Installation Root CA on Nokia E61 Made Easier

From this day on, you can install certificates from non-trusted CA's on your Symbian-based phone (like the Nokia E61) using this page euh.. this page.

UPDATE: it seems that most other phone brands and types work as well (the S40 based devices are left out... sorry).

All you need to do is make sure that the certificate is in the DER format. The webpage doesn't verify if the certificate is in the correct format. This is up to the uploader.

I created this page, because I work a lot with digital certificates, so I don't want to be bothered with the workaround described in the earlier post. The current version is quick-and-dirty (no error messages). I'll try to make it more user friendly in the next couple of days (like having the option of sending the URL to an e-mail address). Just make sure that you obey the guidelines shown on the page, and all should go well.

Feel free to add a comment on how to improve this.

UPDATE: This works on (almost) every Symbian based (Nokia) phone. It has been tested with a couple of phones from the Nokia E and N series.

UPDATE 2: There is something else you need to consider when trying to add a certificate to your phone. Ideally, an SSL certificate is issued by a Certificate Authority. You can verify this by comparing the 'issued by' and issued to' filed in the certificate. If those are the same you've got a selfsigned SSL (or CA certificate). Those should work when you upload them. If these are different you need to get the CA that issued the SSL certificate.

If the issued by and issued to field are different it means that this is NOT a ROOT CA certificate or self-signed certificate.

Update on Wednesday, February 10, 2010 at 8:53 by Willem

Due to server migrations the uploaded CA certificates got an older timestamp. This triggered the automatic clean-up script to delete all uploaded certificates. Sorry for the inconvenience. Re-uploading the certificate if you need to download it again.
Note that the newly uploaded certificate will be having a different (random) filename.

Comments

[Bob T]

@Willem
True.. I was trying to upload a certificate with encryption which was too ambitious for the phone. Mr Nokia seems to be aware of what is going on. All sorted and working now with Microsoft SBS 2008.

[sam Mitchell]

Thanks for the info. Regards

[Wilhelm Klenner]

Willem, thanks a lot, you saved my weekend!

Cheers from Austria,

Wilhelm

[jigar]

Well,
i have installed certificate..

using this
(i.e. symcaimport.redelijkheid.com/)

Thanks a lot for this.

now
settings>security>certificates>godaddy>select use>

there are three options

server auth
cross certi
app signin

among which app sign is disabled.. :(

and if i install app to my nokia 3110c it shows application invalid..

[Willem]

Normally, a CA certificate used for code signing should have that feature listen under the (Enhanced) Key Usage field. Aren't you missing some CA in the chain? You might need to add both Root and Issuing / Intermediate CA.

Unfortunately, I've no way of testing this myself since I switched the Symbian-based phones for an iPhone.