How to generate an application enrollment token for Windows Phone 8
April 14, 2014
Applies to: Windows Phone 8 and Windows Phone Silverlight 8.1 only
Before you can distribute company apps to employees or other users, you must create an application enrollment token (AET) by using the AETGenerator tool provided by the Windows Phone SDK 8.0. The AET is used to enroll phones in the company account established by the company. After a phone is enrolled in a company account, the user can install apps published by the company.
To create an AET, use the AETGenerator tool provided by the Windows Phone SDK 8.0. You must first acquire an enterprise mobile code-signing certificate from Symantec before you can create an AET. For more information about acquiring a certificate, see Company app distribution for Windows Phone 8.
The AETGenerator tool is available at the following location: %ProgramFiles(x86)%\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator.
Companies that manage phones with Windows Intune or System Center 2012 Configuration Manager do not need to generate an AET using the AETGenerator tool. Instead, Windows Intune and System Center 2012 Configuration Manager generate an AET automatically when the administrator supplies the code-signing certificate. For more information, see:
Start the VS2012 x86 Native Tools Command Prompt as an administrator and change the current directory to the directory where the PFX file is located.
Run the AETGenerator tool with the following command line. Be sure to replace the placeholder text in this command with appropriate values.
%ProgramFiles(x86)%\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator\AETGenerator.exe PFXFile Password
The following table describes the command-line arguments for AETGenerator.
Required. The name of the PFX file generated from the enterprise mobile code-signing certificate provided by Symantec. If the current directory is not set to the location of the PFX file, this argument must specify the full path of the PFX file.
Required. The private key used to read the PFX file.
AETGenerator creates an AET.aetx file and several other files in the current directory for the command prompt. Companies that are not using Windows Intune or System Center 2012 Configuration Manager to manage phones should distribute the AET.aetx file to users so they can enroll their phone for company app distribution. For more information, see Company app distribution for Windows Phone 8.
The following table describes all of the files generated by AETGenerator.exe.
This file contains the raw AET in XML format.
This file is a Base64-encoded version of AET.xml. This file is used to configure the AET for distribution to phones through an MDM system.
This file contains the contents of the AET.aet file in an XML format that can be processed on the phone through email and Internet Explorer. This file is used to manually install the AET on phones for companies that are not using Windows Intune or System Center 2012 Configuration Manager. When this file is distributed to phones, users can tap this file to install the AET and enroll for company app distribution. For more information, see Company app distribution for Windows Phone 8.