How can I install Java signing certificates on an unlocked Sony Ericsson Java Platform phone?

Posted by LoadWB
For a long time AT&T nee Cingular has locked me out of their MEdia (AT&T) Mall, and prevented me from running desirable apps by signing them with a "secret" certificate only available on their branded phones.

Well, thanks to a2uploader and the recent acquisition of a locked AT&T phone I have been able to snag these Preferred and Trusted Java signing root certificates. As well as the entire AT&T customization package, which gives me a good template to play with my own if I so desire. (As an aside, I can also now download from the AT&T Mall using a Firefox add-on which allows me to spoof a particular supported phone's User-Agent string.)

I digress. When I sent these certificates to my unlocked K850i it places them in the Trusted Cert store rather than the Java Cert store and the apps still have problems running and fail to install using the signed JAD. I have not tried it, but I assume my K790a will behave the same way.

Now, the XML which defines the AT&T customizations references the certificates as well as the proper store location for them. Is this my only way to force a cert into the Java store? This also leads into how can I install client certificates? (On a related note, I would love to see SE include email signing in future versions of Java Platform, but there are still plenty of bugs I would like to see fixed, first.)

Posted by LoadWB
I am now ready to upload my modified Customize.xml and two certificates. However, I have found that a2uploader will not allow me to put these files on the phone's filesystem, or at least it does not appear to be obvious how to do so.

I did some poking around, and I found a mention that the phone needs to be in "brown" (developer) mode, then I can use some utility to upload files to the phone's filesystem. Am I on the right track here?

Posted by LoadWB
No, stupid! RTFM, you can drag-and-drop files from Windows Explorer to a2uploader!

Sheesh!

Posted by LoadWB
I have been successful in getting the certificates installed on the unlocked phone which were on the locked phone, but I am still unable to install AT&T signed application jad files. *sigh* The work continues, but I am very pleased to be on my way. With a little more Google time, I may turn up more information on the Customize.xml. In particular, I would love to find a list of all of the customizable options.

Posted by LoadWB
4am breakthrough last night. Interestingly, after I installed the GeoTrust CA for UTI certificate to install Google Maps, other AT&T apps started working as well.

So, now I have found the missing piece of the puzzle, and I am pretty damn happy. Next I will play around with other customizations and pre-loaded configurations. Pre-configuring email accounts would be fantastic.

The basic process I followed:

1) Use a2uploader-v3 to copy a customized filesystem from a branded phone, as well as the uncustomized filesystem from my phone
2) Make changes as necessary to a copy of my downloaded uncustomized filesystem
3) Use a2uploader-v3 to upload changes, including additional files as necessary (certificates, themes, etc.) to my phone
4) Perform Master Reset on my phone

It really is that easy. Love it!