Certificate Improvements in Windows Mobile 6

Kris Kumar

http://blogs.msdn.com/windowsmobile...s-mobile-6.aspx

"As faithful blog readers already know, there were several limitations related to certificates that caused tons of customer pain on WM5. ... Thanks for all your input and feedback on these issues. Several of the work items and design decisions involved in this were shaped or prioritized directly due to your feedback."

It is a good thing that most of us don't have to mess around with certificates on our Windows Mobile 5 devices. For those of us who had to deal with the hassle of getting a certificate installed in the past will be happy to find out that Windows Mobile 6 will feature a bunch of improvements. Some of the improvements are:

Certificate Installer built into the platform
Installs CER, P7B, and PFX files
No more Access Denied messages.
Installs certs to the ROOT, Intermediate, and MY store
Wildcard Certificate support for SSL
The Intermediate ("CA") store shows up in the control panel now
Even more root certs installed by default
Delete will work from the control panel on any user-installed certs
_________________

Mike Temporale · Posted: Mon Feb 19, 2007 7:32 am Post subject:

This is great news! It would have been nice if it was done sooner, but at least it's there now and can take some of the headache out of setting up corporate access.
_________________
"I have no special talents, I am only passionately curious" - Albert Einstein

runbuh · Smartphone Pupil Joined: 18 Nov 2004 Posts: 50

But they still don't provide a tool for enrolling certificates over a network connection!

Microsoft's recommended best practice for 'corporate' certificates is not to allow the export of the private key. With that in mind, you can't create a file to import, therefore certs must be enrolled directly from the server (via the network). So far as I can find, only tools like the enroller that comes with the Odyssey wireless client enable you enroll a cert over wire. What a pain!

Microsoft provides these tools for Windows 2k, XP, and Vista, so why not on the WM platform????