Friday 28 October 2011

Installing *.cer & *.pfx certificates on AnDROID


I know, you might be thinking how did I come up with this??? Ah, nothing specific just read various documents about Android!!

And don’t be worried about installing a Security & Personal certificate, that’s easy like renaming a file hehehe…

Before starting about installation part, let me explain you why you are not able to install cer & pfx… It is not supported with that extension, that’s all..!!!

“Okay, so what should I be doing” is your question right?? Well here its goes, the secret: p

Android supports DER-encoded X.509 certificates, saved in files with a .crt file extension (if your certificate file has a .cer, .der, or other extension, you must change it to .crt or you won’t be able to install it).

Android also supports X.509 certificates saved in PKCS#12 key store files with a .p12 extension (if your key store has a .pfx or other extension, you much change it to .p12 or you won’t be able to install it). When you install a certificate from a PKCS#12 key store, Android also installs any accompanying private key or certificate authority certificates contained in the key store.

After all the renaming of the certificate file, installing certificates on your handheld is very easy.  You don’t even need to search certificates on your phone, Android finds and installs for you; see that easy it is!!

How to install the certificates??

On your Android devices, click the Menu!
Go to “Settings”
Click “Location & security settings”
Scroll down a bit and click “Install from SD card”, and follow few more steps, that’s all we are done!!
      

      Here are some of the screens Sony Ericsson Xperia™ ray which shows how to install a certificate...










15 comments:

  1. HI,
    I ALREADY HAVE .PFX FILE GIVEN TO ME BY MY BANK TO ACCESS MY BANK A.C FROM THE BANKS WEB PORTAL HOW DO I CONVERT THIS .PFX FILE TO .P12 FILE AS SUGGESTED BY YOU TO RUN THE SAME ON MY ANDROID FILE. THIS FILE RUNS OK ON MY WINDOWS PC
    PLS REPLY ME IF YOU CAN ON MY MAIL ID srpobaru@gmail.com

    ReplyDelete
  2. @siddharth - you don't require to convert it! If you want to install it on Android device, just rename the certificate file extension (i.e. from yourcertificate.pfx -> yourcertificate.p12), and place the certificate on the root folder in your SD Card.

    ReplyDelete
  3. Thank for your useful info. But in Android still measing browsers that recognize RootCert as informed in http://www.agenciatributaria.mobi/AEAT.mobile/_otros_/Ayuda/Certificado_electronico/Certificado_electronico.html
    I tried with Dolphin, Opera, FireFox and the Xperia browser¿Does you know any?

    ReplyDelete
    Replies
    1. Well this is awkward for "speedy reply", as I was travelling and been rarely online.

      Regarding to your question about recognizing certificates from Android browsers, I don't think that option is available and just not yet there. And then website you linked mentions about Windows 7 having that feature.

      If you want to install any certificate you need to follow the steps mentioned in this blog. BTW, latest Android OS versions can now recognize *.pfx so you don't need to change its extension from *.pfx > *.p12.

      Delete
  4. where can I find .p12 for gmail?

    ReplyDelete
    Replies
    1. why you want a certificate for gmail? If you are using and Android then by default there will be public certificates for gmail app.

      if above isn't your concern, then please explain in detail.

      Delete
    2. Its all about Google play service ..if there is no valid certificate ..then Google will not accept

      Delete
    3. By default all devices comes with public certificates. For Android there is no exceptions. Anything other than public, is considered private and the vendor or corporate has to provide the certificates using their private certificate authority servers.

      Delete
  5. Replies
    1. Well, the topic is about installing certificates. And at the time wrote this, Android devices were not supporting PFX formats but P12.

      If you are looking for something else, please describe your problem.

      Delete
  6. Chrome needs. Certificates PKCS#12 says to install this from external storage when opening site. It there any working solution available, then plzz tell me. My gmail is. er.skumar005@gmail.com

    ReplyDelete
  7. Chrome needs. Certificates PKCS#12 says to install this from external storage when opening site. It there any working solution available, then plzz tell me. My gmail is. er.skumar005@gmail.com

    ReplyDelete
  8. PKCS#12 file external storage no fond

    ReplyDelete
    Replies
    1. Now-a-days most of the devices comes only with internal storage and does support *.pfx and *.certainly by default. So refer this post for year 2010 or earlier devices.

      Btw, if your device has external/sd storage make sure you have copied the certificate file on the root directory and try again.

      Delete
  9. Hello, could you please help me? I just went to gatekeeper and it tells me I have no certificates on my Samsung Note 4, what do I to install this PKCS PKG so I have some security. Right now my phone calls are being intercepted and people are stealing my identity as well as my money Could you tell me how to install please.
    Thank you and God bless you,
    Debts G at jdgilly@cox.net

    ReplyDelete