goosett wrote:
By the way in addition to 3rd Edition FP2 onwards, also E66 and E71 are equipped with this option of utilizing "Phone Certificates", in case someone else is having similar needs with their E66/E71.
Hi, saataja!I am using E71. And I have an option "Move to Phone certifs.". After asking to promt the Phone key store password, nothing happens. And my certificate is still located in "Personal Certificates".
Do you have any suggetions?
Thank you.
That sounds weird, at least I haven't seen or heard that kind of problem before.
I actually just tried this with my old E71 (ver. 500.21.009) and didn't have any problems moving my EAP-TLS client certificate back and forth between Personal Certificates and Phone Certificates.
I assume that the Personal Certificate have installed on the E71 is working otherwise fine (for EAP-TLS authentication) and only problem you have is getting it moved from Personal to Phone Certificates?
And when you attempt to move it, you entered the key store password correctly but certificate just doesn't get moved to Phone certificates? There's no error message or anything when it does "nothing"?
Here's some suggestions to try out, but please note that this is just guessing some ideas that might help.
1.Try changing / resetting the key store password. Go to Tools -> Settings -> General -> Security -> Security Module -> Phone key store -> Module Pin -> and select/click on the "Phone key store code". This should ask you to first enter the current key store password and then it ask you to enter the new password (enter new code twice to confirm).
Try moving your certificate from Personal Certificates to Phone Certificates and provide the "new" key store password you just changed.
2. Try removing and re-installing the particular Personal certificate.
First make sure that you still have a means to install this particular certificate again after you have removing it from the phone's certificate manager.
Then make sure that your phone is not currently using the WLAN connection where this particular Personal certificate is to be used. (go out of WLAN coverage or switch your phone to "Offline" profile and don't allow it to create WLAN connection in Offline mode if asked.
Then go to Tools -> Settings -> General -> Security -> Certificate Management -> Personal Certificates -> highlight your personal certificate -> select Options -> Delete. This should remove the certificate and it's private key from phone certificate storage.
Reboot the phone just in case.
Re-install your Personal certificate and see if you can now move it to Phone Certificates (after it get's initially installed to Personal Certificates).
After re-installing certificate(s) remember to check that your EAP settings are correctly defined and make sure that appropriate certificates are selected to as Personal and Authority Certificates. Removal of the personal cert. has probably reverted EAP settings specific Personal certificate selection to "None".
3. If nothing else helps and you are really eager to make this work, you could take a backup of your important phone content and try resetting your phone back to factory defaults (*#7370#).
If you plan on restoring previously backed up data to your phone, you should probably not restore the "settings" part of the backup because sometimes restoring old backed up settings (especially if restoring from older phone firmware versions) might have caused some problems. And restoring backup of your "current" settings after factory reset might also restore your problem of not being able to move your certificate.
That's about all I can think of, I hope you get it sorted out.
