Messages

1

Cosmo Communicator - Android / ESIM Authentication Failure (UK, EE network)

« on: November 30, 2019, 12:38:23 pm »

The eSIM Wallet app allows you to forcibly disable this by toggling [dots] -> Settings -> Network -> Bypass TLS authentication -- perhaps this would be worth a shot?

Thanks for this - it now works on EE - if you disable security (Bypass TLS Authentication) then it does process and load the EE profile correctly.

Simple 'fix' but a little worrying that the GSM Association has a self signed certificate that is not trusted by Android.

2

Cosmo Communicator - Android / ESIM Authentication Failure (UK, EE network)

« on: November 27, 2019, 01:04:49 pm »

The GSM Association website has a couple of CAs that you can download and install - but not the right type unfortunately. They use cybertrust and digicert to act on their behalf as Root Cert Issuers - both of whom are already included as trusted CAs on Andoid (and i confirmed on the Cosmo).

https://www.gsma.com/iot/embedded-sim/gsma-...m-provisioning/

Getting annoying now!

3

Cosmo Communicator - Android / ESIM Authentication Failure (UK, EE network)

« on: November 27, 2019, 12:45:28 pm »

Doing a bit more digging (using Chrome on Mac).

The site cert for *.pr.go-esim.com is as follows:

Chrome reports "GSM Association - RSP2 Root Cl1" - certificate is not trusted

I'm going to try and find the root cert and load it into Android as a trusted CA

4

Cosmo Communicator - Android / ESIM Authentication Failure (UK, EE network)

« on: November 27, 2019, 12:32:26 pm »

I've been trying to install a ESIM on to my Cosmo.

The ESIM (QR Code) was supplied by EE in the UK.

There are a number of issues:

When you scan the QR code (or enter manually) it fails to install the ESIM profile. The error message says:

Processing Activation Code - SM-DP+MUTUAL AUTHENTICATION - MUTUAL AUTHENTICATION operation failed.
ES9+.InitiateAuthentication error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found

The SM-DP that is included in the QR code is: sm-v4-010-a-gtm.pr.go-esim.com (matches details on EE website)

I've looked at the trusted certs loaded onto the Cosmo (Android -> Settings ->Security & Location -> Advanced -> Encryption & credentials -> Trusted Credentials)

There are lots - but no idea what cert i need to load or where the real problem is. Android does not like self signed certs and i'm thinking this is what EE have done.

Has anybody got ESIM to work? Anywhere - country or network?

I'm wondering if this is an EE problem in the UK. They do support some Android devices (Pixel 4, Samsung Galaxy??)

5

Cosmo Communicator - Android / Unlock Cosmo with the keyboard

« on: November 27, 2019, 06:27:01 am »

Yes - in Settings -> Security & location you can set a PIN / pattern (in addition to fingerprint) for screen lock - so that with the device open you can simply type a password.

I have also changed the screen lock time (increased from default 30 seconds) so that it does not lock as often.

And finally - if you have a bluetooth device you can set it up su that when connected the device will not lock (e.g. if connected to a smartwatch the device will not lock). Can also do similar based on location - e.g. do no lock when at home.

6

Gemini PDA - Android / eSim registration fails mutual auth

« on: November 27, 2019, 05:31:55 am »

Inspired by someone asking about esim, I thought I would try it and it says it fails mutual auth when I try to add with QR code  Trust Anchor for Cert Psth not found.

Any ideas?

I get exactly the same (on Cosmo). In fact when i try to scan the QR code the camera app often crashes. I'm going to a Planetcom event on Friday and will try to get it sorted then and post any resolution.