Sony Ericsson UIQ 3 manual Developer certificates, ACS publisher ID Publisher certifiers

Page 13

Developers guidelines Signing applications

Developer certificates

As a consequence of the Symbian OS v9 enhanced platform security, applications that require access to restricted APIs can not be installed on targeted devices before they have been signed, which in turn makes it impossible to test applications on real mobile phones during the development process. To take care of this, special developer certificates can be achieved via the Symbian Signed programme. Devel- oper certificates are valid for a number of of phones, identified by their IMEI number, and allow developers to sign applications temporarily during development for installation and testing on real devices.

Testing on emulators does not normally require developer certificates.

ACS publisher ID

An application using capabilities in the extended or phone manufacturer approved sets, must be signed with an ACS publisher ID certificate when a developer certificate is requested and when the finished appli- cation is sent to be Symbian Signed. The ACS publisher ID is used to verify the identity of the developer and to certify that the application has not been modified during upload to the Symbian Signed portal. An ACS publisher ID is issued by Verisign and is valid for one year. It can be used to sign an unlimited number of applications during that period. More information on how to acquire an ACS publisher ID and the costs for it, can be found on http://www.verisign.com/products-services/security-services/code-signing/sym-bian-content-signing/index.html

Publisher certifiers

ACS publisher IDs are only available to recognized organizations, for example registered companies. Developers who are not qualified for an ACS publisher ID of their own, can use an alternate route for hav- ing their applications signed. Publisher certifiers are organizations having the right to certify applications for themselves or others, using their own ACS publisher ID. They are certified by Symbian to perform application testing and finally make the application Symbian Signed. Normally this procedure is con- nected with agreement between the developer and publisher that the application is to be distributed through the sales channel of the publisher.

Signing freeware applications

Freeware applications can also be Symbian Signed via a procedure similar to the one described above for publisher certifiers. One condition is that the application actually is freeware, that is, it is distributed and can be used without any costs for the user. It is also required that the application displays a special free- ware disclaimer at installation.

Details about the preconditions for freeware signing and the process for it, can be found on https://www.symbiansigned.com/app/page/freeware.

13

October 2006

Image 13
Contents Signing applications Purpose of this document PrefaceDocument conventions Sony Ericsson Developer WorldProducts AbbreviationsDocument history Trademarks and acknowledgementsTypographical conventions Change historyContents Developers guidelines Signing applications Symbian OS v9 security architecture Capabilities IntroductionRestricted and unrestricted APIs Unique Identifiers, UIDs IdentifiersSecure Identifier, SID Vendor Identifier, VIDUnsigned sandboxed applications Data cagingCapability mapping Symbian Signed applicationsCapability User granted permission Basic Capabilties ACS publisher ID Publisher certifiers Developer certificatesSigning freeware applications Symbian OS v9 application signing Signing or not Planning for developmentRequired capabilities NetworkServices LocalServicesUserEnvironment LocationWriteDeviceData PowerMgmtSWEvent ProtServDiskAdmin General signing procedureCreating a Symbian Signed application AllFilesUID allocation Symbian Signed portal account registrationTo retrieve a UID from the Symbian Signed Portal UID UID range Purpose ClassACS publisher ID Identity requirements Number of IMEIsExtended Capabilities Developers guidelines Signing applications UID Information To do before submitting the applicationPKG file format Policy statement dialogDevelopers guidelines Signing applications Appendix Capability AllFiles Functions listed by capabilityCapability CommDD Capability DiskAdmin Capability Drm Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Capability LocalServices Developers guidelines Signing applications Capability Location Capability MultimediaDD Capability NetworkControl Developers guidelines Signing applications Developers guidelines Signing applications Capability NetworkServices Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Capability ProtServ Capability PowerMgmtCapability ReadDeviceData Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Capability ReadUserData Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Capability SurroundingsDD Capability SwEvent Capability TrustedUI Capability UserEnvironment Capability TcbCapability WriteDeviceData Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Capability WriteUserData Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Developers guidelines Signing applications Capability Illegal Developers guidelines Signing applications