How to generate an application enrollment token for Windows Phone

[ This article is for Windows Phone 8 developers. If you’re developing for Windows 10, see the latest documentation. ]

To generate an application enrollment token (AET)

Start the VS2012 x86 Native Tools Command Prompt as an administrator and change the current directory to the directory where the PFX file is located.
Run the AETGenerator tool with the following command line. Be sure to replace the placeholder text in this command with appropriate values. Also replace the path with the path for the appropriate version of the AETGenerator tool.
```
%ProgramFiles(x86)%\Microsoft SDKs\Windows Phone\v8.0\Tools\AETGenerator\AETGenerator.exe PFXFile Password
```
The following table describes the command-line arguments for AETGenerator.

Argument	Description
PFXFile	Required. The name of the PFX file generated from the enterprise mobile code-signing certificate provided by Symantec. If the current directory is not set to the location of the PFX file, this argument must specify the full path of the PFX file.
Password	Required. The private key used to read the PFX file.

AETGenerator creates an AET.aetx file and several other files in the current directory for the command prompt. Companies that are not using Windows Intune or System Center 2012 Configuration Manager to manage phones should distribute the AET.aetx file to users so they can enroll their phone for company app distribution. For more information, see Company app distribution for Windows Phone.

The following table describes all of the files generated by AETGenerator.exe.

File	Description
AET.xml	This file contains the raw AET in XML format.
AET.aet	This file is a Base64-encoded version of AET.xml. This file is used to configure the AET for distribution to phones through an MDM system.
AET.aetx	This file contains the contents of the AET.aet file in an XML format that can be processed on the phone through email and Internet Explorer. This file is used to manually install the AET on phones for companies that are not using Windows Intune or System Center 2012 Configuration Manager. When this file is distributed to phones, users can tap this file to install the AET and enroll for company app distribution. For more information, see Company app distribution for Windows Phone.