Share via

Creating a Provisioning XML Document

  • Article

To create a provisioning XML document you must complete the following steps:

  1. Open Notepad and add the following XML code to a document:

    <wap-provisioningdoc> 
<characteristic type="CertificateStore"> 
<characteristic type="STORELOCATION"> 
<characteristic type="CERTHASH"> 
<parm name="EncodedCertificate" value="BASE64ENCODEDCERT"/> 
</characteristic> 
</characteristic> 
</characteristic> 
</wap-provisioningdoc>

  2. Replace STORELOCATION with one of the following values, to indicate which certificate store is to contain the root certificate. The store you specify determines whether the application is assigned the privileged or unprivileged trust level. For information about certificate stores and trust levels, see Application Security.

    • Privileged Execution Trust Authorities
    • Unprivileged Execution Trust Authorities

  3. In Windows Explorer, double-click the exported root certificate.

  4. Choose the Details tab.

  5. Choose Thumbprint in the list box, select the text, and then press CTRL+C.

  6. In the XML code, to add the root certificate thumbprint to the provisioning XML, replace CERTHASH with the copied text.

  7. Delete the spaces in the thumbprint text.

  8. Open the exported root certificate using a text editor.

  9. Delete BEGIN CERTIFICATE and END CERTIFICATE, and then remove line breaks from the remaining text. This text is the encoded contents of the root certificate.

  10. Select the text, and then press CTRL+C.

  11. In the XML code, to add the root certificate to the provisioning XML, replace BASE64ENCODEDCERT with the copied text.

  12. Save the XML document as an ASCII file.

  13. Add the .xml file to an installation .cab file by doing the following:

    1. At a command prompt, change to the appropriate folder:

      C:\Program Files\Windows CE Tools\wce<version>\<SMARTPHONE 2003 or POCKET PC 2003>\Tools folder.

    2. Run makecab.exe as follows:

      For Smartphone: makecab XML file name myprovxml.cab

      For Pocket PC: makecab /D COMPRESS=OFF XML file name myprovxml.cab

      Note   For Pocket PC, /D COMPRESS=OFF turns off file compression, which Windows Mobile software for Pocket PCs requires.

  14. To sign the .cab file, use Microsoft Authenticode tools. For information about Microsoft Authenticode tools, see the Authenticode documentation under "Security" in the MSDN library.

    For Smartphone, if you're adding a certificate to the SPC store with a specific security role mask, you must sign the .cab file with a root certificate that maps to the same role mask in the SPC store.

    Whichever store you're adding a certificate to, you might need to sign the .cab file, depending on the Unsigned Themes policy for Smartphone and Unsigned CABS policy settings for Pocket PC. For Smartphone, if the policy settings require signed .cab files, you must also verify the certificate chain and check the revocation list. For more information, see Application Security.

  15. Change the extension of the file to .cpf.

See Also

Creating the Provisioning XML for Signed Binary Files

Last updated on Friday, April 22, 2005

© 2005 Microsoft Corporation. All rights reserved.

Send feedback on this topic to the authors.