Certificate management method based on connectivity and policy
Plural modes of operation may be established on a mobile device. Specific modes of operation of the mobile device may be associated with specific spaces in memory. By associating the existing certificate store structure and key store structure with a mode of operation, certificates and keys can be assigned to one space among plural spaces. Furthermore, management (viewing/importation/deletion) of certificates associated with specific modes of operation may be controlled based on the presence or absence of a mobile device administration server and the status (enabled/disabled) of an IT policy.
1. A method of regulating population of a certificate store in a memory of a device, the method comprising:
determining that a device administration server is present;
determining that an information technology policy is disabled; and
responsive to the determining that a device administration server is present and that an information technology policy is disabled, disabling user interface interaction on the device for importing trusted Certificate Authority certificates into a certificate store associated with a portion of memory of the device.
2. The method of claim 1 further comprising seeding the certificate store associated with the portion of memory of the device.
3. The method of claim 1 further comprising, before the determining:
receiving a command to create the certificate store associated with the portion of memory of the device; and
initializing the certificate store in the memory of the device.
4. A communication device comprising:
a memory;
a processor adapted to:
determine that a device administration server is present;
determine that an information technology policy is disabled; and
disable user interface interaction on the device for importing trusted Certificate Authority certificates into a certificate store associated with a mode of operation of the device.
5. The communication device of claim 4 wherein the processor is further adapted to seed the certificate store associated with the portion of memory of the device.
6. The communication device of claim 4 wherein the processor is further adapted to:
receive a command to create the certificate store associated with the portion of memory of the device; and
initialize the certificate store in the memory of the device.
7. A non-transitory computer-readable information recording medium containing computer-executable instructions that, when performed by a processor in a communication device, cause said processor to:
determine that a device administration server is present;
determine that an information technology policy is disabled; and
disable user interface interaction on the device for importing trusted Certificate Authority certificates into a certificate store associated with a portion of memory of the device.
8. The non-transitory computer-readable information recording medium of claim 7 wherein the instructions further cause the processor to seed the certificate store associated with the portion of memory of the device.
9. The non-transitory computer-readable information recording medium of claim 7 wherein the instructions further cause the processor to:
receive a command to create the certificate store associated with the portion of memory of the device; and
initialize the certificate store in the memory of the device.