How to generate an application enrollment token for Windows Phone
August 19, 2014
To create an AET, use the AETGenerator tool provided by the Windows Phone development tools. You must first acquire an enterprise mobile code-signing certificate from Symantec before you can create an AET. For more information about acquiring a certificate, see Company app distribution for Windows Phone.
The AETGenerator tool is available at the following locations:
For Windows Phone 8 apps:
C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator
For Windows Phone Silverlight 8.1 apps:
C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\AETGenerator
Companies that manage phones with Windows Intune or System Center 2012 Configuration Manager do not need to generate an AET using the AETGenerator tool. Instead, Windows Intune and System Center 2012 Configuration Manager generate an AET automatically when the administrator supplies the code-signing certificate. For more information, see:
Start the VS2012 x86 Native Tools Command Prompt as an administrator and change the current directory to the directory where the PFX file is located.
Run the AETGenerator tool with the following command line. Be sure to replace the placeholder text in this command with appropriate values. Also replace the path with the path for the appropriate version of the AETGenerator tool.
%ProgramFiles(x86)%\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator\AETGenerator.exe PFXFile Password
The following table describes the command-line arguments for AETGenerator.
Required. The name of the PFX file generated from the enterprise mobile code-signing certificate provided by Symantec. If the current directory is not set to the location of the PFX file, this argument must specify the full path of the PFX file.
Required. The private key used to read the PFX file.
AETGenerator creates an AET.aetx file and several other files in the current directory for the command prompt. Companies that are not using Windows Intune or System Center 2012 Configuration Manager to manage phones should distribute the AET.aetx file to users so they can enroll their phone for company app distribution. For more information, see Company app distribution for Windows Phone.
The following table describes all of the files generated by AETGenerator.exe.
This file contains the raw AET in XML format.
This file is a Base64-encoded version of AET.xml. This file is used to configure the AET for distribution to phones through an MDM system.
This file contains the contents of the AET.aet file in an XML format that can be processed on the phone through email and Internet Explorer. This file is used to manually install the AET on phones for companies that are not using Windows Intune or System Center 2012 Configuration Manager. When this file is distributed to phones, users can tap this file to install the AET and enroll for company app distribution. For more information, see Company app distribution for Windows Phone.