通过修改注册表来更改系统签名认证权限

冷不防 2022-09-18 11:57 193阅读 0赞

通过修改注册表来更改系统签名认证权限

转载学习

如果能跳过微软的安全限制，对于开发无疑是最方便的方法，通过修改注册表信息可以做到这点，如下：

l           通过ActiveSync上传SP\_AllowCertificateInstall.cab文件到模拟器目录中并安装；

l           通过ActiveSync上传regeditSTG2.exe文件到模拟器目录中；

l           双击regeditSTG2.exe文件运行，导航到目录HKEY\_LOCAL\_MACHINE/Security/Policies/Policies/下，然后点击Values键，修改00001005的值为40（默认为16）；

l           重新启动模拟器；

l           重新安装CBA（cabinet）应用程序；

HKEY\_LOCAL\_MACHINE\\Software\\apps\\Microsoft Application Installer\\nDynamicDelete   
= 0 不自动删除；   
= 2 默认自动删除   
  
HKEY\_CLASSES\_ROOT\\cabfile\\Shell\\open\\command   
=wceload.exe "%1" /nodelete 不自动删除；   
=wceload.exe "%1" 默认自动删除

其中注册表中各个键值对应的意义如下：

; AutoRun Policy   
; Value: 0 - Applications on a CF card are allowed to auto-run   
;\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
; "00000002"=dword:0   
  
; RAPI Policy   
; Value: 2 - RAPI calls in restricted mode   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001001"=dword:2   
  
; Unsigned cabs role   
; (default: SECROLE\_USERAUTH)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001005"=dword:10   
  
; Unsigned Applications Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001006"=dword:1   
  
; UNAUTHENTICATED role is used for processing Homescreens   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001007"=dword:40   
  
; TPS Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001008"=dword:1   
  
; Message Authentication Retry Number Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001009"=dword:3   
  
; WAP Signed Message Policy   
; (default: SECROLE\_PPG\_AUTH | SECROLE\_PPG\_TRUSTED | SECROLE\_OPERATOR\_TPS)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100b"=dword:c80   
  
; SL Message Policy   
; (default: SECROLE\_PPG\_TRUSTED)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100c"=dword:800   
  
; SI Message Policy   
; (default: SECROLE\_PPG\_AUTH | SECROLE\_PPG\_TRUSTED)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100d"=dword:c00   
  
; Unauthenticated Message Policy   
; Value: 64 - USER\_UNAUTH   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100e"=dword:40   
  
; OTA Provisioning Policy   
; (default: OPERATOR\_TPS | SECROLE\_PPG\_TRUSTED | SECROLE\_PPG\_AUTH | SECROLE\_TRUSTED\_PPG | USER\_AUTH)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100f"=dword:e90   
  
; WSP Push Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001011"=dword:1   
  
; Grant Manager Policy   
; (default: OPERATOR\_TPS for phone skus; USER\_AUTH for non-phone skus)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
IF SKUTYPE=PHONESKU   
"00001017"=dword:80   
ENDIF ; SKUTYPE=PHONESKU   
IF SKUTYPE=PHONESKU !   
"00001017"=dword:10   
ENDIF ; SKUTYPE=PHONESKU !   
  
; Grant User Auth Policy   
; (default: USER\_AUTH)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001018"=dword:10   
  
; Trust WAP Proxy Policy   
; (default: OPERATOR | OPERATOR\_TPS | MANAGER)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001019"=dword:8c   
  
; Unsigned Prompt Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000101a"=dword:0   
  
; Privileged Apps Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000101b"=dword:1   
  
; DRM Security Policy   
; (default SECROLE\_PPG\_AUTH | SECROLE\_PPG\_TRUSTED)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001021"=dword:c00   
  
; Encrypted Mail(USEENCRYPT) Policy   
; Applies to Windows Mobile AKU2 and later   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000101e"=dword:1   
Default Security Policy Settings for Windows Mobile-based Smartphone   
The following code shows the default security policy settings for Windows Mobile-based Smartphone:   
; RAPI Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001001"=dword:2   
  
; Unsigned cabs role   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001005"=dword:10   
  
; Unsigned Applications Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001006"=dword:1   
  
; UNAUTHENTICATED role is used for processing Homescreens   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001007"=dword:40   
  
; TPS Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001008"=dword:1   
  
; Message Authentication Retry Number Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001009"=dword:3   
  
; WAP Signed Message Policy   
; (default: SECROLE\_PPG\_AUTH | SECROLE\_PPG\_TRUSTED | SECROLE\_OPERATOR\_TPS)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100b"=dword:c80   
  
; SL Message Policy   
; (default: SECROLE\_PPG\_TRUSTED)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100c"=dword:800   
  
; SI Message Policy   
; (default: SECROLE\_PPG\_AUTH | SECROLE\_PPG\_TRUSTED)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100d"=dword:c00   
  
; Unauthenticated Message Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100e"=dword:40   
  
; OTA Provisioning Policy   
; (default: OPERATOR\_TPS | SECROLE\_PPG\_TRUSTED | SECROLE\_PPG\_AUTH | SECROLE\_TRUSTED\_PPG | USER\_AUTH)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000100f"=dword:e90   
  
; WSP Push Policy   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001011"=dword:1   
  
; Grant Manager Policy   
; (default: OPERATOR\_TPS)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001017"=dword:80   
  
; Grant User Auth Policy   
; (default: USER\_AUTH)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001018"=dword:10   
  
; Trust WAP Proxy Policy   
; (default: OPERATOR | OPERATOR\_TPS | MANAGER)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001019"=dword:8c   
  
; Unsigned Prompt Policy   
;If the registry value is not present, the behavior is the same as setting the value to 0 (zero).   
  
; Privileged Apps Policy   
;If the registry value is not present, the behavior is the same as setting the value to 0 (zero).   
  
; DRM Security Policy   
; (default SECROLE\_PPG\_AUTH | SECROLE\_PPG\_TRUSTED)   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"00001021"=dword:c00   
  
; Encrypted Mail(USEENCRYPT) Policy   
; Applies to Windows Mobile AKU2 and later   
\[HKEY\_LOCAL\_MACHINE/Security/Policies/Policies\]   
"0000101e"=dword:1