M e n u f u n c t i o n s
• Change module PIN to change the module PIN, if allowed by the security
module. Enter the current module PIN code; then enter the new code twice.
• Change signing PIN. Select the signing PIN that you want to change. Enter
the current PIN code; then enter the new code twice.
See also "Access codes," p. 8.
Certificates
There are three kinds of certificates: server certificates, authority certificates, and
user certificates.
Server certificates—used to create a connection with improved security to the
content server. The phone receives the server certificate from the service provider
before the connection is established and its validity is checked using the authority
certificates saved in the phone. Server certificates are not saved. The security
indicator is displayed during a connection if the data transmission between the
phone and the content server is encrypted. The security icon does not indicate
that the data transmission between the gateway and the content server (or place
where the requested resource is stored) is secure. The service provider secures the
data transmission between the gateway and the content server.
Authority certificates—used by some services, such as banking, for checking the
validity of other certificates. Authority certificates can either be saved in the security
module by the service provider or they can be downloaded from the network, if
the service supports the use of authority certificates.
User certificates—issued to users by a certifying authority. User certificates are
required, for example, to create a digital signature, and they associate the user
with a specific private enter a security module.
Important: Even if the use of certificates makes the risks involved in remote
connections and software installation considerably smaller, they must be
used correctly in order to benefit from increased security. The existence
of a certificate does not offer any protection by itself; the certificate
manager must contain correct, authentic, or trusted certificates for
increased security to be available. Certificates have a restricted lifetime.
If the expired certificate or certificate not valid yet is shown even if the
certificate should be valid, check that the current date and time in your
device are correct.
Before changing any certificate settings, you must make sure that you
really trust the owner of the certificate and that the certificate really
belongs to the listed owner.
46