Nokia 3220 Manual page 73

9232486_3220_2_en.fm Page 61 Thursday, January 20, 2005 1:31 PM
Certificates
There are three kinds of certificates:
server certificates, authority
certificates and user certificates.
• The phone uses a server
certificate to create a connection
with improved security to the
content server. The phone
receives the server certificate
from the service provider before
the connection is established and
its validity is checked using the
authority certificates saved in the
phone. Server certificates are not
saved.
The security indicator
displayed during a connection if
the data transmission between
the phone and the content server
is encrypted.
The security icon does not
indicate that the data
transmission between the
gateway and the content server
(or place where the requested
resource is stored) is secure. The
service provider secures the data
transmission between the
gateway and the content server.
• Authority certificates are used by
some services, such as banking
services, for checking the validity
of other certificates. Authority
certificates can either be saved in
the security module by the
service provider, or they can be
downloaded from the network, if
M e n u f u n c t i o n s
the service supports the use of
authority certificates.
• User certificates are issued to
users by a Certifying Authority.
User certificates are required, for
example, to create a digital
signature and they associate the
user with a specific private key in
a security module.
Important: Note that even
if the use of certificates
makes the risks involved in
remote connections and
software installation
considerably smaller, they
must be used correctly in
is
order to benefit from
increased security. The
existence of a certificate
does not offer any
protection by itself; the
certificate manager must
contain correct, authentic,
or trusted certificates for
increased security to be
available. Certificates have
a restricted lifetime. If
Expired certificate or
Certificate not valid yet is
shown even if the
certificate should be valid,
check that the current date
and time in your device are
correct.
Before changing any
certificate settings, you
must make sure that you
really trust the owner of the
61