[planetf1]

I am experiencing what I believe to be a bug in fw 12.043 on this phone (also occured in v20 firmware on N95 8Gb)

Scenario
* Configure a wireless LAN connection that uses WPA-EAP (using digital certificates)
* configure any application (especially "always on") one to use this connection, ie configure an email account under "Messaging", set access point to this WLAN, and configure automatic retrival.
* Switch off phone
* leave coverage area of WLAN
* Turn on phone when out of WLAN coverage
* wander into coverage
* Observe that after a while phone will pop up request for module PIN which protects digital certificates
* leave phone alone, and observe that whilst this dialog is displayed excessive battery is consumed and phone becomes warm (CPU spin?)
* observe that after a few hours phone will be dead.

It appears the issue here is twofold
a) There is no way to disable the prompting for PIN code (certificate security module)
b) Whilst prompting for PIN some high-burn loop etc is occuring.

Impact: flat battery

[saataja]

---

07-Jan-2009 06:38 PM
planetf1 wrote:

a) There is no way to disable the prompting for PIN code (certificate security module)

---

Starting from S60 3rd Edition FP2 (N96, N79, N85 etc.) S60 Certificate Manager actually provides means to prevent certificate (private key) PIN code queries when utilizing user/client certificates e.g. in case of WLAN EAP authentication.

In order to prevent these private key storage PIN queries user/client certificate can be placed in to the "Phone Certificates" storage instead of "Personal Certificates".

In order to do that user/client certificate must be first installed in to the Personal Certificates (as you have done already) and then it can be moved to the "Phone Certificates" storage which stop prompting of the PIN code when given certificate/private key is being used for EAP authentications.

Go to Tools -> Settings -> General -> Security -> Certificate Management -> Personal Certificates and select Options -> "Move to Phone Certificates" for the user/client certificate configured for the WLAN EAP authentication usage.

Note that "Phone Certificates" option is not available on 3rd Edition FP1 (N95-8GB) but it should help you at least with the N96.

[planetf1]

That is *exactly* what I needed. Didn't notice the "move" on options menu and had asked this question before/elsewhere/searched but didn't see this solution.

Since I upgraded from N95 to N96 I'm fine (my Son now has the N95, but doesn't need certs...)

Made the change and it works as expected

Thanks muchly!!

[saataja]

---

08-Jan-2009 10:31 AM
planetf1 wrote:
That is *exactly* what I needed. Didn't notice the "move" on options menu and had asked this question before/elsewhere/searched but didn't see this solution.

Since I upgraded from N95 to N96 I'm fine (my Son now has the N95, but doesn't need certs...)

Made the change and it works as expected

Thanks muchly!!

---

Your welcome, glad it helped!

By the way in addition to 3rd Edition FP2 onwards, also E66 and E71 are equipped with this option of utilizing "Phone Certificates", in case someone else is having similar needs with their E66/E71.