Analysis, tutorials and tips for your Nokia and Samsung Phones

How to: Sign an S60 application with GenialSiS

Published by Steve Litchfield at 21:58 GMT, January 13th 2008

Andrew Galpin shows how to use a free tool to sign 'unsigned' applications, typically low level utilities that require special handling because they need to do powerful things under your smartphone's hood.

Editor's note:

This is one of several methods that can be used to 'sign' an unsigned utility for personal use on a single device. Please note that a more official method is coming soon from Symbian, after which things should be clearer and easier. Watch this space! 


 

What you will need:

  • GenialSiS – available from the authors site here

  • A Symbian Signed Account – which you can get from here

  • A spare 10 – 20 minutes


Step 1

ScreenshotFirst of all we need to generate a .csr file to upload to Symbian Signed, to do this I am going to use the program ‘GenialSiS’, available from the link at the top.

Click on the program's .exe file, and this will open up the main window.


Screenshot

 

Firstly you will need to type your phones IMEI number, as shown in the example above. Then you need to click the ‘Generate!’ button, and wait a couple of minutes till you get the popup up saying ‘Completed’:

Screenshot

 

TIP: Low end computers can sometimes freeze while doing this step (above), if this happens, wait a couple of minutes till the process is complete, then it will be fine.

You will now find the program has generated 4 files which are now located in the program's folder:

Screenshot

 

The file we need for the next step is the one named ‘genialcert.csr’ - this is the file used to generate our certificate to sign the application.


Step 2

The next step involves uploading our .csr file to Symbian Signed, in order to generate the certificate we need for the final step.

Load up the Symbian Signed web site and login.

ScreenshotClick on the ‘My Symbian Signed’ tab.

 

Screenshot

Then on the left menu click on 'Open Signed', and then again on 'Request'. This will load the page we need. Scroll down to the bottom of the page and enter the security code seen in the picture: 

Screenshot

Then click on ‘Browse’ and select the ‘genialcert.csr’ file that we generated in the previous step. The file would have been saved to the same folder as the program. Then, when both steps have been completed, you can click on the ‘Send’ button and the red 'loading' bar will appear.

You will then be presented with the following screen to download your new certificate. If you get an error, go back and try the previous steps again.

Screenshot


You will need to save the certificate to the program folder.

 

Step 3

Now you have your certificate, we are ready to do some signing. For the next step you must ensure all the files we have been working with are in the program’s folder, yours should look similar to the one below:

Screenshot

Now to sign our application we need to go back to the main console in GenialSiS, this time we need to click on '(3) Sign SIS/SISX'. This should bring up the window shown below.

Screenshot

Now click the ‘open’ button on the right, and select the application we want to sign. In this case I am using Samir’s RotateMe, version 2.0 beta 5.

Screenshot

Double click on the file you wish to sign, or single click on the file and click the open button.

The file will then appear in the white box, as shown below:


Screenshot

Next select the Sign! Button to begin the signing process.

TIP: Low end computers can sometimes freeze while doing this step (above), if this happens, wait a couple of minutes till the process is complete, then it will be fine.


After a couple of minutes you will get a popup saying ‘The files have been successfully signed!’

 

Screenshot

Your new signed file can now been found in the same location as your original file:


Screenshot

Congratulations! You have now successfully signed your first file; you can now install it on your phone by double clicking the file, after connecting your device, and clicking through the prompts.


Troubleshooting

Q: There’s an error when I try and upload the .csr file?

Double check the confirmation key, you will have to enter a new one each time, make sure you have put the letters in upper case (ABC) rather than lower case (abc), also the letters go from A – F, and the numbers from 1-9, don’t mistake an S for an 8, they can look quite alike!

 

Q: Why not use the inbuilt certificate uploader in Genialsis?

I find that the built-in uploader in GenialSiS is a lot slower than doing it manually, so to decrease the time it takes to sign, use the Symbian Signed site.


Q: I get the error ‘the KEY file cannot be found in the GenialSiS folder’

Ensure that the files were generated into the GenialSiS folder, if you sign more than one set of files at a time, the program can occasionally create the files in another location. If this happens, just run a search for the .csr file and the rest of the files should be with it.

Andrew Galpin, 13 Jan 2008


Categories: How To
Platforms: S60 3rd Edition

Feature Discussion

zippiracer
an anyone tell how to fix expeired certificate errror
Unregistered
change the date on ur fone to 2007/2006, and it shud work, just dont 4get 2 change after
The Kipper
Many thanks. all unsigned apps are now under my power lol!!!!
tonyn
Quote:
Originally Posted by slitchfield View Post
AAS forum member Andrew Galpin answers one of the big FAQs of the last few months - how do you 'sign' an unsigned utility for use on your smartphone? Thanks, Andrew, clearly done, but all readers should both note that this sort of thing isn't for computing beginners and that a more elegant solution is just around the corner (see the header note).
Developer Certificates are intended for developers to test their applications.

Users who abuse Developer Certificates to sign applications for their own phones are taking a risk. As they have not been tested by Symbian Signed there is no assurance that the program will not e.g. spend your money on data such as GPRS connections or MMS messages, corrupt your phone settings or interfere with phone calls.

ttfn,
Tony
slitchfield
Yes, which is why I put in the warning. Signing apps is NOT for beginners. Anyone who does this sort of thing is generally clued up enough to notice malware-type behaviour and give the culprit a speedy exit!
pennas
Quote:
Originally Posted by tonyn View Post
Developer Certificates are intended for developers to test their applications.

Users who abuse Developer Certificates to sign applications for their own phones are taking a risk. As they have not been tested by Symbian Signed there is no assurance that the program will not e.g. spend your money on data such as GPRS connections or MMS messages, corrupt your phone settings or interfere with phone calls.

ttfn,
Tony
Abuse

:rolleyes:
davidmaxwaterma
Quote:
Originally Posted by slitchfield View Post
Yes, which is why I put in the warning. Signing apps is NOT for beginners. Anyone who does this sort of thing is generally clued up enough to notice malware-type behaviour and give the culprit a speedy exit!
It's not just about being competent. It's about making life even more difficult for the people who are developing the real apps.

The whole of the symbian signed web site was down not so long ago exactly because of this - end users deciding to sign their own applications. The result of this is that an already difficult to use system was made even more difficult, and I suspect developers are put off by this and decide to ignore Symbian development.

Of course, there's always the question about where to draw the line between a developer and an end user....
Sergey Zak
Maybe some of the developers here could help me out?
I have had a carelessness to buy a game called "Virtual Pool" by Celeris, from Handango. The file is here http://www.celeris.com/games/VPMobile/downVPMUIQ
but it is signed with an expired certificate (at least the UIQ2 version for P910i that I need). I have the serial key but the game would not install! The irony here is that the trial game is not signed and it installed fine!
Both the Handango and the Celeris support have not been able to help me, since Jan 8. :mad: They don't even seem to understand what certificates I talk about...
So I need just what the zippiracer asks for - and I figure to solve this I would need to strip the signature from the vpfull.sis file.
I have tried many tools already but they all gave me some sort of an error meaning that my vpfull.sis file is not OK. But I know it's OK since I got it from several sources, and the installer at least sees the expired signature.
Finally I somehow got an unsigned file which is 2K less in size (it is Symbian 7 so some new SDK tools work very weird), copied it over to the phone but
Now it says that the file is not compatible with my phone!
Have I stripped some needed header info?
Does anybody have a proper (old) SDK or expertise to help me? (Tony?)
Last thing I tried was SISware which had a nice UI but it refused to work with "pre-Symbian 9" files...
tonyn
Unfortunately the company's that issue certificates issue them for a limited time.
I guess this is like the message in a web browser saying that s site's certificate is expired. :frown:

My only suggestion at this point is to try changing the date on your phone to a year or more earlier before installing. Afterwards you can change the date forwards again. :cool:

I will look into this.

Regards,
Tony
Unregistered
I am unable to upload the CSR file due to missing publisher ID. does anyone knows what i need to do in order to proceed?
Unregistered
WHEN I CLICK OPEN SIGNED > REQUEST, AN ORANGE BOX IS SHOWN GIVING THESE REASONS:

Your request has failed. Reason:
- Developer Certificates will be ENABLED for users who have a Publisher ID ONLY. (during GMT office hours)
- ONLY if you used a Publisher ID to create a .csr file with the DevCertCreate tool will you be able to use Open Signed Offline to create a Developer Certificate.
- Developer Certificates are currently DISABLED for users without a Publisher ID. Users who DO NOT have a Publisher ID CANNOT request Developer Certificates or use Open Signed Offline.
- Open Signed Online and Offline for users without a Publisher ID will NOT be available temporarily, an update will be provided during Week beginning 25th Feb
- If you have recently obtained a Publisher ID and are unable to create a Developer Certificate using Open Signed Offline please request support through the Symbian Signed forum on the Symbian Developer Network

PLEASE EMAIL ME SOME HELP! I AM DESPERATE TO SIGN SOME APPLICATIONS :(

gianazz(at)gmail(dot)com

Thanks
Unregistered
i got same problem with "orange box"
i been trying to sort out apps from http://www.bysamir.fr/

please help!!
Unregistered
Quote:
Originally Posted by Unregistered View Post
WHEN I CLICK OPEN SIGNED > REQUEST, AN ORANGE BOX IS SHOWN GIVING THESE REASONS:

Your request has failed. Reason:
- Developer Certificates will be ENABLED for users who have a Publisher ID ONLY. (during GMT office hours)
- ONLY if you used a Publisher ID to create a .csr file with the DevCertCreate tool will you be able to use Open Signed Offline to create a Developer Certificate.
- Developer Certificates are currently DISABLED for users without a Publisher ID. Users who DO NOT have a Publisher ID CANNOT request Developer Certificates or use Open Signed Offline.
- Open Signed Online and Offline for users without a Publisher ID will NOT be available temporarily, an update will be provided during Week beginning 25th Feb
- If you have recently obtained a Publisher ID and are unable to create a Developer Certificate using Open Signed Offline please request support through the Symbian Signed forum on the Symbian Developer Network

PLEASE EMAIL ME SOME HELP! I AM DESPERATE TO SIGN SOME APPLICATIONS :(

gianazz(at)gmail(dot)com

Thanks

i have the same problem too.. anyone have the solution for it? is the webby down thus result in this kinda error?
standbyme
Quote:
Originally Posted by Unregistered View Post
WHEN I CLICK OPEN SIGNED > REQUEST, AN ORANGE BOX IS SHOWN GIVING THESE REASONS:

Your request has failed. Reason:
- Developer Certificates will be ENABLED for users who have a Publisher ID ONLY. (during GMT office hours)
- ONLY if you used a Publisher ID to create a .csr file with the DevCertCreate tool will you be able to use Open Signed Offline to create a Developer Certificate.
- Developer Certificates are currently DISABLED for users without a Publisher ID. Users who DO NOT have a Publisher ID CANNOT request Developer Certificates or use Open Signed Offline.
- Open Signed Online and Offline for users without a Publisher ID will NOT be available temporarily, an update will be provided during Week beginning 25th Feb
- If you have recently obtained a Publisher ID and are unable to create a Developer Certificate using Open Signed Offline please request support through the Symbian Signed forum on the Symbian Developer Network

PLEASE EMAIL ME SOME HELP! I AM DESPERATE TO SIGN SOME APPLICATIONS :(

gianazz(at)gmail(dot)com

Thanks

hi, i face this error too when i click open signed/request... anyone can help?
tonyn
Quote:
Originally Posted by Unregistered View Post
i have the same problem too.. anyone have the solution for it? is the webby down thus result in this kinda error?
Home developers can sign their applications with the new Open Signed Online.

Commercial developers are probably best off getting a Publisher Id so that they can generate Developer Certificates for testing.

There is an FAQ on this here https://developer.symbian.com/forum/ann.jspa?annID=46

ttfn,
Tony
davidmaxwaterma
Quote:
Originally Posted by tonyn View Post
Home developers can sign their applications with the new Open Signed Online.

Commercial developers are probably best off getting a Publisher Id so that they can generate Developer Certificates for testing.

There is an FAQ on this here https://developer.symbian.com/forum/ann.jspa?annID=46

ttfn,
Tony
...and end-users should not sign their own apps. Instead, you should pester the developer of the relevant application to get it signed. From the FAQ you reference :

Quote:
Symbian Signed is provided for development and testing purposes only. The policy of what an end-user can install on their phone, without Symbian Signed, is determined by your device manufacturer, via the concept of “User-Grantable Capabilities” configured by the manufacturer on shipment.

A small number of developers are forcing end-users to go through a process intended for developers only.
and there's more :

Quote:
Contact your freeware developer (especially if they are accepting money) and request him/her to be responsible and release the application appropriately as most other developers have done; i.e. Express Sign the applications to assure end users that the application comes from a trusted source and meets the recommended minimum quality level as detailed in the Symbian Signed Test Criteria.
Unregistered
symbian signed does not accept public emails like yahoo and gmail.
what should i do?
tonyn
Quote:
Originally Posted by Unregistered View Post
symbian signed does not accept public emails like yahoo and gmail.
what should i do?
The rules change from time to time, so I am not clear whether you are trying to use Open Signed Online or register as a user?

What do you want to sign? Applications should be signed by the developer rather than the user.
Writers of most Freeware (that needs signing) will probably get their applications signed soon.

Tony
digitalranger
Quote:
Originally Posted by tonyn View Post
The rules change from time to time, so I am not clear whether you are trying to use Open Signed Online or register as a user?

What do you want to sign? Applications should be signed by the developer rather than the user.
Writers of most Freeware (that needs signing) will probably get their applications signed soon.

Tony
Dear Tony,
As a new Symbian user I would just like to say that this certificate expiry system is notably marring my enjoyment of the platform. One of the reasons I bought into Symbian for was 3rd party applications.

I hope Nokia can reconsider this system, because as it is stands, from an end-user point of view, it is simply a reason not to use the platform.

Content in this forum is demonstrating the amount of dissatisfaction that the system is causing. Particularly because Nokia have given an option to switch this system off, that doesn't work!.

Yours frustrated and dissatisfied,
David.
Unregistered
Hi..

I tried to follow the process but first of all it doesnot accept public mail domains like gmail, hotmail etc.

Second, will it be able to sign a cracked application?

Rgds

18 Comments / Post New Comment

Copyright Notes || Contact Us || Privacy Policy