Creating certificates
creating certificate tizen applications must be code signed to submit to the app store code signing is a technique that assures the users of the security on tizen it ensures that the application code has not been modified after it was last signed tizen applications are code signed using a certificate profile issued by samsung this rest of document explains briefly about the certificate profile concept and how to create it introduction a samsung certificate profile is a set of samsung certificates required to sign a tizen application when you hit the build key in visual studio, the visual studio tools for tizen performs application signing by adding a digital signature--generated by a certificate profile--to the tizen package file to create these certificates, first you need to install the samsung certificate extension after installing it, create the samsung certificates using the tizen certificate manager tool installing certificate extension samsung certificate extension is an add-on sdk that enables you to create certificate profiles issued by samsung follow the steps below to install the samsung certificate extension in visual studio menu, click tools > tizen > tizen package manager, the package manager window will appear select extension sdk tab from the package manager window figure 1 tools > tizen > tizen package manager figure 2 in tizen package manger window, select extension sdk tab click the configuration icon on the top right, the configuration window will appear toggle auto update to on, and click ok the update might take a few seconds figure 3 setting configuration locate and install samsung certificate extension in the extras drop down menu figure 4 installing samsung certificate extension after installing the extension, you can now use samsung certificate manager tool to create samsung certificates creating a certificate profile you can create and manage samsung certificate profiles using the tizen certificate manager tool a certificate profile consists of an author certificate and a distributor certificate take the following steps to create your certificate profile in visual studio menu, click tools > tizen > tizen certificate manager to launch the certificate manager in the certificate manager window, click the + button, the certificate manager window will appear figure 5 tools > tizen > tizen certificate manager select the type of certificate profile figure 6 select samsung note tizen certificate for a tizen device, and samsung certificate for samsung mobile, wearable, and tv with tizen platform select the device type, and click next figure 7 select the device type select "create a new certificate profile" enter a profile name, and click next figure 8 select "create a new certificate profile" create author certificate an author certificate includes information about the developer of the application the author certificate creates an author signature, which ensures the integrity of the application by the author since the publication of the application take the following steps to create an author certificate select "create a new author certificate", and click next figure 9 select create a new author certificate enter the author name and password, we recommended that you set a strong password if you want to use the same password for the distributor certificate in the next step, select the check box as shown in the following figure figure 10 enter the author name and password additional fields contains more certificate signing request csr information to add, but are not mandatory click next samsung account sign-in window will appear, you must have a samsung account to create an author certificate sign in or create new account if you don't have an account create a backup for your author certificate, and click next warning if you lose the author certificate, you cannot update any application that was signed with that certificate we highly recommend that you backup the certificate figure 11 backup your author certificate the next window controls creating a distributor certificate, which we explain in the next section create distributor certificate the distributor certificate ensures the integrity of the app store thus, the distributor certificate that you create using the certificate manager is actually called a pseudo-distributor certificate in fact, when you submit your application on the app store, your distributor certificate will be switched to the actual distributor certificate of the store a pseudo-distributor certificate still has its purpose before submitting your application to the app store, a pseudo-distributor certificate defines a list of devices that can install your packages on specifically, your application package file can only be installed on devices in which their device unique id duid have been registered in your pseudo-distributor certificate this ensures that the application can only be installed on your device and the ones that you have approved even when your package file is leaked you can think of it as a "personal" distributor certificate take the following steps to create a pseudo-distributor certificate select "create a new distributor certificate" to create a new certificate, and click next figure 12 select create a new distributor certificate select the privilege level for the distributor certificate tizen apis are categorized into 3 privilege levels according to their accessibility public level apis are open to all tizen software developments partner level apis are used in software development for samsung's business partners platform level apis are used in samsung internal software developments the application must be signed using a distributor certificate with the appropriate privilege level to use the corresponding apis on the device partner privilege allows access to public level apis, and platform privilege allows access to both public and partner level apis figure 13 select the privilege level enter the password for your distributor certificate if you have selected the option to apply the same password from the author certificate earlier in the steps, the password is already written for you if you want to change the password, type the new password figure 14 enter the password for distributor certificate add individual duids if you connect the device to the host pc, the device's duid is automatically added to the list you can add up to 50 duids the previous duids in the list are not deleted even if you disconnect the device to delete the duids, click the trash icon on the right side of each duid entry figure 15 add individual duids click next to get the distributor certificate, then click finish to get your certificate profile