<?xml version="1.0" encoding="UTF-8" ?>
<fragment version="1.0" xmlns="http://www.symbian.com/java/j2me/security/trustroots/policy">

<!-- 
################################################################################
Trust Root Policy File for J2ME/MIDP2

* Target product:     Nokia N93 (Gundam), RM-55
* Target build:       Production, vanilla image
* Last modified date: 16-Feb-2006
* Mappings:           See inline comments below
* Notes: 
  - The certificate files have to be downloaded from 
    http://www10.connecting.nokia.com/TP/rcps.nsf
  - Certificate files go into: 
    z:\private\10203636\security\trustroots\device\certificates
  - This TRP XML file has to be located here: 
    z:\private\10203636\security\midp2_trp.xml
################################################################################
-->


<!-- 
################################################################################
Bind Nokia_Content_Signing_CA.crt cert (Nokia Content Signing CA) to *MFD* 
(Manufacturer domain) 
-->
<trustroot>
	<certificate>
		<device>
			<name>Nokia_Content_Signing_CA</name>
		</device>
	</certificate>
	<binding>
		<domain>*MFD*</domain>
	</binding>
</trustroot>

<!-- 
################################################################################
Bind PCA3ss_v4.509.der cert (VeriSign Class 3 Public Primary Certification 
Authority) to *TTPD* (Trusted third party domain) 
-->
<trustroot>
	<certificate>
		<device>
			<name>PCA3ss_v4_509</name>
			<access>
				<delete/>
				<disable/>
			</access>
		</device>
	</certificate>
	<binding>
		<volatile/>
		<domain>*TTPD*</domain>
	</binding>
</trustroot>

<!-- 
################################################################################
Bind thawtepremium.cer cert (Thawte Premium Server CA) to *TTPD* (Trusted third 
party domain) 
-->
<trustroot>
	<certificate>
		<device>
			<name>thawtepremium</name>
			<access>
				<delete/>
				<disable/>
			</access>
		</device>
	</certificate>
	<binding>
		<volatile/>
		<domain>*TTPD*</domain>
	</binding>
</trustroot>

<!-- 
################################################################################
Bind UTI_Root.cer.der cert (Geotrust CA for UTI) to *TTPD* (Trusted third party 
domain) 
-->
<trustroot>
	<certificate>
		<device>
			<name>UTI_Root_cer</name>
			<access>
				<delete/>
				<disable/>
			</access>
		</device>
	</certificate>
	<binding>
		<volatile/>
		<domain>*TTPD*</domain>
	</binding>
</trustroot>

<!-- 
################################################################################
Bind trusted certificates found on SIM to *OPD* (Operator domain) and *TTPD* 
(Trusted third party domain)
-->
<trustroot>
	<priority>1</priority>
	<certificate>
		<cryptotoken>
			<location>
				<path>trustedCertificates</path>
			</location>
			<constraint>
				<trustedusage>
					<oid>1.3.6.1.4.1.42.2.110.2.2.2.1</oid>
				</trustedusage>
			</constraint>
		</cryptotoken>
	</certificate>
	<binding>
		<volatile/>
		<domain>*OPD*</domain>
	</binding>
</trustroot>
<trustroot>
	<certificate>
		<cryptotoken>
			<location>
				<path>trustedCertificates</path>
			</location>
			<constraint>
				<not>
					<trustedusage>
						<oid>1.3.6.1.4.1.42.2.110.2.2.2.1</oid>
					</trustedusage>
				</not>
			</constraint>
		</cryptotoken>
	</certificate>
	<binding>
		<volatile/>
		<domain>*TTPD*</domain>
	</binding>
</trustroot>
</fragment>
