Checking for Thawte certificate

Why do I need a Thawte root certificate?

Java applications on mobile phones are by default not allowed unlimited access to the phone's built in resources, like for example the phone calendar or the phone's file system. This is to avoid that malicious software tampers with the phone without the knowledge of the user.

Java applications that are not signed with a certificate issued by a respected Certificate Authority are installed in what is called the "untrusted domain". This means that whenever an untrusted application tries to access e.g. the calendar on the phone, the user will be prompted to approve this access.

Since MobyToday stays in constant access to the calendar, to keep it syncronised with it, installing MobyToday in the untrusted domain would not be feasible since you would have to constantly approve access to the calendar. This is why MobyToday is signed with a certificate issued by Thawte.

To be able to use MobyToday your phone needs to have the Thawte root certificate on it. Most Sony Ericsson and Nokia phones, as well as some other brands have this, but sometimes some network operators choose to remove this root certificate in order to only allow applications signed with their own certificate to run on the phone.

How to check if the Thawte root certificate is on your phone:

The easiest way to find out if you have the Thawte root certificate is to try and install MobyToday using the instructions found here. If the Thawte root certificate is not present on the phone, the installation will fail. In this case go to the section "Checking if Thawte certificate is correctly configured" below to find out if the Thawte certificate is in the phone and correctly configured.

Checking if Thawte certificate is correctly configured

If the installation of MobyToday fails this could either be due to that your phone does not have the Thawte Premium Server root certificate, or it could be that it is incorrectly configured. Please follow the steps below to check that your phone has the Thawte root certificate correctly installed:

Sony Ericsson phones:
Depending on the model of the phone there are 2 different ways of checking for the Thawte root certificate:
1. Go to Settings->General->Security->Certificates->Java Certificates
2. Go to Settings->Connectivity->Internet Settings->Security->Java Certificate

Please make sure that Thawte Premium Server CA is in the list of certificates for Java.

If this certificate is not there it means that your operator has chosen to remove this certificate from your phone.

Nokia Series 60 phones:
Go to Tools -> Settings -> Security -> Certif. Management

Check that you have the Thawte Premium Server CA in the list of certificates.

If this certificate is not there it means that your operator has chosen to remove this certificate from your phone.

If you can find this certificate, then press Options->Trust Settings
Please make sure that the App. installation is set to Yes.
Please make sure that the Online Certificate Check is set to No.

Nokia Series 40 phones:
Go to Settings->Security Settings->Authority certificates->Certificate list

Check that you have the Thawte Premium Server CA in the list of certificates.

If this certificate is not there it means that your operator has chosen to remove this certificate from your phone.

If you can find this certificate, then press Options->Select use and make sure that the App. signing is enabled.
Please make sure that the Online Certificate Check is set to No.