Matteo Corti — Nokia E90 Communicator: VPN Client

Back to the hints index

At the moment (October 2007) there is no VPN client available for Symbian S60 3rd Edition devices (not even the mVPN from Nokia).

This is an official answer from Nokia Business Support in Germany:

              Sehr geehrter Herr Corti,
 
              bezugnehmend auf Ihren Anruf  möchten wir uns für Ihre Zeit und Ihr
              Interesse bedanken, das Sie an Lösungen für IP-Sicherheit und Mobilität von
              Nokia gezeigt haben.
 
              Nokia verbindet seine Expertise im Bereich Business Mobiltelefone, sicherer
              Netzwerkzugang und mobile Anwendungen für die Entwicklung vollständig
              integrierter mobiler Geschäftslösungen. - Wir bieten optimierte Mobilität
              und hohes Integrationspotential.
 
              Wie in unserem Telefonat bereits erwähnt, ist uns leider nicht bekannt wann
              ein VPN Client für das E 90 zur Verfügung steht. 
 
 
              Mit freundlichen Grüßen

              I*** B*** (name removed)
              Nokia Enterprise Solutions
              
              email: ipsecurity.emea@nokia.com
              Phone: +49 (0)69 22 22 20 368
    
              www.nokiaforbusiness.com

            

              Dear Mr. Corti,

              regarding your call, we would like to thank you for your time and your
              interest for Nokia IP Security and Mobility solutions.

              [...]

              As already stated on the phone, it is sadly not know when a VPN client for the E90 will be available.

              Best regards,

              [...]
            

The workaround: N80 VPN client

Policy files

You will need a VPN policy file and you will have to install it on your phone.

The policy

• Download the policy files from pipin.de:
  • VPN-policy-preshared-Cisco.pin
  • VPN-policy-preshared-Cisco.pkg
• Edit or get a pol file for your network (download VPN-policy-preshared-Cisco.pol from http://www.id.ethz.ch/support/Tipps/vpn/symbian_vpn_config.zip for ETHZ).

Signatures

Each application which is installed on a S60v3 phone needs to be digitally signed.

You can:

• Get a developer certificate and sign you policy
• Patch your phone to accept anything

Self signing

• Get a certificate to be able to sign SIS packages:
  • Get an account on symbiansigned.com
  • Go to My Symbian Signed/Developer Certificates and download the DevCertRequest tool (Windows only)
  • Type *#06# on your phone and get the IMEI
  • Open the DevCertRequest application and generate a certificate request by following the instructions
  • On Symbian Signed go to My Symbian Signed/Developer Certificates/Request and generate a certificate from the certificate request
• Download the S60 SDK from Nokia (you will have to register and get an account)
• Move the policy files into the C:\Symbian\9.1\S60_3rd\Epoc32\tools\ folder.
• Using the DOS command line tool create an installatio package for the policy and sign it::
  • cd c:\Symbian\9.1\S60_3rd\Epoc32\tools
  • Generate the SIS package: makesis VPN-policy-preshared-Cisco.pkg
  • Sign the SIS package: signsis VPN-policy-preshared-Cisco.SIS VPN-policy-preshared-Cisco.SIS yourcertificate.cer yourkey.key yourkeypassword
• Install the signed VPN-policy-preshared-Cisco.SIS file on your device

Patching

Sean Bemont sent me this interesting link on how to configure your phone to automatically sign installed applications:

http://www.ipmart-forum.com/showthread.php?t=250439

I didn't have time to test it so I'll leave the task to you :-)

Using VPN