How to generate an application enrollment token for Windows Phone

May 10, 2014

To create an AET, use the AETGenerator tool provided by the Windows Phone development tools. You must first acquire an enterprise mobile code-signing certificate from Symantec before you can create an AET. For more information about acquiring a certificate, see Company app distribution for Windows Phone.

The AETGenerator tool is available at the following locations:

For Windows Phone 8 apps:

C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator

For Windows Phone Silverlight 8.1 apps:

C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\AETGenerator

NoteNote:

Companies that manage phones with Windows Intune or System Center 2012 Configuration Manager do not need to generate an AET using the AETGenerator tool. Instead, Windows Intune and System Center 2012 Configuration Manager generate an AET automatically when the administrator supplies the code-signing certificate. For more information, see:

  1. Start the VS2012 x86 Native Tools Command Prompt as an administrator and change the current directory to the directory where the PFX file is located.

  2. Run the AETGenerator tool with the following command line. Be sure to replace the placeholder text in this command with appropriate values. Also replace the path with the path for the appropriate version of the AETGenerator tool.

    %ProgramFiles(x86)%\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator\AETGenerator.exe PFXFile Password
    

    The following table describes the command-line arguments for AETGenerator.

    Argument

    Description

    PFXFile

    Required. The name of the PFX file generated from the enterprise mobile code-signing certificate provided by Symantec. If the current directory is not set to the location of the PFX file, this argument must specify the full path of the PFX file.

    Password

    Required. The private key used to read the PFX file.

  3. AETGenerator creates an AET.aetx file and several other files in the current directory for the command prompt. Companies that are not using Windows Intune or System Center 2012 Configuration Manager to manage phones should distribute the AET.aetx file to users so they can enroll their phone for company app distribution. For more information, see Company app distribution for Windows Phone.

    The following table describes all of the files generated by AETGenerator.exe.

    File

    Description

    AET.xml

    This file contains the raw AET in XML format.

    AET.aet

    This file is a Base64-encoded version of AET.xml. This file is used to configure the AET for distribution to phones through an MDM system.

    AET.aetx

    This file contains the contents of the AET.aet file in an XML format that can be processed on the phone through email and Internet Explorer. This file is used to manually install the AET on phones for companies that are not using Windows Intune or System Center 2012 Configuration Manager. When this file is distributed to phones, users can tap this file to install the AET and enroll for company app distribution. For more information, see Company app distribution for Windows Phone.

Show:
© 2014 Microsoft