Signing applications

In MTJ, the signing of applications can be done manually in the Security Management for MTJ applications window, or automatically every time you build an application. In MTJ, signing is done using a public key and a certificate.

Automatic signing happens only if the application is currently signed (since the .jar file may change during building). You can quickly re-sign the application by right-clicking the MTJ project in the Package Explorer editor and selecting Sign MTJ Application.

Note: You cannot sign applications without first configuring the security managers and signing providers. The configuring is done in MTJ Preferences.

Note: Currently MTJ can only sign applications that have the device profile MIDP-2.0.

To sign an application

  1. In the menu bar, select MTJ -> Application Security.
    The Security Management for MTJ Applications window opens.

  1. In the MTJ Project field, enter the name of the project or click Browse to select the project from workspace.
  2. To manage keys , click the Key Management tab.
  3. To select the location for the keys, in the Key Store field, select Open.
    The Open Keystore window opens.
  4. In the Open Keystore window, select the location and click Open.
  5. In the Key Aliases field, highlight the key pair you want to sign the application with.
    The Sign button becomes available.
    Note
    : You need to have the certificate and certificate response configured for the key pair before signing. If you do not have them, the mobile device will not accept the application as a secure file.
  6. Click Sign.
    A confirmation message appears and the Sign button becomes unavailable.

You have now signed the application.

Tip: To quickly re-sign a signed MTJ project, highlight the targeted MTJ project and right-click. In the context sensitive menu, select MTJ -> Sign MTJ Application.

To unsign an application

  1. In the menu bar, select MTJ -> Application Security.
    The Security Management for MTJ Applications window opens.
  2. In the MTJ Project field, enter the name of the project or click browse to select the project from workspace.
    The Unsign button becomes available if the project has been signed and at least one security provider has been configured and enabled in the Preferences window.
  3. Select Unsign.
    A confirmation message appears.

You have now unsigned the application.

Tip: To quickly unsign a signed MTJ project, highlight the targeted MTJ project and right-click. In the context sensitive menu, select MTJ -> Unsign MTJ Application.


Mobile Tools for Java Platform


Managing security

Setting up signing


Wizards