Security and Signing

Windows Smartphones running on Sprint's iDEN network (such as the Motorola i920 and i930) require a digital signature in order to be installed and run on the device.Pocket PC Phone Edition devices running on Windows Mobile 2003 or 5.0 do not currently require any digital signatures to install or run.
There are a variety of tools to help you navigate the security process.

If you are trying to ActiveSync a Windows Mobile 2002 Smartphone or Windows Mobile 2003 Smartphone to Microsoft Mobile Information Server or Microsoft Exchange 2003 through a firewall, or trying to access a VPN with your Windows Mobile device, you will need to add your company's SSL certificate to the keystore on the device. You will need a digitally signed version of the SPAddCert.exe utility, which you can obtain from Microsoft.

For development purposes your device will need to be unlocked to lift security restrictions that amongst other things can prevent effective testing and debugging. Sprint will unlock Windows Mobile SmartPhones devices for a default period of two months upon request. If you need to request that your device be unlocked for development purposes, please contact us by sending us a support request with the name of the account holder for the device, the SIM ID, the IMEI, and the phone number of the device to be unlocked. You must also ensure that MMS service is enabled on your phone for us to unlock your device effectively.

For production purposes, your application must be signed with a production certificate. There are three ways you can obtain a production certificate.

Microsoft Mobile 2 Market (M2M)
This is our recommended channel for obtaining a developer certificate on your Windows Mobile Smartphone application. The M2M program ensures that your application is certified and signed under a Microsoft digital certificate. This helps you ensure that your application will run across a broad spectrum of Windows Mobile devices, extending beyond the Windows Mobile Smartphone platform.

Sprint Nextel Certification
If your application is built specifically for Sprint devices and you are looking for Sprint approval as part of your go to market strategy, your application will receive a digital signature as a part of Sprint's Application Certification program. This is a program available only to Sprint partners and is part of our standard product launch process.

For in-house and enterprise deployment: Sprint Nextel Privileged Certificate Signing

If you are building your own Windows Mobile Smartphone application for development within your organization to run on the Motorola i920 or i930, you can obtain authorization to sign under the Sprint Nextel privileged certificate by sending us a support request and asking us to authorize Geotrust to grant you Sprint Nextel Privileged Certificate Signing. This option carries a cost, payable to Geotrust, for a bucket of signing events (each .dll or .cab file in your application constitutes one signing event).