Join Now

A software engineer living in Vancouver, Canada - http://www.antonypranata.com/

Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 16 June, 2006 22:38

If you have been reading discussions at Forum Nokia Developer Discussion Board recently, you may notice there are many questions about signing in S60 3rd Edition. It seems the new security feature in Symbian 9 has led to frustration for some developers.

I would like to share what kind of error messages I have seen when installing signed/unsigned application in S60 3rd Edition phones. There is a hint that explains what may cause a particular message. I may not be able to cover all error messages because I may not have seen all of them.

Message: Certificate error. Contact the application supplier.

Certificate error. Contact the application supplier.

Hint: You may have tried installing unsigned application. Note that signing is mandatory S60 3rd Edition. You can use self-signed certificate or developer certificate from Symbian Signed to sign your application.

Message: Unable to install. Constrained by the certificate.

Unable to install. Constrained by the certificate.

Hint: This message pops up when you attempt to install developer certificate in the unsupported device. The developer certificate from Symbian Signed can only be used in a limited number of devices. Remember that you have to send your IMEIs to Symbian Signed when requesting certificate. You cannot use the certificate in other devices that is not in your IMEIs list.

Message: Required application access not granted

Required application access not granted 

Hint: Check that your certificate can be used to sign all capabilities needed by your application. For example, if you use self-signed certificate, you can only sign basic set capabilities, i.e. NetworkServices, ReadUserData, WriteUserData, LocalServices and UserEnvironment. If your application requires one of the extended capabilities, for example SwEvent, you cannot sign it with self-signed certificate. In this case, apply for developer certificates from Symbian Signed.

Message: Unable to install a protected application from an untrusted supplier

Unable to install a protected application from an untrusted supplier

Hint: If you use self-signed certificate, make sure that your application uses unprotected UID, i.e. 0xA0000000 - 0xAFFFFFFF. If you use protected UID (0x20000000 - 0x2FFFFFFF) or legacy UID (0x10000000 - 0x1FFFFFFF), you will get this message.

Message: Unable to install

Unable to install

Hint: This message may come up when your installation file (.sis/.sisx) copies files to other application's private folder, i.e. privateuid. Note that Symbian 9 introduces data caging concept, it means you don't have access to other application's private folder.

S60, Symbian C++, Testing | Next | Comments (42) | Trackbacks (0)

Comments

1 2 3  Next»

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

samposuv | 20/06/2006, 18:37

samposuv Antony,

This is very useful and relevant information, thank you. It's a pity that these error messages are still on the same level as error messages were in the 1980s! A lot more could be done very easily at the operating system level (if they just read Alan Cooper's book). This would help development and save everyone's time.

In the beginning these cryptic minimalistic error messages do cause a lot of confusion. Everything seems correct and your phone just keeps telling you that you are untrusted. Or that he is unable to install. With no further hints whatsoever. It could easily say, for instance: "You are trying to install a self-signed application but your UID is on the protected range. Please change your UID to the unprotected range and try again."

Two more hints for developers:

1. During development sometimes it helps to go the App.Manager and uninstall a previously installed (specially if the installation has failed which often creates strange dirty remnants) version of your application. It may be the cause why your newer version can not be installed. I don't know why this happens, but we have seen this on a number of occasions.

2. Sometimes uninstalling is not enough. If all else fails, a very useful short code is *#7370#. It resets the phone to factory settings and some 30 seconds later you are ready to install any test version again. If the error message was indeed caused by a previous version you will not get an error message any more. At least for one round of testing...

By the way, the 'lock code' for doing the factory reset operation *#7370# is usually 12345.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

mgroeber9110 | 27/06/2006, 16:05

Antony,

thanks for this very useful post. I would like to nominate it for inclusion in the next version of the SDK documentation. :-)

I have recently come across two more causes for the last message ("Unable to install"). This seems to be a general "validation" error that can be triggered by various consistency checks on the files being installed. In particular, it can also mean:

- The image of an E32 binary is corrupt, for example as a result of modifying the header without correcting the checksum

- The UID2 of an E32 binary is invalid, for example zero - I suspect that this must be one of a list of well-known UIDs, such as KUidApp

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

mikkoiv | 14/07/2006, 16:23

Thank you Anthony for this great post. It has helped me also.

I encountered one more reason to the "Unable to install"-error. If you have non-GUI exe, the SID has to be explicitly defined, at least when you are using Carbide.c++.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

SlonUA | 07/11/2006, 15:07

Device: Nokia E50-1
OS: Symbian 3rd ED futured pack 1 (aka v9.1)

During instaling JAR App (J2ME) after ~80% i had a error "Unable To Install" !!!

The problem is ... that Installer have a bug, i think so !!! Than U install JAR from Internet by JAD and connection is lost, installation is interapted AND U are in trouble !!!
After this U can't install any more JAR and can't see in APP.Manager Ur allready installed JARs (few still are)

Do u know this !?! Do U know which files are responsyble for that !?!
Any ideas =) ???

One more thing .. i found file Z:Systemswipolicy.ini

AllowUnsigned = false ***IT'S MY NOTES - THERE I MUST CHANGED IT. IN APP.Manager - INSTALL ALL IS SET TO TRUE - END OF MINE***
MandatePolicies = false
MandateCodeSigningExtension = false
Oid = 1.2.3.4.5.6
Oid = 2.3.4.5.6.7
DRMEnabled = true
DRMIntent = 3
OcspMandatory = false
OcspEnabled = true
AllowGrantUserCapabilities = true
AllowOrphanedOverwrite = true
UserCapabilities = NetworkServices LocalServices ReadUserData WriteUserData UserEnvironment
AllowPackagePropagate = true
SISCompatibleIfNoTargetDevices = false
RunWaitTimeoutSeconds = 600
AllowRunOnInstallUninstall = false
DeletePreinstalledFilesOnUninstall = true

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

symbee | 21/07/2006, 13:22

While installing my application, my phone device displays "Installer Feature Not Supported!"

In this blog,there is no specification about the perticular.

I have self-signed my application and changed my UID accordingly

Kindly help

Symbee

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

chall3ng3r | 02/04/2007, 11:27

chall3ng3r "Installer Feature Not Supported!" error is shown when you compile your project using latest feature pack, and running the app on earlier version.

i had similar problem when i used 9.2 sdk (FP1) and was trying the app on N73, which is non FP1 device. i used the 9.1 MR sdk, and all worked fine.

also, if you're using 9.1 sdk, try cleaning the project first. so all files are re-generated.

hope it helps,

// chall3ng3r //

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

anorland | 05/08/2006, 00:55

About "Unable to install": This can be caused by an invalid/wrong SECUREID, which in turn
results in exactly the error case you describe (access to other application's private folder).
Just make sure UID3==SECUREID.

-Anders

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

winfoware | 18/08/2006, 17:42

Antony,

Really very useful for all the 3rd edition developers. Thanks for the info. Keep posting such articals.
We have recently come across one more causes for the last message ("Unable to install").

when copying other than dll, exe and bbp files in sysbin on device (ex:mbm files)

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

alsaleem | 29/08/2006, 06:23

I have the following error after obtaining a cer file from symbiansigned site (all capabilities were selected) :
"unable to execute file for security reason"
My application uses gprs, has local data files

What could be the problem?

Thanks

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

bnvaikos | 30/11/2006, 10:40

Hello,
I m getting error"unable to execute file for security reason" at startup

My application uses gprs,dealing with contacts DB & i have added all available capabilities with developer certificat.
if anybody knows solution do tell me.

thanks

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

bnvaikos | 04/12/2006, 12:50

I am facing same problem. Could anybody help me out?

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

davidmaxwaterman | 19/09/2006, 21:58

I'm finding this error, after selecting the memory card :

"Unable to install. Component is built-in."

I'm not sure of the cause, yet.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

sainedi | 02/11/2006, 00:07

i have verisign class 3 signed application. but while installing on some of the nokia E61 devices, i am getting "Certificate error. Contact the application supplier" . it was installed ok on other nokia E61, N80 & N91 devices. Got problem with few E61 devices.

thanks

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 02/11/2006, 18:01

antonypr This is really weird. It seems that some of you devices cannot recognize your certificate.

I don't thinks this is the case, but have you checked that your option in E61 allow installation of all files? Check this page out, http://www.s60tips.com/2006/05/25/installing-self-signed-applications-in-s60-3rd-edition/.

Another possibility that comes out in my mind is that your E61 comes from different operator and they have different root certificates. However, even if this is the case, your application should be treated as self-signed application.

Sorry, I really have no idea.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

thedawn1977 | 30/11/2006, 18:44

You are trying to install a binary with a name which already exist on the Z drive.
As you know, Symbian 9 protection mechanism prevents eclipsing of DLLs and EXEs.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 01/12/2006, 17:51

antonypr Shahar, thanks for the clarification. You're right, this may cause a problem too in Symbian 9.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

rathodavinash | 02/11/2006, 15:14

Great Post,

I have a problem.

I tried to self sign a simple helloworldbasic application form S60Ex folder (SDK).

I have compiled it using "abld build gcce urel" worked

then i used "makesis helloworldbasic.pkg hello.sis" worked

then i tried

makekeys -cert -password avinash -len 2048 -dname "CN=Avi EM=avithe1@gmail.com" mykey.key mycert.cer

worked

but when i use

signsis hello.sis mycert.cer mykey.key it gives

encryption error, cannot read mykey.key.

What am i doing wrong???

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 02/11/2006, 17:57

antonypr You need so specify the output file name. So, the command should look like this:

signsis hello.sis hello.sisx mycert.cert mykey.key

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

SlonUA | 07/11/2006, 14:53

Device: Nokia E50-1
OS: Symbian 3rd ED futured pack 1 (aka v9.1)

During instaling JAR App (J2ME) after ~80% i had a error "Unable To Install" !!!

The problem is ... that Installer have a bug, i think so !!! Than U install JAR from Internet by JAD and connection is lost, installation is interapted AND U are in trouble !!!
After this U can't install any more JAR and can't see in APP.Manager Ur allready installed JARs (few still are)

Do u know this !?! Do U know which files are responsyble for that !?!
Any ideas =) ???

One more thing .. i found file Z:Systemswipolicy.ini

AllowUnsigned = false ***IT'S MY NOTES - THERE I MUST CHANGED IT. IN APP.Manager - INSTALL ALL IS SET TO TRUE - END OF MINE***
MandatePolicies = false
MandateCodeSigningExtension = false
Oid = 1.2.3.4.5.6
Oid = 2.3.4.5.6.7
DRMEnabled = true
DRMIntent = 3
OcspMandatory = false
OcspEnabled = true
AllowGrantUserCapabilities = true
AllowOrphanedOverwrite = true
UserCapabilities = NetworkServices LocalServices ReadUserData WriteUserData UserEnvironment
AllowPackagePropagate = true
SISCompatibleIfNoTargetDevices = false
RunWaitTimeoutSeconds = 600
AllowRunOnInstallUninstall = false
DeletePreinstalledFilesOnUninstall = true

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

stodolni | 14/10/2007, 12:58

Hi. I have a Nokia N80, and it works well, but yesterday I had a problem installing an application. I lost the connection at 80% of downloading, and the application manager was inable to install the item. But the real problem is that I've tried to remove the .sis file from the list, but does not exist the option "remove" in the option list of the menu for that file. The name of that file is a0002d32.sis and it's big 1kb. It's located in the mmc. Anyway, the phone works fine, but every time I switch on it, starts installing that stupid application, without good results and a message appears in the display tells me that a not secure applications is in the mmc, and I must check it in the application manager. What I have to do to erase it from my phone..?
Thanks in advance to everybody. L. Mura (znojmo@tim.it)

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 14/10/2007, 19:49

antonypr You may try the trick described in my other blog, http://www.s60tips.com/2007/01/03/deleting-stuck-installer-files-in-s60-3rd-edition/
Basically, you have to delete the .sis file from the MMC using Mass Storage mode. It is a bug in S60 3rd devices.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

bm | 13/11/2006, 07:21

Antony

Thanks for your great post... I faced "unable to install" error and solved it.Now everyting is working fine =) . Now i am facing another problem after install my sis file in App.Manager i got two SIS files one is install another is uninstall like "test installed" and "test uninstalled". my application is working fine but why two sis file i don't understand. Please help me .......

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 13/11/2006, 08:59

antonypr The "uninstalled" one is just some kind like cache (that's my understanding). You can remove it safely. I also notice this happens several times, but don't realy know what causes it.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 30/11/2006, 17:54

antonypr I just noticed recently this may happen for example if you transfer .sis files to your phone and then you cancel the installation in the middle. The uninstalled .sis file will be available on the phone. Not sure if this is by design or bug though.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

stellion | 08/12/2006, 03:38

Hello

I'm a real beginner when it comes to Symbian...but I find this article really helpful!

I'm playing around with the HelloWorld application that came with the SDK...I keep on getting the ("Unable to install a protected application from an untrusted supplier") message though :|

My UID is set to: 0xA0000000

If anyone could help, I'd be grateful, If my N80 tells me one more time I'm untrusted, I'm going to go crazy...


Another thing I wanted to ask, is Carbide.C++ (Express 1.1) bad? or is it just Symbian?
Is it easier to develop for Symbian in e.g. VS?

thank you in advance for all your help!

Casper

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 08/12/2006, 10:55

antonypr How about the default UID from Hello World application (0xA000017F)? Does it work?

About development tool, I would recommend Carbide.c++. Why? Because it seems that Nokia is trying to push Carbide.c++ for future Symbian OS development. I don't think Carbide.vs will be developed further.

Antony

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

stellion | 08/12/2006, 21:42

Unfortunately, no results...I've tried both on my E61 and N80, same symptoms...therefore it _must_ be something with the .pkg (or are there some settings in Carbide.C++ that I might be unaware of, and that are so obvious that noone even mentiones them?).

My .pkg looks as follows:

;Vendor related information
%{"VednorX"}

; standard SIS file header
#{"HelloWorldConsoleApplication"},(0xA000017F),1,70,9
;Supports Series 60 (all versions)
[0x101F7961], 0, 0, 0, {"Series60ProductID"}
;
"C:/Symbian/9.2/S60_3rd_FP1_3/epoc32/release/GCCE/UREL/HelloWorld.exe"-
"!:systemappsHelloWorldHelloWorld.exe"

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 12/12/2006, 23:14

antonypr I put a link to Forum Nokia Discussion that is related to this problem so that everybody can track it too,

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 14/12/2006, 23:48

antonypr Ops sorry... forgot to put a link, http://discussion.forum.nokia.com/forum/showthread.php?t=79269

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

samuel.weibel@ascom.ch | 18/12/2006, 10:46

I see two problems in your .pkg:
1. You are not allowed to install to !:systemapps... on 3rd edition handsets but to !:sysbin.
2. You are using 3rd edition FP1 but neither E61 nor N80 are FP1 but simply 3rd edition. This may not be a problem, but it can...

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

cartman_ume | 02/01/2007, 16:50

Hi,

I am getting this error "Unable to install. Constrained by the certificate.", above you have the hint that the IMEI is not in the certificate, but I have checked this twice and still get this error, what else can it be?
Could it be that the device does not have the correct root certificate for the developer certificate?

/Erik

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

acadiano | 08/02/2007, 08:19

THANKS MAN FOR THE TOPIC BUT I HAVE A PROPLEM OTHER THAT THOSE AND IF U CAN PLEASE HELP ME

I HAVE THE E50 AND I HAVE FORMATED IT NOW WHEN I WANT TO INSTALL AN APPLICATION
IT GIVES ME A MESSEGE SAYS : CERTIFICAT MAY NOT BE VALID ,IS EXPIRED OR PHONS DATE SETTING MAY BE INCORECCT

WHAT I HAVE TO DO PLZ HELP

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 08/02/2007, 08:26

antonypr Normally that happens if your date on the phone is incorrect. Sometimes if happens if your certificate has future time (compared to your phone's time). Just check your certificate date and your phone's date.

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

edc088 | 26/07/2007, 18:08

Hi,

We've developed an application for commercial use which has received the Nokia and Symbian signature but are experiencing errors when installing it over the air on certain devices. Unfortunately the error message isnt listed above but I'm hoping someone can help me.

Upon installing via Bluetooth and email everything works as expected and perfectly. But when we click on a link to our server where the application is held the download starts up to about 90% then an error message appears "Installation of filename.sis not supported" and the browser goes white and the download stops. All devices claim not to support the application, most refuse the application and a few ignore it and install the app anyway.

Does anyone have any ideas?

Many thanks

Ed

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

antonypr | 26/07/2007, 18:47

antonypr There are two things you may want to check.

1) Check whether the URL really downloads the version for S60 3rd Edition app. If it points to S60 2nd Edition, then you may get that message.

2) Check that you have added the right MIME type to your server. Check this discussion, http://discussion.forum.nokia.com/forum/showthread.php?t=76171

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

cezaryk | 08/08/2007, 13:28

img1 Certificate error. Contact the application supplier.
it's about self-signed certificate too.

enter
menu / tools / application manager / options / settings / software installation

switch default option <signed only> to <all>

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

litenbubbly | 21/10/2007, 05:18

what if after restoring the factory setting, you still get the "unable to install" message?! what should you do?? and if the files are installed at the other application's private folder... how can i remove it?

Signing Problem

ss7guru | 29/10/2007, 18:02

When I run the signsis I get "cannot read WorldCert.cer". The cert was generated with makekeys and the .cer and .key are in the directory with the .sis I want signed.

Any clues?

Signing Problem

ss7guru | 29/10/2007, 19:13

I found my own solution. I have 3 SDKs installed. If you have that, you must move the .pkg to the EPOC32tools directory of the SKD you want to use and run everything from there. Otherwise the versions do not match and createsis and signsis cannot open the cert.

Time

William | 01/11/2007, 14:09

Often with devcerts you got Unable to install if time on your device in wrong.

security warning

Saritha Reddy | 19/03/2008, 07:43

Hi, I m trying to instal a simple hello world application on E61i, it is throwing message "Unable to install a protected application from an untrusted supplier" I m having default UID of helloworld i.e 0xA000017F.
Help me how to clear this error.

BR,
Saritha

Re: Interpreting Platform Security Error Messages in S60 3rd Edition

bytes | 27/03/2008, 17:04

Antony & all,

I have the same problem.

====================================
I am getting this error "Unable to install. Constrained by the certificate.", above you have the hint that the IMEI is not in the certificate, but I have checked this twice and still get this error, what else can it be?
================================

But strangely its installed on some devices and not on some devices.
And those IMEIs are newly added. Its woking on old IMEIs.
We got Publisher ID from Trust Centre.

I am using the following capabilities.

NETWORKSERVICES
READUSERDATA
WRITEUSERDATA
NETWORKCONTROL
WRITEDEVICEDATA
READDEVICEDATA
USERENVIRONMENT
MULTIMEDIADD
SwEvent

I am using latest Symbian Development certificate request Wizard.

thanks for yout time

You must login to post comments. Login
1 2 3  Next»
 
 
Powered by LifeType 
     
     RDF Facets:
     
     
     qfnZtopicQUqfnTopicZcppQ
     qfnZtopicQUqfnTopicZseriesE5f60Q
     qfnZtopicQUqfnTopicZtestingQ
     qfnZtypeQUqfnTypeZBlogContentQ
     qfnZtypeQUqfnTypeZBlogE45ntryQ
     qfnZtypeQUqfnTypeZCommunityContentQ
     qfnZtypeQUqfnTypeZWebpageQ
     qmarsZlanguageQUxhttpE3aE2fE2fswE2enokiaE2ecomE2flanguageE2d1E2fenX