IPhone: Install user certificate programatically

I am very new to Iphone and the Iphone SDK's. What I have been tasked to do is figure out if we can install a certificate (User Email)programatically. Basically my use case would be something like this
1) user connects his IPhone to the PC.
2) User opens a webpage and connects to a certificate provisioning site
3) User selects the phone type and clicks install
4) The provisioning site, would contact the CA, generate an email certificate
5) Some ActiveX controll would then connect to IPhone and install the generated certificate on the IPhone, by using the Iphone SDK
Is the above secnario even possible? I have researched the above scenario with windows mobile and it seems like you can do it with their API's
If anyone can point me to the right direction it would be great
-azahur

Go to the iOS Dev Center and search on: keychain

Similar Messages

User certificate installation for blackberry 8700

Hello there,
I got the user digital certificate. I sent the email to my blackberry ( model 8700 ), opened the email on blackberry and installed the user certificate. But the problem is, the user certificate is showing in "others" certificate instead of "my" Certs. Due to this i think i can't use this certificate while browsing sites which require client authentication.
How do i copy/move user certificate from "Others Cert" to "My Certs"? Or when i install user certificate, how to make sure it gets installed under "My Certs"?
Thanks in advance for any pointers.
BerryCert

Hi and Welcome to the Forums!
Hopefully this KB will provide you with useful information.
Cheers!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Installing Wifi Certificates on iPhone?

Hi
I'm trying to connect to wifi network - my university wifi network, but in order to do this, i need to be able to install a certificate. I hhad to do this for my macbook, is there a way to install it on the ihpone? the wifi uses a PEAP authentication system. is the iphoen compatible with that?

The iPhone does not support EAP protocols at this time

How to instal wupos certificate in iphone 5s

i have installed a certificate of wupos in 5s but it is giving an error "not trusted" after installation

well, is the certfiicate self signed? if it's not issued and signed by a legitimate CA, what you're seeing is normal.

Does iPhone support personal certificates required by protected websites?

The answer is likely no, but it was worth asking. I have a secure website I use which requires that I have my Verisign Class 1 ID (certificate) installed on the host machine. Does the iPhone support the installation of any Verisign certificates? Note that the certificate is not requires for email signature, simply as a way to very user login to a secure site.

If it's just using SSL it should work fine... but if you have to install a certificate on the device before hand I think you're SOL. I'd swing in to an Apple store and give it a shot.

Unable to import the user certificate into the Oracle Wallet Manager

Hi,
I am configuring the External Authentication plugin using the password filters.
i am using the version 10.1.0.5.0 version of Oracle Wallet manager
inorder to do that i am enabling the SSL mode.
to enable the SSL mode i followed the some steps in OWM and OCA admin and user console.
when i approved a certificate as admin and importing to the Oracle Wallet Manager, i got an error that
User Certificate Installation failed.
Possible errors:
- Input was not a valid certificate
- No matching certificate request found
- CA certificate needed for certificate chain not found.
Please install it first
can anyone help me how to resolve this problem.

hi,
thanks for your reply pramod
I tried to import the two certificate files(rootca.crt and server.crt). but i am got the same error.
what may be the problem.

Password parameter not working while Installing the certificate hosted on a Web Application Server

Hi,
We are trying to secure our SAP BI Mobile connection with certificates. According to the manual we are storing a password protected certificate on a network location.
On our ipad when I open the link: (according to manual: Administrator and Report Designer's Guide , chapter 4.14.2.1 Installing the x509 Certificate on Device)
SAPBI://action=downloadcert&certurl=<Download URL>&Password=abc123
It should open and install the certificate in the app without asking for the password. But thats not working. It does ask for the password. So I can access the certificate location and after entering the password it works. But I am giving the password parameter in the link so why is this not working?
The guide is a bit contradictory, and I quote:
"If you access the second link above: The application is launched and the certificate file is downloaded from the URL location (certurl).
The certificate is directly installed on the device."
But second quote:
"NOTE:
Since the password is already included in the URL, the application does ask the user for the password...."
My question: what is the use of this password parameter if you still have to enter it manually?
Does anybody know if this should work, and what I might be doing wrong?

Hi , i am facing the same issue. I'll open a incident.
Martin

How to install a certificate in OC4J

Hi I want to connect a server from a java method in Jdeveloper (from local machine) using api which needs a certificate to be installed in the caller.
I have installed the certificate in my machine by clicking the certficate file and clicking the Install Certificate option.
But still the error is comming. Do I need to add the certificate somewhere in Jdeveloper? How?
The error message is:-
Establishing the LDAPConnection with the below env params =>
{java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=userx,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
Establishing the LDAPConnection with the below env params =>
{java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
javax.naming.CommunicationException: simple bind failed: ldapu.xyz.gov.sg:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
Establishing the LDAPConnection with the below env params =>
{java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=non-employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
Establishing the LDAPConnection with the below env params =>
{java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=non-employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
javax.naming.CommunicationException: simple bind failed: ldapu.xyz.gov.sg:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
Creating ldapContext for user =>uid=dbc13,ou=employee,o=xyz,c=sg
Establishing the LDAPConnection with the below env params =>
{java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
Establishing the LDAPConnection with the below env params =>
{java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
javax.naming.CommunicationException: simple bind failed: ldapu.xyz.gov.sg:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
[Ljava.lang.StackTraceElement;@193385dsg.gov.xyz.ldap.base.LDAPException: Unable to connect to the server.[simple bind failed: ldapu.xyz.gov.sg:636]
Thanks in advance
Sam
Edited by: Sam on Nov 16, 2010 9:50 PM

Hi. To SSL comunication between the local machine and remote server with jndi, only need install or register the ca-certificate with keytool in the local machine. This instructions can help you:
/oracle/oas/10.1.3.1/soa/jdk/bin/keytool -import -keystore /oracle/oas/10.1.3.1/soa/jdk/jre/lib/security/cacerts -trustcacerts -file /oracle/certificates/DcDg04Cert2.cer -alias alias_name -storepass store_pass
Bye.

EAP-TLS User Certificate Question

I've setup a test ACS server and have everything functioning correctly including the WLAN. However, is there anyway for EAP-TLS to use ONLY the machine certificate and not the user certificate? We are not currently setup with per-user certificates. I'm guessing not on this... My primary question then is with User Certificates, how do you handle the following scenerio:
I have many CoW's (computer on wheels) through out the hospital that nurses use for inputting patient information. They all have a simple generic username/password (BADDD!!!!) so with this user it won't be hard to have default_user certificate install on the machines. But what if Doctor X decideds to walk up to one of these CoW's and wants to logout and log back in with his user/password on a machine he's never used before. How do we handle making sure he's able to connect if doesn't already have a cert on this computer? I'm quite mistified by this.
Thanks
-Raun

If you are using the MS Supplicant, you need the following registry settings:
"HKLM\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global\AuthMode", 2, "REG_DWORD"
"HKLM\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global\SupplicantMode", 3, "REG_DWORD"
This forces it to only use hardware certificates and sets the authentication to do the correct RFC polling.
As for the other issue, MS CA user certs do not "roam". Yet. There is discussion of roaming credentials being in Windows 7, but not entirely what that means. Roaming certificates can be easier with a product like Venafi. There "Encryption Management" tools are certificate management suites. The do have roaming management, or at least did when we talked to them.
Oh, and if you use two CAs (hardware and user), the separation keeps it straight too.

Configure WLan for user certificate authentication

I have windows CA and NPS (radius server).
I want wireless clients / devices using active directory user certificates (generated by AD CA) to authenticate and encrypted to wireless WLAN.
I have setup WLAN as [WPA2][Auth(802.1X)] and pointing to Radius server (windows NPS).
My test notebook PC has ca.cer and username certificate installed in trusted and personal stores. And configure the wireless profile as "Microsoft: smart card or other certificate".
However when I try to connect I got failed. And wireshark on NPS showing no traffic on port 1812.
Could someone please help a look anything wrong on WLC setting?
Thanks.
GPING

Hi, Scott,
My WLC setting: SSID-Test, WPA2 802.1x, AES, Radius server overwrite interficace "ticked", Server1 - x.x.x.x port 1812,
Local EAP auth - Enabled and profile = "Peap"
On my NPS, I got 2 policies (enabled only one of them for test).
NPS-Policy 1: Auth method = Microsoft PEAP -> "wireless server certificate", User group ="test users".
On Win7, I setup wireless profile = WPS2-Enterprise, AES, Choose auth method = "Microsoft PEAP" with ca.cer installed and ticked . When "connect", I got connected with login user credential.
NPS-Policy 2: Auth method = "Microsoft Smart card or other certificate" -> wireless server certificate"
On Win7, I setup wireless profile = WPS2-Enterprise, AES, Choose auth method = "Microsoft Smart card or other certificate". Choose "use a certificate on this computer". (I have one user certificate installed on Personal store). Also ticked "Validate server certificate" and ticked the ca.cer which was installed. When "connect" I failed.
I tried some other combination, like TKIP instead of AES, but I got "
The settings saved on this computer for the network do not match the requiremen
ts of the network" - really frastrated.
Could please point me where got wrong?
THanks
GPING

How can we use two user certificates at a time?

Hi,
I want to use two different user certificates for two different trading partners. Can we keep two private keys in single wallet and use those simultaneously? In our case our two trading partners are using different CA's certificate and we are forced to use two private keys.
Please tell me that is there any way by which I can manage two private keys at a time in single wallet?
Please help.
Thanks & Regards,
Anuj Dwivedi

a. How To Extract A Private Key and Certificate From A Wallet
Oracle does not provide any functionality within Wallet Manager, or otherwise, to do this. However this can be achieved using OpenSSL.
- If a Linux server is available, OpenSSL is usually installed by default (/usr/bin/openssl). If not you can download it from www.openssl.org
- To extract the key and certificate from the Wallet run:
openssl pkcs12 -in ewallet.p12 -passin pass:<wallet_password> -out ewallet.txt -nodes
- The resulting ewallet.txt is a file that contains the unencrypted private key, the certificate and all the root CA's in the wallet. Then the relevant information for the key, and certificate(s) can be copied to separate files to create the individual key and certificate(s)
b. How to Convert a Certificate and Private Key to an Oracle Wallet
SSL2OSSL (UNIX) and OSSLCONVERT (Windows) are tools that allow you to convert Private Keys and Certificates to an Oracle Wallet format. This format is required for Oracle Application Server. $ORACLE_HOME/Apache/Apache/bin/ssl2ossl
Points to Note:
* Even though capath, cafile, and chain are optional, at least one must be specified.
* All the certificates that are being converted must be in base64 format.
* If you are converting a self signed certificate, running ssl2ossl/osslconvert does not import the certificate as a Trusted Certificate. Therefore it is necessary to import the certificate as a Trusted Certificate in Wallet Manager after its converted, otherwise the Wallet will not work with Application Server.
usage:
$ ssl2ossl -cert /<path>/server.crt -key /<path>/private.key -cafile /<path>/rootca.crt -wallet /ssl/wallet -ssowallet yes
Enter wallet password:
Verifying password - Enter wallet password:
SUCCESS
This will create a ewallet.p12 file in /ssl/wallet

Problem installing SSL certificate for CPS

I work at a medium-sized University, and we have used
Contribute 3 with CPS1.11 for well over a year. Recently, however,
the Contribute clients began having difficulty logging in to CPS.
At first this was intermittent, but is now constant. Adobe support
suggested replacing the CPS self-signed SSL certificate with a
genuine one, because apparently the self-signed certificate is
causing communication delays and timeouts.
I have the certificate, and am trying to use keytool (see
http://java.sun.com/j2se/1.4.2/docs/tooldocs/windows/keytool.html)
to install it, but it is asking me for a keystore password, which I
don't know. Apparently the standard defaults are "changeit" or
"passphrase", but neither of these work.
As a test, I created a fresh install of CPS and attempted to
list the keys in the keystore, but again was asked for a keystore
password and the defaults did not work. Adobe support suggested I
ask here. Anybody have any experience installing a certificate for
CPS?

Are you sure that the certificate needs to be installed to all users? Can you provide more details about the certificate and its purposes?
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new:
SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Having problem getting installed root certificate to work

We have a recerse proxy set up with an SSL certificate singed by our local CA. We are trying to connect to this reverse proxy from iPad over 3G connection.
Initially, we received the error "Safari cannot open the page because it could not establish a secure connection to the server". Reading up on this, realized that we needed to install the CA root certificate as a trusted root on the device.
Got iPhone Configuration utility, set up a configuration profile for the sole purpose of installing the certificate, added the certificate through Credentials section, and assigned the profile to the device. I can see the certificate updated to the device through General>Profiles and can confirm that it IS the root certificate used to general the SSL certificate on the proxy.
Even after application to the iPad (tried on iPhone also), attempt to access our proxy server from the iOS device fails with the same error.
It is interesting to note, that on a personally owned iPad, instead of the error noted, I received a pop-up indicating the certificate was unknown, and I was presented with options to "Cancel, Details, Continue". Clicking on "Details", I was allowed to view the certificate properties, and ALSO had a button to "Accept". Hitting "Accept" installed the certificate as trusted, and I get through the proxy server just fine. Only problem now is that if I *want* to re-create the prompt, I have no way, as I've found no way to remove certificates from the iPad unless installed via configuration profile.
We've checked and double-checked, and the certificates all "line up" to the correct CA.
Any ideas where I night be going wrong?
Thanks!

New clue....
I only have the problem of not connecting to the proxy server if I'm using a 3G connection. If I turn on wi-fi, connect to an access point, the installed root certificates do their job, and I connect just fine.
Anyone know of potential problems with SSL certificates over 3G?

Cisco Network Setup Assistant Unable to install the certificate on Android KitKat

Greetings,
I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached.
Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
I have ran the application several times, it keeps returning to this same message.
After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated.

Greetings,
I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached.
Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
I have ran the application several times, it keeps returning to this same message.
After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated.

IPhone 4s and iOS 8 issues (only for Iphone 4s users)

I installed iOS 8 on the very release date and since that I encountered different issues:
I use to have more than one app opened - Mail, WhatsApp, Safari and Photos - and iOS sometimes crashes while I move from one App to another.
I encounter issues while I forward or rewind videos: It lacks of precision now.
The overall UI experience seems to be worsen: general sluggishness, for instance.
I had to solve this with some expedient in the accessibility section such as: reducing screen motion, reducing transparency to improve contrast. All this helps with the CPU usage but it don't solve much.
Battery draining.
Wow, this is a really important issue: battery on iPhone 4s now lasts very very few hours; its durability is really worsen... and please, also consider I'm not the kind of user who stays all the time on the phone.
Hope all these serious issues will be fixed in the next update, or at least with the 8.1.
BTW, if you Iphone 4s user are experiencing the same issues or other ones, please testify your experience here.
I'm sure Apple would be glad to know straight from the user base what's going on.

I updated to iOS 8.0.2 - some improvements in this release, folks:
The CPU manages better the multitude of opened apps and now I encounter less sluggishness;
Improved battery, or so it seems and...
... Overall UI improved
Still a lot to do, by the way. I can't wait for iOS 8.1.
Check out this interesting video: iPhone 4s - iOS 7.1.2 vs iOS 8.0.2

IPhone: Install user certificate programatically

Similar Messages

Maybe you are looking for