Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Need a second privileged root certificate for WM5 device

3 views
Skip to first unread message

John Nossluap

unread,
Mar 22, 2006, 4:49:28 PM3/22/06
to
What do you do if you need a secondary privileged root certificate for
testing purposes in addition to the one provided with the Windows Mobile
5.0 SDK (SDKSamplePrivDeveloper.cer) ? I need two different ones
installed on the same device for some labs.

Is it possible to generate one by yourself (a privileged that is) and
what's the difference between a privileged root certificate and
"whatever" certificate that you just place in the root store of the device?

Lao K

unread,
Mar 22, 2006, 6:26:17 PM3/22/06
to
The certificate itself does not matter. What matters is where the
certificate is stored. If you put a certificate into "Privileged
Execution Trust Authorities", sign your code using the certificate,
then you code is privileged-signed.

I have found that lots of people are confused here, and Microsoft's
documentation in this aspect is not the clearest. I plan to write a
series of articles in my blog "Windows Mobile Pocket PC Smartphone
Programming" (http://windowsmobilepro.blogspot.com/). Do you have any
suggestion on the topics?


---
Lao K
Windows Mobile Pocket PC Smartphone Programming Hints and Tips
http://windowsmobilepro.blogspot.com

John Nossluap

unread,
Mar 23, 2006, 7:51:53 AM3/23/06
to
Lao K wrote:
> The certificate itself does not matter. What matters is where the
> certificate is stored. If you put a certificate into "Privileged
> Execution Trust Authorities", sign your code using the certificate,
> then you code is privileged-signed.

I see, I thought these certificates were _root_ certificates, either of
the type privileged or unprivileged. But in reality they have nothing to
do with the root store of the device, just the Privileged/Unprivileged
Execution Trust Authorities stores?

Can you still use makecert.exe från the 2003/CE420 SDK to create these
certificates and target them to these stores?

> I have found that lots of people are confused here, and Microsoft's
> documentation in this aspect is not the clearest. I plan to write a
> series of articles in my blog "Windows Mobile Pocket PC Smartphone
> Programming" (http://windowsmobilepro.blogspot.com/). Do you have any
> suggestion on the topics?

Go for it! I'm sure it'll be very appreciated among developers and
technicians. Microsofts (especially beginning with WM5) documentation is
OK but often a bit overwhelming when you're in a hurry trying to
understand a new area.

Scott Yost [MSFT]

unread,
Mar 23, 2006, 4:23:36 PM3/23/06
to
The "ROOT" store on the device is entirely concerned with SSL connections
and things like that.
The Privileged/Unprivileged and SPC stores are the ones that deal with code
execution, and they do not care if the cert is a self-signed root or not.

--
Scott Yost
Software Development Engineer/Test
Microsoft Corp.

This posting is provided "AS IS" with no warranties, and confers no rights.

"John Nossluap" <noad...@nodomain.com> wrote in message
news:%23T6dRin...@TK2MSFTNGP14.phx.gbl...

0 new messages