Nokia 3530 User Manual

Contents

W A P s e r v i c e s48 Copyright © 2006 Nokia. All rights reserved.Security moduleThe security module can containcertificates as well as private andpublic keys. The security moduleprovides security services for WAP-related applications and allows youto use a digital signature. Thecertificates are saved in the securitymodule by the SIM card issuer or theservice provider.Press Menu and select Services,Settings, and Security modulesettings. Select• Security module details to showthe security module title, status,manufacturer and serial number.• Change signing PIN to select thesigning PIN you want to change.Key in the current signing PINcode. Press Change and key inthe new code twice.See also ”Access codes” on page xii.CertificatesThere are three kinds of certificates;server certificates, authoritycertificates, and user certificates.Authority certificates can either besaved in the security module by theSIM card issuer or service provider,or they can be downloaded from aWAP page and saved in the phone’smemory. User certificates are savedin the security module by the SIMcard issuer or the service provider.Server certificates are not saved.• Server certificatesA server certificate is sent fromthe WAP server to the phone andits validity is checked using theauthority certificates saved onthe phone or in the securitymodule. The phone tells youwhen the identity of the WAPserver or WAP gateway cannot beverified, when the WAP server orWAP gateway certificate is notauthentic and when you do nothave the correct authoritycertificate on your phone.The security indicator isdisplayed during a WAPconnection if the datatransmission between the phoneand the WAP gateway or WAPserver (identified by the IPaddress in the Edit active servicesettings) is encrypted.It is a responsibility of the serviceprovider to secure the datatransmission between thegateway and the content server.• Authority certificatesAuthority certificates are used bysome WAP services, such asbanking services, for checkingthe signatures of servercertificates or other authoritycertificates. You can downloadauthority certificates from WAPpages, if the WAP servicesupports the use of authoritycertificates. If you save the