[HOWTO] Sign and sideload Tizen applications to the Gear Fit2 (from Windows) - Samsung Gear Fit
Intro
This howto will explain how to sideload *.tpk and *.wgt applications on your Gear Fit2. It'll also cover how to re-sign the application with your own certificates. This can be required if the application does not include a signature that's valid for your particular Gear Fit2. For example, this would be the case for applications that haven't been accepted to the Galaxy Apps store.
Warning
Unless we get people to develop and share their applications for the Gear Fit2, essentially all applications will have been developed for a different device. This means you'll run into varying degrees of incompatibility. Even if the application installs, there's no guarantee it will run. And even if it does run, it may be a terrible experience. And please show some caution regarding what you attempt to install, I don't take responsibility if you break anything following the guide.
Getting your own author and distributor certificates for your Gear Fit2
In order to sign applications, you need an author and distributor certificate for our Gear Fit2 device. For applications on the Galaxy Apps store, Samsung would be the one who signs applications with a distributor certificate. Since you will be sideloading applications, there's no guarantee they contain a valid signature from Samsung. You there need your own distributor certificate. This certificate will only be valid for signing applications for your particular Gear Fit2, which is why I can't make one for you. However you'll only have to do this once and can uninstall Tizen Studio after you're done. Unless you want to develop applications for the Gear Fit2, of course.
Things to download
Java SE Development Kit 8
Tizen Studio 1.2 with IDE installer
Tizen Studio setup
To install, simply accept the software licence agreement and install both the Tizen SDK and data in their default locations.
After installation, Tizen Studio Package Manager should automatically launch. If not, launch Tizen Studio and choose Tools->Package Manager. In the Package Manager you choose the Extension SDK tab and install Samsung Certificate Extension. When it has been installed, close the window and launch Tizen Studio. Press OK for default workspace location.
Connect Gear Fit2 to Tizen Studio
On your Gear Fit2: Got to Settings->Gear info and turn on Debugging. Then go to Settings->Connections. Here you make sure Wi-Fi is turned on and logged on to the same Wi-Fi network as your Windows computer and that Bluetooth is turned off. The Gear Fit2 tend to automatically log off Wi-Fi networks if its connected through Bluetooth. While you can have both on if you're quick, simply turning off Bluetooth leads to much less frustration. You may have to restart your Gear Fit2 at this point to get everything working.
In Tizen Studio, you should see a drop-down list in the tool bar saying No Target. Open the drop-down list and choose Launch remote device manager. Here you press Scan and wait for your device's IP address to appear. You'll only see Tizen devices, so unless you have multiple, there will only be one result. If it doesn't appear, repeat the process above. On the toggle under Connect, turn it from off to on. On your Gear Fit2 it should say RSA key fingerprint: .... You accept on the device and should now be connected. Close down the Remote Device Manager window. The drop-down list should now say SM-R360 ....
Now you choose the menu item Tools->Certificate Manager. Add a new certificate profile by pressing the "+" sign up to the right and then select SAMSUNG as the type for your certificate profile. Go through the 4 tabs as follows
Device Type
Choose Mobile/Wearable and press next.
Certificate Profile
Choose Create a new certificate profile and type any name you want. Press next.
Author Certificate
Choose Create a new author certificate and press next.
Type in an author name and password. Make sure you remember the password as it will be needed for signing applications later on.
You'll now be asked to sign in to your Samsung account. If you don't have one, choose Create new account and follow instructions.
After you've signed in you should get a Congratulations! notice. Take note of the location of the author certificate and press next
Distributor Certificate
Choose Create new distributor certificate and press next.
For Privilege choose Partner. This defines how much of the Tizen API the applications you'll be signing are allowed to access. The three levels are Public, Partner and Platform with Platform being the highest level of access. Unfortunately that's not available to us, so we choose Partner.
IMPORTANT: Leave the password as it is.
Under the section Add individual DUIDs you should find the first entry contains something that starts with 2.0#.... That's your Gear Fit2's DUID. If you don't see it, press cancel (sorry) and go back to the Connect Gear Fit2 to Tizen Studio section above. If you do see, it press next. Make a note of the location of the distributor certificate. This should be the same as the author certificate from above. Then press Finish and you're done.
Signing and installing applications on your Gear Fit2
Things to download (See attachments to the post)
Fit2Installer
PacMan
We'll use PacMan as an example. It's a modified version of the PacMan application found in this xda post. Some of the other applications in that link work on the Gear Fit2, some don't.
Using Fit2Installer
Download and extract the Fit2Installer. The folder contains the following.
sdb.exe: Smart Development Bridge for Tizen devices. This allows us to connect to the device and install applications. See tizen.developer.org's sdb section for more information on what you can do with it.
7zipcli: The open source a command-line archiver from 7-zip. Used to package applications.
tizen: A very stripped down version of Tizen Studio that only contains the required files for signing and packaging applications.
cert: Empty folder where you're supposed to place your own certificates.
sign_me: Empty folder where you place applications you want to be signed.
install_me: Empty folder where you place applications you want to be installed on your device.
sign.bat: Batch script that will sign the applications put in sign_me
sign.bat: Batch script that will connect your Gear Fit2 to your computer, allowing you to install applications.
install.bat: Batch script that will install the applications put in install_me
connect.bat: Batch script that will connect to your Gear Fit2.
disconnect.bat: Batch script that will disconnect from your Gear Fit2.
Setting up your certificates
Go to the location of the certificates you generated with the Certificate Manager. The standard location is in your user folder under ~\SamsungCertificate\<name of cert profile>. The folder should contain 9 files. Copy all those directly into the .\Fit2Installer\cert\ folder. Eg, distributor.p12 should be placed as .\Fit2Installer\cert\distributor.p12.
Signing applications
There are two ways of using the sign.bat script.
Place a *.tpk or *.wgt file directly in the sign_me folder. Run the sign.bat script and type in the password you chose for your certificate earlier. If successful, this will produce a *.tpk or *.wgt file in the install_me folder.
If you don't have the package file, but rather just a folder containing the files for the application you'll have to place that folder in sign_me. For *.tpk files, this means the path will be .\Fit2Installer\sign_me\<application_folder>\tizen-manifest.xml. For *wgt files it will be .\Fit2Installer\sign_me\<application_folder>\config.xml. Now, run the sign.bat script and type in your certificate password.
As an example, I've attached PacMan. PacMan is a web-app that was packaged for the Gear S2. In order to get it to fit the Gear Fit2 screen, I had to extract the PacMan.wgt file and make a few changes to the code. Changes to the files invalidates the signature, so I had to resign it using my own certificates. If you've everything set up correctly, this should be fairly simple for you to do too.
Extract the PacMan.zip archive and place the content in the folder .\Fit2Installer\sign_me\PacMan\ and run the sign.bat script. Look in the install_me folder to check there's a *.wgt file for PacMan.
Installing applications
As in the earlier section Connect Gear Fit2 to Tizen Studio, make sure you're on Wi-Fi, bluetooth is off and debugging in turned on. Also, make sure you only have one Tizen device connected to your computer (this includes Tizen emulators).
Run the connect.bat script and type in the IP address of your Gear Fit2. If you do not know the IP address, you can find it on the device under Settings->Connections->Wi-Fi->Wi-Fi networks-><wifi_name> and at the bottom of the list. Make sure you allow sdb.exe through your firewall.
Important responses are:
error: failed to connect to remote target <ip address>
Make sure you've set up your device correctly. Try turning Wi-Fi off and on. Or even a reboot of the device.
device unauthorized. Please approve on your device.
This may mean you have to accept the RSA key fingerprint on your Gear Fit2. However, there appears to be a bug in the sdb that causes this to happen regardless. Try to run the script twice and see if you get the message below:
<ip address>:26101 is already connected
Now you know for sure your device is connected.
After you've connected, you can safely turn Bluetooth back on. Remember to run disconnect.bat when you're done installing applications. Your Gear Fit2 will otherwise stay connected and drain a lot of battery.
Similarly to using the sign.bat script, there are two ways of using the install.bat script. Both of them require the application to already have a valid signature.
Place a *.tpk or *.wgt file directly in the install_me folder. Run the install.bat script.
If you don't have the package file, but rather just a folder containing the application you'll have to place that folder in install_me. For *.tpk files, this means the path will be .\Fit2Installer\install_me\<application_folder>\tizen-manifest.xml. For *wgt files it will be .\Fit2Installer\install_me\<application_folder>\config.xml.. Run the install.bat script.
Since PacMan should already be signed and placed correctly in the install_me folder, you can now run the install.bat script to install it on your Gear Fit2.
LeJay said:
Intro
This howto will explain how to sideload *.tpk and *.wgt applications on your Gear Fit2. It'll also cover how to re-sign the application with your own certificates. This can be required if the application does not include a signature that's valid for your particular Gear Fit2. For example, this would be the case for applications that haven't been accepted to the Galaxy Apps store.
Warning
Unless we get people to develop and share their applications for the Gear Fit2, essentially all applications will have been developed for a different device. This means you'll run into varying degrees of incompatibility. Even if the application installs, there's no guarantee it will run. And even if it does run, it may be a terrible experience. And please show some caution regarding what you attempt to install, I don't take responsibility if you break anything following the guide.
Getting your own author and distributor certificates for your Gear Fit2
In order to sign applications, you need an author and distributor certificate for our Gear Fit2 device. For applications on the Galaxy Apps store, Samsung would be the one who signs applications with a distributor certificate. Since you will be sideloading applications, there's no guarantee they contain a valid signature from Samsung. You there need your own distributor certificate. This certificate will only be valid for signing applications for your particular Gear Fit2, which is why I can't make one for you. However you'll only have to do this once and can uninstall Tizen Studio after you're done. Unless you want to develop applications for the Gear Fit2, of course.
Things to download
Java SE Development Kit 8
Tizen Studio 1.2 with IDE installer
Tizen Studio setup
To install, simply accept the software licence agreement and install both the Tizen SDK and data in their default locations.
After installation, Tizen Studio Package Manager should automatically launch. If not, launch Tizen Studio and choose Tools->Package Manager. In the Package Manager you choose the Extension SDK tab and install Samsung Certificate Extension. When it has been installed, close the window and launch Tizen Studio. Press OK for default workspace location.
Connect Gear Fit2 to Tizen Studio
On your Gear Fit2: Got to Settings->Gear info and turn on Debugging. Then go to Settings->Connections. Here you make sure Wi-Fi is turned on and logged on to the same Wi-Fi network as your Windows computer and that Bluetooth is turned off. The Gear Fit2 tend to automatically log off Wi-Fi networks if its connected through Bluetooth. While you can have both on if you're quick, simply turning off Bluetooth leads to much less frustration. You may have to restart your Gear Fit2 at this point to get everything working.
In Tizen Studio, you should see a drop-down list in the tool bar saying No Target. Open the drop-down list and choose Launch remote device manager. Here you press Scan and wait for your device's IP address to appear. You'll only see Tizen devices, so unless you have multiple, there will only be one result. If it doesn't appear, repeat the process above. On the toggle under Connect, turn it from off to on. On your Gear Fit2 it should say RSA key fingerprint: .... You accept on the device and should now be connected. Close down the Remote Device Manager window. The drop-down list should now say SM-R360 ....
Now you choose the menu item Tools->Certificate Manager. Add a new certificate profile by pressing the "+" sign up to the right and then select SAMSUNG as the type for your certificate profile. Go through the 4 tabs as follows
Device Type
Choose Mobile/Wearable and press next.
Certificate Profile
Choose Create a new certificate profile and type any name you want. Press next.
Author Certificate
Choose Create a new author certificate and press next.
Type in an author name and password. Make sure you remember the password as it will be needed for signing applications later on.
You'll now be asked to sign in to your Samsung account. If you don't have one, choose Create new account and follow instructions.
After you've signed in you should get a Congratulations! notice. Take note of the location of the author certificate and press next
Distributor Certificate
Choose Create new distributor certificate and press next.
For Privilege choose Partner. This defines how much of the Tizen API the applications you'll be signing are allowed to access. The three levels are Public, Partner and Platform with Platform being the highest level of access. Unfortunately that's not available to us, so we choose Partner.
IMPORTANT: Leave the password as it is.
Under the section Add individual DUIDs you should find the first entry contains something that starts with 2.0#.... That's your Gear Fit2's DUID. If you don't see it, press cancel (sorry) and go back to the Connect Gear Fit2 to Tizen Studio section above. If you do see, it press next. Make a note of the location of the distributor certificate. This should be the same as the author certificate from above. Then press Finish and you're done.
Signing and installing applications on your Gear Fit2
Things to download (See attachments to the post)
Fit2Installer
PacMan
We'll use PacMan as an example. It's a modified version of the PacMan application found in this xda post. Some of the other applications in that link work on the Gear Fit2, some don't.
Using Fit2Installer
Download and extract the Fit2Installer. The folder contains the following.
sdb.exe: Smart Development Bridge for Tizen devices. This allows us to connect to the device and install applications. See tizen.developer.org's sdb section for more information on what you can do with it.
7zipcli: The open source a command-line archiver from 7-zip. Used to package applications.
tizen: A very stripped down version of Tizen Studio that only contains the required files for signing and packaging applications.
cert: Empty folder where you're supposed to place your own certificates.
sign_me: Empty folder where you place applications you want to be signed.
install_me: Empty folder where you place applications you want to be installed on your device.
sign.bat: Batch script that will sign the applications put in sign_me
sign.bat: Batch script that will connect your Gear Fit2 to your computer, allowing you to install applications.
install.bat: Batch script that will install the applications put in install_me
connect.bat: Batch script that will connect to your Gear Fit2.
disconnect.bat: Batch script that will disconnect from your Gear Fit2.
Setting up your certificates
Go to the location of the certificates you generated with the Certificate Manager. The standard location is in your user folder under ~\SamsungCertificate\<name of cert profile>. The folder should contain 9 files. Copy all those directly into the .\Fit2Installer\cert\ folder. Eg, distributor.p12 should be placed as .\Fit2Installer\cert\distributor.p12.
Signing applications
There are two ways of using the sign.bat script.
Place a *.tpk or *.wgt file directly in the sign_me folder. Run the sign.bat script and type in the password you chose for your certificate earlier. If successful, this will produce a *.tpk or *.wgt file in the install_me folder.
If you don't have the package file, but rather just a folder containing the files for the application you'll have to place that folder in sign_me. For *.tpk files, this means the path will be .\Fit2Installer\sign_me\<application_folder>\tizen-manifest.xml. For *wgt files it will be .\Fit2Installer\sign_me\<application_folder>\config.xml. Now, run the sign.bat script and type in your certificate password.
As an example, I've attached PacMan. PacMan is a web-app that was packaged for the Gear S2. In order to get it to fit the Gear Fit2 screen, I had to extract the PacMan.wgt file and make a few changes to the code. Changes to the files invalidates the signature, so I had to resign it using my own certificates. If you've everything set up correctly, this should be fairly simple for you to do too.
Extract the PacMan.zip archive and place the content in the folder .\Fit2Installer\sign_me\PacMan\ and run the sign.bat script. Look in the install_me folder to check there's a *.wgt file for PacMan.
Installing applications
As in the earlier section Connect Gear Fit2 to Tizen Studio, make sure you're on Wi-Fi, bluetooth is off and debugging in turned on. Also, make sure you only have one Tizen device connected to your computer (this includes Tizen emulators).
Run the connect.bat script and type in the IP address of your Gear Fit2. If you do not know the IP address, you can find it on the device under Settings->Connections->Wi-Fi->Wi-Fi networks-><wifi_name> and at the bottom of the list. Make sure you allow sdb.exe through your firewall.
Important responses are:
error: failed to connect to remote target <ip address>
Make sure you've set up your device correctly. Try turning Wi-Fi off and on. Or even a reboot of the device.
device unauthorized. Please approve on your device.
This may mean you have to accept the RSA key fingerprint on your Gear Fit2. However, there appears to be a bug in the sdb that causes this to happen regardless. Try to run the script twice and see if you get the message below:
<ip address>:26101 is already connected
Now you know for sure your device is connected.
After you've connected, you can safely turn Bluetooth back on. Remember to run disconnect.bat when you're done installing applications. Your Gear Fit2 will otherwise stay connected and drain a lot of battery.
Similarly to using the sign.bat script, there are two ways of using the install.bat script. Both of them require the application to already have a valid signature.
Place a *.tpk or *.wgt file directly in the install_me folder. Run the install.bat script.
If you don't have the package file, but rather just a folder containing the application you'll have to place that folder in install_me. For *.tpk files, this means the path will be .\Fit2Installer\install_me\<application_folder>\tizen-manifest.xml. For *wgt files it will be .\Fit2Installer\install_me\<application_folder>\config.xml.. Run the install.bat script.
Since PacMan should already be signed and placed correctly in the install_me folder, you can now run the install.bat script to install it on your Gear Fit2.
Click to expand...
Click to collapse
It may work on gear s? Tizen is linux kernel isn't it? I starting my little steps on code thanks for your explanetion...
Sent from my SM-G955F using Tapatalk
Few months tooo late...
Somebody tested this solution successfully?
I wish to insert the Certs for Public, Partner and Platform...
https://forum.xda-developers.com/showpost.php?p=76472787&postcount=509
:angel:
I am using since years my SM-Z130H, RD-PQ and now SM-Z300H for signing easily...
But as Windows Fan Boy maybe Windows solution would be nice. :angel:
I will later add info where I have problems... maybe only path wrong...
Best Regards
Code:
D:\Fit2Installer>sign.bat
Enter certificate password: test
Setting configuration is succeeded....
No exist the default path of security profiles.
[COLOR="Red"][B]Specified file not found: ..\..\..\..\..\cert\author.p12[/B][/COLOR]
7-Zip (A) 9.20 Copyright (c) 1999-2010 Igor Pavlov 2010-11-18
Scanning
Creating archive ..\PacMan_zip.zip
Compressing audio\die.mp3
Compressing audio\die.ogg
Compressing audio\eatghost.mp3
Compressing audio\eatghost.ogg
Compressing audio\eating.mp3
Compressing audio\eating.ogg
Compressing audio\eating.short.mp3
Compressing audio\eating.short.ogg
Compressing audio\eatpill.mp3
Compressing audio\eatpill.ogg
Compressing audio\extra lives.mp3
Compressing audio\extra lives.ogg
Compressing audio\intermission.mp3
Compressing audio\intermission.ogg
Compressing audio\opening_song.mp3
Compressing audio\opening_song.ogg
Compressing audio\siren.mp3
Compressing audio\siren.ogg
Compressing audio\vcs_90.mp3
Compressing audio\vcs_90.ogg
Compressing BD_Cartoon_Shout-webfont.ttf
Compressing config.xml
Compressing icon.png
Compressing index.html
Compressing jquery-1.9.1.js
Compressing LICENSE
Compressing modernizr-1.5.min.js
Compressing pacman.js
Compressing screenshots\pacman1.png
Compressing screenshots\pacman2.png
Compressing screenshots\pacman3.png
Compressing screenshots\pacman4.png
Everything is Ok
1 Datei(en) verschoben.
Exception in thread "main" java.lang.NoClassDefFoundError: org/eclipse/osgi/util/NLS
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at org.tizen.ncli.subcommands.sign.SignCLICommand.validateProfilesPath(SignCLICommand.java:120)
at org.tizen.ncli.subcommands.sign.SignCLICommand.call(SignCLICommand.java:63)
at org.tizen.ncli.subcommands.sign.SignCLICommand.call(SignCLICommand.java:48)
at org.tizen.ncli.subcommands.AbstractSubCommand.runCommand(AbstractSubCommand.java:85)
at org.tizen.ncli.ide.shell.PackageCLI.doRepackageForWgt(PackageCLI.java:470)
at org.tizen.ncli.ide.shell.PackageCLI.doPackageForWgt(PackageCLI.java:715)
at org.tizen.ncli.ide.shell.PackageCLI.execute(PackageCLI.java:1056)
at org.tizen.ncli.ide.shell.AbstractCLI.execute(AbstractCLI.java:92)
at org.tizen.ncli.ide.shell.Main.run(Main.java:144)
at org.tizen.ncli.ide.shell.Main.main(Main.java:78)
Caused by: java.lang.ClassNotFoundException: org.eclipse.osgi.util.NLS
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
... 22 more
Drücken Sie eine beliebige Taste . . .
Will try to set Path manually...
Maybe my fault...
Best Regards
adfree said:
Code:
D:\Fit2Installer>sign.bat
Enter certificate password: test
Setting configuration is succeeded....
No exist the default path of security profiles.
[COLOR="Red"][B]Specified file not found: ..\..\..\..\..\cert\author.p12[/B][/COLOR]
7-Zip (A) 9.20 Copyright (c) 1999-2010 Igor Pavlov 2010-11-18
Scanning
Creating archive ..\PacMan_zip.zip
Compressing audio\die.mp3
Compressing audio\die.ogg
Compressing audio\eatghost.mp3
Compressing audio\eatghost.ogg
Compressing audio\eating.mp3
Compressing audio\eating.ogg
Compressing audio\eating.short.mp3
Compressing audio\eating.short.ogg
Compressing audio\eatpill.mp3
Compressing audio\eatpill.ogg
Compressing audio\extra lives.mp3
Compressing audio\extra lives.ogg
Compressing audio\intermission.mp3
Compressing audio\intermission.ogg
Compressing audio\opening_song.mp3
Compressing audio\opening_song.ogg
Compressing audio\siren.mp3
Compressing audio\siren.ogg
Compressing audio\vcs_90.mp3
Compressing audio\vcs_90.ogg
Compressing BD_Cartoon_Shout-webfont.ttf
Compressing config.xml
Compressing icon.png
Compressing index.html
Compressing jquery-1.9.1.js
Compressing LICENSE
Compressing modernizr-1.5.min.js
Compressing pacman.js
Compressing screenshots\pacman1.png
Compressing screenshots\pacman2.png
Compressing screenshots\pacman3.png
Compressing screenshots\pacman4.png
Everything is Ok
1 Datei(en) verschoben.
Exception in thread "main" java.lang.NoClassDefFoundError: org/eclipse/osgi/util/NLS
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at org.tizen.ncli.subcommands.sign.SignCLICommand.validateProfilesPath(SignCLICommand.java:120)
at org.tizen.ncli.subcommands.sign.SignCLICommand.call(SignCLICommand.java:63)
at org.tizen.ncli.subcommands.sign.SignCLICommand.call(SignCLICommand.java:48)
at org.tizen.ncli.subcommands.AbstractSubCommand.runCommand(AbstractSubCommand.java:85)
at org.tizen.ncli.ide.shell.PackageCLI.doRepackageForWgt(PackageCLI.java:470)
at org.tizen.ncli.ide.shell.PackageCLI.doPackageForWgt(PackageCLI.java:715)
at org.tizen.ncli.ide.shell.PackageCLI.execute(PackageCLI.java:1056)
at org.tizen.ncli.ide.shell.AbstractCLI.execute(AbstractCLI.java:92)
at org.tizen.ncli.ide.shell.Main.run(Main.java:144)
at org.tizen.ncli.ide.shell.Main.main(Main.java:78)
Caused by: java.lang.ClassNotFoundException: org.eclipse.osgi.util.NLS
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
... 22 more
Drücken Sie eine beliebige Taste . . .
Will try to set Path manually...
Maybe my fault...
Best Regards
Click to expand...
Click to collapse
yes, i also had to change the paths manually in the sign.bat file; and then it works - on gear s3, tizen 3.0.0.2
@stakoz
Please, can you post your changes?
Thanx in advance.
Best Regards
Hi adfree
I have placed the unzipped "Fit2Installer" folder in the main tree C:\Fit2Installer
(this is Windows 10 on a Virtual Machine on a Mac)
As per the instructions have already copy pasted the certificates made with Tizen Studio in C:\Fit2Installer\cert
Below is the contents of my "sign.bat" file relating to above path
And further below is also the output window of cmd.exe having run the "sign.bat" file for "waldo_transl.wgt" that was placed in the "sign_me" subfolder
There is something about security profile.xml path, which i also tried to address by editing the default profile path in the "tizen cli-config" file, but it always comes back as before, so left it as it was, as it still works.
Finally I also shared with all my PC users the read/write rights for the "Fit2Installer" folder just in case, as described in the instructions for the "Tizen Studio" folder too
Hope this helps
+++
contents of my modified "sign.bat" :
+++
@Echo off
set /p pass="Enter certificate password: "
call C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\tizen.bat cli-config -- .\tizen "default.profiles.path=..\..\..\..\profiles.xml"
call C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\tizen.bat security-profiles add -- .\tizen -f -n MyProfile -a C:\Fit2Installer\cert\author.p12 -p %pass% -d C:\Fit2Installer\cert\distributor.p12 -dp %pass%
for %%f in (.\sign_me\*.tpk) do (
call C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\tizen.bat package -t tpk -s MyProfile -- "%%f" -o C:\Fit2Installer\install_me\
)
for %%f in (.\sign_me\*.wgt) do (
call C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -s MyProfile -- "%%f" -o C:\Fit2Installer\install_me\
)
for /D %%d in (.\sign_me\*) do (
IF EXIST %%d\config.xml (
cd %%d
call "C:\Fit2Installer\7zipcli\7za.exe" a "..\%%~nd_zip.zip" *
cd ..
move "%%~nd_zip.zip" "%%~nd_wgt.wgt"
cd ..
call C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -s MyProfile -- ".\sign_me\%%~nd_wgt.wgt" -o C:\Fit2Installer\install_me\
del ".\sign_me\%%~nd_wgt.wgt"
) ELSE (
IF EXIST %%d\tizen-manifest.xml (
cd %%d
call "C:\Fit2Installer\7zipcli\7za.exe" a "..\%%~nd_zip.zip" *
cd ..
move "%%~nd_zip.zip" "%%~nd_tpk.tpk"
cd ..
call C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\tizen.bat package -t tpk -s MyProfile -- ".\sign_me\%%~nd_tpk.tpk" -o C:\Fit2Installer\install_me\
del ".\sign_me\%%~nd_tpk.tpk"
)
)
)
pause
+++
contents of the output window of cmd.exe having run above sign.bat file :
+++
Enter certificate password: password
Setting configuration is succeeded....
Loaded in 'C:\Fit2Installer\tizen\profiles.xml'.
Security profiles have a specified profile. Will be overwritten.
author path: C:\Fit2Installer\cert\author.p12
author password: *********
distributor1 path: C:\Fit2Installer\cert\distributor.p12
distributor1 password: *********
Wrote to 'C:\Fit2Installer\tizen\profiles.xml'.
Succeed to add 'MyProfile' profile.
If want to sign by this, add the file of security profiles in CLI configuration
like 'tizen cli-config "profiles.path=C:\Fit2Installer\tizen\profiles.xml"'.
Author certficate: C:\Fit2Installer\cert\author.p12
Distributor1 certificate : C:\Fit2Installer\cert\distributor.p12
Package( C:\Fit2Installer\install_me\waldo_transl.wgt ) is created successfully.
Press any key to continue . . .
+++
The query I had is resolved after going through the complete thread, so this post is irrelevant. However, I might as well use this opportunity to thank those who have contributed to this as the guide works fine.
Hey, i would like to take this opportunity and thank you for this really useful guide. Everything works fine, but I would like to ask you about the changes you did to the .wgt in order to get the screen shape right, because most of the apps are either cut in half or really small.
I cant generate distributors certificate!
davesidd said:
I cant generate distributors certificate!
Click to expand...
Click to collapse
You need to download the wearable extension in the package manager.
Namenlos55555 said:
You need to download the wearable extension in the package manager.
Click to expand...
Click to collapse
the distribution certificate gets generated automatically and it is password protected, so cant use it
working great!
Games
Are there any more games for the gear fit 2 i can download. Any help would be appreciated
Unable to open Certificate Manager
Never mind got it fixed.
Browser possible?
Have you found a way to make a browser possible using this method?
Code:
Enter certificate password: topsecret
Setting configuration is succeeded....
Loaded in 'C:\Fit2Installer\tizen\profiles.xml'.
Security profiles have a specified profile. Will be overwritten.
author path: C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\..\..\..\..\..\cert\author.p12
author password: ****
distributor1 path: C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\..\..\..\..\..\cert\distributor.p12
distributor1 password: ****
Wrote to 'C:\Fit2Installer\tizen\profiles.xml'.
Succeed to add 'MyProfile' profile.
If want to sign by this, add the file of security profiles in CLI configuration
like 'tizen cli-config "profiles.path=C:\Fit2Installer\tizen\profiles.xml"'.
Author certficate: C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\..\..\..\..\..\cert\author.p12
Distributor1 certificate : C:\Fit2Installer\tizen\tizen-studio\tools\ide\bin\..\..\..\..\..\cert\distributor.p12
Package( C:\Fit2Installer\install_me\publicTEST_fake_v12.tpk ) is created successfully.
Drücken Sie eine beliebige Taste . . .
I am using this solution since few days... without Modification. :good: :good:
With Tizen 4 Firmware on SM-R760... and Certs from Tizen Studio 3.1.
Windows 7
Thank you very much. :good: :good:
Best Regards
Hello,
I cannot sign anything, I get errors in cli.log.
Could you help me fixing these?
Cli.log:
2019-02-24 10:56:51,523 [TRACE] Main.java(90) - Start running Tizen CLI Main class...
2019-02-24 10:56:51,526 [TRACE] Main.java(91) - Argument count:6
2019-02-24 10:56:51,533 [TRACE] ConfigCLI.java(52) - setConfigProperty default.profiles.path=..\..\..\..\profiles.xml
2019-02-24 10:56:51,533 [TRACE] ConfigCLI.java(78) - Execute configCLI...
2019-02-24 10:56:52,034 [TRACE] Main.java(90) - Start running Tizen CLI Main class...
2019-02-24 10:56:52,037 [TRACE] Main.java(91) - Argument count:17
2019-02-24 10:56:52,049 [TRACE] SecurityProfilesCLI.java(56) - Begin SecuriyProfilesCLI...
2019-02-24 10:56:52,741 [TRACE] SecurityProfilesCLI.java(66) - Finish SecuriyProfilesCLI...
2019-02-24 10:56:53,196 [TRACE] Main.java(90) - Start running Tizen CLI Main class...
2019-02-24 10:56:53,198 [TRACE] Main.java(91) - Argument count:11
2019-02-24 10:56:53,209 [TRACE] PackageCLI.java(981) - Execute PackageCLI...
2019-02-24 10:56:53,212 [TRACE] PackageCLI.java(983) - getRealWorkingPath: C:\Users\Hex\Desktop\S3Watchfaces\appswgt\Fit2Installer_freedials\sign_me\pilot.wgt
2019-02-24 10:56:53,213 [TRACE] PackageCLI.java(452) - Re-packaging wgt file C:\Users\Hex\Desktop\S3Watchfaces\appswgt\Fit2Installer_freedials\sign_me\pilot.wgt
2019-02-24 10:56:53,530 [ERROR] AbstractCLI.java(94) - java.util.zip.ZipException: invalid entry size (expected 61948 but got 61958 bytes)
java.lang.IllegalStateException: java.util.zip.ZipException: invalid entry size (expected 61948 but got 61958 bytes)
at org.tizen.common.core.command.policy.UncaughtExceptionHandlingPolicy.uncaughtException(UncaughtExceptionHandlingPolicy.java:84)
at org.tizen.common.core.command.Executor.execute(Executor.java:179)
at org.tizen.common.core.command.Executor.execute(Executor.java:150)
at org.tizen.ncli.ide.shell.PackageCLI.doRepackageForWgt(PackageCLI.java:463)
at org.tizen.ncli.ide.shell.PackageCLI.doPackageForWgt(PackageCLI.java:715)
at org.tizen.ncli.ide.shell.PackageCLI.execute(PackageCLI.java:1056)
at org.tizen.ncli.ide.shell.AbstractCLI.execute(AbstractCLI.java:92)
at org.tizen.ncli.ide.shell.Main.run(Main.java:144)
at org.tizen.ncli.ide.shell.Main.main(Main.java:78)
Caused by: java.util.zip.ZipException: invalid entry size (expected 61948 but got 61958 bytes)
at java.util.zip.ZipInputStream.readEnd(Unknown Source)
at java.util.zip.ZipInputStream.read(Unknown Source)
at java.io.FilterInputStream.read(Unknown Source)
at org.tizen.common.util.IOUtil.redirect(IOUtil.java:149)
at org.tizen.common.file.StandardFileHandler.write(StandardFileHandler.java:283)
at org.tizen.common.core.command.zip.ZipExtrCommand.run(ZipExtrCommand.java:116)
at org.tizen.common.core.command.Executor.execute(Executor.java:164)
... 7 more
2019-02-24 10:56:53,532 [ERROR] Main.java(152) - java.util.zip.ZipException: invalid entry size (expected 61948 but got 61958 bytes)
Click to expand...
Click to collapse
Need solution to create Distributor Cert with Platform Privilege...
Tizen Studio only shows:
Code:
Public
Partner
Maybe via Command Line?
My old trick at the moment not work anymore in Tizen 3... 4...
Because DUID required to be written into Cert...
Please help. :angel:
Best Regards
I am using Platform Cert"s" from Hash-Signer... so at the moment only usefull in Combination Firmware... for me...
https://forum.xda-developers.com/showpost.php?p=79416572&postcount=751
But I made 2 new edited Batch Files for me...
1 can handle 2 different Passwords... for athor and Distributor Cert... the second Batch contains the Passwords...
Code:
@echo off
set /p pass="Enter Author certificate password: "
set /p pass2="Enter Distributor certificate password: "
call tizen\tizen-studio\tools\ide\bin\tizen.bat cli-config -- .\tizen "default.profiles.path=..\..\..\..\profiles.xml"
call tizen\tizen-studio\tools\ide\bin\tizen.bat security-profiles add -- .\tizen -f -n MyProfile -a ..\..\..\..\..\cert\author.p12 -p %pass% -d ..\..\..\..\..\cert\distributor.p12 -dp %pass2%
for %%f in (.\sign_me\*.tpk) do (
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t tpk -s MyProfile -- "%%f" -o .\install_me\
)
for %%f in (.\sign_me\*.wgt) do (
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -s MyProfile -- "%%f" -o .\install_me\
)
for /D %%d in (.\sign_me\*) do (
IF EXIST %%d\config.xml (
cd %%d
call "..\..\7zipcli\7za.exe" a "..\%%~nd_zip.zip" *
cd ..
move "%%~nd_zip.zip" "%%~nd_wgt.wgt"
cd ..
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -s MyProfile -- ".\sign_me\%%~nd_wgt.wgt" -o .\install_me\
del ".\sign_me\%%~nd_wgt.wgt"
) ELSE (
IF EXIST %%d\tizen-manifest.xml (
cd %%d
call "..\..\7zipcli\7za.exe" a "..\%%~nd_zip.zip" *
cd ..
move "%%~nd_zip.zip" "%%~nd_tpk.tpk"
cd ..
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t tpk -s MyProfile -- ".\sign_me\%%~nd_tpk.tpk" -o .\install_me\
del ".\sign_me\%%~nd_tpk.tpk"
)
)
)
pause
and
Code:
@echo off
call tizen\tizen-studio\tools\ide\bin\tizen.bat cli-config -- .\tizen "default.profiles.path=..\..\..\..\profiles.xml"
call tizen\tizen-studio\tools\ide\bin\tizen.bat security-profiles add -- .\tizen -f -n MyProfile -a ..\..\..\..\..\cert\author.p12 -p tizenauthor -d ..\..\..\..\..\cert\distributor.p12 -dp tizenpkcs12passfordsigner
for %%f in (.\sign_me\*.tpk) do (
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t tpk -s MyProfile -- "%%f" -o .\install_me\
)
for %%f in (.\sign_me\*.wgt) do (
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -s MyProfile -- "%%f" -o .\install_me\
)
for /D %%d in (.\sign_me\*) do (
IF EXIST %%d\config.xml (
cd %%d
call "..\..\7zipcli\7za.exe" a "..\%%~nd_zip.zip" *
cd ..
move "%%~nd_zip.zip" "%%~nd_wgt.wgt"
cd ..
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -s MyProfile -- ".\sign_me\%%~nd_wgt.wgt" -o .\install_me\
del ".\sign_me\%%~nd_wgt.wgt"
) ELSE (
IF EXIST %%d\tizen-manifest.xml (
cd %%d
call "..\..\7zipcli\7za.exe" a "..\%%~nd_zip.zip" *
cd ..
move "%%~nd_zip.zip" "%%~nd_tpk.tpk"
cd ..
call tizen\tizen-studio\tools\ide\bin\tizen.bat package -t tpk -s MyProfile -- ".\sign_me\%%~nd_tpk.tpk" -o .\install_me\
del ".\sign_me\%%~nd_tpk.tpk"
)
)
)
pause
Now I still need way to create Platform Cert with f%&ing DUID for Stock Firmware...
Best Regards
Related
Paranoid Networking?
I have been having issues with the Paranoid Networking feature added to the Linux Kernel preventing some of my programs from creating sockets. Appearently the process must be of a certain group id, either one of the AID_INET or AID_BT groups in the 3000's range I believe. I was cgreping through the source code and it seems a few calls to "in_egroup_p(gid_t)" are made to test if the process's group is 'correct' when ANDROID_PARANOID_NETWORKING is defined. If I understood the "in_egroup_p()" function, it should return 1 (retval) if there is a match. so what I did was this in the c file for inet in the kernel. I hope the kernel gets compiled, I just did a "make clean" and "brunch d2spr" it is cm-10.1 Code: #ifdef ANDROID_PARANOID_NETWORKING // this was there if ( in_egroup_p(0) == 1) { return 1; } // I added this return in_egroup_p(AID_INET) || capable(I_FORGOT_HERE); //this was there And I am hoping that when I execute the program as root, it will have permission to create a socket. Also note, that the programs I am having problems for are glibc based that I copied and mounted from a .img file. Programs such as postresql, gdm3, and others. It is a debian distro that I mount with an init service when a property is set to 1. If this does not work, I will need to run without the Paranoid Networking patch to the kernel. What config file do I need to edit so that ANDROID_PARANOID_NETWORKING does not get defined or built into the kernel? edit: I feel like this, " IM ROOT B****, STAY OUTTA MY WAY! " And then that scene from Jurrasic Park comes to mind http://www.youtube.com/watch?v=RfiQYRn7fBg
Still no go Code: [email protected]:/etc/init.d# ./postgresql start [....] Starting PostgreSQL 9.1 database server: main[....] The PostgreSQL server failed to start. Please check the log output: 2014-01-06 16:48:59 UTC LOG: could not create IPv6 socket: Permission denied 2014-01-06 16:48:59 UTC LOG: could not create IPv4 socket: Permission denied 2014-01-06 16:48:59[FAILWARNING: could not create listen socket for "localhost" 2014-01-06 16:48:59 UTC FATAL: could not create any TCP/IP sockets ... failed! failed! *BEEP* *BEEP* *BEEEEEEEEEEP* Hmmm... Maybe the kernel didn't compile? I dunno . ... Where is the config file for the kernel that comes with CM-10.1 so I can turn off this paranoid networking? My philosophy is that they shouldn't be there to start a socket in the first place, but if I want to, I should be able to. This is where I need something akin to sudo, but as root this is pissing me off, let me create a socket por favor! I tried a lot of things but this just isn't working right. Some one please, help. I've about had it up to my neck with Android. ****ing bull ****, I didn't know I was buying a bad ass phone with Chains and Iron Bars for an OS. FREEEEEEEDOOOOOOMMMMMNNNNNNNNN
After breaking my build, I deleted my kernel directory tree and re-sync'ed. I then did "source build/envsetup.sh" and "breakfast d2spr" and then I when to "kernel/samsung/d2/" and did "make menuconfig" then I unselected in networking options "Only specific groups can create sockets" or some such option. and then "brunch d2spr". We shall see if that works. Update: Did not work. Said unfinished jobs yada yada So what I am trying now. I cleaned everything, bummer! I copied my kernel dir to another location I pulled my kernel config with adb I used that with 'make menuconfig' and edited out the 'only allow certain groups' bit I saved that copied it to my source in kernel/samsung/d2/ I edited AndroidKernel.mk to use that config file instead ( the assignment occurs at the top of the file) croot brunch d2spr waiting till tomorrow more than likely.... Update: ( 3 hours later ) Its taking long enough seems to be working maybe I can make a config in my source tree and then make mroper and clean, aswell as in the KERNEL_OBJ dir in out/*, then brunch. to avoid needing two kernel source trees and some confusion in case I modify any of the source and not just the config. AndroidKernel.mk specifies which config file to use instead of the other pre-configured files, just start by pulling a config off your phone with the same rom and device your building for. Code: adb pull /proc/config.gz That will pull the conpressed file off your phone to the current working directory, then gunzip it. Then launch Code: make menuconfig from your kernels root dir, for me that is "/home/$USER/android/system/kernel/samsung/d2/" And then once the menu is up, use the arrows to scroll down to the bottom and use enter or return to select the option to use a different configuration file, it should change menus to one with ".config" erase that and change it to point to your config file, I just copied mine to the same directory mentioned above with the name "config" the same without the "." (dot/period) in front. After that, from the same dir ( as well as in the KERNEL_OBJ/ dir somewhere within the out/ dir) Code: make mrproper && make clean to clean the previous kernel make. After all of that, you can 'croot' and 'brunch $YOUR_MODEL', but not before making sure you change which config file to use in your kernel's root dir in it's AndroidKernel.mk file. Its at the top, I used an absolute path for my installation, just in case.
[APKMULTITOOL] Error when signing (sign apk with android market 13 & 7 zip, sign, in)
[APKMULTITOOL] Error when signing (sign apk with android market 13 & 7 zip, sign, in) Hello folks, I have stumbled upon a small problem using APKMultiTool ... When I try to sign my apk (It's a unity apk meaning I only edited 1 of the dll files.) It fails. The error it gives me, even in log (26) is useless. Code: -------------------------------------------------------------------------- |26-07-2018 -- 13:55:05,73| -------------------------------------------------------------------------- java version "10.0.2" 2018-07-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.2+13) Java HotSpot(TM) 64-Bit Server VM 18.3 (build 10.0.2+13, mixed mode) Press any key to continue . . . I do have the environment path for system, directed to my JDK java path. The APKMultiTool is opened with Administrator and it's at root(c:\APKMultiTool) < Heres the code it gives me at the end of option 7: (zip, sign & install) Code: Compressing res\layout\com_facebook_placepickerfragment_list_row.xml Compressing res\layout\com_facebook_search_bar_layout.xml Compressing res\layout\com_facebook_tooltip_bubble.xml Compressing res\layout\com_facebook_usersettingsfragment.xml Everything is Ok Signing Apk Usage: signapk [-w] publickey.x509[.pem] privatekey.pk8 input.jar output.jar "An Error Occurred, Please Check The Log (option 26)" The error afterwards in the log file and when using 26, is still the same. Now I'm going to just try to sign the unsigned apk. First the one that was just zipped. I do this with option 13: Sign apk with android market Code: Please make your decision:13 *Notice this option requires you to have the Java JDK installed before this option will function* *Notice you need to go into your Environment Variables and set the path to your JAVA_HOME* *For example define it as C:\Program Files\Java\jdk1.6.0_43 as a system variables slot not the User Variables* Press any key to continue . . . Signing Apk Only one alias can be specified Please type jarsigner -help for usage "An Error Occurred, Please Check The Log (option 26)" I am unable to type jarsigner -help, in CMD it does not exist as a command, and in APKMT it closes the prompt. The log file and 26 gives me the same error text so far, meaning it was not even updated. (Note: I open ALL prompts as Administator, also APKMT) I am at a complete loss... Would be really grateful for input :3 thanks a lot. -EDIT- Am unable to install unsigned apk on rooted bluestacks 3n device. :3
... I found out that if I used the new tool https://forum.xda-developers.com/an...tool-apk-easy-tool-v1-02-windows-gui-t3333960 APK Easy Tool, everything became more organized and much easier to work with. I got it working and are happy to say that my first mod was succesful, yay. Happy modding everyone For reference, the apk I modded was Galactic Rush for Android
What should I do if the tool package fails to run when I integrate the HUAWEI AppGallery Connect SDK to Eclipse?
BackgroundI had recently planned on integrating the Crash SDK to my app. However, my app was developed through Eclipse and the integration process was different from that in Android Studio. By referring to the official materials, I downloaded the tool package and used it to generate an Eclipse project package. However, when the build.bat file in the aar2eclipse/aar directory was executed according to the procedures in the document, an error was reported in the command line. The error information was as follows: FAILURE: Build failed with an exception. * What went wrong: Task ' assembleRelease ' not found in root project ' aar '. Problem Reoccurring1. I first thought that the problem might be caused by my company's intranet. But when I connected to the Internet, the problem remained unsolved. 2. Then I guessed that it might have something to do with the Android development environment. I borrowed a colleague's PC to execute the build.bat file, and it that did the trick. Therefore, I was able to conclude that the problem was caused by incorrect configurations in the Android development environment. I compared the configurations on the two PCs and found that the environment variables were different. ANDROID_HOME was missing from the environment variables on my PC. CauseHuawei's Eclipse tool package is unable to run properly and reports an error without the ANDROID_HOME variable. Solution: Right-click This PC and choose Properties from the shortcut menu. In the displayed dialog box, click the Advanced System Settings tab and then click Environment Variables. In the System Variables dialog box, create a new ANDROID_HOME parameter. Set the value to the installation path of the local Android SDK, and the problem will be resolved, as shown below. Reference: https://developer.huawei.com/consumer/en/doc/development/AppGallery-connect-Guides/agc-get-started#h2-1587519820720
How To Guide Using dism.exe and Powershell to Modify Windows ISOs
THIS IS OUTDATED, SEE THE NEW ARTICLE How To Make Your Own Tiny or Lite Windows ISO Hello Friends, Today I bring you a guide on how to properly mod your windows isos, to do anything you want :) [/SPOILER] [/SPOILER] [/SPOILER] To remove installed apps: dism.exe /Image:C:\Users\0110\Desktop\MODWINDOWZ\PATH... forum.xda-developers.com ====================================== USING DISM.EXE AND POWERSHELL TO MODIFY WINDOWS ISOS ============================================================================================= ======================================================= On today's Lesson of Whatever I got distracted on~! Here's how to take what we learned before... About Modding Windows ISOs.. and Make it... HARDER XD Unintentionally, of Course, but with Purpose. Spoiler: ORIGINAL ARTICLE [CLOSED] How To Make Your Own Modified Windows ISO ============================================================== HOW TO MAKE A MODIFIED WINDOWS ISO ============================================================== Mod Edit: Link to Tool removed. This ISO will work just fine In virtual... forum.xda-developers.com Let's learn and understand what the MSMG Toolkit was really doing.. Since MSMG Unfortunately Doesn't Work as needed for Windows 7 ISOs... We will be using the built in Windows Tool, dism.exe, in Powershell~! Spoiler: DOWNLOAD: DEBLOAT WINDOWS 7 TOOLS, "AKA" DW7 GOOGLE DRIVE: DW7.zip drive.google.com (3 GB, INCLUDES ORIGINAL WIN7WSP1) Spoiler: VIDEO GUIDE Spoiler: SETTING UP THE TOOLS Extract The DW7 Folder and Paste into C:\ Win7UltSP1 is an unactivated, Stock Windows 7 Ultimate image with Service Pack 1. You may use this ISO, Or your own Windows 7 ISO. You may also create your own directories! The tools are to help brand new people by proving concept. Spoiler: PREPARING THE install.wim FILE Open Your ISO and copy the files of the ISO into the DVD folder of DW7.. Press the Windows key on the keyboard, Search for Powershell, Right Click, Run as Admin.. Paste this command to See, and Select, an Image "Source" Number: Dism /Get-WimInfo /WimFile:"C:\DW7\DVD\sources\install.wim" Paste this command to Extract the Selected Image "Source" Number: Dism /export-image /SourceImageFile:"C:\DW7\DVD\sources\install.wim" /SourceIndex:4 /DestinationImageFile:"C:\DW7\ISO\install.wim" /Compress:max /CheckIntegrity NOTE THAT YOU CAN: Change the SourceIndex:Number If you don't want Ultimate. Spoiler: OUT WITH THE OLD~! IN WITH THE NEW~! Paste this command to copy and move the new install.wim and force replace the original install file: copy-item "C:\DW7\ISO\install.wim" C:\DW7\DVD\sources -Recurse -Force Paste this command to remove the "new" install.wim, that we moved above to the dvd sources folder: remove-item "C:\DW7\ISO\install.wim" Spoiler: PREPARING THE PATH ENVIRONMENT At this point we need to make a copy of our DW7 Folder.. Paste The DW7 Folder to your Desktop. Do not Cut or Drag and Drop! This will leave you clean backups in C:\, just in case~! This also forces us to make a change in the code... Spoiler: LEARN DEM HOTKEYS~! PLEASE~! You will need to Edit the Username in the code below. If you are unsure of your Username, Go into C:\Users and click on your Username. Press F2 (This is the "rename" shortcut), Which Highlights the text of any file or folder saving time.. Press Ctrl+C to quickly copy your username. Then replace my commands below, the part after... C:\Users\paste your user name and erase mine, the 0110 part... To do this quickly, press Ctrl+H, type 0110 in the first line.. Press Ctrl+V to Paste your username, and replace all.. Spoiler: MOUNTING THE IMAGE DESKTOP COMMAND: dism.exe /mount-wim /wimfile:"C:\Users\0110\Desktop\DW7\DVD\sources\install.wim" /mountdir:"C:\Users\0110\Desktop\DW7\PATH" /index:1 DESKTOP COMMAND: takeown /a /r /d Y /f "C:\Users\0110\Desktop\DW7\PATH" Spoiler: ENABLING AND REMOVING FEATURES Paste this command to Enable Windows features, currently disabled on the ISO: Get-WindowsOptionalFeature -Path "C:\DW7\PATH" | Where-Object {$_.State –eq “Disabled”} | Out-GridView -PassThru | Enable-WindowsOptionalFeature Paste this command to Disable Windows features, currently enabled on the ISO: Get-WindowsOptionalFeature -Path "C:\DW7\PATH" | Where-Object {$_.State –eq “Enabled”} | Out-GridView -PassThru | Disable-WindowsOptionalFeature Add or Remove Features by holding the control key and click on all the features you want to include, then hit ok. Spoiler: SAVE AND EXIT Save your changes by pasting this command: Dismount-WindowsImage -Path "C:\Users\0110\Desktop\DW7\PATH\" -Save NOTE THAT UNTIL YOU DO THIS STEP, TRUSTED INSTALLER WILL NOT ALLOW YOU... TO DELETE THE DW7 FOLDER OR FILES WITHIN~! Spoiler: REFERENCES How to Remove Built-in Apps, Features & Editions from a Windows 10 Install Image (WIM file)? | Windows OS Hub In this guide we’ll show how to remove Microsoft Store provisioned apps, features (capabilities), and unused Windows editions from a Windows 10 installation image (install.wim file). Let’s do it manually… woshub.com Take ownership and delete a folder with Windows PowerShell Windows won’t let me delete this folder… mattyclutch.wordpress.com TAKEOWN Command: Takes Ownership of A File The TAKEOWN command is used to take ownership of a file. This command is used on the batch files. windowscmd.com takeown Reference article for the takeown command, which enables an administrator to recover access to a file that was previously denied. docs.microsoft.com How to Add or Remove Optional Features on Windows Install Media Ten Forums own tutorial guru @Brink has written an excellent tutorial about how to turn Windows optional features on or off in online OS, the current Windows installation user has signed in. This tutorial shows how to do the same on an offline image, a Wi www.tenforums.com Spoiler: Scripts from the articles to run on live machines Remove Windows Apps: Get-AppxProvisionedPackage -Online | Out-GridView -PassThru -Title 'Select All Windows Apps to Remove' | Remove-AppxProvisionedPackage -Online -ErrorAction SilentlyContinue -Verbose Remove System Apps: Get-AppxPackage -AllUsers | Out-GridView -PassThru -Title 'Select All System Apps to Remove' | Remove-AppxPackage -Confirm:$false -ErrorAction SilentlyContinue -Verbose Remove Windows Capabilities: Get-WindowsCapability -Online | Where-Object {$_.State -eq 'Installed' } | Out-GridView -PassThru -Title 'Select Windows Capabilities to Remove' | Remove-WindowsCapability -Online -Verbose Remove Windows Packages: Get-WindowsPackage -Online | Where-Object {$_.PackageState -eq 'Installed' } | Out-GridView -PassThru -Title 'Select Windows Packages to Remove' | Remove-WindowsPackage -Online -Verbose ========================================================================= TODAY'S PRESENTATION IS BROUGHT TO YOU BY: THE LETTER D... FOR DISM... DEPLOYMENT IMAGE SERVICING AND MANAGEMENT TOOL~! =========================================================================== TO GET HELP IN SHELL... PASTE: DISM /? Spoiler: DISM COMMANDS Deployment Image Servicing and Management tool Version: 10.0.19041.844 DISM.exe [dism_options] {Imaging_command} [<Imaging_arguments>] DISM.exe {/Image:<path_to_offline_image> | /Online} [dism_options] {servicing_command} [<servicing_arguments>] DESCRIPTION: DISM enumerates, installs, uninstalls, configures, and updates features and packages in Windows images. The commands that are available depend on the image being serviced and whether the image is offline or running. GENERIC IMAGING COMMANDS: /Split-Image - Splits an existing .wim file into multiple read-only split WIM (SWM) files. /Apply-Image - Applies an image. /Get-MountedImageInfo - Displays information about mounted WIM and VHD images. /Get-ImageInfo - Displays information about images in a WIM, a VHD or a FFU file. /Commit-Image - Saves changes to a mounted WIM or VHD image. /Unmount-Image - Unmounts a mounted WIM or VHD image. /Mount-Image - Mounts an image from a WIM or VHD file. /Remount-Image - Recovers an orphaned image mount directory. /Cleanup-Mountpoints - Deletes resources associated with corrupted mounted images. WIM COMMANDS: /Apply-CustomDataImage - Dehydrates files contained in the custom data image. /Capture-CustomImage - Captures customizations into a delta WIM file on a WIMBoot system. Captured directories include all subfolders and data. /Get-WIMBootEntry - Displays WIMBoot configuration entries for the specified disk volume. /Update-WIMBootEntry - Updates WIMBoot configuration entry for the specified disk volume. /List-Image - Displays a list of the files and folders in a specified image. /Delete-Image - Deletes the specified volume image from a WIM file that has multiple volume images. /Export-Image - Exports a copy of the specified image to another file. /Append-Image - Adds another image to a WIM file. /Capture-Image - Captures an image of a drive into a new WIM file. Captured directories include all subfolders and data. /Get-MountedWimInfo - Displays information about mounted WIM images. /Get-WimInfo - Displays information about images in a WIM file. /Commit-Wim - Saves changes to a mounted WIM image. /Unmount-Wim - Unmounts a mounted WIM image. /Mount-Wim - Mounts an image from a WIM file. /Remount-Wim - Recovers an orphaned WIM mount directory. /Cleanup-Wim - Deletes resources associated with mounted WIM images that are corrupted. FFU COMMANDS: /Capture-Ffu - Captures a physical disk image into a new FFU file. /Apply-Ffu - Applies an .ffu image. /Split-Ffu - Splits an existing .ffu file into multiple read-only split FFU files. /Optimize-Ffu - Optimizes a FFU file so that it can be applied to storage of a different size. IMAGE SPECIFICATIONS: /Online - Targets the running operating system. /Image - Specifies the path to the root directory of an offline Windows image. DISM OPTIONS: /English - Displays command line output in English. /Format - Specifies the report output format. /WinDir - Specifies the path to the Windows directory. /SysDriveDir - Specifies the path to the system-loader file named BootMgr. /LogPath - Specifies the logfile path. /LogLevel - Specifies the output level shown in the log (1-4). /NoRestart - Suppresses automatic reboots and reboot prompts. /Quiet - Suppresses all output except for error messages. /ScratchDir - Specifies the path to a scratch directory. For more information about these DISM options and their arguments, specify an option immediately before /?. Examples: DISM.exe /Mount-Wim /? DISM.exe /ScratchDir /? DISM.exe /Image:C:\test\offline /? DISM.exe /Online /? PS C:\> Get-WindowsCapability -Path C:\DW7\PATH Get-WindowsCapability : Get-WindowsCapability failed. Error code = 0x80004002 At line:1 char:1 + Get-WindowsCapability -Path C:\DW7\PATH + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: ) [Get-WindowsCapability], COMException + FullyQualifiedErrorId : Microsoft.Dism.Commands.GetWindowsCapabilityCommand PS C:\> Get-WindowsCapability -Path " C:\DW7\PATH" Get-WindowsCapability : The parameter is incorrect. At line:1 char:1 + Get-WindowsCapability -Path " C:\DW7\PATH" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: ) [Get-WindowsCapability], PSArgumentException + FullyQualifiedErrorId : Microsoft.Dism.Commands.GetWindowsCapabilityCommand
Upload has completed, download links are now available. A video guide has been provided. We are missing one or so lines of code to rebuild the ISO. I will correct that tomorrow, I'm Sleepy. D; You can always use MSMGTK to do that part if you make it there before I add the code~!
Apparently I have to learn Ms build which I'm doing now so obviously this will take a little longer than I expected but it will help to progress our knowledge gained from trying to do something that should be so simple, turn a folder into an ISO, but continues to prove to us that nothing in computing should ever be took lightly and it took a lot of time and tools and engineering to create everything we do on them...
I am putting out a correction~! MSBUILD is NOT needed to turn a folder into an ISO. We can do that entirely in Powershell, using the built in ISE Tool. This will allow us to create a script that will burn the ISO for us. I will release a new thread on building a script in PowerShell ISE when I know what the heck I am doing. LOL I did however, extract the MSBUILD tool from Visual Studio if anyone ever needs it and doesn't want to install VS MSBuild.zip drive.google.com (22.5 MB ZIPPED) I am also dumping all my research on MSBUILD here in case I or anyone else want's to pickup on it later~! REFS: Spoiler: MSBUILD ENGINE MSBuild - MSBuild Learn about how the Microsoft Build Engine (MSBuild) platform provides a project file with an XML schema to control builds. docs.microsoft.com "The Microsoft Build Engine is a platform for building applications. This engine, which is also known as MSBuild, provides an XML schema for a project file that controls how the build platform processes and builds software" "To run MSBuild at a command prompt, pass a project file to MSBuild.exe, together with the appropriate command-line options. Command-line options let you set properties, execute specific targets, and set other options that control the build process." COMMAND LINE EXAMPLE: MSBuild.exe MyProj.proj -property:Configuration=Debug "MSBuild uses an XML-based project file format that's straightforward and extensible. The MSBuild project file format lets developers describe the items that are to be built, and also how they are to be built for different operating systems and configurations. In addition, the project file format lets developers author reusable build rules that can be factored into separate files so that builds can be performed consistently across different projects in the product" "Properties represent key/value pairs that can be used to configure builds. Properties are declared by creating an element that has the name of the property as a child of a PropertyGroup element" XML EXAMPLE: <PropertyGroup> <BuildDir>Build</BuildDir> </PropertyGroup> "You can define a property conditionally by placing a Condition attribute in the element. The contents of conditional elements are ignored unless the condition evaluates to true" XML EXAMPLE: <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration> "Properties can be referenced throughout the project file by using the syntax $(<PropertyName>). For example, you can reference the properties in the previous examples by using $(BuildDir) and $(Configuration)." "Items are inputs into the build system and typically represent files. Items are grouped into item types based on user-defined item names. These item types can be used as parameters for tasks, which use the individual items to perform the steps of the build process. Items are declared in the project file by creating an element that has the name of the item type as a child of an ItemGroup element." XML EXAMPLE: <ItemGroup> <Compile Include = "file1.cs"/> <Compile Include = "file2.cs"/> </ItemGroup> "Item types can be referenced throughout the project file by using the syntax @(<ItemType>). For example, the item type in the example would be referenced by using @(Compile). In MSBuild, element and attribute names are case-sensitive. However, property, item, and metadata names are not." "Tasks are units of executable code that MSBuild projects use to perform build operations. For example, a task might compile input files or run an external tool." "The execution logic of a task is written in managed code and mapped to MSBuild by using the UsingTask element. You can write your own task by authoring a managed type that implements the ITask interface" "MSBuild includes common tasks that you can modify to suit your requirements. Examples are Copy, which copies files, MakeDir, which creates directories" "A task is executed in an MSBuild project file by creating an element that has the name of the task as a child of a Target element. Tasks typically accept parameters, which are passed as attributes of the element. Both MSBuild properties and items can be used as parameters." XML EXAMPLE: <Target Name="MakeBuildDirectory"> <MakeDir Directories="$(BuildDir)" /> </Target> "Targets group tasks together in a particular order and expose sections of the project file as entry points into the build process." "Breaking the build steps into targets lets you call one piece of the build process from other targets without copying that section of code into every target" XML EXAMPLE: <Target Name="Compile"> <Csc Sources="@(Compile)" /> </Target> Spoiler: WHAT IS XML SCHEMA? What is XML Schema (XSD)? docs.microsoft.com "XML Schema Definition (XSD) language is the current standard schema language for all XML documents and data. On May 2, 2001, the World Wide Web Consortium (W3C) published XSD in its version 1.0 format. The XML Schema definition language (XSD) enables you to define the structure and data types for XML documents. An XML Schema defines the elements, attributes, and data types that conform to the World Wide Web Consortium (W3C), XML Schema Part 1: Structures Recommendation for the XML Schema Definition Language." "The schema element contains type definitions (simpleType and complexType elements) and attribute and element declarations. In addition to its built-in data types (such as integer, string, and so on), XML Schema also allows for the definition of new data types using the simpleType and complexType elements. simpleType A type definition for a value that can be used as the content (textOnly) of an element or attribute. This data type cannot contain elements or have attributes. complexType A type definition for elements that can contain attributes and elements. This data type can contain elements and have attributes." Spoiler: MSBUILD ON THE COMMAND LINE MSBuild on the command line - C++ Learn more about: MSBuild on the command line - C++ docs.microsoft.com "you can use the MSBuild tool directly from the command prompt. The build process is controlled by the information in a project file (.vcxproj) that you can create and edit." CLI EXAMPLE: msbuild.exe [ project_file ] [ options ] "Use the /target (or /t) and /property (or /p) command-line options to override specific properties and targets that are specified in the project file." "A project file can specify one or more targets, which can include a default target." "Each target consists of a sequence of one or more tasks. Each task is represented by a .NET Framework class that contains one executable command. For example, the CL task contains the cl.exe command." "A task parameter is a property of the class task and typically represents a command-line option of the executable command." Spoiler: MSBUILD COMMAND LINE REFERENCES MSBuild Command-Line Reference - MSBuild Learn how to use MSBuild.exe command line to build a project or solution file, and several switches you can include. docs.microsoft.com "When you use MSBuild.exe to build a project or solution file, you can include several switches to specify various aspects of the process." "Every switch is available in two forms: -switch and /switch." "Switches are not case-sensitive. If you run MSBuild from a shell other than the Windows command prompt, lists of arguments to a switch (separated by semicolons or commas) might need single or double quotes to ensure that lists are passed to MSBuild instead of interpreted by the shell." SYNTAX: MSBuild.exe [Switches] [ProjectFile] ARGUMENT: ProjectFile Builds the targets in the project file that you specify. If you don't specify a project file, MSBuild searches the current working directory for a file name extension that ends in proj and uses that file. USE THIS ARTICLE AFTER READING THE ABOVE AND YOU WILL UNDERSTAND WHAT IT'S SAYING. Use MSBuild - MSBuild Learn the various parts of an MSBuild project file, including items, item metadata, properties, targets, and tasks. docs.microsoft.com To get help in the Shell, Type: MSBuild -help Spoiler: DISPLAYS THIS C:\Users\0110\Desktop\MSBuild\Current\Bin>msbuild -help Microsoft (R) Build Engine version 17.0.0+c9eb9dd64 for .NET Framework Copyright (C) Microsoft Corporation. All rights reserved. Syntax: MSBuild.exe [options] [project file | directory] Description: Builds the specified targets in the project file. If a project file is not specified, MSBuild searches the current working directory for a file that has a file extension that ends in "proj" and uses that file. If a directory is specified, MSBuild searches that directory for a project file. Switches: Note that you can specify switches using: "-switch", "/switch" and "--switch". -target:<targets> Build these targets in this project. Use a semicolon or a comma to separate multiple targets, or specify each target separately. (Short form: -t) Example: -target:Resources;Compile -property:<n>=<v> Set or override these project-level properties. <n> is the property name, and <v> is the property value. Use a semicolon or a comma to separate multiple properties, or specify each property separately. (Short form: -p) Example: -property:WarningLevel=2;OutDir=bin\Debug\ -maxCpuCount[:n] Specifies the maximum number of concurrent processes to build with. If the switch is not used, the default value used is 1. If the switch is used without a value MSBuild will use up to the number of processors on the computer. (Short form: -m[:n]) -toolsVersion:<version> The version of the MSBuild Toolset (tasks, targets, etc.) to use during build. This version will override the versions specified by individual projects. (Short form: -tv) Example: -toolsVersion:3.5 -verbosity:<level> Display this amount of information in the event log. The available verbosity levels are: q[uiet], m[inimal], n[ormal], d[etailed], and diag[nostic]. (Short form: -v) Example: -verbosity:quiet -consoleLoggerParameters:<parameters> Parameters to console logger. (Short form: -clp) The available parameters are: PerformanceSummary--Show time spent in tasks, targets and projects. Summary--Show error and warning summary at the end. NoSummary--Don't show error and warning summary at the end. ErrorsOnly--Show only errors. WarningsOnly--Show only warnings. NoItemAndPropertyList--Don't show list of items and properties at the start of each project build. ShowCommandLine--Show TaskCommandLineEvent messages ShowTimestamp--Display the Timestamp as a prefix to any message. ShowEventId--Show eventId for started events, finished events, and messages ForceNoAlign--Does not align the text to the size of the console buffer DisableConsoleColor--Use the default console colors for all logging messages. DisableMPLogging-- Disable the multiprocessor logging style of output when running in non-multiprocessor mode. EnableMPLogging--Enable the multiprocessor logging style even when running in non-multiprocessor mode. This logging style is on by default. ForceConsoleColor--Use ANSI console colors even if console does not support it Verbosity--overrides the -verbosity setting for this logger. Example: -consoleLoggerParameterserformanceSummary;NoSummary; Verbosity=minimal -noConsoleLogger Disable the default console logger and do not log events to the console. (Short form: -noConLog) -fileLogger[n] Logs the build output to a file. By default the file is in the current directory and named "msbuild[n].log". Events from all nodes are combined into a single log. The location of the file and other parameters for the fileLogger can be specified through the addition of the "-fileLoggerParameters[n]" switch. "n" if present can be a digit from 1-9, allowing up to 10 file loggers to be attached. (Short form: -fl[n]) -fileLoggerParameters[n]:<parameters> Provides any extra parameters for file loggers. The presence of this switch implies the corresponding -fileLogger[n] switch. "n" if present can be a digit from 1-9. -fileLoggerParameters is also used by any distributed file logger, see description of -distributedFileLogger. (Short form: -flp[n]) The same parameters listed for the console logger are available. Some additional available parameters are: LogFile--path to the log file into which the build log will be written. Append--determines if the build log will be appended to or overwrite the log file. Setting the switch appends the build log to the log file; Not setting the switch overwrites the contents of an existing log file. The default is not to append to the log file. Encoding--specifies the encoding for the file, for example, UTF-8, Unicode, or ASCII Default verbosity is Detailed. Examples: -fileLoggerParameters:LogFile=MyLog.log;Append; Verbosity=diagnostic;Encoding=UTF-8 -flp:Summary;Verbosity=minimal;LogFile=msbuild.sum -flp1:warningsonly;logfile=msbuild.wrn -flp2:errorsonly;logfile=msbuild.err -distributedLogger:<central logger>*<forwarding logger> Use this logger to log events from MSBuild, attaching a different logger instance to each node. To specify multiple loggers, specify each logger separately. (Short form -dl) The <logger> syntax is: [<class>,]<assembly>[,<options>][;<parameters>] The <logger class> syntax is: [<partial or full namespace>.]<logger class name> The <logger assembly> syntax is: {<assembly name>[,<strong name>] | <assembly file>} Logger options specify how MSBuild creates the logger. The <logger parameters> are optional, and are passed to the logger exactly as you typed them. (Short form: -l) Examples: -dl:XMLLogger,MyLogger,Version=1.0.2,Culture=neutral -dl:MyLogger,C:\My.dll*ForwardingLogger,C:\Logger.dll -distributedFileLogger Logs the build output to multiple log files, one log file per MSBuild node. The initial location for these files is the current directory. By default the files are called "MSBuild<nodeid>.log". The location of the files and other parameters for the fileLogger can be specified with the addition of the "-fileLoggerParameters" switch. If a log file name is set through the fileLoggerParameters switch the distributed logger will use the fileName as a template and append the node id to this fileName to create a log file for each node. -logger:<logger> Use this logger to log events from MSBuild. To specify multiple loggers, specify each logger separately. The <logger> syntax is: [<class>,]<assembly>[,<options>][;<parameters>] The <logger class> syntax is: [<partial or full namespace>.]<logger class name> The <logger assembly> syntax is: {<assembly name>[,<strong name>] | <assembly file>} Logger options specify how MSBuild creates the logger. The <logger parameters> are optional, and are passed to the logger exactly as you typed them. (Short form: -l) Examples: -logger:XMLLogger,MyLogger,Version=1.0.2,Culture=neutral -logger:XMLLogger,C:\Loggers\MyLogger.dll;OutputAsHTML -binaryLogger[:[LogFile=]output.binlog[;ProjectImports={None,Embed,ZipFile}]] Serializes all build events to a compressed binary file. By default the file is in the current directory and named "msbuild.binlog". The binary log is a detailed description of the build process that can later be used to reconstruct text logs and used by other analysis tools. A binary log is usually 10-20x smaller than the most detailed text diagnostic-level log, but it contains more information. (Short form: -bl) The binary logger by default collects the source text of project files, including all imported projects and target files encountered during the build. The optional ProjectImports switch controls this behavior: ProjectImports=None - Don't collect the project imports. ProjectImports=Embed - Embed project imports in the log file. ProjectImports=ZipFile - Save project files to output.projectimports.zip where output is the same name as the binary log file name. The default setting for ProjectImports is Embed. Note: the logger does not collect non-MSBuild source files such as .cs, .cpp etc. A .binlog file can be "played back" by passing it to msbuild.exe as an argument instead of a project/solution. Other loggers will receive the information contained in the log file as if the original build was happening. You can read more about the binary log and its usages at: msbuild/Providing-Binary-Logs.md at main · dotnet/msbuild The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio. - msbuild/Providing-Binary-Logs.md at main · dotnet/msbuild aka.ms Examples: -bl -blutput.binlog -blutput.binlog;ProjectImports=None -blutput.binlog;ProjectImports=ZipFile -bl:..\..\custom.binlog -binaryLogger -warnAsError[:code[;code2]] List of warning codes to treats as errors. Use a semicolon or a comma to separate multiple warning codes. To treat all warnings as errors use the switch with no values. (Short form: -err[:c;[c2]]) Example: -warnAsError:MSB4130 When a warning is treated as an error the target will continue to execute as if it was a warning but the overall build will fail. -warnAsMessage[:code[;code2]] List of warning codes to treats as low importance messages. Use a semicolon or a comma to separate multiple warning codes. (Short form: -noWarn[:c;[c2]]) Example: -warnAsMessage:MSB3026 -validate Validate the project against the default schema. (Short form: -val) -validate:<schema> Validate the project against the specified schema. (Short form: -val) Example: -validate:MyExtendedBuildSchema.xsd -ignoreProjectExtensions:<extensions> List of extensions to ignore when determining which project file to build. Use a semicolon or a comma to separate multiple extensions. (Short form: -ignore) Example: -ignoreProjectExtensions:.sln -nodeReuse:<parameters> Enables or Disables the reuse of MSBuild nodes. The parameters are: True --Nodes will remain after the build completes and will be reused by subsequent builds (default) False--Nodes will not remain after the build completes (Short form: -nr) Example: -nr:true -preprocess[:file] Creates a single, aggregated project file by inlining all the files that would be imported during a build, with their boundaries marked. This can be useful for figuring out what files are being imported and from where, and what they will contribute to the build. By default the output is written to the console window. If the path to an output file is provided that will be used instead. (Short form: -pp) Example: -pput.txt -targets[:file] Prints a list of available targets without executing the actual build process. By default the output is written to the console window. If the path to an output file is provided that will be used instead. (Short form: -ts) Example: -tsut.txt -detailedSummary[:True|False] Shows detailed information at the end of the build about the configurations built and how they were scheduled to nodes. (Short form: -ds) -restore[:True|False] Runs a target named Restore prior to building other targets and ensures the build for these targets uses the latest restored build logic. This is useful when your project tree requires packages to be restored before it can be built. Specifying -restore is the same as specifying -restore:True. Use the parameter to override a value that comes from a response file. (Short form: -r) -restoreProperty:<n>=<v> Set or override these project-level properties only during restore and do not use properties specified with the -property argument. <n> is the property name, and <v> is the property value. Use a semicolon or a comma to separate multiple properties, or specify each property separately. (Short form: -rp) Example: -restoreProperty:IsRestore=true;MyProperty=value -profileEvaluation:<file> Profiles MSBuild evaluation and writes the result to the specified file. If the extension of the specified file is '.md', the result is generated in markdown format. Otherwise, a tab separated file is produced. -interactive[:True|False] Indicates that actions in the build are allowed to interact with the user. Do not use this argument in an automated scenario where interactivity is not expected. Specifying -interactive is the same as specifying -interactive:true. Use the parameter to override a value that comes from a response file. -isolateProjects[:True|False] Causes MSBuild to build each project in isolation. This is a more restrictive mode of MSBuild as it requires that the project graph be statically discoverable at evaluation time, but can improve scheduling and reduce memory overhead when building a large set of projects. (Short form: -isolate) This flag is experimental and may not work as intended. -inputResultsCaches:<cacheFile>... Semicolon separated list of input cache files that MSBuild will read build results from. Setting this also turns on isolated builds (-isolate). (short form: -irc) -outputResultsCache:[cacheFile] Output cache file where MSBuild will write the contents of its build result caches at the end of the build. Setting this also turns on isolated builds (-isolate). (short form: -orc) -graphBuild[:True|False] Causes MSBuild to construct and build a project graph. Constructing a graph involves identifying project references to form dependencies. Building that graph involves attempting to build project references prior to the projects that reference them, differing from traditional MSBuild scheduling. (Short form: -graph) This flag is experimental and may not work as intended. -lowPriority[:True|False] Causes MSBuild to run at low process priority. Specifying -lowPriority is the same as specifying -lowPriority:True. (Short form: -low) @<file> Insert command-line settings from a text file. To specify multiple response files, specify each response file separately. Any response files named "msbuild.rsp" are automatically consumed from the following locations: (1) the directory of msbuild.exe (2) the directory of the first project or solution built -noAutoResponse Do not auto-include any MSBuild.rsp files. (Short form:-noAutoRsp) -noLogo Do not display the startup banner and copyright message. -version Display version information only. (Short form: -ver) -help Display this usage message. (Short form: -? or -h) Examples: MSBuild MyApp.sln -t:Rebuild -p:Configuration=Release MSBuild MyApp.csproj -t:Clean -p:Configuration=Debug;TargetFrameworkVersion=v3.5 For more detailed information, see https://aka.ms/msbuild/docs C:\Users\0110\Desktop\MSBuild\Current\Bin>
Update 21-02-2022 ---------------------------- Hi! Great Job! I done it for Windows 11 with a few changes, and windows 11 have install.esd not install.wim! This was not my idea! It belongs to @jenneh, i only had done trough batch files. You need to create this 5 batch files bellow: * Need Notepad++ to be easy to read files. * Use MediaCreationToolW11.exe and download ISO image or create a Pendrive with system. * Extract from ISO or Pendrive all in to a work folder on descktop * Create and copy the first 4 batch files in to inside the work folder. * All 5 batch will request administrator permissions. * At end delete/cut what ever the batch files from the work folder *The 5 batch files is executed in to desktop and read what batch window says! * Done! This are the 5 batch files: First one it show the images inside and the option the select and work on one. Spoiler: 1-Preparing_and_extracting_img.bat Code: @echo off & @echo. :: BatchGotAdmin :------------------------------------- REM --> Check for permissions IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" ( >nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system" ) ELSE ( >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" ) REM --> If error flag set, we do not have admin. if '%errorlevel%' NEQ '0' ( @echo. & @echo [43m[31mRequesting administrative privileges...[0m goto UACPrompt goto UACPrompt ) else ( goto gotAdmin ) :UACPrompt echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" set params= %* echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%temp%\getadmin.vbs" "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" exit /B :gotAdmin rem :To CD to the location of the batch script file (%0) CD /d "%~dp0" mkdir %~dp0ISO powershell.exe Dism /Get-WimInfo /WimFile:"%~dp0sources\install.esd" @echo. & set /p index=" Type Image Index number to extract image: " powershell.exe Dism /export-image /SourceImageFile:"%~dp0sources\install.esd" /SourceIndex:%index% /DestinationImageFile:"%~dp0ISO\install.esd" /Compress:max /CheckIntegrity pause Spoiler: 2-Mount_Windows_image.bat Code: @echo off & @echo. :: BatchGotAdmin :------------------------------------- REM --> Check for permissions IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" ( >nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system" ) ELSE ( >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" ) REM --> If error flag set, we do not have admin. if '%errorlevel%' NEQ '0' ( @echo. & @echo [43m[31mRequesting administrative privileges...[0m goto UACPrompt goto UACPrompt ) else ( goto gotAdmin ) :UACPrompt echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" set params= %* echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%temp%\getadmin.vbs" "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" exit /B :gotAdmin rem :To CD to the location of the batch script file (%0) CD /d "%~dp0" del /F /S /Q "%~dp0sources\install.esd" move /y "%~dp0ISO\install.esd" "%~dp0sources\install.esd" mkdir "%~dp0PATH" dism.exe /mount-wim /wimfile:"%~dp0sources\install.esd" /mountdir:"%~dp0PATH" /index:1 pause This one create a file where you can check the Optional Features windows state then use batch to enable or disable, batch it will refresh the file with new state, just reload the file. But some of them aren't possible to change state, it gives error. Spoiler: 3-Enable_Disable_options.bat Code: @echo off & @echo. :: BatchGotAdmin :------------------------------------- REM --> Check for permissions IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" ( >nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system" ) ELSE ( >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" ) REM --> If error flag set, we do not have admin. if '%errorlevel%' NEQ '0' ( @echo. & @echo [43m[31mRequesting administrative privileges...[0m goto UACPrompt goto UACPrompt ) else ( goto gotAdmin ) :UACPrompt echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" set params= %* echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%temp%\getadmin.vbs" "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" exit /B :gotAdmin rem :To CD to the location of the batch script file (%0) CD /d "%~dp0" :start cls @echo. & @echo Open WindowsOptionalFeature.txt to check Optional Feature state & @echo. Timeout /t 3 >nul powershell.exe Get-WindowsOptionalFeature -Path "%~dp0PATH" > WindowsOptionalFeature.txt set /p Feature=" Optional Feature name:-" set /p state=" Enable or disable ? -" powershell.exe %state%-WindowsOptionalFeature -Path "%~dp0PATH" -FeatureName "%Feature%" @echo. & @echo Press any key to continue. & pause >nul goto start This one Will Install apps from Windows app Store in Windows Offline image. Spoiler: 3.1-Add_Apps_to_Offline_Windows_Image.bat Code: @echo off :: BatchGotAdmin :------------------------------------- REM --> Check for permissions IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" ( >nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system" ) ELSE ( >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" ) REM --> If error flag set, we do not have admin. if '%errorlevel%' NEQ '0' ( @echo. & @echo [43m[31mRequesting administrative privileges...[0m goto UACPrompt goto UACPrompt ) else ( goto gotAdmin ) :UACPrompt echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" set params= %* echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%temp%\getadmin.vbs" "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" exit /B :gotAdmin rem :To CD to the location of the batch script file (%0) CD /d "%~dp0" @echo. & @echo [43m[31mAdd apps to offline Windows image. [4m[1mImage must be mounted![0m @echo. & @echo [41mOpenning Windows App Store...[0m & @echo Press any key to coninue... & pause >nul start "windows_app_store" https://www.microsoft.com/pt-pt/store/apps/windows @echo. & @echo [1mFind your app and copy link.[0m @echo. & @echo [41mOppening https://store.rg-adguard.net/ to [1m[4mget app link to download without install it.[0m & @echo Press any key to coninue... & pause >nul start "store_rg-adguard.net/" https://store.rg-adguard.net/ @echo. & @echo [1m[31 PPaste the link you copy from App Store in store.rg-adguard.net link bar, select Retail and search links.[0m @echo. & @echo [1mDownload to desktop [1m[4m[31mthe right [103mappx or appxbundle[0m [31mversion that match your windows version[0m, example for Windows 64 bits download x64 [31m[103mappx or appxbundle[0m version. @echo [33m Note: * If download doesn t show the extencion just paste the name, to check extencion do right click and check app propertys. @echo * Some apps have more than 1 package, The app package and its dependencies like Frameworks or VClibs as example.[0m rem Lets start to add... @echo. @echo [44mAdding the Apps...[0m :repeat @echo. [33m set /p app=" Type/Paste the downloaded app name and extension here and press ENTER: " @echo. Dism /Image:%~dp0PATH /Add-ProvisionedAppxPackage /PackagePath:%userprofile%\Desktop\%app% /SkipLicense /Region:"all" @echo. [0m & @echo Press any key to add more apps! pause >nul goto repeat This one dismount and do the clean Spoiler: 4-Dismount_Windows_Image.bat Code: @echo off & @echo. :: BatchGotAdmin :------------------------------------- REM --> Check for permissions IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" ( >nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system" ) ELSE ( >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" ) REM --> If error flag set, we do not have admin. if '%errorlevel%' NEQ '0' ( @echo. & @echo [43m[31mRequesting administrative privileges...[0m goto UACPrompt goto UACPrompt ) else ( goto gotAdmin ) :UACPrompt echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs" set params= %* echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%temp%\getadmin.vbs" "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" exit /B :gotAdmin rem :To CD to the location of the batch script file (%0) CD /d "%~dp0" powershell Dismount-WindowsImage -Path "%~dp0PATH" -Save RD /S /Q p0ISO >NUL RD /S /Q p0PATH >NUL del /F /S /Q WindowsOptionalFeature.txt >NUL pause This one and the last one create a ISO image from Your Windows modded image but first you need to Install Windows_Kits10ADK. Download this tool, extract and execute: adksetup.zip After you execute it, in selection window of tools, only select Deployment Tools like image bellow and install: Spoiler: Selection Window from Windows Assessement and Deployment Kit { "lightbox_close": "Close", "lightbox_next": "Next", "lightbox_previous": "Previous", "lightbox_error": "The requested content cannot be loaded. Please try again later.", "lightbox_start_slideshow": "Start slideshow", "lightbox_stop_slideshow": "Stop slideshow", "lightbox_full_screen": "Full screen", "lightbox_thumbnails": "Thumbnails", "lightbox_download": "Download", "lightbox_share": "Share", "lightbox_zoom": "Zoom", "lightbox_new_window": "New window", "lightbox_toggle_sidebar": "Toggle sidebar" } After installation is easy, After cleanning your Windows Work folder execute this bat bellow in YOUR DESKTOP, reade what is writted in there to execute it right!!! Spoiler: 5-Build_ISO.bat Code: @echo off & @echo. CD /d "%~dp0" @echo Copy this line bellow, paste in command and replace YOURWORKFOLDERNAME with the name of Your Windows work folder name, where you had done the all Job! @echo YOURWORKFOLDERNAME must NOT have spaces between or will FAIL, Example: Wind 11 is wrong!!! Wind11 or Wind_11 is OK!!!& @echo. @echo oscdimg.exe -m -o -u2 -udfver102 -bootdata:2#p0,e,b%~dp0YOURWORKFOLDERNAME\boot\etfsboot.com#pEF,e,b%~dp0YOURWORKFOLDERNAME\efi\microsoft\boot\efisys.bin %~dp0YOURWORKFOLDERNAME %userprofile%\Desktop\WinImage.iso @echo. %systemroot%\system32\cmd.exe /k "%systemdrive%\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\DandISetEnv.bat" Is Done!!! Your Image is ready! THE END! Tell me if worked for you to!
persona78 said: Hi! Great Job! I done it for Windows 11 with a few changes, and windows 11 have install.esd not install.wim! I use batch to do all job like this: * Need Notepad++ to be easy to read files. * Use MediaCreationToolW11.exe and download ISO image or create a Pendrive with system. * Extract from ISO or Pendrive all in to a work folder on descktop * Copy the batch files in to inside the work folder. * All batch need to be executed as administrator. * At end delete/cut what ever the batch files from the work folder * Done! I create 4 batch files: First one it show the images inside and the option the select and work on one. Spoiler: 1-Preparing_and_extracting_img.bat Code: @echo off & @echo. CD /d "%~dp0" mkdir %~dp0ISO powershell.exe Dism /Get-WimInfo /WimFile:"%~dp0sources\install.esd" @echo. & set /p index=" Type Image Index number to extract image: " powershell.exe Dism /export-image /SourceImageFile:"%~dp0sources\install.esd" /SourceIndex:%index% /DestinationImageFile:"%~dp0ISO\install.esd" /Compress:max /CheckIntegrity pause Spoiler: 2-Mount_Windows_image.bat Code: @echo off & @echo. CD /d "%~dp0" del /F /S /Q "%~dp0sources\install.esd" move /y "%~dp0ISO\install.esd" "%~dp0sources\install.esd" mkdir "%~dp0PATH" dism.exe /mount-wim /wimfile:"%~dp0sources\install.esd" /mountdir:"%~dp0PATH" /index:1 pause This one create a file where you can check the Optional Features windows state then use batch to enable or disable, batch it will refresh the file with new state, just reload the file. But some of them aren't possible to change state, it gives error. Spoiler: 3-Enable_Disable_options.bat Code: @echo off & @echo. CD /d "%~dp0" :start cls @echo. & @echo Open WindowsOptionalFeature.txt to check Optional Feature state & @echo. Timeout /t 3 >nul powershell.exe Get-WindowsOptionalFeature -Path "%~dp0PATH" > WindowsOptionalFeature.txt set /p Feature=" Optional Feature name:-" set /p state=" Enable or disable ? -" powershell.exe %state%-WindowsOptionalFeature -Path "%~dp0PATH" -FeatureName "%Feature%" @echo. & @echo Press any key to continue. & pause >nul goto start The last one dismount and do the clean Spoiler: 4-Dismount_Windows_Image.bat Code: @echo off & @echo. CD /d "%~dp0" powershell Dismount-WindowsImage -Path "%~dp0PATH" -Save RD /S /Q %~dp0ISO >NUL RD /S /Q %~dp0PATH >NUL del /F /S /Q %~dpWindowsOptionalFeature.txt >NUL pause Tell me if worked for you to! Click to expand... Click to collapse I really really Thank You for Sharing your work with Us. You have no idea how happy this makes me. Outstanding~! Great Work, Persona!
@jenneh i update my post: https://forum.xda-developers.com/t/...-to-modify-windows-isos.4398285/post-86458077 I had how to do ISO image!
persona78 said: @jenneh i update my post: https://forum.xda-developers.com/t/...-to-modify-windows-isos.4398285/post-86458077 I had how to do ISO image! Click to expand... Click to collapse You are seriously a Rockstar~! I appreciate so Much Your Time~! This has saved me countless hours in research :>
Hi! @jenneh im woking in a way to add the apps from windows app store to the offline windows imge that we are working on. It use DISM tool to and it will request administrator rights at starts, dont need to execute as administrator. I already have a batch, only need to test it!
Hi! @jenneh i update the my post! I made possible to add app in to Offline Windows image! i update all batch. They will auto request administrator permission to start! Check 3.1.
persona78 said: Hi! @jenneh i update the my post! I made possible to add app in to Offline Windows image! i update all batch. They will auto request administrator permission to start! Check 3.1. Click to expand... Click to collapse I absolutely love these updates! I can't believe how much work you've completed today! I also love the fact that with technology, there is literally No End~! It is the infinite! Haha.
Hi! @jenneh can you make me a favor? I dont use VM, im a bit short of storage.... I create this ISO image and want to know how it works. I had apps ( notpad++, 7zip, a theme and a pdf reader, i eneble to HyperV and some other things that i can´t remeber...! I had done a mod that i read here on XDA and want to know if works to. It supose to install directly on unsuported PC with out any script or regestry change. System is Windows 11 PRO. Can you test it??? ESD-ISO_W11_PRO_MOD.iso Thanks
@persona78 sure thing~! I'm downloading it now. I am at a good point for a break. About to chain all my tools together now that I finally understand what they are all doing x.e
@persona78 Spoiler: ERROR well idk what this error is but no troubleshooting settings works
actually I just remembered, nox turned off my hypervisor functionality, one sec lemme try turning that back on
jenneh said: @persona78 Spoiler: ERROR View attachment 5545611 well idk what this error is but no troubleshooting settings works Click to expand... Click to collapse It can´t read productkey setting...! hmmmm... i don´t know what can be. Probably that last mod to avoid tmp maybe... it stoped there???
persona78 said: It can´t read productkey setting...! hmmmm... i don´t know what can be. Probably that last mod to avoid tmp maybe... Click to expand... Click to collapse ahhh okay! yeah I had the same error with hypervisor on but I'll try again if you like when it's finished~!
@jenneh it stops there??? Or keep installing?
persona78 said: @jenneh it stops there??? Or keep installing? Click to expand... Click to collapse oh wait i lied one sec
When i get home i will rebuild again but with out the last mod. Thanks
How To Guide How to Make and Sign a Driver and Certificate: Intro To Encryption
========================================= HOW TO MAKE AND SIGN, A DRIVER AND CERTIFICATE: INTRO TO ENCRYPTION~! ========================================= Today we are going to get our feet a little wet in Cryptography~! Why would I need this? For this Use Case, we will be discussing the NVIDIA SHIELD~! PLEASE NOTE, THE TOPICS BEING DISCUSSED TODAY MAY BE ILLEGAL IN YOUR COUNTRY. PLEASE USE DISCRETION AND KNOW YOUR COUNTRY'S LAWS REGARDING CRYPTOGRAPHY BEFORE GOING FURTHER.... PEACE AND LOVE Spoiler: OPENSSL WARNING OPENSSL WARNING: "Please remember that export/import and/or use of strong cryptography software, providing cryptography hooks, or even just communicating technical details about cryptography software is illegal in some parts of the world. So when you import this package to your country, re-distribute it from there or even just email technical suggestions or even source patches to the authors or other people you are strongly advised to pay close attention to any laws or regulations which apply to you. The authors of OpenSSL are not liable for any violations you make here. So be careful, it is your responsibility." Many Users on Windows 11 are reporting issues with Android Bootloader not installing and giving an Error Code 10. Spoiler: LIKE THIS { "lightbox_close": "Close", "lightbox_next": "Next", "lightbox_previous": "Previous", "lightbox_error": "The requested content cannot be loaded. Please try again later.", "lightbox_start_slideshow": "Start slideshow", "lightbox_stop_slideshow": "Stop slideshow", "lightbox_full_screen": "Full screen", "lightbox_thumbnails": "Thumbnails", "lightbox_download": "Download", "lightbox_share": "Share", "lightbox_zoom": "Zoom", "lightbox_new_window": "New window", "lightbox_toggle_sidebar": "Toggle sidebar" } Error Code 10 is due to Nvidia's driver's digital certificate expiring. Crypto~! Spoiler: SHOWN HERE Spoiler: SOFTWARE DEVELOPMENT TOOLS This is exclusively for beginners~! I don't care about your fancy IDE's Thank You~! Intro to Cryptography By a Noob Hello Friends~! I have built information trees, to teach you about these tools. I was originally going to package them all together, but in my efforts of doing so I realize that the process was getting too convoluted, when there is already an... forum.xda-developers.com The Bad Drivers From Nvidia: Gameworks Download Center Get the latest Gameworks software for your game development work. developer.nvidia.com Spoiler: MAKE A CERTIFICATE IN OPENSSL GENERATING A PRIVATE AND PUBLIC KEY, AND A CSR openssl genrsa -out shield.key 2048 openssl rsa -in shield.key -pubout -out shield_public.key openssl req -new -key shield.key -out shield.csr openssl x509 -in shield.csr -out shield.crt -req -signkey shield.key -days 365 Spoiler: BUILDING THE DRIVER To be Continued~! Spoiler: REFS This article turned me on to the make cert tool UWP - SignTool Error: No certificates were found that met all the given criteria I'm getting this error after our company changed its AD domain. UWP app development with VS 2019 and Windows 10 (1903) C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\MSBuild\Micr... stackoverflow.com MakeCert - Windows drivers MakeCert (Makecert.exe) is a command-line CryptoAPI tool that creates an X.509 certificate that is signed by a system test root key or by another specified key. docs.microsoft.com Cryptographic Keylength Recomendation Keylength - Cryptographic Key Length Recommendation Certificate Stores - Windows drivers Certificate Stores docs.microsoft.com System Store Locations - Win32 apps A system store is a collection that consists of one or more physical sibling stores. docs.microsoft.com SignTool.exe (Sign Tool) - .NET Framework Learn about SignTool.exe, the Sign Tool. This command-line tool digitally signs files, verifies signatures in files, and applies timestamps to files. docs.microsoft.com Using SignTool to Sign a File - Win32 apps Explains how to use SignTool to sign a file. docs.microsoft.com COMMANDS FROM WINSDK LEARNED BUT NOT USED Spoiler: MAKECERT COMMANDS -sk <keyName> Subject's key container name; To be created if not present -pe Mark generated private key as exportable -ss <store> Subject's certificate store name that stores the output certificate -sr <location> Subject's certificate store location. <CurrentUser|LocalMachine>. Default to 'CurrentUser' -# <number> Serial Number from 1 to 2^31-1. Default to be unique -$ <authority> The signing authority of the certificate <individual|commercial> -n <X509name> Certificate subject X500 name (eg: CN=Fred Dews) -? Return a list of basic options -! Return a list of extended options Extended Options -tbs <file> Certificate or CRL file to be signed -sc <file> Subject's certificate file -sv <pvkFile> Subject's PVK file; To be created if not present -ic <file> Issuer's certificate file -ik <keyName> Issuer's key container name -iv <pvkFile> Issuer's PVK file -is <store> Issuer's certificate store name. -ir <location> Issuer's certificate store location <CurrentUser|LocalMachine>. Default to 'CurrentUser' -in <name> Issuer's certificate common name.(eg: Fred Dews) -a <algorithm> The signature's digest algorithm. <md5|sha1|sha256|sha384|sha512>. Default to 'sha1' -ip <provider> Issuer's CryptoAPI provider's name -iy <type> Issuer's CryptoAPI provider's type -sp <provider> Subject's CryptoAPI provider's name -sy <type> Subject's CryptoAPI provider's type -iky <keytype> Issuer key type <signature|exchange|<integer>>. -sky <keytype> Subject key type <signature|exchange|<integer>>. -l <link> Link to the policy information (such as a URL) -cy <certType> Certificate types <end|authority> -b <mm/dd/yyyy> Start of the validity period; default to now. -m <number> The number of months for the cert validity period -e <mm/dd/yyyy> End of validity period; defaults to 2039 -h <number> Max height of the tree below this cert -len <number> Generated Key Length (Bits) Default to '2048' for 'RSA' and '512' for 'DSS' -r Create a self signed certificate -nscp Include Netscape client auth extension -crl Generate a CRL instead of a certificate -eku <oid[<,oid>]> Comma separated enhanced key usage OIDs -? Return a list of basic options -! Return a list of extended options Spoiler: SIGNTOOL COMMANDS Typing Signtool brings up this sign -- Sign files using an embedded signature. timestamp -- Timestamp previously-signed files. verify -- Verify embedded or catalog signatures. catdb -- Modify a catalog database. remove -- Remove embedded signature(s) or reduce the size of an embedded signed file. Spoiler: SIGN Usage: signtool sign [options] <filename(s)> Use the "sign" command to sign files using embedded signatures. Signing protects a file from tampering, and allows users to verify the signer (you) based on a signing certificate. The options below allow you to specify signing parameters and to select the signing certificate you wish to use. Certificate selection options: /a Select the best signing cert automatically. SignTool will find all valid certs that satisfy all specified conditions and select the one that is valid for the longest. If this option is not present, SignTool will expect to find only one valid signing cert. /ac <file> Add an additional certificate, from <file>, to the signature block. /c <name> Specify the Certificate Template Name (Microsoft extension) of the signing cert. /f <file> Specify the signing cert in a file. If this file is a PFX with a password, the password may be supplied with the "/p" option. If the file does not contain private keys, use the "/csp" and "/kc" options to specify the CSP and container name of the private key. /i <name> Specify the Issuer of the signing cert, or a substring. /n <name> Specify the Subject Name of the signing cert, or a substring. /p <pass.> Specify a password to use when opening the PFX file. /r <name> Specify the Subject Name of a Root cert that the signing cert must chain to. /s <name> Specify the Store to open when searching for the cert. The default is the "MY" Store. /sm Open a Machine store instead of a User store. /sha1 <h> Specify the SHA1 thumbprint of the signing cert. /fd Specifies the file digest algorithm to use for creating file signatures. If this parameter is not specified, an error will be generated. /u <usage> Specify the Enhanced Key Usage that must be present in the cert. The parameter may be specified by OID or by string. The default usage is "Code Signing" (1.3.6.1.5.5.7.3.3). /uw Specify usage of "Windows System Component Verification" (1.3.6.1.4.1.311.10.3.6). /fdchw Generate a warning if the file digest algorithm and the hash algorithm used in the signing certificate's signature are different. Private Key selection options: /csp <name> Specify the CSP containing the Private Key Container. /kc <name> Specify the Key Container Name of the Private Key. Signing parameter options: /as Append this signature. If no primary signature is present, this signature will be made the primary signature instead. /d <desc.> Provide a description of the signed content. /du <URL> Provide a URL with more information about the signed content. /t <URL> Specify the timestamp server's URL. If this option is not present, the signed file will not be timestamped. A warning is generated if timestamping fails. /tr <URL> Specifies the RFC 3161 timestamp server's URL. If this option (or /t) is not specified, the signed file will not be timestamped. A warning is generated if timestamping fails. This switch cannot be used with the /t switch. /tseal <URL> Specifies the RFC 3161 timestamp server's URL for timestamping a sealed file. /td <alg> Used with the /tr or /tseal switch to request a digest algorithm used by the RFC 3161 timestamp server. This parameter is required if the /tr or /tseal is specified. /sa <OID> <value> Specify an OID and value to be included as an authenticated attribute in the signature. The value will be encoded as an ASN1 UTF8 string. This option may be given multiple times. /seal Add a sealing signature if the file format supports it. /itos Create a primary signature with the intent-to-seal attribute. /force Continue to seal or sign in situations where the existing signature or sealing signature needs to be removed to support sealing. /nosealwarn Sealing-related warnings do not affect SignTool's return code. /tdchw Generate a warning if the digest algorithm used by the RFC 3161 timestamp server and the hash algorithm used in the signing certificate's signature are different. Digest options: /dg <path> Generates the to be signed digest and the unsigned PKCS7 files. The output digest and PKCS7 files will be: <path>\<file>.dig and <path>\<file>.p7u. To output an additional XML file, see /dxml. /ds Signs the digest only. The input file should be the digest generated by the /dg option. The output file will be: <file>.signed. /di <path> Creates the signature by ingesting the signed digest to the unsigned PKCS7 file. The input signed digest and unsigned PKCS7 files should be: <path>\<file>.dig.signed and <path>\<file>.p7u. /dxml When used with the /dg option, produces an XML file. The output file will be: <path>\<file>.dig.xml. /dlib <dll> Specifies the DLL implementing the AuthenticodeDigestSign or AuthenticodeDigestSignEx function to sign the digest with. This option is equivalent to using SignTool separately with the /dg, /ds, and /di switches, except this option invokes all three as one atomic operation. /dmdf <file> When used with the /dlib option, passes the file's contents to the AuthenticodeDigestSign or AuthenticodeDigestSignEx function without modification. PKCS7 options: /p7 <path> Specifies that for each specified content file a PKCS7 file is produced. The PKCS7 file will be named: <path>\<file>.p7 /p7co <OID> Specifies the <OID> that identifies the signed content. /p7ce <Value> Defined values: Embedded - Embeds the signed content in the PKCS7. DetachedSignedData - Produces the signed data part of a detached PKCS7. Pkcs7DetachedSignedData - Produces a full detached PKCS7. The default is 'Embedded' Other options: /ph Generate page hashes for executable files if supported. /nph Suppress page hashes for executable files if supported. The default is determined by the SIGNTOOL_PAGE_HASHES environment variable and by the wintrust.dll version. /rmc Specifies signing a PE file with the relaxed marker check semantic. The flag is ignored for non-PE files. During verification, certain authenticated sections of the signature will bypass invalid PE markers check. This option should only be used after careful consideration and reviewing the details of MSRC case MS12-024 to ensure that no vulnerabilities are introduced. /q No output on success and minimal output on failure. As always, SignTool returns 0 on success, 1 on failure, and 2 on warning. /v Print verbose success and status messages. This may also provide slightly more information on error. /debug Display additional debug information. Spoiler: TIMESTAMP Use the "timestamp" command to add a timestamp to a previously-signed file. The "/t" option is required. /q No output on success and minimal output on failure. As always, SignTool returns 0 on success and 1 on failure. /t <URL> Specify the timestamp server's URL. /tr <URL> Specifies the RFC 3161 timestamp server's URL. /tseal <URL> Specifies the RFC 3161 timestamp server's URL for timestamping a sealed file. One of /t, /tr or /tseal is required. /td <alg> Used with the /tr or /tseal switch to request a digest algorithm used by the RFC 3161 timestamp server. If this parameter is not specified, a warning will be generated. In future releases, this parameter will be required if /tr or /tseal is specified /tp <index> Timestamps the signature at <index>. /p7 Timestamps PKCS7 files. /force Remove any sealing signature that is present in order to timestamp. /nosealwarn Warnings for removing a sealing signature do not affect SignTool's return code. /v Print verbose success and status messages. This may also provide slightly more information on error. /debug Display additional debug information. Spoiler: VERIFY Usage: signtool verify [options] <filename(s)> Use the "verify" command to verify embedded or catalog signatures. Verification determines if the signing certificate was issued by a trusted party, whether that certificate has been revoked, and whether the certificate is valid under a specific policy. Options allow you to specify requirements that must be met and to specify how to find the catalog, if appropriate. Catalogs are used by Microsoft and others to sign many files very efficiently. Catalog options: /a Automatically attempt to verify the file using all methods. First search for a catalog using all catalog databases. If the file is not signed in any catalog, attempt to verify the embedded signature. When verifying files that may or may not be signed in a catalog, such as Windows files and drivers, this option is the easiest way to ensure that the signature is found. /ad Find the catalog automatically using the default catalog database. /as Find the catalog automatically using the system component (driver) catalog database. /ag <GUID> Find the catalog automatically in the specified catalog database. Catalog databases are identified by GUID. Example GUID: {F750E6C3-38EE-11D1-85E5-00C04FC295EE} /c <file> Specify the catalog file. /o <ver> When verifying a file that is in a signed catalog, verify that the file is valid for the specified platform. Parameter format is: PlatformID:VerMajor.VerMinor.BuildNumber /hash <SHA1 | SHA256> Optional hash algorithm to use when searching for a file in a catalog. SignTool uses the "Windows Driver" Verification Policy by default. The options below allow you to use alternate Policies. Verification Policy options: /pa Use the "Default Authenticode" Verification Policy. /pg <GUID> Specify the verification policy by GUID (also called ActionID). Signature requirement options: /ca <h> Verify that the file is signed with an intermediate CA cert with the specified hash. This option may be specified multiple times; one of the specified hashes must match. /r <name> Specify the Subject Name of a Root cert that the signing cert must chain to. /sha1 <h> Verify that the signer certificate has the specified hash. This option may be specified multiple times; one of the specified hashes must match. /tw Generate a Warning if the signature is not timestamped. /u <usage> Generate a Warning if the specified Enhanced Key Usage is not present in the cert. This option may be given multiple times. Other options: /all Verify all signatures in a file with multiple signatures. /ds <index> Verify the signature at <index>. /ms Use multiple verification semantics. This is the default behavior of a Win8 WinVerifyTrust call. /sl Verify sealing signatures for supported file types. /p7 Verify PKCS7 files. No existing policies are used for p7 validation. The signature is checked and a chain is built for the signing certificate. /bp Perform the verification with the Biometric mode signing policy. /enclave Perform the verification with the enclave signing policy. This also prints the Unique ID and Author ID information. /kp Perform the verification with the kernel-mode driver signing policy. /q No output on success and minimal output on failure. As always, SignTool returns 0 on success, 1 on failure, and 2 on warning. /ph Print and verify page hash values. /d Print Description and Description URL. /v Print verbose success and status messages. This may also provide slightly more information on error. If you want to see information about the signer, you should use this option. /debug Display additional debug information. /p7content <file> Provide p7 content file incase of detached signatures (signed using PKCS7DetachedSignedData). Spoiler: CATDB Usage: signtool catdb [options] <filename(s)> Use the "catdb" command to add or remove catalog files to or from a catalog database. Catalog databases are used for automatic lookup of catalog files, and are identified by GUID. Catalog Database options allow you to select which catalog database to operate on. If you do not specify a catalog database, SignTool operates on the system component (driver) database. Catalog Database options: /d Operate on the default catalog database instead of the system component (driver) catalog database. /g <GUID> Operate on the specified catalog database. Other options specify what to do with the selected catalog database, and other behavior. If you do not specify any other options, SignTool will add the specified catalogs to the catalog database, replacing any existing catalog which has the same name. Other options: /q No output on success and minimal output on failure. As always, SignTool returns 0 on success and 1 on failure. /r Remove the specified catalogs from the catalog database. /u Automatically generate a unique name for the added catalogs. The catalog files will be renamed if necessary to prevent name conflicts with existing catalog files. /v Print verbose success and status messages. This may also provide slightly more information on error. /debug Display additional debug information. Spoiler: REMOVE Usage: signtool remove [options] <filename(s)> Use the "remove" command to remove the embedded signature(s) or sections of the embedded signature on a PE/COFF file. WARNING: This command will modify the file on the disk. Please create a backup copy if you want to preserve the original file. The option "/c" and/or "/u", or "/s" is required. /c Remove all certificates, except for the signer certificate from the signature. /q No output on success and minimal output on failure. As always, SignTool returns 0 on success and 1 on failure. /s Remove the signature(s) entirely. /u Remove the unauthenticated attributes from the signature e.g. Dual signatures and timestamps. /v Print verbose success and status messages. This may also provide slightly more information on error. This thread may explain why this is happening, AMD CPU and USB 3.0 unsupported on these old dang drivers Fastboot problem on USB 3.0 ports Hi guys, today I set up my notebook, to use in the future, MIUI flashing tool (No bootloader unlock in this machine, cause: ryzen CPU). After installing the drivers I restarted in fastboot mode and all ok..recognized device (Android bootloader... forum.xda-developers.com
This is not complete and the code shown is placeholder. I am getting so deep in note taking I had to put up what I have so I can see it better and clearer~! I'll update when I am done and will post a video walkthrough. For Now... I need Sleep. Bah~! I hate having to sleep all the time.
jenneh said: This is not complete and the code shown is placeholder. I am getting so deep in note taking I had to put up what I have so I can see it better and clearer~! I'll update when I am done and will post a video walkthrough. For Now... I need Sleep. Bah~! I hate having to sleep all the time. Click to expand... Click to collapse What do you need to know?
persona78 said: What do you need to know? Click to expand... Click to collapse I'm trying to learn how to take a fresh USB driver ini file and build a cert for it with sha 256 hash just to learn how to run the algorithm while fixing the problem of the original ini file being expired. It's funny to think about some of this software we use, as having "shelf dates" almost. Haha. Like a food product or something organic. Interesting! Crypto~!
jenneh said: I'm trying to learn how to take a fresh USB driver ini file and build a cert for it with sha 256 hash just to learn how to run the algorithm while fixing the problem of the original ini file being expired. It's funny to think about some of this software we use, as having "shelf dates" almost. Haha. Like a food product or something organic. Interesting! Crypto~! Click to expand... Click to collapse I know how to create a certificate and sign a exe. This helps?
persona78 said: I know how to create a certificate and sign a exe. This helps? Click to expand... Click to collapse Yes!!
Hi! @jenneh this are the batch tools i create: Tools 1-Extract to Desktop 2-Create your cert.pfx and paste inside Sign_Batch folder 3-paste the app you want in to sign inside Sign_Batch folder to 4-Pick and drop the app over the appsign_soft.bat 5-Right click over app and check Digital signature 6-Select the signature and go to details 7-Check your certificate 8-Install your certificate, like this system will know that is safe 9-Done! Your app is now signed with your certificate! Spoiler: Print Screens
persona78 said: Hi! @jenneh this are the batch tools i create: Tools 1-Extract to Desktop 2-Create your cert.pfx and paste inside Sign_Batch folder 3-paste the app you want in to sign inside Sign_Batch folder to 4-Pick and drop the app over the appsign_soft.bat 5-Right click over app and check Digital signature 6-Select the signature and go to details 7-Check your certificate 8-Install your certificate, like this system will know that is safe 9-Done! Your app is now signed with your certificate! Spoiler: Print Screens View attachment 5544459 View attachment 5544463 Click to expand... Click to collapse You are like An Angel from Binary Heaven. I just Woke Up and was refreshing my memory on this~! I will check out your tools now and update my thread when I fully understand and properly credit you for your hard work. I really thank you So So much :> Your efforts will help Many~! I only started this train of thought yesterday so bare with me, this is all new to me~!
jenneh said: You are like An Angel from Binary Heaven. I just Woke Up and was refreshing my memory on this~! I will check out your tools now and update my thread when I fully understand and properly credit you for your hard work. I really thank you So So much :> Your efforts will help Many~! I only started this train of thought yesterday so bare with me, this is all new to me~! Click to expand... Click to collapse I hope it helps you!
persona78 said: I hope it helps you! Click to expand... Click to collapse OMG. I'm going through your work now... I got goosebumps. THANK YOU. I just need to get my coffee and some music going and Ima figure out how to explain all this in a video when I chain it together. haha
Oh and I want to tell the other WSA enthusiasts out there~! I see now how to chain this information over to WSA, specifically the MSIX bundle, decompiling it and adding rooted system images. I have seen where others on this forum have done the same thing, or come to the same conclusion but want to be secretive about their methods. But WHy?~~! Haha~! That Tis Only the Soft Root as I am coining it. Explaining the modding of the msix file in order to gain root will be my next project on windows when this is complete. I would like to think... the stock root... would be a valuable resource that could be reported somewhere... But who knows?~! HMM The letter of the day today is O, for OPEN SSL /docs/man3.0/man7/crypto.html www.openssl.org
Could not repeat the error. Tested using Virtual win11available here. Previous version though. https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/ Faked my LG to show as Nvidia...
CXZa said: Could not repeat the error. Tested using Virtual win11available here. Previous version though. https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/ Faked my LG to show as Nvidia... View attachment 5544673 Click to expand... Click to collapse The purpose of this article is to learn something about this obstacle, since Nvidia has not updated the drivers since 2018. Which we are learning LOTS. Not whether or not it is broke for all Users. It's about engineering a fix for said problem. Since I cannot easily edit the .inf Due to it's encryption.
jenneh said: Nvidia Drivers, not an issue with Windows 11. Click to expand... Click to collapse I was interested as it has been said that in future there are more strick rules for drivers and such. But this driver is ok. Installed properly and worked ok. Or maybe the rules have changed in the later win versions.?? Try to restart your device. Maybe both of them...
CXZa said: I was interested as it has been said that in future there are more strick rules for drivers and such. But this driver is ok. Installed properly and worked ok. Try to restart your device. Maybe both of them... Click to expand... Click to collapse Sorry that came off robotic, I THANK YOU For testing. Out of curiosity are you using amd or intel processor?
jenneh said: Sorry that came off robotic, I THANK YOU For testing. Out of curiosity are you using amd or intel processor? Click to expand... Click to collapse Intel... Which win11 version you are using? Maybe the rules have changed like I said in previous post (added it after you quoted)
CXZa said: Intel... Which win11 version you are using? Maybe the rules have changed like I said in previous post (added it after you quoted) Click to expand... Click to collapse I am on the latest version. Running AMD. I have uninstalled and reinstalled Many Times. I have used both Microsofts Factory isos, tried every iteration since preview, built my own modded ISOs ETC. I have case Evidenced This problem for months and many of my viewers Have reported the Same Issue. So what you are not understanding is, there are some of us who see a problem, regardless of the Root Cause, We want a fix~! Your solutions have already been tried. So thank you, but this is an article regarding KNOWLEDGE The shield is only a metaphor~! It is as said in the beginning just the Use Case. For the Lesson. This is a Live lesson. Thank you.
Okay, have fun...
CXZa said: Okay, have fun... Click to expand... Click to collapse Oh I Am <3
So an Update~! I had theorized that I could just copy the contents of the .inf file, paste them into a new text document, rename it to android_usb.inf, then paste the rest of nvidia's original dlls etc, but Nope~! Apparently you have to modify the cat files and well every thing~! So another day of research it is!! Here's a nifty signing tool ;-) ksign (Install) 2016.07.20.20170105 Free GUI and command line tool for software and installer signing community.chocolatey.org