topic Re: S/Mime mail client digital certificate failure in XPERIA archive

S/Mime mail client digital certificate failure

juliusmerlin11 — Tue, 08 Jul 2014 20:00:54 GMT

How can I get support?

I boought a Xperia Z2 device this week. So I had to setup the mail client from Sony, newest version. I use an IMAP enabled mail account.

After automatic setup, everthing worked fine.

So next step was, to implement my S/MIME certificate for encription. I manually created an e-mail certificate (from Comodo) last year. It's active. Sending via my HTC phone M8 with S/MIME is no problem. My Mail Provider 'Posteo.de' does support S/MIME. Somehow it does not work on my Z2. I place the .pfx certificate file to my secondary SD card (/sdcard1). Then I am following step by step.

I tried several things :

- Re-installa certifcates

- Try installing certificate from the Settings >> Security screens

- Deleted account on the phone, cleaned data

- Initiated account again

Re: S/Mime mail client digital certificate failure

Sam — Wed, 09 Jul 2014 01:31:09 GMT

Can you please check the below to see if the certificate shows as installed:

To work with CA certificates

From your Home screen, tap the Application screen icon.
Find and tap Settings > Security > Trusted credentials.

The System tab displays certificate authority (CA) certificates that are permanently installed in the ROM of your phone.
The User tab displays any CA certificates that you have installed yourself, for example, when you were installing a client certificate.

What are your thoughts about this forum? Let us know by doing this short survey.

Re: S/Mime mail client digital certificate failure

juliusmerlin11 — Wed, 09 Jul 2014 17:12:56 GMT

@Sam wrote:
Can you please check the below to see if the certificate shows as installed:
To work with CA certificates
From your Home screen, tap the Application screen icon.
Find and tap Settings > Security > Trusted credentials.
The System tab displays certificate authority (CA) certificates that are permanently installed in the ROM of your phone.
The User tab displays any CA certificates that you have installed yourself, for example, when you were installing a client certificate.

What are your thoughts about this forum? Let us know by doing this short survey.

Thanks for you reply.

I have done it as you said. Certificates by user are now succesfully installed. See picture below:

So went to the mail client, and did the same steps as written in my first post. Still the same problem is shown:

Re: S/Mime mail client digital certificate failure

Sam — Thu, 10 Jul 2014 02:37:57 GMT

Try these steps to enable the instlalledcertificate, you shouldn't need to reinstall it after this it should just work:

To examine the details of CA certificate, tap its name. A scrolling screen displays the details.
To remove or disable a CA certificate, scroll down to the bottom of the details screen and tap either Disable for system certificates or Remove for user certificates. When you disable a system CA certificate, the button at the bottom of its details screen changes to Enable, so you can enable the certificate again if necessary. When you remove a user-installed CA certificate, it is gone permanently and must be re-installed if you want it back.
Tap OK.

What are your thoughts about this forum? Let us know by doing this short survey.

Re: S/Mime mail client digital certificate failure

juliusmerlin11 — Thu, 10 Jul 2014 04:08:57 GMT

Thanks for your feedback. But all necessary certificates are enabled. System and User certificates.
Already tried to disable them, then reboot, and enable again. Didn't work so far. Still no recognition of it in the mail client.

Re: S/Mime mail client digital certificate failure

Sam — Thu, 10 Jul 2014 04:30:35 GMT

Ok, just to troubleshoot this further you may want to look at installing an application like: https://play.google.com/store/apps/details?id=com.djigzo.android.application&hl=en

What are your thoughts about this forum? Let us know by doing this short survey.

Re: S/Mime mail client digital certificate failure

juliusmerlin11 — Thu, 10 Jul 2014 20:51:00 GMT

@Sam wrote:
Ok, just to troubleshoot this further you may want to look at installing an application like: https://play.google.com/store/apps/details?id=com.djigzo.android.application&hl=en
What are your thoughts about this forum? Let us know by doing this short survey.

I tried it.

With this App it's "working". But not comfortable.

- It's not directly implementet into the mail client.

Sending an composing with encryption is only possible via App.

- If I recieve an encrypted mail, I open the mail in normal mail client.

It shows in the header a red lock symbol, and the hint: "the mail could not be decrypted".

So I have to manually open the attached smime.p7m file via the app you offered.

It's very sad, that a brandnew flagship model like the Xperia Z2 cannot handle it directly via client! Other phone brands with integrated mail clients are doing there job pretty well.

Any other solutions?

Re: S/Mime mail client digital certificate failure

Sam — Fri, 11 Jul 2014 00:40:08 GMT

Can you please provide the below via a PM so I can get this escalated for you:

IMEI:

Android Version:

Build Number:

What are your thoughts about this forum? Let us know by doing this short survey.

Re: S/Mime mail client digital certificate failure

juliusmerlin11 — Fri, 11 Jul 2014 23:41:16 GMT

Here an example how it looks like:

Actually I'm on biz travel in switzerland. So by now I am using my business phone Xperia T, but forcing the same problem with certificate failure. Mail client version is the same as on my Z2. Would be very comfortable to get it work on my trip.

At this moment I just have your required informations for the Xperia T with me. But should be very similar.

I did send you the required device information via PN.

Re: S/Mime mail client digital certificate failure

palbarede — Sun, 15 May 2016 16:28:43 GMT

Hello,

I use Comodo personal email signing and crypting certificates for 3 imap accounts, on iOS and (Mac OS, Thunderbird).

However, I can't make it on Xperia M4 Aqual dual, Android 5.0, software up to date 2016 May 15, with standard email client. The problems are as described above.

Fortunately, I confirm the workaround with CipherMail. Thank you !

Nevertheless, the standard email client deserves to be fixed, as it is overall a nice piece of software.