all tell me that my device is not correctly connected, that zune is not launched,or that it is not developper unlocked even though it is unlocked via MFG. Can someone that has managed to install third-party xap files for free on their upgraded lg optimus e900 explain me a precise procedure.
Thanks,
Click to expand...
Click to collapse
I managed to install third-party xap files on upgraded phone to latest WP7.5 (7.10.8773)
Procedure for permanent developer unlock is:
1. Install the MFG app by dialing: ##634#
2. Open the MFG app. The password is: 277634#*#
3. Go to Engineer Menu -> Other Settings -> Edit Registry
4. Set your ROOT PATH to "HKEY_LOCAL_MACHINE"
5. Set your input path to "\Comm\Security\LVMod"
6. Set your input key to "DeveloperUnlockState" and set to DWORD.
7. Leave input data box empty and tap "SET".
8. The output should be 0.
9. Now enter "1" in the inputbox and tap "SET".
10. The output should be 1.
11. Set your input path to "\Software\Microsoft\DeviceReg"
12. Set your input key to "PortalUrlProd" and set to DWORD.
13. Clear the input data box and hit "SET".
14. Output result should be "0".
15. Set your input key to "PortalUrlInt" and set to DWORD.
13. Clear the input data box and hit "SET".
14. Output result should be "0".
Then close all windows and restart the phone.

Categories

Resources