I have tried the tool. basically this tool is for testing purposes and cannot be used for end needs. All the settings on there are preset such as security settings and policies and stores certificates. Provisioning by pushing the xml allow me to set any parameter that i want. I think i need to change the registry value for the security on the device. Do you know how
[HKEY_LOCAL_MACHINE\Security\Policies\Policies] change 00001001 to 00000001
I found that Microsoft security scheme is pretty much a lot of things for nothing. Unless i did something wrong but I have found several vulnerabilties in it.
And the scheme is so complicated and confusing to setup, it's just doesn't make sense. It should be easy for the admin to setup and harder for a hacker to break. But here it's more the other way around.
Provisioning device security
Nathan H
(I have security problems with the i-Mate devices)
Aaron Oneal
Most likely the because RAPI security policy is set to 'restricted'. With this policy enabled device provisioning over RAPI is not possible.
Try the 'Device Security Manager PowerToy for Windows Mobile 5.0' http://www.microsoft.com/downloads/details.aspx FamilyID=7e92628c-d587-47e0-908b-09fee6ea517a&displaylang=en
This tool may help solving the problem.
Michael
Greg Forster
I have tried the tool. basically this tool is for testing purposes and cannot be used for end needs. All the settings on there are preset such as security settings and policies and stores certificates.
Provisioning by pushing the xml allow me to set any parameter that i want.
I think i need to change the registry value for the security on the device.
Do you know how
langalaxy
and after that i was able to provision the device.
thx
learnerplates
[HKEY_LOCAL_MACHINE\Security\Policies\Policies]
change 00001001 to 00000001
I found that Microsoft security scheme is pretty much a lot of things for nothing. Unless i did something wrong but I have found several vulnerabilties in it.
And the scheme is so complicated and confusing to setup, it's just doesn't make sense. It should be easy for the admin to setup and harder for a hacker to break. But here it's more the other way around.
:(