Certificates
There are three kinds of certificates: server certificates, authority certificates and
user certificates.
To view the available certificates, press
Menu
in standby mode and select
Services
,
Settings
,
Security settings
and
User certificates
or
Authority certificates
.
• Server certificates
The phone uses a server certificate to improve security in the connection
between the phone and the gateway. The phone receives the server certificate
from the service provider before the connection is established and its validity is
checked using the authority certificates saved in the phone. Server certificates
are not saved.
The security indicator
is displayed during a connection, if the data
transmission between the phone and the Internet server is encrypted.
However, the security indicator does not indicate that the data transmission
between the gateway and the content server (place where the requested
resource is saved) is secure. It is up to the service provider to secure the data
transmission between the gateway and the content server.
Copyright
©
2003 Nokia. All rights reserved.
144
• Authority certificates
Authority certificates are used by some online services, such as banking
services, for checking the validity of other certificates. Authority certificates
can be saved in the security module by the service provider, or they can be
downloaded from the network, if the service supports the use of authority
certificates.
• User certificates
User certificates are issued to users by a Certifying Authority. User certificates
are needed, for example, to create a digital signature, and they associate the
user with a specific private key in a security module.
Important:
Note, however, that even if the use of certificates makes the risks involved
in remote connections and software installation considerably smaller,
they must be used correctly in order to benefit from increased security.
The existence of a certificate does not offer any protection by itself; the
certificate manager must contain correct, authentic, or trusted
certificates for increased security to be available.
Certificates have a restricted lifetime. If Expired certificate or Certificate
not valid yet is shown even if the certificate should be valid, check that
the current date and time in your phone are correct.
Before changing these settings, you must make sure that you really trust
the owner of the certificate and that the certificate really belongs to the
listed owner.
Menu fu
nctions
145
Copyright
©
2003 Nokia. All rights reserved.