Today's How-To: Hack your N97 to run unsigned apps, among other things.
The latest version of HelloOX has been released, and it’s easier than ever to get unsigned software working on your N97. But let’s step back a bit: unsigned software is simply any kind of application that hasn’t gone through the Symbian Foundation’s rigorous signing process. Most freeware is unsigned, mainly due to the costs involved (around ~$525 for the bare minimum of one signing, with extra $$$ or euroseuroseuros for additional signing). With the included ROMPatcher utility, you can also apply unofficial patches to the firmware to fix bugs, modify current functionality, or adding new features. Pretty cool, right?
Unfortunately, by default your N97 (or any other recent S60 phone) will not allow you to install unsigned applications. We’re going to change that.
The Setup
You’re going to need a
signed HelloOX2 sis file. Technically, that’s all you need, but a little out of reach for most people. If you’re starting from scratch, you’ll also need a .cer file, a .key file, and the
SISContents application. Note that the HelloOX2 site claims that you can get a signed version of the app by donating $5. This may or may not be preferable, as it does avoid the steps (and the waiting) found here.
Remember, if you get confused anywhere in the tutorial, click on the screenshot above each step. You might find it easier to just click on the pictures and use the onboard Prev/Next buttons to go through each step (every image has the instructions underneath).
Let’s begin.
Developer Certificate and Key File
Skip this section if you already have a Dev. Cert and a key file. Otherwise, read on.
The easiest way to get the two files you need is to register an account on OPDA. By registering and filling out some forms (directions below), you can get your cert within a couple of days.
Click the Register button on the OPDA forum page.
1. Go to the OPDA web site. Click on the Register button.
Scroll down, wait for the counter to reach zero, and then click the leftmost button.
2. You should something that sort of resembles a Disclaimer page. Scroll down to the bottom, and there will be a countdown timer. Wait for it to reach zero, then click the leftmost button that appears.
Fill out the fields according to this picture.
3. Next up, you’ll have to fill out the registration form. Click anywhere inside the first box, and you’ll see a Captcha box pop up. Enter the characters that appear. After that is some kind of random math problem, answer it and go on to the next box. This is your username. The following two boxes are your password and your password confirmation (enter your password twice). I hope the Email box is self-explanatory. You can ignore that last checkbox – it shows you some advanced user options that are completely and utterly useless in this tutorial. Finally, click the yellow submit button on the bottom.
You should be automatically logged in. Click on the Apply Cer. button.
4. You should see a message pop up, wait a few seconds for it to redirect you to the forum page. Congratulations, you registered an account! Too bad we’re only a third of the way through. Click on the Apply Cer. in the top right corner of the page.
Click the English button in the top right corner. It makes the page a lot more manageable.
5. You should be at a page that looks similar to the picture here. Click on the English button (top right corner) to see what that important-looking green box says. Now click on the Login button and enter your credentials into the following form. (no picture for this step)
Click the Apply cer button.
6. This is the My Certificates page. Click on the Apply cer button (in orange, see picture if necessary).
Fill out the fields in the certificate application. Enter the correct model and IMEI. For phone number, enter an 11-digit number starting with 13, 15, or 18.
7. Finally, a form that’s completely in English. Make sure you put the correct model and IMEI as this is critical to generating a valid certificate for your phone. For Phone Number, enter an 11-digit number starting with either 13, 15, or 18. Example: 15134567890. If you’ve filled out the form correctly, you’ll see the message: Operation Success! Now you’ll have to wait until your certificate and key files are generated. Generally it takes anywhere from 1-3 days.
Step 8: Click and save the .cer and .key files.
8. Assuming that your screen looks like mine, and your certificates/keys were generated, click and save the .cer and .key files. Pat yourself on the back, you got through Part 1 of this walkthrough.
Using SISContents
SISContents is the software application that uses your .cer/.key files to digitally sign a Symbian application. It’s fairly easy to use, but I’ll write out all of the steps involved regardless.
Open SISContents and click the Open File icon. Browse to the directory where you placed the HelloOX2.unsigned.sis file and double click it.
1. If you haven’t already, download and run SISContents. Click on the large folder icon in the top left corner (Open file), and browse to the directory where you put the HelloOX2.unsigned.sis file. Double-click to open it.
2. Now go to Tools -> Sign package.
Fill out the fields according to this picture.
3. Another box should pop up. You’ll notice that there’s two tabs on the top of the box, Package and Key pairs. Click on the Key pairs tab to switch.
You should be automatically logged in. Click on the Apply Cer. button.
4. Here you’ll create a profile with your new files. A key pair is made up of a .cer file, and a .key file. Make sure you add both of these files using the Browse… button. For Private Key Passphrase, enter 12345. You can name the profile anything you want, but I find that a simple, description name like “N97 Certificate” works well. When you’ve finished, click the Add profile button.
You should see the new profile appear in the box called "Available Signing Profiles". If not, repeat the previous step.
5. Note the change once you click the Add profile button: a new profile should appear in the box labeled “Available signing profiles”.
Switch back to the "Package" tab. Click the box under Signing Profiles, and select the profile you just created.
6. Remember those two tabs on top? Click on the Package tab to switch back to the package view. On the right side, you should see “Signing profiles:”, with an empty drop-down box underneath. Click on this box, and select your newly created profile.
Click the "Add signature" button. You should your newly created signature in the box on the right side, labeled "Signatures of selected component." Congratulations! Now close this box by clicking the X in the top right corner. Don't forget to save the file.
7. Click on the Add signature button. You should see a new entry in the “Signatures of selected component box” (right side) that reads something like “SHA1 with RSA” and some certificate validity period dates. If you see those, you’re almost there! All that’s left now is to close this box (use the X in the top right corner), and save the file that you just modified (File -> Save as…). Congratulations! You’re even closer than before!
