Symbian code signature certificate application and Usage Guide

This guide consistsWosignBased on the Verisign website and Symbian website content, refer to: mobile code signature certificate (ACS) FAQ, A Guide to Symbian signed. If you want to apply for the Symbian signed authentication, refer to the Symbian signed authentication FAQ.

Verisign authenticated content signing (ACS) for Symbian (SymbianCodeSignature Certificate) allows software developers to securely develop applications based on the Symbian operating system and run securely on mobile terminals of the Symbian operating system. Verisign ACS allows you to digitally sign your application software and sign your files and manage your signature accounts in real time securely and on the web, strict software developer authentication protects the legitimate rights and interests of software developers.

Step 1 online application Step 1-enroll for your ACS publisher ID

wosign allows you to enter the application information online at the application website. After the application is submitted successfully, tell wosign the order number. Note the following points during the application process:
(1) The company name can only be an English name. If the applicant must submit a business license with a Chinese name, the English name can only be a literal translation of Common English words. The company name can only be pinyin. Verisign recognizes the Chinese name business license approved by wosign as a proof document;
(2) when you fill in the organization contact, you must fill in the contact person that can be contacted on the submitted phone bill;
(3) During the certificate application process, you must enter the challenge phrase password, this password is required to query the Certificate Application Status, modify the contact information, and retrieve the certificate.
(4) email can only be sent to the enterprise post office, and public email is not allowed (for example: hotmail, Gmail, etc.);
(5) Select the "token" Payment Method to apply for the final payment (payment, enter the token number that wosign tells the user. As shown in 1:

(6) When you fill in the billing contact information, fill in:First name:Billing,Last name:Wosign,Title:Manager,Company:Wosign, inc .,Address1:Fangda building, Suite 1803, hi-tech industrial park,City:Shenzhen,State/province:Guangdong,Zip/postal code:518057,Country:Select China,Telephone:+ 86-755-61313000, email:

On the ACS for Symbian page, select the starter pack (ACS publisher ID without smartcard) and click buy now.

1. Complete and submit the enrollment form. you will receive an automated e-mail acknowledgement-you don't need to do anything with this. verisign customer support will process your order. if necessary, Verisign may contact you to confirm your order information and/or for additional documentation such as proof right (por) documents. note that the organization contact listed on your enrolment will be contacted by telephone for verifying your details. please alert this person in order to expedite your certificate processing.

Step 2 retrieve your Symbian code signature certificate Step 2-Pick up your ACS publisher ID

After you submit your application, wosign will translate your certification documents and submit them to Verisign. Verisign will call the contact person of the organization you entered to confirm the order, once verification is completed, an email is sent to the user, as shown in figure 2:

You only need to click the link in the email to retrieve the certificate from the Verisign website, as shown in 3. You need to enter the pin in the email and the challenge phrase you entered during the certificate application process ), click "continue" to complete certificate installation:

1. Once your order is approved, you will receive an approval e-mail with instructions on how to pick up your ACS publisher ID.
   Important: save this e-mail for future reference.
2. Go to the Verisign web site provided in your approval e-mail to pick up and install your publisher ID.

Step 3-download and use Symbian key export Utility

(1) Open IE, select "content" in "Tools"-"Internet Options", and click "certificate" to view your signature certificate, this signature certificate is used to log on to the Symbian Signature Management System (ACS Signing account manager) for identity authentication, and is also used to sign the Symbian sisfile. However, the Symbian signature tool requires a two-Certificate file (. PVK and. CER) to sign the sisfile. Therefore, you need to export the certificate that has been installed in IE to. pfx format;

(2) download the Certificate Format Conversion Tool and place the exported. pfx format certificate and conversion tool in the same directory. In the DoS Status, enter the following command to convert the Certificate file:

Vs_pkcs-p12Pfxfile-PasswdPfxpassword-KeyMykey. Key-CERMycert. Cer

Pfxfile is exported. pfx file name, pfxpassword is exported. password set for pfx certificate, mykey. key is the converted private key file, mycert. CER is the converted certificate public key file.

1. The private key and certificate embedded on your IE browser key store need to be converted into a format that the Symbian makesis tool can use. The Symbian key export Utility available here will enable this conversion.
2. Please read and accept the click through software license.
3. Download and run Symbian key export utility to do this conversion.

   Follow instructions below to do the key export:

1. Once you have downloaded the 'symbian key export tool' (vs_pkcs.zip), extract the contents and copy the vs_pkcs.exe executable and readme.txt files to folder.

1. From your IE browser, select your ACS publisherid cert. Tools-> Internet Options-> content-> certificates.
2. With the CERT selected, click on 'export' and follow the steps in the certificate export wizard. make sure you choose 'yes, export the private key' option when asked' do you want to export the private key with the certificate? '
3. You can choose to enter a password to protect the private key or you can leave it blank.
4. Once you have exported successfully to. pfx file, copy the file to the folder containing the downloaded vs_pkcs.exe executable and follow the instructions in the readme.txt to create. key and. CER file for use with the Symbian makesis tool.

Step 2: sign the sisfile and submit the signed sisfile to Verisign for re-signing or submit it to Symbian test step 4-sign your sis files and send to Symbian testing lab

(1) To use the Symbian makesis tool to sign the sisfile, You need to import the signature certificate files: mykey. Key and mycert. CER;

(2) Send the signed sisfile to the Symbian testing lab. After the Symbian test, Symbian will re-sign the file and then allow the end user to install and download it safely.

2. Use Symbian makesis tool to sign your sis files with your ACS publisher ID. make sure you sign the version of your application that you are sending to the Symbian testing lab. note that if you make any changes to the signed file, it will be break the signature and you will need to sign it again with the ACS publisher ID.
4. Follow Symbian instructions to send your signed SIS files to the Symbian testing lab.
6. Symbian testing lab will verify your signature and test them per Symbian testing and certification procedures. (Please contact Symbian directly for any questions on the testing or certification procedures ).
8. Once the application passes the test requirements, symbian testing lab will access the Verisign Signing account manager portal and will re-sign your application using a single use ACS content IDs that chains up to the Symbian Testing Based Root CA-the trust point embedded in Symbian-based devices.
10. The application is now certified and will be sent back to you by the Symbian testing lab.

    Important:

    • You can access the ACS Signing account manager only if you have a valid ACS publisher ID. however, at this time, you will not be able to access the Symbian Testing Based root signing service since this is restricted per Symbian requirements to the Symbian testing partner. you will get a message that tells you that you are not presently authorized to sign applications for this platform.
    • Steps 1-2 are one-time only until renewal after 1 year.