<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (c) 2007-2010 Nokia Corporation and/or its subsidiary(-ies) All rights reserved. -->
<!-- This component and the accompanying materials are made available under the terms of the License 
"Eclipse Public License v1.0" which accompanies this distribution, 
and is available at the URL "http://www.eclipse.org/legal/epl-v10.html". -->
<!-- Initial Contributors:
    Nokia Corporation - initial contribution.
Contributors: 
-->
<!DOCTYPE concept
  PUBLIC "-//OASIS//DTD DITA Concept//EN" "concept.dtd">
<concept id="GUID-30647807-A0D2-4D96-975A-BF1800749977" xml:lang="en"><title>Configuring
the application’s platform security settings in the emulator</title><prolog><metadata><keywords/></metadata></prolog><conbody>
<p>You can adjust certain security settings in the emulator. The emulator's
platform security settings are all enabled by default.</p>
<p>Typical use cases include: </p>
<ul>
<li><p>Turning platform security diagnostics on or off</p></li>
<li><p>Turning platform security enforcement on or off</p></li>
<li><p>Disabling a set of capabilities</p></li>
</ul>
<p>Important implementation considerations include:</p>
<ul>
<li><p>You need to use the emulator to set platform security settings.
The feature is not available on production mobile devices.</p></li>
</ul>
<section id="GUID-25876C58-7EE1-46F3-8800-E0CD398170B6"><title>Configuring the
settings in the emulator</title>
<p>You can enable or disable platform security settings in the emulator
through the <b>Tools &gt; Preferences</b> menu or by editing the <codeph>epoc.ini</codeph> file.
The following illustration shows the options you have in the <b>Platform security</b> tab
of the Preferences window.</p>
<fig id="GUID-F4DDFC46-AF97-45B5-816C-D4F94182BA2C"><title>Preferences window in the emulator</title><image href="GUID-11E35C60-12DF-4014-AB3F-0314D8536AC0_d0e14831_href.png"/></fig>
<p>To set the platform security settings:</p>
<ol>
<li id="GUID-6ECF89E5-CCF5-431D-9A38-3A472F3B628F"><p>In the emulator,
open the <b>Tools &gt; Preferences</b> menu and go to the <b>Platform Security</b> tab.</p>
<p>Alternatively, open the <codeph>epoc.ini</codeph> file which is located
in the <codeph>...\Epoc32\Data\</codeph> folder on your computer.</p></li>
<li id="GUID-26508845-D52B-476F-96AC-BE3AB0F64124"><p>Modify the
desired settings:</p>
<ul>
<li><p>To allow platform security to emit a diagnostics message
when a check fails, tick the <b>Enable security debug messages</b> checkbox
in the Platform Security tab. </p><p>To enable this setting in the <codeph>Epoc.ini</codeph> file,
include the line <codeph>PlatSecDiagnostics ON</codeph>. To disable this setting,
modify the line to <codeph>PlatSecDiagnostics OFF</codeph>. </p><p>When
the settings is enabled, the diagnostics messages are logged to <xref format="" href="http://developer.symbian.org/wiki/index.php/Symbian_Emulator/The_Epocwind.out_File" scope="external"><codeph>epocwind.out</codeph></xref> in
a Windows temporary directory. The following is an example of a diagnostics
message:</p>
<codeblock id="GUID-FE9A46AF-D0A4-40D7-847D-9BF67FE1BFBD" xml:space="preserve">153.600	*PlatSec* WARNING - Capability check would have failed - A 
Message (function number=0x00000000) from Thread 
Screenshot[20000555]0002::screenshot, sent to Server !MsvServer, was checked by 
Thread !MsvServer[1000484b]0001::!MsvServer and was found to be missing the 
capability: ReadUserData.</codeblock>
</li>
<li><p>To enable platform security to take action after a check
fails and a diagnostics message is sent,  tick the <b>Perform capability checks</b> checkbox
in the Platform Security tab.</p><p>To enable this setting in the <codeph>Epoc.ini</codeph> file,
include the line <codeph>PlatSecEnforcement ON</codeph>. To disable this setting,
modify the line to <codeph>PlatSecEnforcement OFF</codeph>.</p></li>
<li><p>To disable a check for specific capabilities, choose the
ones you wish to disable in the <b>Granted capabilities for all applications:</b> list
in the Platform Security tab.</p><p>To disable a check in the <codeph>Epoc.ini</codeph> file,
include <codeph>PlatSecDisabledCaps</codeph>, followed by the capabilities
to be disabled. For example, <codeph>PlatSecDisabledCaps ReadUserData+WriteUserData+UserEnvironment</codeph>.</p>
</li>
</ul>
</li>
</ol>
</section>
<section id="GUID-BFB4DE7F-AC98-42AB-8763-FBA6D390D92A"><title>Additional information
on platform security settings in the emulator</title>
<p>For information on troubleshooting options, see <xref href="http://wiki.forum.nokia.com/index.php/How_to_troubleshoot_Platform_Security_issues" scope="external">How to troubleshoot Platform Security issues</xref> on Forum Nokia.</p>
</section>
</conbody></concept>