Resources | developer.brewmp.com Resources | developer.brewmp.com

Developer

resources

Mobile service provider as certificate authority and signing authority

Mobile service provider as certificate authority and signing authority

For devices that are not manufactured for a specific mobile network operator, sometimes called retail devices, a party other than the manufacturer or mobile network operator may act as a certificate authority and signing authority.

Such a mobile service provider would provide their root along with configuration requirements to the device manufacturer, issue their own signing certificates, establish signing operations, and establish a signing policy, likely with the input and consent of the device manufacturer. Device manufacturers only enable such service providers if it makes their devices more valuable to consumers, acceptably secure to mobile network operators, and cost effective relative to their own device warranty and support obligations.