{"id":10,"date":"2020-11-09T14:17:22","date_gmt":"2020-11-09T19:17:22","guid":{"rendered":"http:\/\/blogs.thesslstore.com\/?p=10"},"modified":"2024-05-20T16:36:04","modified_gmt":"2024-05-20T20:36:04","slug":"how-to-add-your-own-root-cert-via-cab-file","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/how-to-add-your-own-root-cert-via-cab-file\/","title":{"rendered":"How to add your own root cert via CAB file"},"content":{"rendered":"

This post will explain how to install a root cert on a one tier device via a CAB file. You need to install root cert via CAB file for many tier one mobile. You may need to install certs with Exchange ActiveSync. This method will work for any one-tier prompt device, including the Treo 700W and Motorola Q.<\/p>\n

Open up the cert in explorer. You can do this by double clicking the .cer file, using the MMC snapin, or clicking through the SSL lock UI in IE.<\/p>\n<\/span><\/span>\n

If this is a certificate chain, then examine the root cert. adding the leaf cert to the root store will not work.<\/strong><\/span><\/p>\n

Look at the thumbprint of the certificate. Save this string because you will need it later.<\/p>\n

\"sslcertificate\"
sslcertificate<\/figcaption><\/figure>\n
\"ssl-certificate\"
ssl-certificate<\/figcaption><\/figure>\n

If you don’t have the certificate on disk already, select “Copy Certificate” to export the certificate to the file system in Base-64 format.<\/p>\n

\"certificate-export\"
certificate-export<\/figcaption><\/figure>\n
\"ssl-certificate-xml\"
ssl-certificate-xml<\/figcaption><\/figure>\n

Construct certificate XML using the store, thumbprint, and base64 encoded certificate blob. The XML for our example case would look like this:<\/p>\n

<wap-provisioningdoc>
\n<characteristic type=”CertificateStore”>
\n<characteristic type=”ROOT” >
\n<characteristic type=”198d82085972f50ae233f12e9e33456a33a83b34″>
\n<parm name=”EncodedCertificate” value=”
\nMIIDUzCCArygAwIBAgIDCeH5MA0GCSqGSIb3DQEBBAUAMFoxCzAJBgNVBAYTAlVT
\nMRwwGgYDVQQKExNFcXVpZmF4IFNlY3VyZSBJbmMuMS0wKwYDVQQDEyRFcXVpZmF4
\nIFNlY3VyZSBHbG9iYWwgZUJ1c2luZXNzIENBLTEwHhcNMDgxMTEwMjE1OTA1WhcN
\nMDkxMjExMjE1OTA1WjCBwjELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE3d3dy50aGVz
\nc2xzdG9yZS5jb20xEzARBgNVBAsTCkdUMDg1NTAxOTMxMTAvBgNVBAsTKFNlZSB3
\nd3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMgKGMpMDgxLzAtBgNVBAsTJkRv
\nbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlkU1NMKFIpMRwwGgYDVQQDExN3
\nd3cudGhlc3Nsc3RvcmUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1
\ngtD9n+VrGNIm0UFk4b1ylcijRSMP1L79r4JhMGa\/s7zzdIvlspYccm8F7lrYFzz\/
\n0GLw7Ui\/QqaS+7R7T+k6nTGTSJBTmzg3MBSeL+8JXfrYdtjpSrcUKbODO1b1zFtW
\n68yTUMXhkIDp8Qpe1zGL1KMtgwCtGkVlWXhwLJXg3QIDAQABo4G9MIG6MA4GA1Ud
\nDwEB\/wQEAwIE8DAdBgNVHQ4EFgQUihU5RlbYr+BgOtV79hx0u7F+9o8wOwYDVR0f
\nBDQwMjAwoC6gLIYqaHR0cDovL2NybC5nZW90cnVzdC5jb20vY3Jscy9nbG9iYWxj
\nYTEuY3JsMB8GA1UdIwQYMBaAFL6ooHRyUGtEt8kj2Puo\/7NXa2hsMB0GA1UdJQQW
\nMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEB
\nBAUAA4GBAGk7\/w54dxzguO36MxSETEoe2nL+n9IJXuZ00A\/fYGE2C+IOVWCZQRTO
\nl4jnneCmpUR2azyNidvnHuOKZE\/SOZX6SIlBel+tmO9wsQy0f6w2ZZWE50jzkbeK
\nMkurBhVNocsnpM1CYfWU5c9p6ZSg4Z0Em3XmtXW2L0BDjmEQF7qg\/”\/>
\n<\/characteristic>
\n<\/characteristic>
\n<\/characteristic>
\n<\/wap-provisioningdoc><\/p>\n

Save the XML file as _setup.xml and make it into a cab file: makecab _setup.xml rootcert.cab<\/p>\n

\"wildcard-certificate\"
wildcard-certificate<\/figcaption><\/figure>\n

Now install the cab file on the device. You’re done!<\/p>\n","protected":false},"excerpt":{"rendered":"

This post will explain how to install a root cert on a one tier device via a CAB file. You need to install root cert via CAB file for many…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[25],"tags":[],"class_list":["post-10","post","type-post","status-publish","format-standard","hentry","category-ssl-certificates","post-without-tags"],"views":10955,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/10","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=10"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/10\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=10"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=10"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=10"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}