Tizen Certificates
There are two types of certificates you can use with signing application widget files for deployment to a device or emulator: Tizen and Samsung.
Tizen certificates can additionally be used on Tizen devices that are not manufactured by Samsung. They are simpler to work with for development purposes, as you do not need the original certificate to install a widget file, and you do not need to have the test or development device whitelisted. You cannot use a Tizen certificate for submission to the Tizen store.
Samsung certificates are required for submission to the Tizen store. They can be used for development, but the certificate may need to be installed onto the device before you will be able to install application widget files signed using the certificate. Samsung certificates require a Samsung account to create, and also require that all of your test and development Device Unique Identifiers (DUIDs) be added to the certificate when you create it, in order for you to be allowed to install widget files to your devices. You cannot add additional devices after you’ve created this certificate, so you need to gather all the devices you will use ahead of time. If you must add another test or development device, You.i TV recommends that you sign the widget files using a Tizen certificate or another custom Samsung certificate instead.
Certificates are fairly interchangeable from a development perspective, and do not affect the functionality of the application in any way, except for disallowing certain privileges depending on the privilege level of your certificate.
Privilege levels determine what functionality the application has and what functions it can invoke. If privileges are required that the certificate does not permit, you will not be able to install the application file until it is re-signed. The main privilege levels are public, partner and platform. It is highly recommended that you always use the partner level when creating certificates since You.i TV applications typically always use at least partner-level privileges. For more information on certificate privilege levels for specific Tizen APIs, see the Tizen Developers website.
You.i TV recommends that you limit your signing profiles to a maximum of 19 characters. You.i TV has observed an issue where once you have installed a Samsung certificate to some Tizen TVs, you may no longer be able to install a Tizen certificate signed widget on it.
As of Tizen Studio 3.2, functionality to create new Tizen certificates has been restored. Older Tizen certificates can still be used in versions earlier than 3.1, but recent changes to the IDE have eliminated the ability to create new Tizen certificates in versions 3.1 and earlier.
Signing Certificates
To build apps for Tizen and submit them to the store, your certificates must have author and distributor certificate portions, also referred to as the author and distributor signatures. Generally speaking, the author signature/certificate represents the organization that is developing or publishing the application, while the distributor signature/certificate pertains to a specific application. This means that each new application developed by the same organization would have a different distributor certificate, but likely the same author certificate.
For more information on Application Signing and Certificates, see the Tizen Developers website.
The following sections explain the setup process for both Samsung and Tizen certificates. Use the certificate that best suits your development and troubleshooting needs.
Configuring Samsung Certificates
These steps only apply if you want to auto populate your DUID in the field of the Samsung certificate. Before you start creating certificates, ensure that Tizen Studio and the device to which you want to upload the app, such as Tizen TV, are connected. To connect the device to Tizen Studio, follow the instructions mentioned here.
There are five phases to setting up Samsung certificates in Tizen Studio:
- Launching the Certificate Manager
- Selecting the Type of Certificate Profile
- Creating the Author Certificate
- Creating the Distributor Certificate
- Uploading the Certificates to the Device
Launching the Certificate Manager
When opening the Certificate Manager for the first time, it will often freeze and/or behave strangely. This is expected behavior. Restarting the Certificate Manager, or Tizen Studio, or alternatively your entire computer should remedy the issue.
- Open Tizen Studio.
- Open the Tools menu and select Certificate Manager.
Note You don’t need to open Tizen Studio to access the Certificate Manager.
It can be accessed via a button at the top of Tizen Studio, or opened as an independent application without having to open Tizen Studio. - If you had previously installed Tizen Studio and are migrating to a new version, browse the
profiles.xmlfile. If this is a completely new Tizen Studio installation, ignore the step.
- Click the plus (+) symbol to add a certificate profile.
Selecting the Type of Certificate Profile
In the Certificate Manager window, select the Samsung certificate profile.
You.i Platform recommends using a Samsung certificate as it works on a wider range of devices. If the Samsung option is missing, then you missed installing the Samsung Certificate extension with the Package Manager.
In the Create Certificate Profile window, select TV as the device type and click Next.
Creating the Author Certificate
Select Create a new Certificate profile and enter the profile name. Be sure to enter a meaningful signing profile name so you will remember that it is a Samsung certificate.
You will only need to record the certificate profile name to generate the Tizen project if you are manually specifying the certificate using the TIZEN_SIGNING_IDENTITY environment variable, or YI_SIGNING_IDENTITY CMake argument.
You.i Platform recommends you avoid using either of these.
See Configuring Tizen Certificates for more information.
Check the Create a new author certificate check box.
If you have an existing author certificate you wish to use, you can import the author.p12 file, or select it if it is already imported.
Enter the password if you are importing an existing author certificate file.
Enter the Author Name and Password.
You may also choose to check the Apply the same password for the distributor certificate option, but this is not strictly required.
You may wish to have separate passwords for author and distributor certificates if you plan on using the same author certificate for multiple apps on the Tizen platform. Author certificates can be shared between multiple apps.Be aware that your Samsung account password should not contain more than 15 characters, as most Tizen devices enforce a password length limit. Longer passwords will prevent you from signing in to your Tizen TV.
You are prompted to sign in with your Samsung account. If you do not have one, create one now.
Once signed in, you are guided through creating a distributor certificate.
Creating the Distributor Certificate
Select Create a new distributor certificate.
If you have an existing distributor certificate that you wish to use, locate the distributor.p12 file and enter its password.
Click Next. If you have one or multiple Device Unique Identifiers (DUIDs), you can enter them here.
You must add a DUID, otherwise an error will occur when you attempt to install a widget to your device. If you are already connected to a device (Tizen TV), or have an emulator open, the DUID is added automatically. If you have other devices that you know you will be using for development and testing purposes, be sure add their DUIDs here so they will be whitelisted with this certificate.
Make sure that you have collected all the DUIDs for every device that you will be using with your Samsung certificate. It is not possible to modify the whitelist of DUIDs after you have created your distributor certificate, and you will be unable to side load widgets to any device not specified at this point in the creation of your distributor certificate. Failure to add any DUIDs at this point will result in a default distributor certificate which is unusable.
Emulator DUIDs should not be put into production (i.e., store-ready) Samsung certificates.
Click Next. A screen will appear that will indicate the location of your newly created Samsung certificate. Take note of this path as you will need it later if you need to share your certificate.
Click Finish.
Once complete, you can view certificate-related details in the Tizen Studio Certificate Manager window.
Uploading the Certificate to the Device
Once the Samsung certificate is created, you need to upload it to the device. You will need to be connected to the device to which you are uploading the certificate before uploading it. Be aware that disconnected devices may appear in the Device Manager.
Do the following steps: In Tizen Studio, open the Tools menu and select Device Manager.
Right-click on the device in the Device Manager.
Click Permit to install applications.
This action uploads the active Samsung certificate to the device.
Configuring Tizen Certificates
There are five phases to setting up Tizen certificates in Tizen Studio:
- Launching the Certificate Manager
- Selecting the type of Certificate Profile
- Creating the Certificate Profile
- Creating the Author Certificate
- Creating the Distributor Certificate
Once created, the certificates are automatically pushed to the device.
Launching the Certificate Manager
Open Tizen Studio. Open the Tools menu and select Certificate Manager.
The Tizen Certificate Manager Preferences dialog appears. Any existing certificates appear here. If you have no current certificates, No Profile appears in the Certificate Profile field.
Selecting the Type of Certificate Profile
Click the + sign to create a new certificate profile.
In the Certificate Manager window, select the Tizen certificate profile.
If you do not see the above image and prompt, then you have forgotten to install the Samsung Certificate Extension. See Tizen Platform Guide for information on how to do this.
Creating the Certificate Profile
In the Certificate profile name field, name your certificate profile.
Click Next.
The window advances to the next tab.
Creating the Author Certificate
Under the Author Certificate tab, choose between Create a new author certificate or Select an existing author certificate, if you have one.
You will need to locate the author.p12 file and enter the password for it to be imported.
If you are creating a new certificate, supply the Key filename, Author name, and Password.
For the key filename, consider using a name that is meaningful, such as the name of your organization. Choose a variation of this name that is more display-friendly for the author name. The fields under the More details section do not need to be filled out.
Click Next. The window advances to the next tab.
Creating the Distributor Certificate
Under the Distributor Certificate tab, you will see the option to Use the default Tizen distributor certificate is selected.
Within Tizen certificates, there is only a default option for a distributor certificate. The default password for the Tizen distributor certificate is tizenpkcs12passfordsigner; this will be required when importing your certificate on the command line.
For the default Tizen distributor certificate, you can also select the privilege level. The default option is Public.
Select Privilege level and choose Partner from the drop down list.
Click Finish. A dialog appears telling you your certificate profile has been successfully created and is set as active.
Once complete, you can view certificate-related details in the Tizen Studio Certificate Manager window.