Security Module; Certificates - Nokia 3530 User Manual

W A P s e r v i c e s

Security module

The security module can contain
certificates as well as private and
public keys. The security module
provides security services for WAP-
related applications and allows you
to use a digital signature. The
certificates are saved in the security
module by the SIM card issuer or the
service provider.
Press Menu and select Services,
Settings, and Security module
settings. Select
• Security module details
the security module title, status,
manufacturer and serial number.
• Change signing PIN
signing PIN you want to change.
Key in the current signing PIN
code. Press Change
the new code twice.
See also "Access codes" on page xii.

Certificates

There are three kinds of certificates;
server certificates, authority
certificates, and user certificates.
Authority certificates can either be
saved in the security module by the
SIM card issuer or service provider,
or they can be downloaded from a
WAP page and saved in the phone's
memory. User certificates are saved
in the security module by the SIM
card issuer or the service provider.
Server certificates are not saved.
48
to show
to select the
and key in
Copyright © 2006 Nokia. All rights reserved.
• Server certificates
A server certificate is sent from
the WAP server to the phone and
its validity is checked using the
authority certificates saved on
the phone or in the security
module. The phone tells you
when the identity of the WAP
server or WAP gateway cannot be
verified, when the WAP server or
WAP gateway certificate is not
authentic and when you do not
have the correct authority
certificate on your phone.
The security indicator
displayed during a WAP
connection if the data
transmission between the phone
and the WAP gateway or WAP
server (identified by the
address in the Edit active service
settings) is encrypted.
It is a responsibility of the service
provider to secure the data
transmission between the
gateway and the content server.
• Authority certificates
Authority certificates are used by
some WAP services, such as
banking services, for checking
the signatures of server
certificates or other authority
certificates. You can download
authority certificates from WAP
pages, if the WAP service
supports the use of authority
certificates. If you save the
is
IP