rapiconfig.exe error:Access denied

[John H]

When I try to run rapiconfig.exe to query the device for which certs
are in the privileged and unprivileged stores, I get an error that the
config failed (0x80042004): Access is denied.

Am I running the command wrong, or is the response I am getting an
indication of the security level of the device?

cmd: rapiconfig.exe /M querystore.xml
Device: Dell Axim x51v running WM5.0, connected with Active Sync 4.1.

Also, are there APIs that I can call from a signed application to add
my own certificate to the privileged (or unprivileged) store. We are
going to deploy 10k+ devices into the field and provisioning each one
with Active Sync is not an option.

Thanks,
John

[Scott Yost [MSFT]]

The XML that goes through rapiconfig comes through at a lower privilege
level, so it doesn't actually have access to the CertificateStore CSP at all
unless the Grant Manager policy is set to USER_AUTH. (policy 4119)

You need to be privileged / manager to add certificates, but you can still
do it through XML. If you call DMProcessConfigXML from a trusted application
on the device, that will work.
--
Scott Yost
Software Development Engineer/Test
Microsoft Corp.

This posting is provided "AS IS" with no warranties, and confers no rights.

"John H" <holm...@yahoo.com> wrote in message
news:1137765011.2...@g49g2000cwa.googlegroups.com...