User's Manual

125
Chapter 4 Radios
4.5. INSTALL SECURE CERTIFICATES
To connect to a VPN or Wi-Fi network that deploys secure certificates, the mobile computer
must have these certificates. Where the mobile computer stores these secure certificates is
called “certificate store”.
Windows Embedded Handheld 6.5 has three “certificate stores” – the Personal,
Intermediate and Root certificate stores. A certificate store usually has numerous
certificates, possibly issued from a number of different certification authorities. To view the
certificates stored on the mobile computer, see View Secure Certificates
.
4.5.1. SUPPORTED CERTIFICATE FORMATS
Windows Embedded Handheld 6.5 supports installing the following certificate formats:
 .PFX/.P12 – Public-Key Cryptography Standards #12 (PKCS #12): This file format
includes personal certificates with private keys. They install into the intermediate and
root certificate stores.
 CER – Base64-encoded or DER-encoded X.509 certificates that install into the
intermediate and root certificate stores.
 P7B - Public-Key Cryptography Standards #7 (PKCS #7) format files that install multiple
certificates to any certificate store on the device.
Certificates with their features:
File Type
Private Key
Support
Installs a
certificate chain
Installs only one
certificate
Installs multiple certificates
(can include chains)
.PFX/.P12 Yes Optional Optional Yes
.CER No No Yes No
.P7B No Optional Optional Optional
Note: If you are referred to download a certificate from a website, you will be asked to set
a password for the credential storage when you download it.
4.5.2. VIEW SECURE CERTIFICATES
Certificates is the O.S.’ featured tool to view to the “certificate stores” on the mobile
computer.
To view the secure certificates:
On Start screen, tap Settings | System | Certificates
.
Certificates open showing Personal certificate store.
4.5.3. INSTALL SECURE CERTIFICATES
It is recommended that you install a certificate issued by a trusted authority. To install a
secure certificate:
1) Copy the certificate file to the mobile computer first.
2) Browse to the file using File Explorer.
3) Tap the certificate file to install.