Sun Microsystems Security and Trust Services APIs 1.0 User manual

Sun Microsystems, Inc.
4150 Network Circle
Santa Clara, California 95054
U.S.A. 650-960-1300
Security and Trust Services APIs for
Java 2 Platform, Micro Edition
Version 1.0
Reference Implementation Installation Guide
July 2004

Please
Recycle
Copyright © 2004 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, U.S.A. All rights reserved.
Sun Microsystems, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed
at http://www.sun.com/patents and one or more additional patents or pending patent applications in the U.S. and in other
countries.
This document and the product to which it pertains are distributed under licenses restricting their use, copying, distribution, and
decompilation. No part of the product or of this document may be reproduced in any form by any means without prior written
authorization of Sun and its licensors, if any.
Third-party software, including font technology, is copyrighted and licensed from Sun suppliers.
Sun; Sun Microsystems; the Sun logo; Solaris; Java; J2ME; J2SE; JCP; Java 2 Platform, Micro Edition; Java 2 Platform, Standard
Edition; Java Developer Connection; Java Card; Java Specification Request; Java Virtual Machine; Security and Trust Services APIs
for the Java 2 Platform, Micro Edition; and Java Community Process are trademarks or registered trademarks of Sun Microsystems,
Inc. in the U.S. and other countries.
The Adobe® logo is a registered trademark of Adobe Systems, Incorporated.
Federal Acquisitions: Commercial Software - Government Users Subject to Standard License Terms and Conditions.
DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
WARRANTIES,INCLUDINGANYIMPLIED WARRANTY OF MERCHANTABILITY,FITNESSFORAPARTICULAR PURPOSE
OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE
LEGALLY INVALID.
Copyright © 2004 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, Etats-Unis. Tous droits réservés.
Sun Microsystems, Inc. a les droits de propriété intellectuels relatants à la technologie incorporée dans le produit qui est décrit dans
ce document. En particulier, et sans la limitation, ces droits de propriété intellectuels peuvent inclure un ou plus des brevets
américains énumérés à http://www.sun.com/patents et un ou les brevets plus supplémentaires ou les applications de brevet
en attente dans les Etats - Unis et dans les autres pays.
Ce produit ou document est protégé par un copyright et distribué avec des licences qui en restreignent l’utilisation, la copie, la
distribution, et la décompilation. Aucune partie de ce produit ou document ne peut être reproduite sous aucune forme, par quelque
moyen que ce soit, sans l’autorisation préalable et écrite de Sun et de ses bailleurs de licence, s’il y ena.
Le logiciel détenu par des tiers, et qui comprend la technologie relative aux polices de caractères, est protégé par un copyright et
licencié par des fournisseurs de Sun.
Sun; Sun Microsystems; the Sun logo; Solaris; Java; J2ME; J2SE; JCP; Java 2 Platform, Micro Edition; Java 2 Platform, Standard
Edition; Java Developer Connection; Java Card; Java Specification Request; Java Virtual Machine; Security and Trust Services APIs
for the Java 2 Platform, Micro Edition; et Java Community Process sont des marques de fabrique ou des marques déposées de Sun
Microsystems, Inc. aux Etats-Unis et dans d’autres pays.
Le logo Adobe® est une marque déposée de Adobe Systems, Incorporated.
LA DOCUMENTATION EST FOURNIE “EN L’ÉTAT” ET TOUTES AUTRES CONDITIONS, DECLARATIONS ET GARANTIES
EXPRESSES OU TACITES SONT FORMELLEMENT EXCLUES, DANS LA MESURE AUTORISEE PAR LA LOI APPLICABLE, Y
COMPRIS NOTAMMENT TOUTE GARANTIE IMPLICITE RELATIVE A LA QUALITE MARCHANDE, A L’APTITUDE A UNE
UTILISATION PARTICULIERE OU A L’ABSENCE DE CONTREFAÇON.

iii
Contents
Preface v
1. Installing the SATSA Reference Implementation 1
Locating and Downloading Supporting Software 2
Setting System Variables 2
Installing the SATSA Packages 3
Contents of the Reference Implementation 3
Running the SATSA 1.0 Reference Implementation 4
Starting the MIDP 2.0 Emulator 4
Starting the Java Card Emulator 4
SATSA 1.0 Configuration Files 6
The internal.config File 6
The system.config File 7
Glossary 9
Index 11

iv SATSA Installation Guide • July 2004

v
Preface
This document describes how to install the Security and Trust Services APIs for the
Java 2™Platform, Micro Edition 1.0 Reference Implementation.
Who Should Read This Guide
This Installation Guide should be read by J2ME developers working with the
Security and Trust Services APIs 1.0 Reference Implementation.
Before You Read This Guide
In order to fully use the information in this document, you must have thorough
knowledge of the topics discussed in these guides:
■Java Card Platform, Version 2.2.1 Development Kit, User’s Guide
■MIDP Reference Implementation, Version 2.0, Using MIDP
■MIDP Reference Implementation, Version 2.0, Creating MIDlet Suites

vi SATSA Installation Guide • July 2004
How This Guide Is Organized
Chapter 1 describes the supporting software needed to install the SATSA 1.0
Reference Implementation, how to test if the SATSA 1.0 installation is successful,
and information about SATSA 1.0 configuration.
Typographic Conventions
Typeface Meaning Examples
AaBbCc123 The names of commands, files,
and directories; on-screen
computer output
Edit your .login file.
Use ls -a to list all files.
% You have mail.
AaBbCc123 What you type, when
contrasted with on-screen
computer output
%su
Password:
AaBbCc123 Book titles, new words or terms,
words to be emphasized
Command-line variable; replace
with a real name or value
Read Chapter 6 in the User’s Guide.
These are called class options.
You must be superuser to do this.
To delete a file, type rm filename.

Preface vii
Related Documentation
Accessing Sun Documentation Online
The Source for Java Developers web site enables you to access Java™ platform
technical documentation on the Web:
http://java.sun.com/reference/docs/index.html
Sun Welcomes Your Comments
We are interested in improving our documentation and welcome your comments
and suggestions. Send us your comments at:
http://java.sun.com/docs/forms/sendusmail.html
Application Title
Release Notes Security and Trust Services APIs Reference Implementation: Release
Notes

viii SATSA Installation Guide • July 2004

1
CHAPTER 1
Installing the SATSA Reference
Implementation
The Reference Implementation for the Security and Trust Services APIs (SATSA)
for Java 2 Platform, Micro Edition Specification provides an implementation of the
four optional packages defined in that specification. These are:
■SATSA-APDU - Defines an API to support communication with smart card
applications using the Application Protocol Data Unit (APDU) protocol.
■SATSA-JCRMI - Defines a Java Card Remote Method Invocation (JCRMI) client
API that allows a Java™2 Platform, Micro Edition (J2ME™) application to invoke
a method of a remote Java Card object.
■SATSA-PKI - Defines an API to support application-level digital signature
signing and basic user credential management, using the Public Key
Infrastructure (PKI) protocol.
■SATSA-CRYPTO - Defines a subset of the Java™2 Platform, Standard Edition
(J2SE™) cryptography API. It provides basic cryptographic operations to support
message digest, signature verification, encryption, and decryption.
The SATSA 1.0 Reference Implementation is designed to run on top of a J2ME
platform. It also runs with the Java Card™Platform Development Kit 2.2.1
Reference Implementation, as this is used to simulate the functionality of a security
element.
This chapter provides information about the software you must install prior to
downloading the SATSA 1.0 RI distribution, as well as detailed instructions for
installing the SATSA RI. This chapter also describes how to test your SATSA 1.0
installation and provides additional information about configuration.

2SATSA Installation Guide • July 2004
Locating and Downloading Supporting
Software
The default platform for the SATSA 1.0 Reference Implementation is the Windows
2000/x86 platform. The SATSA 1.0 Reference Implementation is based on the
Mobile Information Device Profile (MIDP) 2.0 code base.
Before downloading and installing the SATSA 1.0 RI distribution, you must have
the following software installed and configured:
■Java 2 Platform, Standard Edition (J2SE) SDK, version 1.4.2, or the Java 2™
runtime environment, version 1.4.2. For complete instructions on how to
download and install the J2SE 1.4.2 software, see:
http://java.sun.com/j2se/1.4.2/download.html
■Java Card Platform Development Kit Reference Implementation, version 2.2.1.
For complete instructions on how to download and install the Java Card
Platform Development Kit 2.2.1 Reference Implementation, see:
http://java.sun.com/products/javacard/dev_kit.html
Setting System Variables
The installation of the required software shown above is straightforward and can
be accomplished by using the documentation included with each software set.
When all the required software has been installed, you should have the following
system variables set:
■JAVA_HOME - points to the location where you have installed your J2SE platform
distribution. For example, C:\j2sdk1.4.2_05.
■JC_HOME - points to the location where you have installed your Java Card
Platform Development Kit 2.2.1 Reference Implementation. For example,
C:\java_card_kit-2_2_1.
You also should have appended your PATH and CLASSPATH variables:
■PATH - append with %JAVA_HOME%\bin and %JC_HOME%\bin.
■CLASSPATH - append with %JAVA_HOME%\lib and %JC_HOME%\lib.