Guys,
I have a requirement to provide a level of security on some corporate 8100/8125 devices.
I've proved that by implementing a couple of registry changes I can disable the SD and Camera devices which is exactly what I want to do.
The problem is that if a user Hard Resets the device and applies the customizations those registry changes are lost.
I've been told that I could put the registry changes into CAB files and install them in the Extended ROM, this way each time the user performs a hard reset the reg changes will be re-applied.
If someone has detailed instructions on how I could do that I'd be grateful.
Thanks
acowx said:
Guys,
I have a requirement to provide a level of security on some corporate 8100/8125 devices.
I've proved that by implementing a couple of registry changes I can disable the SD and Camera devices which is exactly what I want to do.
The problem is that if a user Hard Resets the device and applies the customizations those registry changes are lost.
I've been told that I could put the registry changes into CAB files and install them in the Extended ROM, this way each time the user performs a hard reset the reg changes will be re-applied.
If someone has detailed instructions on how I could do that I'd be grateful.
Thanks
Click to expand...
Click to collapse
How "secure" do you want this to be? A determined user could install a registry editor and re-enable the reg options you disable. If your users are sales and marketing folks, then they probably don't have the technical aptitude required to do such things (jk!), but if there's a desire, there's a way.
A slightly more secure way would be to not only disable the reg keys, but also remove the camera app and drivers and SD drivers from the OS. This requires building a custom ROM, which I could probably throw together for you relatively quickly.
If removing the reg entris is enough to satisfy you, you can create a cab file using wince cab manager or the cabwiz from Visual Studio. This could be placed into an extended ROM image which you can flash to the devices. I can do that for you as well, or you can look through the posts here regarding custom ext roms.
to do this you need to build a custom extended rom there is a whole post for this it is called home cooked roms how to http://forum.xda-developers.com/viewtopic.php?t=52564&highlight= you will need the tools on there as well as wince cab manager which costs a little bit to buy or you can use the trial version but it expires quick so make sure you have the time to figure out what you are doing before you go through starting to do it and here are the tools http://forum.xda-developers.com/viewtopic.php?t=54563&highlight=extended+rom
this should pretty much get you started all you need to do is take the files already in the extended rom and add your cab file to it and update the auto execute file the lists all the items to be automatically executed and then repack it and flash the extended rom to the phone and then hard reset then they should be applied
summiter said:
acowx said:
Guys,
I have a requirement to provide a level of security on some corporate 8100/8125 devices.
I've proved that by implementing a couple of registry changes I can disable the SD and Camera devices which is exactly what I want to do.
The problem is that if a user Hard Resets the device and applies the customizations those registry changes are lost.
I've been told that I could put the registry changes into CAB files and install them in the Extended ROM, this way each time the user performs a hard reset the reg changes will be re-applied.
If someone has detailed instructions on how I could do that I'd be grateful.
Thanks
Click to expand...
Click to collapse
How "secure" do you want this to be? A determined user could install a registry editor and re-enable the reg options you disable. If your users are sales and marketing folks, then they probably don't have the technical aptitude required to do such things (jk!), but if there's a desire, there's a way.
A slightly more secure way would be to not only disable the reg keys, but also remove the camera app and drivers and SD drivers from the OS. This requires building a custom ROM, which I could probably throw together for you relatively quickly.
If removing the reg entris is enough to satisfy you, you can create a cab file using wince cab manager or the cabwiz from Visual Studio. This could be placed into an extended ROM image which you can flash to the devices. I can do that for you as well, or you can look through the posts here regarding custom ext roms.
Click to expand...
Click to collapse
Hey, thanks for the speedy response.. from the top man in the forum too !
Given your comment about users being able to re-enable the reg settings I think you're right and I'd be grateful if you could produce a custom ROM based on the 2.25 ROM that Cingular provided for the 8100/8125 with all Camera and SD functions removed (and no other customizations)
In the meantime I'll trawl the documentation on here to work out how I can do this myself given.
Thanks man !
acowx said:
summiter said:
acowx said:
Guys,
I have a requirement to provide a level of security on some corporate 8100/8125 devices.
I've proved that by implementing a couple of registry changes I can disable the SD and Camera devices which is exactly what I want to do.
The problem is that if a user Hard Resets the device and applies the customizations those registry changes are lost.
I've been told that I could put the registry changes into CAB files and install them in the Extended ROM, this way each time the user performs a hard reset the reg changes will be re-applied.
If someone has detailed instructions on how I could do that I'd be grateful.
Thanks
Click to expand...
Click to collapse
How "secure" do you want this to be? A determined user could install a registry editor and re-enable the reg options you disable. If your users are sales and marketing folks, then they probably don't have the technical aptitude required to do such things (jk!), but if there's a desire, there's a way.
A slightly more secure way would be to not only disable the reg keys, but also remove the camera app and drivers and SD drivers from the OS. This requires building a custom ROM, which I could probably throw together for you relatively quickly.
If removing the reg entris is enough to satisfy you, you can create a cab file using wince cab manager or the cabwiz from Visual Studio. This could be placed into an extended ROM image which you can flash to the devices. I can do that for you as well, or you can look through the posts here regarding custom ext roms.
Click to expand...
Click to collapse
Hey, thanks for the speedy response.. from the top man in the forum too !
Given your comment about users being able to re-enable the reg settings I think you're right and I'd be grateful if you could produce a custom ROM based on the 2.25 ROM that Cingular provided for the 8100/8125 with all Camera and SD functions removed (and no other customizations)
In the meantime I'll trawl the documentation on here to work out how I can do this myself given.
Thanks man !
Click to expand...
Click to collapse
No worries - can you PM me a little reminder? I'll look into this tomorrow.
Related
is it possible to make an already full patched(button fix,camera,bluetooth,etc) rom with all basic programs (such as mms client,stk,backlight,etc)?
i think yes but i'm not able to make it..it will be very usefull for newbies such me..
with this full rom you do not need to post lots of duplicated threads and all will works since the beginning..
yeah i would like that to,
so we only have to install it without patching and so
very good idea!!!!
but now, apart the Wiki, there is a list of all patchs that must be installed?!
'cause I don't have enough time to read alle the pages in WM5 problem resolutions thread
well,
so far, i created a project for a extended rom under wm2005.
http://wiki.xda-developers.com/index.php?pagename=BA_WM5_Extended_ROM
Butt im stuck, it will not install off the rom after a hard reset.
If this would be working we do not have to worry anymore if we forgot or lost our sd card for the neccesary patches.
i think yes
i can make a list but someone has to do that
i think tha the 'default' are:
camera fix
wm5_v3 fix
button fix
midi with album fix
missing system programs (mycpl.rar)
traylauncher
wifi programs
sim manager
and a set of default programs:
pdf reader
xscaler
pocketplus
pocketrar
etc..
I would say no, i'd rather have the choice to install what patches i want. For instance if i dont use MMS or prefer the soft keys of WM5. The way it is now you can configure the device just as you want. Getting a working extended rom you can customise would be my choice. I definitely wouldnt want Pocketplus installed by default on my device.
It has to work first.
So anybody already found a working autorun.exe and config.txt files?
I Tried alot of those two, but still not able to get it working under te extended rom after a hard reset.
efjay said:
I would say no, i'd rather have the choice to install what patches i want. For instance if i dont use MMS or prefer the soft keys of WM5. The way it is now you can configure the device just as you want. Getting a working extended rom you can customise would be my choice. I definitely wouldnt want Pocketplus installed by default on my device.
Click to expand...
Click to collapse
you don't have to use the all in one pack..
it's only the noob choise..and very easy to use..
flagg said:
efjay said:
I would say no, i'd rather have the choice to install what patches i want. For instance if i dont use MMS or prefer the soft keys of WM5. The way it is now you can configure the device just as you want. Getting a working extended rom you can customise would be my choice. I definitely wouldnt want Pocketplus installed by default on my device.
Click to expand...
Click to collapse
you don't have to use the all in one pack..
it's only the noob choise..and very easy to use..
Click to expand...
Click to collapse
Yes i dont have to use it; but if the patches are no longer released separately then i have no choice. If there is a choice of all-in-one rom and non-patched that will be ok. But you have to think of who creates the rom, it may be easier just to maintain one rom version. I guess we have to wait and see..
@pimbo have you tried the autorun from the K-Jam extended rom? May be different from the Universal files. Its here ftp://ftp.xda-developers.com/Uploads/
efjay said:
@pimbo have you tried the autorun from the K-Jam extended rom? May be different from the Universal files. Its here ftp://ftp.xda-developers.com/Uploads/
Click to expand...
Click to collapse
Not yet, preparing my device now, autorun is 17kb from this one
setup is 104kb, looks common, exept the dates are a bit older.
Manually launching the autorun of files on the extended rom will work, so i guess that i have to do a hardreset again, thats what i going to do later the evening. lol 8)
:evil: :evil:
No luck. wil not automaticly run.
Still need to make the rom visible and run the autorun.exe for the installs.
But this is the nearest solution for now i guess.
So you still need a single cabfile on a sd card to unhide your rom and install all files on there.
If anybody knows the bytes to change in the nbk or nbf files or maybe in the bootstrap, the adaption could be completed and the patches would automaticly install after a hardreset. .
please don't OT
...so
dev can make all in one rom and single patch
flagg said:
i think yes
i can make a list but someone has to do that
i think tha the 'default' are:
camera fix
wm5_v3 fix
button fix
midi with album fix
missing system programs (mycpl.rar)
traylauncher
wifi programs
sim manager
Click to expand...
Click to collapse
ok!!!!
From the Wiki...
camera fix [Camera2K5_v1.rar]
wm5_v3 fix [ba_wm5_fix_v3.rar]
button fix [Buttons_Fix_v2.rar]
midi with album fix [Album with midi.rar]
-------------------------------------------------
traylauncher [http://www.phm.lu/Products/PocketPC/PowerToys/]
sim manager [ftp://xda-developers.com/Uploads/Blueangel/wm5_test/AsukalSIMManger.cab]
missing system programs [mycpl.rar --> ftp://xda-developers.com/BlueAngel/BA_WM5/Patches/Old Patches/mycpl.rar]
wifi programs [ftp://xda-developers.com/BlueAngel/Programs/WIFI/Retina digital security/RetinaWiFiPoc.exe]
right?!
i for one would love an all encompassing rom patch. reading through all the duplicate posts and other resolutions is a real hassle for noobs. we see the same questions being asked every 3 days or so and it just creates more clutter for the other noobs to sift through. i figure a lot of those fixes should be included in the next patch of the current wm5 rom anyhow if people rather wait for that to come around.
Closer said:
flagg said:
i think yes
i can make a list but someone has to do that
i think tha the 'default' are:
camera fix
wm5_v3 fix
button fix
midi with album fix
missing system programs (mycpl.rar)
traylauncher
wifi programs
sim manager
Click to expand...
Click to collapse
ok!!!!
From the Wiki...
camera fix [Camera2K5_v1.rar]
wm5_v3 fix [ba_wm5_fix_v3.rar]
button fix [Buttons_Fix_v2.rar]
midi with album fix [Album with midi.rar]
-------------------------------------------------
traylauncher [http://www.phm.lu/Products/PocketPC/PowerToys/]
sim manager [ftp://xda-developers.com/Uploads/Blueangel/wm5_test/AsukalSIMManger.cab]
missing system programs [mycpl.rar --> ftp://xda-developers.com/BlueAngel/BA_WM5/Patches/Old Patches/mycpl.rar]
wifi programs [ftp://xda-developers.com/BlueAngel/Programs/WIFI/Retina digital security/RetinaWiFiPoc.exe]
right?!
Click to expand...
Click to collapse
nice job..so we have only to wait maimac or someone else..
we are all noob..we are all waiting for you :lol:
if ppl want to install single patch one by one they can do that
but i think that for noobs this is such as an "official" rom
tested and approved from xda devs
please try to create folder named 2577 in your extrom and place autorun in that folder.
it should be executed automatically...
buzz
buzz_lightyear said:
please try to create folder named 2577 in your extrom and place autorun in that folder.
it should be executed automatically...
buzz
Click to expand...
Click to collapse
did not work, did the autorun in a folder called 2577. cab files on the root.
did a hard reset, but would still not install.
The screen of the 3sec before install wont pop up
But after i made my extended rom visible, it automaticly runs after a soft reset.(the 3sec screen pops up )
(last problem?)
But i'm going to get some sleep now, maybe that will help a bit :shock:
flagg said:
nice job..so we have only to wait maimac or someone else..
Click to expand...
Click to collapse
OK! now I'm ready to flash with Mamaich Patch 3 ..
buzz_lightyear said:
please try to create folder named 2577 in your extrom and place autorun in that folder.
it should be executed automatically...
Click to expand...
Click to collapse
This would not work. WM5 on BA lacks registry settings and driver for the extended_rom folder.
mamaich said:
buzz_lightyear said:
please try to create folder named 2577 in your extrom and place autorun in that folder.
it should be executed automatically...
Click to expand...
Click to collapse
This would not work. WM5 on BA lacks registry settings and driver for the extended_rom folder.
Click to expand...
Click to collapse
ok, then put that folder on your SD card.
buzz
I've uploaded a 2.17 ROM that has .NET Compact Framework 2 integrated. The files for CF2 are in the ROM, and the necessary registry entries are created via a cab file that is part of the extended ROM. If you bypass execution of the ext ROM customizations, you won't have the necessary registry keys for CF2 to function.
I should probably repeat that: If you bypass execution of the ext ROM customizations, you won't have the necessary registry keys for CF2 to function. (nor will you have the Cingular customizations including GPRS and MMS settings).
The ROM is based on the 2.17 version that has lots 'o extra ringers and themes, and OmapClock. Makes tatertots too.
If you don't know what CF2 is and have never installed software that requires it (not much does..the most popular is probably WiFiFoFum) then there's no need to flash to this ROM. However if you do use applications that require CF2, you'll benefit from the storage space savings by having CF2 in ROM.
For first-time upgraders from stock devices, I beg of you, please, no matter what you read about successful flashes without CID unlocking, do yourself (and my inbox) a favor and CID unlock anyway. =)
The ROM is available here:
ftp://xda:[email protected]_RUU_WIZARD_217_AKU2_WWE_RNGRS_OCLOCK_CF2.exe
I may create one based on 2.08 at some point down the road.
Thanks, and enjoy. and whatnot. and what have you. and stuff.
EDIT: fixed link since it's been moved. Not sure why it was put in a Cingular subdir of the main Cingular dir..
Sorry to be the total noob...
I installed the custom_ruu_wizard_217_aku2_cingular_wwe. (BTW, a great piece of work).
Do I need to downgrade to the stock Cingular rom before flashing this rom?
gixerguy said:
Sorry to be the total noob...
I installed the custom_ruu_wizard_217_aku2_cingular_wwe. (BTW, a great piece of work).
Do I need to downgrade to the stock Cingular rom before flashing this rom?
Click to expand...
Click to collapse
No sir
Re: Cingular 8125 users: 217 ROM w/ Compact Framework 2 on f
summiter said:
...
I may create one based on 2.08 at some point down the road....
Click to expand...
Click to collapse
I for one would appreciate a 2.8 version of the same. Thanks for all your efforts.
Still no luck extracting the A2DP stuff and including it with the 2.17 version eh?
Shankar.
how to rerun customizations
is it possible to run the customization routines later (after the first reboot from RMO upgrade)? I wonder if this would work (to preserve prior settings/applications):
Backup using SPB
Install new 2.17 rom on top of old 2.17 rom
cancel customizations
install backup file (which will overwrite registry)
run new customization to add CF2 to registry
Or, can you upload the CAB with the CF2 reg entries so it can be run again later?
thanks,
jason
Summiter, I tried the 2.17 ROM with Cingular customizations, ringers, themes, and OmapClock last night. (I unlocked CID, and SIM as well just in case.) It worked great. Nice job and many thanks!
This new ROM sounds even better, but the download is broken
azagahl said:
This new ROM sounds even better, but the download is broken
Click to expand...
Click to collapse
It's there but there is an extra Cingular directory try ftp://xda-developers.com/Wizard/Rom..._RUU_WIZARD_217_AKU2_WWE_RNGRS_OCLOCK_CF2.exe
Summiter,
I removed CF2, backed up, then installed this ROM and then reloaded my back up. Did I lose my CF2 registry settings by reloading the back up of a non-CF2 system? My WiFiFoFum2 doesn't work now but I don't know how to tell if the CF2 is loaded properly.
Mike H
holmanm said:
azagahl said:
This new ROM sounds even better, but the download is broken
Click to expand...
Click to collapse
It's there but there is an extra Cingular directory try ftp://xda-developers.com/Wizard/Rom..._RUU_WIZARD_217_AKU2_WWE_RNGRS_OCLOCK_CF2.exe
Summiter,
I removed CF2, backed up, then installed this ROM and then reloaded my back up. Did I lose my CF2 registry settings by reloading the back up of a non-CF2 system? My WiFiFoFum2 doesn't work now but I don't know how to tell if the CF2 is loaded properly.
Mike H
Click to expand...
Click to collapse
That's what happened - you wrote over your registry with the one that no longer has the CF2 keys. When I get home in a couple hours I'll attach the cab file to my reply that will recreate them.
Re: how to rerun customizations
jse75 said:
is it possible to run the customization routines later (after the first reboot from RMO upgrade)? I wonder if this would work (to preserve prior settings/applications):
Backup using SPB
Install new 2.17 rom on top of old 2.17 rom
cancel customizations
install backup file (which will overwrite registry)
run new customization to add CF2 to registry
Or, can you upload the CAB with the CF2 reg entries so it can be run again later?
thanks,
jason
Click to expand...
Click to collapse
I'll attach the cab file to a message shortly.
Summiter you once again kick ass!
Thanks dude!
Steven
Cingular 8125 A2DP and DP with newest Summiter ROM
Went to Tornado Group downloaded Bluetooth files files installed them, tweaked the registry and I am running the newest ROM with A2DP. Thanks summiter for the ROM and the Tornado folks for the files.
http://forum.xda-developers.com/viewtopic.php?t=48491
Eureka.
PS Not the 2.8 but 2.17.
Ok,
I must be an idiot. I've downloaded the ROM and it doesn't have CF2, ringers, the extra themes, overclock, etc. I tried it earlier today - then just to make sure I pulled it down and flashed it again - no go.
Like I said, I'm probably doing something wrong, but...
Re: Cingular 8125 users: 217 ROM w/ Compact Framework 2 on f
summiter said:
If you bypass execution of the ext ROM customizations, you won't have the necessary registry keys for CF2 to function. (nor will you have the Cingular customizations including GPRS and MMS settings).
Click to expand...
Click to collapse
hi. at the risk of sounding like an idiot as well, now do you NOT bypass the customization? thank you.
is it the thing that installs as soon as you configure tapping the four corners? i didn't even know that was bypassable.
CF2 cab file
Attached is the cab file to create the registry entries for CF2.
It won't help you if your flash to the CF2 ROM was not fully successful. This file is for folks who's flash was successful but have restored their registry from a backup of a non-CF2 ROM.
Re: CF2 cab file
summiter said:
Attached is the cab file to create the registry entries for CF2.
It won't help you if your flash to the CF2 ROM was not fully successful. This file is for folks who's flash was successful but have restored their registry from a backup of a non-CF2 ROM.
Click to expand...
Click to collapse
hi summiter,
a couple questions sir for your GREAT GREAT ROM (MUCH FASTER).
do i just click on it and it just runs at that speed? so if i click on 252 it runs at that speed forever until i click back on 200?
also, how do i know if i didn't bypass the customization?
thanks a million for a job well done.
Re: CF2 cab file
macrochild said:
summiter said:
Attached is the cab file to create the registry entries for CF2.
It won't help you if your flash to the CF2 ROM was not fully successful. This file is for folks who's flash was successful but have restored their registry from a backup of a non-CF2 ROM.
Click to expand...
Click to collapse
hi summiter,
a couple questions sir for your GREAT GREAT ROM (MUCH FASTER).
do i just click on it and it just runs at that speed? so if i click on 252 it runs at that speed forever until i click back on 200?
also, how do i know if i didn't bypass the customization?
thanks a million for a job well done.
Click to expand...
Click to collapse
When you click one of the links, it will set the clock to that speed until you suspend the device by pressing the power button briefly or it times out.
What I've done is map my camera button to the 252 link, so when I need an extra boost I just hit the button. It will stay overclocked until I suspend the device.
If you want it overclocked always and forever, you'll have to call OmapClock with a notification event which requires a 3rd party app to set up. Read through the OmapClock threads to find out more.
I like the having it rest to stock speed on suspend since it conserves battery by only being overclocked when needed.
CameronJ said:
Ok,
I must be an idiot. I've downloaded the ROM and it doesn't have CF2, ringers, the extra themes, overclock, etc. I tried it earlier today - then just to make sure I pulled it down and flashed it again - no go.
Like I said, I'm probably doing something wrong, but...
Click to expand...
Click to collapse
CID unlocked?
Re: Cingular 8125 users: 217 ROM w/ Compact Framework 2 on f
macrochild said:
summiter said:
If you bypass execution of the ext ROM customizations, you won't have the necessary registry keys for CF2 to function. (nor will you have the Cingular customizations including GPRS and MMS settings).
Click to expand...
Click to collapse
hi. at the risk of sounding like an idiot as well, now do you NOT bypass the customization? thank you.
is it the thing that installs as soon as you configure tapping the four corners? i didn't even know that was bypassable.
Click to expand...
Click to collapse
Yep - the customizations run after you get past the alignment stuff. It's the part where you are locked out of your device while a perdy progress bar takes its sweet ass time as it installs countless cab files.
If you were so inclined, you can bypass customization by pressing the soft reset button as soon as the poorly worded notification pops up saying "It will now customize....". I don't recommend that.
WiFiFoFum working?
Has anyone successfully run WiFiFoFum with this ROM? I had a seemingly successful flash (I had the long wait for installation after the alignment on the first boot). Everything seems to work except WiFiFoFum. I haven't tried anything else that requires CF2 yet, but WiFiFoFum gives me an error:
Code:
This application (WiFiFoFum.exe) requires a newer version of the Microsoft .NET Compact Framework than the version installed on this device.
When I click "Details" I get:
Code:
WiFiFoFum.exe
InvalidProgramException
I even installed the cab file provided above to make sure the registry was right.
Essentially I'd like to know if this is known to work okay so I'll know that I should try flashing it again.
Allen
P.S. Thanks for all of the work summiter - I don't think I could have done this myself...
Re: WiFiFoFum working?
Allen09 said:
Has anyone successfully run WiFiFoFum with this ROM? I had a seemingly successful flash (I had the long wait for installation after the alignment on the first boot). Everything seems to work except WiFiFoFum. I haven't tried anything else that requires CF2 yet, but WiFiFoFum gives me an error:
Code:
This application (WiFiFoFum.exe) requires a newer version of the Microsoft .NET Compact Framework than the version installed on this device.
When I click "Details" I get:
Code:
WiFiFoFum.exe
InvalidProgramException
I even installed the cab file provided above to make sure the registry was right.
Essentially I'd like to know if this is known to work okay so I'll know that I should try flashing it again.
Allen
P.S. Thanks for all of the work summiter - I don't think I could have done this myself...
Click to expand...
Click to collapse
Appears as though the flash didn't take. If you execute cgacutil.exe in the Windows directory, what CF versions are reported?
What ROM did you have prior to this one?
I'm trying to customize a few Extended ROMs here and I'm running into some stubborn CABs. When installed manually, everything works fine. No warnings, no errors. Just click the CAB, let it do its thing, then click OK.
Put these same ROMs into an Extended ROM and hilarity ensues. Some will work, others will not and I don't know why. Any suggestions on what I might be missing will be greatly appreciated.
Quick question?
Are the CAB's signed, if not are you installing the 'signed' unsign CAB 1st .
Edit: Thinking more about this (and realising that the 1st thing you do is disable signing in your ROM's ) can you provide a little more info about the CAB's (maybe an offending CAB if the content is not private?).
I managed to replicate this issue with a CAB that had a warm reset as part of it's install process (seems to bork the autoexec batch process) and I have had a similar issue with a CAB that just contained some simple OMA in the _setup.xml.
John
yes, that's the point. But how to make any Unsigned CABs become Signed?
huangyz said:
yes, that's the point. But how to make any Unsigned CABs become Signed?
Click to expand...
Click to collapse
Without wanting to sounds facetious you sign them ;-)
You would use a private key to generate an Authenticode signature for the CAB (and maybe the apps inside if you need to) however you would still need to install the ROOT certificate into the code stores on your device. Or get your app signed by a 3rd party with a certificate that has it's ROOT already on the device (MS's MobileToMarket and things like that take care of this for ISV's that need it).
Once you have the ROOT cert on the device in the correct store signing is trivial, you either use SignTool.exe from many of the MS SDK’s or just use the GUI options if Visual Studio is your poison. All you need is an export of the PKF (Private key) and the password to the certificate.
In enterprises one of the 1st things people often do before giving Windows Mobile devices out to users is to install a ROOT certificate for the enterprise onto the device in both the code and transmission stores. This means from then on you can sign in-house apps and CAB’s and they behave as signed commercial apps and you can use features like internal signed SSL for ActiveSync etc. etc.
Don’t forget you can also do away with a lot of this by installing the HTC signed “Disable Certificates” CAB 1st and then the signatures are not checked on subsequent CAB’s, EXE’s or anything code related for that matter.
djwillis said:
huangyz said:
yes, that's the point. But how to make any Unsigned CABs become Signed?
Click to expand...
Click to collapse
Without wanting to sounds facetious you sign them ;-)
You would use a private key to generate an Authenticode signature for the CAB (and maybe the apps inside if you need to) however you would still need to install the ROOT certificate into the code stores on your device. Or get your app signed by a 3rd party with a certificate that has it's ROOT already on the device (MS's MobileToMarket and things like that take care of this for ISV's that need it).
Once you have the ROOT cert on the device in the correct store signing is trivial, you either use SignTool.exe from many of the MS SDK’s or just use the GUI options if Visual Studio is your poison. All you need is an export of the PKF (Private key) and the password to the certificate.
In enterprises one of the 1st things people often do before giving Windows Mobile devices out to users is to install a ROOT certificate for the enterprise onto the device in both the code and transmission stores. This means from then on you can sign in-house apps and CAB’s and they behave as signed commercial apps and you can use features like internal signed SSL for ActiveSync etc. etc.
Don’t forget you can also do away with a lot of this by installing the HTC signed “Disable Certificates” CAB 1st and then the signatures are not checked on subsequent CAB’s, EXE’s or anything code related for that matter.
Click to expand...
Click to collapse
I am NOT a software developer so, most of your opinions sound enigmatic to me except that the last one: put the HTC signed "Disable Cert" in the 1st place of the ext-rom config.txt.
Thanks very much! I'll try later on.
gamescan said:
I'm trying to customize a few Extended ROMs here and I'm running into some stubborn CABs. When installed manually, everything works fine. No warnings, no errors. Just click the CAB, let it do its thing, then click OK.
Put these same ROMs into an Extended ROM and hilarity ensues. Some will work, others will not and I don't know why. Any suggestions on what I might be missing will be greatly appreciated.
Click to expand...
Click to collapse
most problably you forgot to set some cab file to read-only before saving the extende-rom.check the cabs atrebutes and the config.text file while inside de program that you are using to edit the extended-rom.its not because they are not signed as long you got the cert .cab set to be the first to be installed.also cab files that require user input will not work.this is from experience, as posted above.
huangyz said:
I am NOT a software developer so, most of your opinions sound enigmatic to me except that the last one: put the HTC signed "Disable Cert" in the 1st place of the ext-rom config.txt.
Thanks very much! I'll try later on.
Click to expand...
Click to collapse
So, where did you found the signed Disable_Cert.cab?
faria said:
most problably you forgot to set some cab file to read-only before saving the extende-rom.check the cabs atrebutes and the config.text file while inside de program that you are using to edit the extended-rom.its not because they are not signed as long you got the cert .cab set to be the first to be installed.also cab files that require user input will not work.this is from experience, as posted above.
Click to expand...
Click to collapse
Sorry to ping an old thread - flogging to proceed immedietly after...
Being that this is a windows device, isn't there a flag that can be passed when executing the cab - like you can on a windows installer application? Similar to setup.exe -q or whatever you're trying to do. Some flags set the answers to yes, admin mode... you get the picture. Does the cab installer engine allow similar flags to get passed with the cab execution command?
In PPC, it calls wceload.exe to install and uninstall a cab.
As shown in http://msdn2.microsoft.com/en-us/library/ms926281.aspx , the only possible argument is to ask or not ask for destination, but no quiet mode.
How can you call wceload.exe manually at ExtROM installation may be a question.
Hi,
I would like to customize a ROM for myself but i would need your advice...
Is it possible to use a ROM (Lets say NRG ROM 2.5), and to customize it (reg tweaks, MMS config, Exchange Server config with password set by default, install some cab and put the registration keys by default....) ?
If this is possible, is it hard to update it ? for exemple if NRG updates his ROM, i also want to be up to date with mine, is it easy to "synchronize", or reapply all previous actions without too much hassle ?
Do you have any links i should read to start a Kitchen ?
Thanks in advance
It might be worth having a search around for SASHIMI. It'll let you collect .cabs and .reg files etc and automate running then after youve flashed a new ROM.
if you figure out how your reg details are kept for each piece of software (in the registry or a file etc.), you can get it to reinstate them after flashing too.
You could DL the latest verion of a ROM, pull it apart and change whatever you like and then flash it to your phone but it'd be a pain for pain version.
Using sashimi, its also easy to update your setup when indiviudual apps and settings change, without needing to reflash your phone and then re-sync etc.
The way I see it, sashimi only really needs setting up the once and then given a tweak when something changes rather than needing to be re-done as with a ROM...the only down-side I can really find is it needs running after a hard-reset, whereas if you cook the changes in they wouldnt (so its no good for 'find or nuke my stolen phone' type apps).
I believe a lot of cooked ROMs include 'User Customization' (UC) which does a similar thing, but i havent used it myself.
Also, I may be wrong, but i think you could need certain details from the original chef before you can pull apart a cooked ROM too (i remember reading about file somewhere in your kitchen, memory fails me though)-and, of course, the chefs permission
Let us know what you try out.
'tunes
Hello folks,
what I want to accomplish is to create perfect image of all apps and settings I have already in phone and create a rom from it, so I can distribute all the actual settings to more phones and the settings will also survive hard reset.
I read some tutorials on cooking roms and it seemed too difficult, so I just wondered if there is a utility, that could create a rom from what is installed at the moment. Or if there is some utility, that allows me to just extract settings from applications, put it together with cab files from that apps, also some rom and cook it all together.
I dont need to make any changes to the rom, just preinstall and preconfigure some apps.
Thanks for your replies. If you know about somethink that could be helpful, please add link and maybe some quick steps.
lpgsk said:
Hello folks,
what I want to accomplish is to create perfect image of all apps and settings I have already in phone and create a rom from it, so I can distribute all the actual settings to more phones and the settings will also survive hard reset.
I read some tutorials on cooking roms and it seemed too difficult, so I just wondered if there is a utility, that could create a rom from what is installed at the moment. Or if there is some utility, that allows me to just extract settings from applications, put it together with cab files from that apps, also some rom and cook it all together.
I dont need to make any changes to the rom, just preinstall and preconfigure some apps.
Thanks for your replies. If you know about somethink that could be helpful, please add link and maybe some quick steps.
Click to expand...
Click to collapse
did you see the tutorial for complete rom backups? sticky section
sounds most reasonable for what you intend
cheers
I just read it yesterday. Wanted to ask if it would do the trick, but as new member I couldnt post links so I dropped. I think this would do the trick
lpgsk said:
I just read it yesterday. Wanted to ask if it would do the trick, but as new member I couldnt post links so I dropped. I think this would do the trick
Click to expand...
Click to collapse
as your motivation is to preserve (and pass to other phones) a fixed set of installed apps and customized settings on a static rom, that should exactly do the trick for you, yes