Exchange - Net Admin - Outlook
Windows Mobile - Windows

Contact - Director's Blog

Windows Mobile Home

Direct Import the Root SSL Certificate

The easiest way to get a root certificate in to the Windows Mobile device, is to direct import it. This is simply a matter of tapping on the certificate and letting it install.

This page is how to use that method of importing a certificate.

If you find that this method doesn't work, or you would like to import the certificate as part of a general setup procedure, then you may want to try the alternative method using XML files. More information on that method is here.

Getting the Certificate in the right format

To use the tool to import the certificate to the handheld device, it needs to be in the correct "DER" format.

1. Open the certificate.
   If you are using a third party certificate service, then you should open the certificate from their web site.
   For example the RapidSSL root certificates are here: http://www.rapidssl.com/resources/cps/cps.htm
2. Click on the "Details" tab.
3. In the lower right corner, select "Save to File". A wizard will begin.
4. Choose DER Encoded (which is the default) and click Next.
5. Give the file a name ending in .cer - for example "rapidssl.cer" and location.
6. Click next and finish.
7. Transfer the completed certificate file to the Pocket PC using either Active Sync or a memory card.

A version of these instructions including screenshots can be found here.

Importing the Certificate

Instructions for Windows Mobile 2002 and previous versions

Import Tool

To import the certificate to your handheld you need the tool from Microsoft.

1. Download the spaddcert utility from here:
   http://support.microsoft.com/default.aspx?kbid=841060
2. Extract the file in to its own directory.
3. Transfer the entire directory to the Pocket PC using either Active Sync or a memory card.

Import the Certificate

A few more steps are required to actually import the certificate

1. On the handheld, create a new directory called "Storage" in the root - ie next to Windows, My Documents, Program Files etc.
2. Copy the certificate file to this new directory
3. In the directory that you copied up the contents of the spaddcer utility, run the spaddcert.exe utility.
4. The utility will find the certificate in Storage. Select the correct certificate and choose "ok".
5. The certificate will now be imported.
6. Test with a web site that is protected by that certificate, or a certificate issued from that root.

Instructions for Windows Mobile 5.0 and higher and Windows Mobile 2003

1. Transfer the cer file to the Pocket PC using Active Sync or memory card.
2. On the pocket PC, click on this new file. You should get a prompt about installing the certificate. Accept the prompt.
3. The certificate will be installed.

A version of these instructions including screenshots can be found here.