UniMate USB User Manual: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
← Older edit

Mapril (talk | contribs)

0 edits
Bao (talk | contribs)
0 edits
Mapril (talk | contribs)
0 edits
No edit summary
 
(76 intermediate revisions by 4 users not shown)
Line 1: Line 1:
==<p><b>UniMate Manual</b></p>==
[[category:UniMate Manuals]]


<p>
<div id = "Table of Contents"></div>


<b><i>Version 1.0</i></b></p>
==<b>UniMate Manual</b>==


<p>The data and information contained in this document cannot
<b><i>Version 2.1</i></b>
be altered without the express written permission of SecuTech Solution Inc. No
part of this document can be reproduced or transmitted for any purpose
whatsoever, either by electronic or mechanical means.</p>


<p>The general terms of trade of SecuTech Solution Inc. apply.
<table class="wikitable">
Diverging agreements must be made in writing.</p>
  <tr>
 
  <td style="background-color: red;"><b style="color: #fff;">Version</b></td>
<p>Copyright SecuTech Solution Inc. All rights reserved.</p>
  <td style="background-color: red;"><b style="color: #fff;">Date</b></td>
 
</tr>
<p>WINDOWS is a registered trademark of Microsoft Corporation.</p>
<tr>
 
  <td>1.0</td>
<p>The WINDOWS-logo is a registered trademark <sup>(TM)</sup>
  <td>2015.7</td>
of Microsoft Corporation. </p>
</tr>
 
<p></p>
 
<p><b>Software
License</b></p>
 
<p>The software and the enclosed documentation are
copyright-protected. By installing the software, you agree to the conditions of
the licensing agreement.</p>
 
<p></p>
 
<p><b>Licensing
Agreement</b></p>
 
<p>SecuTech Solution Inc. (SecuTech for short) gives the buyer
the simple, exclusive and non-transferable licensing right to use the software
on one individual computer or networked computer system (LAN). Copying and any
other form of reproduction of the software in full or in part as well as mixing
and linking it with others is prohibited. The buyer is authorized to make one
single copy of the software as backup. SecuTech reserves the right to change or
improve the software without notice or to replace it with a new development.
SecuTech is not obliged to inform the buyer of changes, improvements or new
developments or to make these available to him. A legally binding promise of
certain qualities is not given. SecuTech is not responsible for damage unless
it is the result of deliberate action or negligence on the part of SecuTech or
its aids and assistants. SecuTech accepts no responsibility of any kind for
indirect, accompanying or subsequent damage.</p>
 
<br
clear=all>
 
<p><b>Contact Information</b></p>
 
<p><b>Web: </b>http://www.esecutech.com</p>
 
<p><b>Email: </b>[mailto:sales@eSecuTech.com sales@esecutech.com]</p>
 
<p>Please Email any comments, suggestions or questions regarding this document or our products to us at: [mailto:sales@eSecuTech.com sales@esecutech.com]</p>
 
<div align=center>
 
<table  border=1 cellspacing=0 cellpadding=0
>
  <tr>
  <tr>
   <td width=254 valign=bottom>
   <td>2.0</td>
  <p  align=center>Version</p>
   <td>2016.7</td>
  </td>
   <td width=254 valign=bottom>
  <p  align=center>Date</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=254>
   <td>2.1</td>
  <p  align=center>1.0</p>
   <td>2018.2</td>
  </td>
   <td width=254>
  <p  align=center>2015.7</p>
  </td>
  </tr>
  </tr>
</table>
</table>


</div>
The data and information contained in this document cannot be altered without the express written permission of SecuTech Solution Inc. No part of this document can be reproduced or transmitted for any purpose whatsoever, either by electronic or mechanical means.


<br
The general terms of trade of SecuTech Solution Inc. apply. Diverging agreements must be made in writing.
clear=all>


<p><strong>CE Attestation of Conformity</strong></p>
Copyright SecuTech Solution Inc. All rights reserved.


<p>UniMate is in conformity with the protection
WINDOWS is a registered trademark of Microsoft Corporation.
requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate
satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024:
1998.</p>


<p></p>
The WINDOWS-logo is a registered trademark <sup>(TM)</sup> of Microsoft Corporation.


<p><strong>FCC Standard</strong></p>
<b>Software License</b>


<p>This device is in conformance with Part 15 of the
The software and the enclosed documentation are copyright-protected. By installing the software, you agree to the conditions of the licensing agreement.
FCC Rules and Regulation for Information Technology Equipment.</p>


<p>Operation of this product is
<b>Licensing Agreement</b>
subject to the following two conditions: (1) this device may not cause harmful
interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.</p>


<br clear=ALL>
SecuTech Solution Inc. (SecuTech for short) gives the buyer the simple, exclusive and non-transferable licensing right to use the software on one individual computer or networked computer system (LAN). Copying and any other form of reproduction of the software in full or in part as well as mixing and linking it with others is prohibited. The buyer is authorized to make one single copy of the software as backup. SecuTech reserves the right to change or improve the software without notice or to replace it with a new development. SecuTech is not obliged to inform the buyer of changes, improvements or new developments or to make these available to him. A legally binding promise of certain qualities is not given. SecuTech is not responsible for damage unless it is the result of deliberate action or negligence on the part of SecuTech or its aids and assistants. SecuTech accepts no responsibility of any kind for indirect, accompanying or subsequent damage.


<p>The equipment of UniMate is USB
<b>Contact Information</b>
based.</p>


<p></p>
<b>Web: </b>http://www.esecutech.com


<p><strong>Conformity to ISO 9001:2000</strong></p>
<b>Email: </b>[mailto:sales@eSecuTech.com sales@esecutech.com]


<p>The Quality System of SecuTech
Please Email any comments, suggestions or questions regarding this document or our products to us at: [mailto:sales@eSecuTech.com sales@esecutech.com]
Solution Inc., including its implementation, meets the requirements of the
standard ISO 9001:2000</p>


<p></p>
<br>
; CE Attestation of Conformity
[[File:CE Attestation.png|left|100px|top]]
: UniMate is in conformity with the protection requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024: 1998.
<br><br><br>
; FCC Standard
[[File:FCC.png|left|100px|top]]
: This device is in conformance with Part 15 of the FCC Rules and Regulation for Information Technology Equipment.
: Operation of this product is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
<br><br><br>
[[File:USB Logo.png|left|100px|top]] The equipment of UniMate is USBbased.
<br><br><br>
; Conformity to ISO 9001<nowiki>:</nowiki>2000
[[File:ISO 9001.png|left|100px|top]]
: The Quality System of SecuTech Solution Inc., including its implementation, meets the requirements of the standard ISO 9001:2000
<br><br><br>
; ROHS
[[File:ROHS.png|left|100px|top]]
: All UniMate products are environmentally friendly with ROHS certificates.
<br><br><br><br>


<p><strong>ROHS</strong></p>
<div style="page-break-before:always"></div>


<p>All UniMate products are
==Overview==
environmental friendly with ROHS certificates.</p>


<br
The UniMate USB, hereinafter referred to as UniMate, is a mobile authenticator and information security PKI product based on CCID technology (except UniMate Drive). It functions as a secure container for digital credentials. An advanced processor and secure memory are built into the device to provide security for exchanging, storing and handling of electronic information.
clear=all>


===<h2><div id = "Table of Contents"></div><p>Table of Contents</p></h2>===
UniMate has achieved an effective rights management and provides a highly-secure file system. The built-in processor allows for fast and efficient information processing.
#[[#Overview|Overview]]
#[[#UniMate Features|UniMate Features]]
#*[[#UniMate Drive|UniMate Drive]]
#*[[#UniMate Flex|UniMate Flex]]
#*[[#UniMate USB|UniMate USB]]
#[[#Security|Security]]
#*[[#PIN|PIN]]
#*[[#Factory Default Settings|Factory Default Settings]]
#[[#SDK|SDK]]
#[[#Applying Digital Certificates|Applying Digital Certificates]]
#*[[#Applying Microsoft Certificates|Applying Microsoft Certificates]]
#*[[#Using Digital Certificates|Using Digital Certificates]]
#[[#Specifications|Specifications]]
#*[[#UniMate Drive Spec|UniMate Drive]]
#*[[#UniMate Flex Spec|UniMate Flex]]
#*[[#UniMate USB Spec|UniMate USB]]
#[[#FAQ|FAQ]]


<br
UniMate supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition). The abundant samples provided in the SDK help to ease integration.
clear=all>


<div>
UniMate also supports iOS, Android and a multitude of other devices through either a USB port using the CCID protocol or a 3.5mm TRRS audio jack.


===<div id = "Overview"></div><h1>Overview</h1>===
==UniMate Features==


<p>The UniMate device, hereinafter referred to as UniMate, is a
;Universal features of UniMate:
mobile authenticator and information security PKI product
based on CCID technology (except UniMate Drive) and is a secure container for
digital credentials. An advanced processor and secure memory is built into the UniMate
device to provide security for exchanging, storing and handling electronic
information.</p>
 
<p>UniMate has achieved an effective rights management and
provides a highly-secure file system. The built-in processor achieves fast and
efficient information processing.</p>
 
<p>UniMate supports PKCS#11, CSP and Value Added APIs (CD-ROM
and Partition). The abundant samples provided in the SDK help bring ease to
integration.</p>
 
<p>UniMate supports iOS, Android and a multitude of other
devices through either a USB port using the CCID protocol or 3.5mm TRRS audio jack.</p>
 
<br
clear=all>
 
===<div id = "UniMate Features"></div><h2>UniMate Features</h2>===
 
;<p>Universal features of UniMate:</p>
*Globally unique hardware ID.
*Globally unique hardware ID.
*Customizable software ID.
*Customizable software ID.
Line 188: Line 98:
*Lead free.
*Lead free.


<p></p>
===UniMate Drive===
 
====<div id = "UniMate Drive"></div><h3>UniMate Drive</h3>====
 
<p>The UniMate Drive is a mobile authenticator and information
security PKI product which can store key certificates. UniMate Drive includes storage
types: U-Disk and CD-ROM. You can set up the storage size using the Partition
tool and the Value Added library, ISO files can also be loaded into CD-ROM. You
can also format the U-Disk and copy files into it, and so on. The total
capacity of the UniMate Drive is between 2 to 32 GB, you can partition it as
you wish. UniMate Drive supports PKCS#11, CSP and Value Added APIs (CD-ROM and
Partition).</p>
 
<br clear=ALL>


====<div id = "UniMate Flex"></div><h3>UniMate Flex</h3>====
The UniMate Drive is a mobile authenticator and information security PKI product which can store key certificates. UniMate Drive includes two storage types: flash memory and CD-ROM. You can set up the storage size using the Partition tool and the Value Added library. ISO files can be loaded into the CD-ROM partition. You can also format the flash memory and copy files into it, and so on. The total capacity of the UniMate Drive is between 2 to 32 GB, you can partition it as you wish. UniMate Drive supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition).


<p>UniMate Flex is an interactive hybrid
[[File:UniMate Drive Architecture.jpeg|450px|center|alt=UniMate Drive architecture Linux and Mac OS X (PKCS#11 and Value Added API)]]
mobile authentication token designed particularly for use in banking. The two-factor
[[File:UniMate Drive Architecture Win.jpeg|450px|center|alt=UniMate Drive architecture Windows (PKCS#11 and Value Added API and Windows CSP, minidriver and mass storage driver)]]
authentication device makes use of a high-performance smart card, a LED display
and confirmation buttons to verify the secondary form of authentication. Users
can visually confirm transaction information on-screen and press the
confirmation button to approve only authorized transactions.</p>


<p>UniMate Flex features PKI based digital
===UniMate Flex===
certificate and private key storage, as well as on-board encryption, with the
UniMate Flex is an interactive hybrid mobile authentication token designed particularly for use in banking. The two-factor authentication device makes use of a high-performance smart card, an LED display and confirmation buttons to verify the secondary form of authentication. Users can visually confirm transaction information on-screen and press the confirmation button to approve only authorized transactions.
ability to generate and store RSA secret key pairs within the key.</p>
<br><br> UniMate Flex features PKI based digital certificate and private key storage, as well as on-board encryption, with the ability to generate and store RSA secret key pairs within the key.


<p></p>
[[File:UniMate Collage.jpeg|center|675px|top|alt=UniMate Flex mobile authentication token]]


====<div id = "UniMate USB"></div><h3>UniMateUSB</h3>====
===UniMate USB===


<p>UniMate USB is a FIPS 140-2 algorithm
[[File:UniMate USB Rot.png|left|95px|top|alt=UniMate driverless USB smart card authentication token]]
certified smart card USB authentication token, and utilizes smart card
[[File:UniMate USB Collage Rot.png|right|375px|top|alt=multiple UniMate driverless USB smart card authentication tokens]]
technology for strong authentication. Smart card technology allows for highly
robust authentication and verification solutions.</p>


<p>Organizational Use</p>
UniMate USB is a FIPS 140-2 algorithm certified smart card USB authentication token which utilizes smart card technology for strong authentication. Smart card technology allows for highly robust authentication and verification solutions.


<p>Enhanced Business - With secure access in place,
; Organizational Use
organizations can enable business through network connectivity and online
----
services anytime, anywhere, with confidence.</p>
; Enhanced Business
: With secure access in place, organizations can enable business process and transactions through network connectivity and online services anytime, anywhere, with confidence.
; Security
: UniMate USB provides robust protection of sensitive business data from unauthorized access.
; Cost Effective
: UniMate USB reduces password administration costs and losses from data breaches, and provides multiple flexible solutions on one platform.
<br>
; Personal Use
----
; Identity Protection
: UniMate USB provides individuals with a secure digital identity and hence protected from theft and abuse.
; Portability and Convenience
: UniMate USB enables users to access their credentials securely wherever they go, whenever they want.


<p>Security - UniMate USB
[[File:FLEX Architecture *nix.jpeg|450px|center|alt=UniMate USB/Flex architecture Linux and Mac OS X (PKCS#11 and Value Added API)]]
provides robust protection of sensitive business data from unauthorized access.</p>
[[File:FLEX Architecture Mobile.jpeg|450px|center|alt=UniMate USB/Flex architecture iOS and Android (PKCS#11)]]
[[File:FLEX Architecture Win.jpeg|450px|center|alt=UniMate USB/Flex architecture Windows (PKCS#11, Value Added API and Windows CSP, minidriver, and CCID driver)]]


<p>Cost Effective - UniMate USBreduces
password administration costs and losses from data breaches, and provides
multiple flexible solutions in one platform.</p>


<p>Personal Use</p>
<div style="page-break-before:always"></div>


<p>Identity Protection - UniMate
==Security==
USBprovides individuals with a secure digital identity protected from
theft and abuse.</p>


<p>Portability and Convenience - UniMate
Security is the most important feature of the UniMate system. It involves an identification and verification method, including a file access permission control mechanism inside the UniMate, a confidential access system. This security attribute is changed based on the current state of the device, when the card is reset or after the UniMate has finished some commands.
USBenables users to access their credentials securely wherever they go,
whenever they want.</p>


<p></p>
===PIN===
 
The following table describes different key types and use.
[[#Table of Contents|Table of Contents]]
<table class="wikitable">
===<div id = "Security"></div><h2>Security</h2>===
 
<p>Security is the most important part in the UniMate system,
which involves an identification and verification method, including the file
access permission control mechanism inside the UniMate, a confidential access
system. This security attribute is changed based on the current state of the
device, when the card is reset or after the UniMate has finished some commands.</p>
 
====<div id = "PIN"></div><h3>PIN</h3>====
 
<p>The following table describes different key types and use.</p>
 
<div align=center>
 
<table border=1 cellspacing=0 cellpadding=0
>
  <tr>
  <tr>
   <td width=285>
   <td style="background-color: red;"><b style="color: #fff;">PIN Type</b></td>
  <p  align=center><b>PIN Type</b></p>
   <td style="background-color: red;"><b style="color: #fff;">Use</b></td>
  </td>
   <td width=285>
  <p  align=center><b>Use</b></p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=285 valign=top>
   <td><b>User PIN</b></td>
  <p>User PIN</p>
   <td>Directory level authentication.<br>Control different users' read and write permissions.<br>Generate key pairs.<br>Certificate management.<br>Sign and so on.</td>
  </td>
   <td width=285>
  <p>Directory level authentication. Control different
  users read and write permission, generate key pairs, certificate management,
  sign and so on.</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=285 valign=top>
   <td><b>Admin PIN</b></td>
  <p>Admin PIN</p>
   <td>Ensures the security during the card initialization<br>To reset User PIN/unlock a user.</td>
  </td>
   <td width=285>
  <p>Ensures the security during the card initialization,
  or is used to reset User PIN/unlock a user.</p>
  </td>
  </tr>
  </tr>
</table>
</table>  
 
</div>
 
<p>User PIN: a personal
identification number which is firstly hashed and then stored in the device.</p>


<p>Admin PIN: a console identification number.</p>
<b>User PIN:</b> a personal identification number which is firstly hashed and then stored in the device.


<p></p>
<b>Admin PIN:</b> a console identification number.


====<div id = "Factory Default Settings"></div><h3>Factory default settings</h3>====
===Factory default settings===


<p>The default User PIN is 11111111 and the default Admin PIN
The default User PIN is 11111111 and the default Admin PIN is 00000000.
is 00000000.</p>


<br
clear=all>


[[#Table of Contents|Table of Contents]]
<div style="page-break-before:always"></div>
===<div id = "SDK"></div><h2>SDK</h2>===


<div align=center>
==SDK==


<table border=1 cellspacing=0 cellpadding=0
<table class="wikitable">
>
  <tr>
  <tr>
   <td width=309>
   <td style="background-color: red;"><b style="color: #fff;">Components</b></td>
  <p  align=center><b>Components</b></p>
   <td style="background-color: red;"><b style="color: #fff;">Description</b></td>
  </td>
   <td width=309>
  <p  align=center><b>Description</b></p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>CSP (MS-CAPI)</b></td>
  <p>CSP (MS-CAPI)</p>
   <td>Declaration of standardized identifiers and interface of CSP<br>CSP libraries<br>Redists/PKI package.exe<br>Samples for CSP<br>CSP Manual.pdf</td>
  </td>
   <td width=309>
  <p>Declaration of standardized
  identifiers and interface of CSP;</p>
  <p>CSP libraries;</p>
  <p>Redists/PKI package.exe</p>
  <p>Samples for CSP;</p>
  <p>CSP Manual.pdf.</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>Documents</b></td>
  <p>Documents</p>
   <td>Manual.pdf (UniMate manual)</td>
  </td>
   <td width=309>
  <p>Manual.pdf (UniMate manual).</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>PKCS#11</b></td>
  <p>PKCS#11</p>
   <td>Declaration of the standardized identifiers and interface of PKCS<br>PKCS libraries<br>Samples for PKCS<br>PKCS#11.pdf</td>
  </td>
   <td width=309>
  <p>Declaration of the standardized identifiers
  and interface of PKCS;</p>
  <p>PKCS libraries;</p>
  <p>Samples for PKCS;</p>
  <p>PKCS#11.pdf.</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>Utilities</b></td>
  <p>Utilities</p>
   <td>Utilities Installation (Console setup.exe, Monitor setup.exe)<br>Utilities Manual</td>
  </td>
   <td width=309 valign=top>
  <p>Utilities Installation (Console
  setup.exe,</p>
  <p>Monitor setup.exe) and Utilities Manual.</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>Value Added API</b></td>
  <p>Value Added API</p>
   <td>Declaration of the standardized identifiers and interface of Value Added API<br>Value Added API libraries<br>Samples for Value Added API<br>API Manual.pdf</td>
  <p></p>
  </td>
   <td width=309>
  <p>Declaration of the standardized identifiers
  and interface of Value Added API;</p>
  <p>Value Added API libraries;</p>
  <p>Samples for Value Added API;</p>
  <p>API Manual.pdf.</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>Quick Start.pdf</b></td>
  <p>Quick Start.pdf</p>
   <td>Product overview<br>Software introduction<br>Utilities introduction<br>Factory default settings</td>
  </td>
   <td width=309>
  <p>Product overview, software introduction,
  utilities introduction and factory default settings should be included in the
  file.</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=309 valign=top>
   <td><b>ReadMe.txt</b></td>
  <p>ReadMe.txt</p>
   <td>Changelog</td>
  </td>
   <td width=309 valign=top>
  <p>Change log.</p>
  </td>
  </tr>
  </tr>
</table>
</table>


</div>
<div style="page-break-before:always"></div>
==Applying Digital Certificates==


<br
UniMate provides a perfect container for digital certificates, supporting X.509 digital certificates. The UniMate PKI package is a middleware that provides digital certificate usage.
clear=all>


<p></p>
A digital certificate and authenticated access is needed to use the UniMate, as without it, any operation on the UniMate is forbidden. In this part, we will introduce how to apply digital certificates. We will take VeriSign certificates and Microsoft Certificates as examples.


[[#Table of Contents|Table of Contents]]
===Applying Microsoft Certificates===
===<div id = "Applying Digital Certificates"></div><h2>Applying Digital Certificates</h2>===


<p>UniMate provides a perfect container for digital
[[File:Cert Address.jpeg|500px|alt=Microsoft certificate address]]
certificates, supporting X.509 digital certificates. The UniMate PKI package is
middleware that provides digital certificate usage. </p>


<p>A digital certificate and authenticated access is needed to
Insert a UniMate into the USB port first, and start IE to open the Microsoft certificate application page. This is the home page of the certificate application site. Firstly, you should click "Request a certificate".
use the UniMate, as without it, any operation on the UniMate is forbidden. In
this part, we will introduce how to apply digital certificates. We will take
the VeriSign certificate and Microsoft Certificate as examples.</p>


====<div id = "Applying Microsoft Certificates"></div><h3>Applying Microsoft Certificates</h3>====
[[File:CertWelcome.png|500px|alt=Microsoft Active Directory Certificate Services homepage]]


<p></p>
And then, select "advanced certificate request".


<p>Insert a UniMate into the USB port first, and start IE to
[[File:CertRequestCrop.png|500px|alt=requesting a certificate]]
open the Microsoft certificate application page. This is the home page of the
certificate application site. Firstly, you should click Request a certificate.</p>


<br
On the page of Advanced Certificate Request, select "Create and submit a request to this CA".
clear=all>


<p>And then, select advanced certificate request.</p>
[[File:AdvCertRequestCrop.png|500px|alt=advanced certificate request page]]


<p></p>
For a certificate template, select "Smartcard User" in the list; for CSP, select "UniMateDRIVE CSP v2.0".


<p>On the page of Advanced Certificate Request, select Create
[[File:AdvCertRequestOptions.png|500px|alt=advanced certificate template page]]
and submit a request to this CA.</p>


<p></p>
Then, a window will appear to ask you to type in your UniMate's PIN. Click OK. The system will generate a certificate automatically.


<p>For a certificate template, select Smartcard User in the
[[File:User Pin.png|300px|alt=enter UniMate PIN]]
list; for CSP, select UniMateDRIVE CSP v2.0.</p>


<br
Click "Install this certificate" for installation.
clear=all>


<p>Then, a window will appear to
[[File:Cert Issued Crop.jpeg|500px|alt=certificate issued]]
ask you to type in your UniMates PIN. Click OK. The system will generate a
certificate automatically.</p>


<p></p>
After installation, the system will prompt that the certificate has been successfully installed.


<p>Click Install this certificate
[[File:Cert Installed Crop.jpeg|500px|alt=certificate installed]]
for installation.</p>


<p></p>
===Using Digital Certificates===


<p>After installation, the system
SecuTech provides a series of solutions for the use of digital certificates, in the aspects of IE, Outlook, PDF, Office, and so on.
will prompt that the certificate has been successfully installed.</p>


<p></p>
For detailed instructions about this, please download the related integration guides from https:\\www.esecutech.com.


<p></p>


====<div id = "Using Digital Certificates"></div><h3>Using Digital Certificates</h3>====
<div style="page-break-before:always"></div>


<p>SecuTech provides a series of solutions about the use of
==Specifications==
digital certificates, in the aspects of IE, Outlook, PDF, Office, and so on.</p>


<p>For detailed instructions about this, please download the
===UniMate Drive===
related integration guides from www.eSecuTech.com</p>
<table class="wikitable" style="max-width: 600px;">
 
<br
clear=all>
 
[[#Table of Contents|Table of Contents]]
===<div id = "Specifications"></div><h2>Specifications</h2>===
 
====<div id = "UniMate Drive Spec"></div><h3>UniMate Drive</h3>====
<table border="1" style="border-collapse: collapse; border-spacing: 2px; border: 2px solid #000; background-color: #eff0f1;">
  <tr>
  <tr>
   <td style="padding: 4px; background-color: red;" colspan="2"><b style="color: #fff;">Key Features</b></td>
   <td style="background-color: red;" colspan="2"><b style="color: #fff;">Key Features</b></td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;" colspan="2">Driverless Operation 2GB, 4GB, 8GB, 16GB and 32GB</td>
   <td colspan="2">Driverless Operation 2GB, 4GB, 8GB, 16GB and 32GB</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Selective Mass Storage</b></td>
   <td><b>Selective Mass Storage</b></td>
   <td style="padding: 4px;">Normal Partition and Virtual CD-ROM</td>
   <td>Normal Partition<br>Virtual CD-ROM</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Dimensions</b></td>
   <td><b>Dimensions</b></td>
   <td style="padding: 4px;">57168 mm</td>
   <td>52.8x17x7 mm</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Weight</b></td>
   <td><b>Weight</b></td>
   <td style="padding: 4px;">9g</td>
   <td>7.2g</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Min. Operating Voltage</b></td>
   <td><b>Min. Operating Voltage</b></td>
   <td style="padding: 4px;">5V</td>
   <td>5V</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Current Consumption</b></td>
   <td><b>Current Consumption</b></td>
   <td style="padding: 4px;">&lt;= 50 mA</td>
   <td>&lt;= 50 mA</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Operation Temperature</b></td>
   <td><b>Operating Temperature</b></td>
   <td style="padding: 4px;">0&#8451; to 70&#8451;</td>
   <td>0&#8451; to 70&#8451;</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Storage Temperature</b></td>
   <td><b>Storage Temperature</b></td>
   <td style="padding: 4px;">-10&#8451; to 85&#8451;</td>
   <td>-10&#8451; to 85&#8451;</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Humidity Rate</b></td>
   <td><b>Humidity Rate</b></td>
   <td style="padding: 4px;">0-70% without condensation</td>
   <td>0-70% without condensation</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Casing</b></td>
   <td><b>Casing</b></td>
   <td style="padding: 4px;">Tamper-evident Metal</td>
   <td>Tamper-Resistant Metal</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Memory Data Retention</b></td>
   <td><b>Memory Data Retention</b></td>
   <td style="padding: 4px;">At least 10 years</td>
   <td>At least 10 years</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Memory Cell Rewrites</b></td>
   <td><b>Memory Cell Rewrites</b></td>
   <td style="padding: 4px;">At least 100,000 times</td>
   <td>At least 100,000 times</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>PKI</b></td>
   <td><b>PKI</b></td>
   <td style="padding: 4px;">PKCS#11, MS-CAPI</td>
   <td>PKCS#11<br>MS-CAPI</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Onboard Encryption Algorithms</b></td>
   <td><b>Onboard Encryption Algorithms</b></td>
   <td style="padding: 4px;">1024- and 2048-bit RSA; 128- and 192-bit AES; 64-bit DES; 192-bit TDES</td>
   <td>1024- and 2048-bit RSA<br>128-, 192- and 256-bit AES<br>64-bit DES and 192-bit TDES</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Onboard Hashing</b></td>
   <td><b>Onboard Hashing</b></td>
   <td style="padding: 4px;">160-bit SHA-1</td>
   <td>MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512</td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td style="padding: 4px;"><b>Operating System Compatibility</b></td>
   <td><b>Operating System Compatibility</b></td>
   <td style="padding: 4px;">Windows 2000, XP, 2003, Vista, 7, 8, Server 2008, Server 2012 and Linux</td>
   <td>Linux<br>Windows 98 SE, 2000, ME, XP, 2003, Vista, 7, 8, and 10<br>Windows Server 2000, 2008 and 2012</td>
  </tr>
  </tr>
</table>
</table>


====<div id = "UniMate Flex Spec"></div><h3>UniMate Flex</h3>====
<div style="page-break-before:always"></div>
 
<p></p>
 
<div align=center>


<table border=1 cellspacing=0 cellpadding=0
===UniMate Flex===
>
<table class="wikitable" style="max-width: 600px;">
  <tr>
  <tr>
   <td width=514 colspan=2 valign=top>
   <td style="background-color: red;" colspan="2"><b style="color: #fff;">Hardware</b></td>
  <p>Hardware</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Dimensions</b></td>
  <p>Dimensions</p>
   <td>65x36x11.4 mm</td>
  </td>
   <td width=323 valign=top>
  <p>653611.4
  mm</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Weight</b></td>
  <p>Weight</p>
   <td>23g</td>
  </td>
   <td width=323 valign=top>
  <p>23g</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Audio Interface</b></td>
  <p>Audio
   <td>3.5mm TRRS</td>
  Interface</p>
  </td>
   <td width=323 valign=top>
  <p>3.5mm
  TRRS</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>USB Interface</b></td>
  <p>USB
   <td>USB Type A</td>
  Interface</p>
  </td>
   <td width=323 valign=top>
  <p>USB
  Type A</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Display</b></td>
  <p>Display</p>
   <td>LCD</td>
  </td>
   <td width=323 valign=top>
  <p>LCD</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Hardware ID</b></td>
  <p>Hardware
   <td>64-bit Globally Unique</td>
  ID</p>
  </td>
   <td width=323 valign=top>
  <p>64-bit
  Globally Unique</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Internal Memory</b></td>
  <p>Internal
   <td>&gt; 16KB</td>
  Memory</p>
  </td>
   <td width=323 valign=top>
  <p>&gt;
  16KB</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Mobile Device Software</b></td>
  <p>Mobile
   <td>Audio Authentication Interface</td>
  Device Software</p>
  </td>
   <td width=323 valign=top>
  <p>Audio
  Authentication Interface</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Casing</b></td>
  <p>Casing</p>
   <td>Tamper-Resistant Metal</td>
  </td>
   <td width=323 valign=top>
  <p>Tamper-evident
  Metal</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 rowspan=4 valign=top>
   <td><b>Middleware</b></td>
  <p>Middleware</p>
   <td>PKCS#11<br>MS-CAPI<br>Audio Authentication API<br>X.509 Digital Certificate</td>
  <p></p>
   </td>
  <td width=323 valign=top>
  <p>PKCS#11</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=323 valign=top>
   <td style="background-color: red;" colspan="2"><b style="color: #fff;">Performance</b></td>
  <p>MS-CAPI</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=323 valign=top>
   <td><b>Min. Operating Voltage</b></td>
  <p>Audio
   <td>5V</td>
  Authentication API</p>
   </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=323 valign=top>
   <td><b>Current Consumption</b></td>
  <p>X.509
   <td>&lt;= 50 mA</td>
  Digital Certificate</p>
   </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=514 colspan=2 valign=top>
   <td><b>Operation Temperature</b></td>
  <p>Performance</p>
   <td>0&#8451; to 70&#8451;</td>
   </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Storage Temperature</b></td>
  <p>Min.
   <td>-10&#8451; to 85&#8451;</td>
  Operating Voltage</p>
  </td>
   <td width=323 valign=top>
  <p>5V</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Humidity Rate</b></td>
  <p>Current
   <td>0-70% without condensation</td>
  Consumption</p>
  </td>
   <td width=323 valign=top>
  <p>&lt;=
  50 mA</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Memory Data Retention</b></td>
  <p>Operation
   <td>At least 10 years</td>
  Temperature</p>
  </td>
   <td width=323 valign=top>
  <p>0&#8451;
  to 70&#8451;</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Memory Cell Rewriters</b></td>
  <p>Storage
   <td>At least 100,000 times</td>
  Temperature</p>
  </td>
   <td width=323 valign=top>
  <p>-10&#8451;
  to 85&#8451;</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td width=191 valign=top>
   <td><b>Supported Platforms</b></td>
  <p>Humidity
   <td>Mobile OS: iOS, Android, Symbian, Windows Phone<br>PC: Windows, Linus, Mac OS X</td>
  Rate</p>
  </td>
  <td width=323 valign=top>
  <p>0-70%
  without condensation</p>
  </td>
</tr>
<tr>
  <td width=191 valign=top>
  <p>Memory
  Data Retention</p>
  </td>
  <td width=323 valign=top>
  <p>At
  least 10 years</p>
  </td>
</tr>
<tr>
  <td width=191 valign=top>
  <p>Memory
  Cell Rewriters</p>
  </td>
  <td width=323 valign=top>
  <p>At
  least 100,000 times</p>
  </td>
</tr>
<tr>
  <td width=191 valign=top>
  <p>Supported
  Platforms</p>
  </td>
   <td width=323 valign=top>
  <p>Mobile
  OS: iOS,
  Android, Symbian,
  Windows
  Phone</p>
  <p>PC:
  Windows, Linus,
  Mac OSX</p>
  </td>
  </tr>
  </tr>
</table>
</table>


</div>
<div style="page-break-before:always"></div>


<p></p>
===UniMate USB===  
 
====<div id = "UniMate USB Spec"></div><h3>UniMate USB</h3>====
<table class="wikitable" style="max-width: 600px;">
 
<p></p>
 
<div align=center>
 
<table border=1 cellspacing=0 cellpadding=0
>
<tr>
  <td colspan=2 valign=top>
  <p>Key
  Features</p>
  </td>
</tr>
  <tr>
  <tr>
   <td colspan=2 valign=top>
   <td style="background-color: red;" colspan="2"><b style="color: #fff;">Key Features</b></td>
  <p>PKI
  token with CCID interface</p>
  <p>Embedded
  Smart Card</p>
  <p>Onboard
  Encryption</p>
  <p>Three-level
  Permission System</p>
  <p>Secure
  File System</p>
  <p>Auto-lock
  Mechanism</p>
  <p>MS-CAPI,
  PKCS#11, X.509 v3 Standard Compliant</p>
  <p>Globally
  Unique Hardware ID (32-bit)</p>
  <p>User-Defined
  Token ID</p>
  <p>Lead-Free</p>
  <p>Robust
  Case</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td colspan=2 valign=top>
   <td colspan="2">PKI token with CCID interface<br>Embedded Smart Card<br>Onboard Encryption<br>Three-level Permission System<br>Secure File System<br>Auto-lock Mechanism<br>MS-CAPI, PKCS#11 and X.509 v3 Standard Compliant<br>Globally Unique Hardware ID (32-bit)<br>User-Defined Token ID<br>Lead-Free<br>Robust Case</td>
  <p>Hardware</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td style="background-color: red;" colspan="2"><b style="color: #fff;">Hardware</b></td>
  <p>Dimensions</p>
  </td>
  <td valign=top>
  <p>52.8177
  mm</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Dimensions</b></td>
  <p>Weight</p>
   <td>52.8x17x7 mm</td>
  </td>
   <td valign=top>
  <p>9
  g</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Weight</b></td>
  <p>Interface</p>
   <td>6.4g/2.4g</td>
  </td>
   <td valign=top>
  <p>USB</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td colspan=2 valign=top>
   <td><b>Interface</b></td>
  <p>Performance</p>
   <td>USB</td>
   </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td style="background-color: red;" colspan="2"><b style="color: #fff;">Performance</b></td>
  <p>Min.
  Operating Voltage</p>
  </td>
  <td valign=top>
  <p>5V</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Min. Operating Voltage</b></td>
  <p>Current
   <td>5V</td>
  Consumption</p>
  </td>
   <td valign=top>
  <p>&lt;= 50 mA</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Current Consumption</b></td>
  <p>Operation
   <td>&lt;= 50 mA</td>
  Temperature</p>
  </td>
   <td valign=top>
  <p>0&#8451;
  to 70&#8451;</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Operation Temperature</b></td>
  <p>Storage
   <td>0&#8451; to 70&#8451;</td>
  Temperature</p>
  </td>
   <td valign=top>
  <p>-10&#8451;
  to 85&#8451;</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Storage Temperature</b></td>
  <p>Humidity
   <td>-10&#8451; to 85&#8451;</td>
  Rate</p>
  </td>
   <td valign=top>
  <p>0-70% without
  condensation</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Humidity Rate</b></td>
  <p>PKI</p>
   <td>0-70% without condensation</td>
  </td>
   <td valign=top>
  <p>PKCS#11, MS-CAPI</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>PKI</b></td>
  <p>Onboard
   <td>PKCS#11<br>MS-CAPI</td>
  Encryption</p>
  <p>Algorithms</p>
  </td>
   <td valign=top>
  <p>1024- and 2048-bit
  RSA;
  128-
  and 192-bit AES;
  64-bit DES; 192-bit
  TDES</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Onboard Encryption Algorithms</b></td>
  <p>Onboard
   <td>1024- and 2048-bit RSA<br>DSTU4145-series<br>128-, 192- and 256-bit AES<br>64-bit DES and 192-bit TDES<br>GOST28147</td>
  Hashing</p>
  </td>
   <td valign=top>
  <p>160-bit SHA-1</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Onboard Hashing</b></td>
  <p>Supported
   <td>MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512</td>
  Platforms</p>
  </td>
   <td valign=top>
  <p>Windows
  2000, XP,
  2003, Vista,
  7, 8,
  Server 2008, Server
  2012 and Linux</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td rowspan=4 valign=top>
   <td><b>Supported Platforms</b></td>
  <p>Software
   <td>Linux<br>Windows 2000, XP, 2003, Vista, 7, 8, 8.1, and 10<br>Windows Server 2008 and Server 2012</td>
  Developers</p>
  </td>
   <td valign=top>
  <p>UniMate USBAPI
  libraries in Windows, Linux</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Software Developers</b></td>
   <p>UniMate
   <td>UniMate USB API libraries in Windows and Linux<br>UniMate USB Console for management of UniMate USB devices<br>UniMate USB PKI middleware for PKCS# 11 and MS-CAPI applications<br>UniMate USB IE ActiveX Control, Firefox Plugin</td>
  USBConsole for management of UniMate USBdevices</p>
  </td>
  </tr>
  </tr>
  <tr>
  <tr>
   <td valign=top>
   <td><b>Software - Users</b></td>
  <p>UniMate USBPKI
   <td>UniMate USB Monitor for registration and management of user digital certificates</td>
  middleware for PKCS# 11 and MS-CAPI applications</p>
  </td>
</tr>
<tr>
  <td valign=top>
  <p>UniMate USBIE
  ActiveX Control, Firefox Plugin</p>
  </td>
</tr>
<tr>
  <td valign=top>
  <p>Software
  - Users</p>
  </td>
   <td valign=top>
  <p>UniMate
  USBMonitor for registration and management of
  user digital certificates</p>
  </td>
  </tr>
  </tr>
</table>
</table>


</div>


<p></p>
<div style="page-break-before:always"></div>


[[#Table of Contents|Table of Contents]]
==Frequently Asked Questions==
===<div id = "FAQ"></div><h2>Frequently Asked Questions</h2>===


<h4>What is UniMate?</h4>
===What is UniMate?===


<p>UniMate is SecuTech's mobile authentication product family
UniMate is SecuTech's mobile authentication product family focusing on secure transaction authentication and platform interchangeability by employing two-factor authentication.
focusing on secure transaction authentication and platform interchangeability
by employing two-factor authentication.</p>


<p></p>
===How does UniMate work?===


<h4>How does UniMate work?</h4>
UniMate authentication utilizes PKI technology, where certificates are securely stored within the UniMate device and are inaccessible without the appropriate permissions to interact with the device.


<p>UniMate authentication utilizes PKI technology, where
The TRRS audio port found on most mobile devices is used for secure communication during use of the device, in addition to providing a micro USB interface for use and configuration on a desktop platform.
certificates are securely stored within theUniMate device and are inaccessible
without the appropriate permissions to interact with the device.</p>


<p>The TRRS audio port found on most mobile devices is used for
===What is PKI?===
secure communication during use of the device, in addition to providing a micro
USB interface for use and configuration on a desktop platform.</p>


<p></p>
Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.


<h4>What is PKI?</h4>
===What algorithms are supported?===


<p>Public Key Infrastructure (PKI) is a set of hardware,
UniMate supports 2048-bit RSA, 1024-bit RSA, 128-bit AES, 192-bit AES, 256-bit AES, 64-bit DES, and 192-bit TDES. More algorithms will be added and current info is subjected to change from time to time.
software, people, policies, and procedures needed to create, manage,
distribute, use, store, and revoke digital certificates.</p>


<p></p>
===What is the middleware?===


<h4>What algorithms are supported?</h4>
The middleware contains PKCS#11, MS-CAPI, and Audio Authentication APIs and X.509 Digital Certificates.


<p>UniMate supports 2048-bit RSA, 1024-bit RSA, 128-bit AES, 192-bit
===What is the default PIN?===
AES, 64-bit DES, and 192-bit TDES.</p>


<p></p>
The default Admin PIN is eight zeros, or
&quot;00000000&quot;, the default User PIN is eight ones, or &quot;11111111&quot;, without quotation marks.


<h4>What is the middleware?</h4>
===Where can I receive further assistance?===


<p>The middleware contains PKCS#11, MS-CAPI, and Audio
If you have any questions, please feel free to contact us at: http://www.esecutech.com/support or [mailto:support@esecutech.com support@esecutech.com]
Authentication APIs and X.509 Digital Certificates.</p>


<p></p>
<div style="page-break-before:always"></div>


<h4>What is the default PIN?</h4>
{| style="border-style: solid; border-width: 1px;" align="center"
 
|
<p>The default Admin PIN is eight zeros, or
<gallery class="center" mode="nolines" widths=175px heights=50px caption="Follow Us!">
&quot;00000000&quot;, the default User PIN is eight ones, or &quot;11111111&quot;,
File:Twitter.png|'''[https://twitter.com/eSecuTech Twitter]'''
without quotation marks.</p>
File:Facebook.png|'''[https://www.facebook.com/eSecuTech/ Facebook]'''
 
File:YouTube.png|'''[https://www.youtube.com/user/esecutech YouTube]'''
<p></p>
File:Linked In.png|'''[https://ca.linkedin.com/in/secutech-solutions-inc-39110b25 LinkedIn]'''
 
</gallery>
<h4>Where can I receive further assistance?</h4>
|}
 
<p>If you have any questions, please feel
free to contact us at: http://www.esecutech.com/support or [mailto:support@esecutech.com support@esecutech.com]</p>
 
<p></p>
 
<b>[[#top|TOP]]</b>


<p></p>
<br><br>
[[File:Footer Logo List.png|left]]
<br><br><br>
<b style="color: #CC0000; font-size: 125%;">About SecuTech</b>


</div>
SecuTech Solution Inc. is a company specializing in data protection and strong authentication, providing total customer satisfaction in security systems &amp; services for banks, financial institutions &amp; other industries. Having extensive and in-depth experience within the information security market, SecuTech has drawn upon this experience to utilize today's cutting-edge technologies that are effective against increasingly sophisticated cyber attacks. Enabling enterprises, financial institutions, and government to safely adopt the economic benefits of mobile and cloud computing.


<b><br clear=all>
<b>http://www.esecutech.com<br>SecuTech Solution Inc.</b>
</b>


<div>
<p><b>About SecuTech</b></p>
<p>SecuTech Solution Inc. is a company specializing in data protection and strong
authentication, providing total customer satisfaction in security systems &amp;
services for banks, financial institutions and other industries. Having
extensive and in-depth experience within the information security market,
SecuTech has drawn upon this experience to utilize todays cutting-edge
technologies, enabling enterprises, financial institutions, and government to
safely adopt the economic benefits of mobile and cloud computing that are
effective against increasingly sophisticated cyber attacks.</p>
<p><b> </b><b>www.eSecuTech.com</b><b> SecuTech Solution Inc.</b></p>
</div>
<b><br
clear=all>
</b>
{| class="wikitable"
{| class="wikitable"
|+ style="text-align:left;" | Contact Us:
|+ style="text-align:left;" | Contact Us:
Line 1,084: Line 558:
| 1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada
| 1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada
| Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080
| Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080
| Suite 5.14, 32 Delhi Rd, North Ryde, NSW, 2113, Australia
| Suite 2.06, 32 Delhi Rd, North Ryde, NSW, 2113, Australia
| 4 Cours Bayard 69002 Lyon, France
| 4 Cours Bayard 69002 Lyon, France
|-
|-
Line 1,094: Line 568:
|-
|-
! scope="row"| Fax
! scope="row"| Fax
| + 1 -888-259-5825 ext.0
| +1 -888-259-5825 ext.0
| + 8610-8288 8834
| +8610-8288 8834
| 00612-9888 6185
| 00612-9888 6185
| +33-042-600-2810
| +33-042-600-2810
Line 1,105: Line 579:
| [mailto:europe@esecutech.com europe@esecutech.com]
| [mailto:europe@esecutech.com europe@esecutech.com]
|}
|}
<div>


<p><b></b></p>
<b>Copyright 2018 SecuTech Solution Inc. All rights reserved. Reproduction in whole or in part without written permission from SecuTech is prohibited. SecuTech UniMate and the SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks are properties of their respective owners. Features and specifications are subject to change without notice.</b>


<p><b>Copyright 2012 SecuTech
[[File:SecuTech Logo.png]]
Solution Inc. All rights reserved. Reproduction in whole or in part without
written permission from SecuTech is prohibited. SecuTech UniMate and the
SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks
are properties of their respective owners. Features and specifications are
subject to change without notice.</b></p>


</div>
<br><br>
<b>[[#top|TOP]]</b>

Latest revision as of 12:16, 10 August 2018


UniMate Manual

Version 2.1

Version Date
1.0 2015.7
2.0 2016.7
2.1 2018.2

The data and information contained in this document cannot be altered without the express written permission of SecuTech Solution Inc. No part of this document can be reproduced or transmitted for any purpose whatsoever, either by electronic or mechanical means.

The general terms of trade of SecuTech Solution Inc. apply. Diverging agreements must be made in writing.

Copyright SecuTech Solution Inc. All rights reserved.

WINDOWS is a registered trademark of Microsoft Corporation.

The WINDOWS-logo is a registered trademark (TM) of Microsoft Corporation.

Software License

The software and the enclosed documentation are copyright-protected. By installing the software, you agree to the conditions of the licensing agreement.

Licensing Agreement

SecuTech Solution Inc. (SecuTech for short) gives the buyer the simple, exclusive and non-transferable licensing right to use the software on one individual computer or networked computer system (LAN). Copying and any other form of reproduction of the software in full or in part as well as mixing and linking it with others is prohibited. The buyer is authorized to make one single copy of the software as backup. SecuTech reserves the right to change or improve the software without notice or to replace it with a new development. SecuTech is not obliged to inform the buyer of changes, improvements or new developments or to make these available to him. A legally binding promise of certain qualities is not given. SecuTech is not responsible for damage unless it is the result of deliberate action or negligence on the part of SecuTech or its aids and assistants. SecuTech accepts no responsibility of any kind for indirect, accompanying or subsequent damage.

Contact Information

Web: http://www.esecutech.com

Email: sales@esecutech.com

Please Email any comments, suggestions or questions regarding this document or our products to us at: sales@esecutech.com


CE Attestation of Conformity
UniMate is in conformity with the protection requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024: 1998.




FCC Standard
This device is in conformance with Part 15 of the FCC Rules and Regulation for Information Technology Equipment.
Operation of this product is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.




The equipment of UniMate is USBbased.




Conformity to ISO 9001:2000
The Quality System of SecuTech Solution Inc., including its implementation, meets the requirements of the standard ISO 9001:2000




ROHS
All UniMate products are environmentally friendly with ROHS certificates.





Overview

The UniMate USB, hereinafter referred to as UniMate, is a mobile authenticator and information security PKI product based on CCID technology (except UniMate Drive). It functions as a secure container for digital credentials. An advanced processor and secure memory are built into the device to provide security for exchanging, storing and handling of electronic information.

UniMate has achieved an effective rights management and provides a highly-secure file system. The built-in processor allows for fast and efficient information processing.

UniMate supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition). The abundant samples provided in the SDK help to ease integration.

UniMate also supports iOS, Android and a multitude of other devices through either a USB port using the CCID protocol or a 3.5mm TRRS audio jack.

UniMate Features

Universal features of UniMate
  • Globally unique hardware ID.
  • Customizable software ID.
  • Smart card based.
  • On-board encryption.
  • Two levels of PIN management mechanism.
  • A secure file system.
  • Up to 64KB of memory.
  • Stylish and cute case.
  • Lead free.

UniMate Drive

The UniMate Drive is a mobile authenticator and information security PKI product which can store key certificates. UniMate Drive includes two storage types: flash memory and CD-ROM. You can set up the storage size using the Partition tool and the Value Added library. ISO files can be loaded into the CD-ROM partition. You can also format the flash memory and copy files into it, and so on. The total capacity of the UniMate Drive is between 2 to 32 GB, you can partition it as you wish. UniMate Drive supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition).

UniMate Drive architecture Linux and Mac OS X (PKCS#11 and Value Added API)
UniMate Drive architecture Windows (PKCS#11 and Value Added API and Windows CSP, minidriver and mass storage driver)

UniMate Flex

UniMate Flex is an interactive hybrid mobile authentication token designed particularly for use in banking. The two-factor authentication device makes use of a high-performance smart card, an LED display and confirmation buttons to verify the secondary form of authentication. Users can visually confirm transaction information on-screen and press the confirmation button to approve only authorized transactions.

UniMate Flex features PKI based digital certificate and private key storage, as well as on-board encryption, with the ability to generate and store RSA secret key pairs within the key.

UniMate Flex mobile authentication token

UniMate USB

UniMate driverless USB smart card authentication token
multiple UniMate driverless USB smart card authentication tokens

UniMate USB is a FIPS 140-2 algorithm certified smart card USB authentication token which utilizes smart card technology for strong authentication. Smart card technology allows for highly robust authentication and verification solutions.

Organizational Use
Enhanced Business
With secure access in place, organizations can enable business process and transactions through network connectivity and online services anytime, anywhere, with confidence.
Security
UniMate USB provides robust protection of sensitive business data from unauthorized access.
Cost Effective
UniMate USB reduces password administration costs and losses from data breaches, and provides multiple flexible solutions on one platform.


Personal Use
Identity Protection
UniMate USB provides individuals with a secure digital identity and hence protected from theft and abuse.
Portability and Convenience
UniMate USB enables users to access their credentials securely wherever they go, whenever they want.
UniMate USB/Flex architecture Linux and Mac OS X (PKCS#11 and Value Added API)
UniMate USB/Flex architecture iOS and Android (PKCS#11)
UniMate USB/Flex architecture Windows (PKCS#11, Value Added API and Windows CSP, minidriver, and CCID driver)


Security

Security is the most important feature of the UniMate system. It involves an identification and verification method, including a file access permission control mechanism inside the UniMate, a confidential access system. This security attribute is changed based on the current state of the device, when the card is reset or after the UniMate has finished some commands.

PIN

The following table describes different key types and use.

PIN Type Use
User PIN Directory level authentication.
Control different users' read and write permissions.
Generate key pairs.
Certificate management.
Sign and so on.
Admin PIN Ensures the security during the card initialization
To reset User PIN/unlock a user.

User PIN: a personal identification number which is firstly hashed and then stored in the device.

Admin PIN: a console identification number.

Factory default settings

The default User PIN is 11111111 and the default Admin PIN is 00000000.


SDK

Components Description
CSP (MS-CAPI) Declaration of standardized identifiers and interface of CSP
CSP libraries
Redists/PKI package.exe
Samples for CSP
CSP Manual.pdf
Documents Manual.pdf (UniMate manual)
PKCS#11 Declaration of the standardized identifiers and interface of PKCS
PKCS libraries
Samples for PKCS
PKCS#11.pdf
Utilities Utilities Installation (Console setup.exe, Monitor setup.exe)
Utilities Manual
Value Added API Declaration of the standardized identifiers and interface of Value Added API
Value Added API libraries
Samples for Value Added API
API Manual.pdf
Quick Start.pdf Product overview
Software introduction
Utilities introduction
Factory default settings
ReadMe.txt Changelog

Applying Digital Certificates

UniMate provides a perfect container for digital certificates, supporting X.509 digital certificates. The UniMate PKI package is a middleware that provides digital certificate usage.

A digital certificate and authenticated access is needed to use the UniMate, as without it, any operation on the UniMate is forbidden. In this part, we will introduce how to apply digital certificates. We will take VeriSign certificates and Microsoft Certificates as examples.

Applying Microsoft Certificates

Microsoft certificate address

Insert a UniMate into the USB port first, and start IE to open the Microsoft certificate application page. This is the home page of the certificate application site. Firstly, you should click "Request a certificate".

Microsoft Active Directory Certificate Services homepage

And then, select "advanced certificate request".

requesting a certificate

On the page of Advanced Certificate Request, select "Create and submit a request to this CA".

advanced certificate request page

For a certificate template, select "Smartcard User" in the list; for CSP, select "UniMateDRIVE CSP v2.0".

advanced certificate template page

Then, a window will appear to ask you to type in your UniMate's PIN. Click OK. The system will generate a certificate automatically.

enter UniMate PIN

Click "Install this certificate" for installation.

certificate issued

After installation, the system will prompt that the certificate has been successfully installed.

certificate installed

Using Digital Certificates

SecuTech provides a series of solutions for the use of digital certificates, in the aspects of IE, Outlook, PDF, Office, and so on.

For detailed instructions about this, please download the related integration guides from https:\\www.esecutech.com.


Specifications

UniMate Drive

Key Features
Driverless Operation 2GB, 4GB, 8GB, 16GB and 32GB
Selective Mass Storage Normal Partition
Virtual CD-ROM
Dimensions 52.8x17x7 mm
Weight 7.2g
Min. Operating Voltage 5V
Current Consumption <= 50 mA
Operating Temperature 0℃ to 70℃
Storage Temperature -10℃ to 85℃
Humidity Rate 0-70% without condensation
Casing Tamper-Resistant Metal
Memory Data Retention At least 10 years
Memory Cell Rewrites At least 100,000 times
PKI PKCS#11
MS-CAPI
Onboard Encryption Algorithms 1024- and 2048-bit RSA
128-, 192- and 256-bit AES
64-bit DES and 192-bit TDES
Onboard Hashing MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512
Operating System Compatibility Linux
Windows 98 SE, 2000, ME, XP, 2003, Vista, 7, 8, and 10
Windows Server 2000, 2008 and 2012

UniMate Flex

Hardware
Dimensions 65x36x11.4 mm
Weight 23g
Audio Interface 3.5mm TRRS
USB Interface USB Type A
Display LCD
Hardware ID 64-bit Globally Unique
Internal Memory > 16KB
Mobile Device Software Audio Authentication Interface
Casing Tamper-Resistant Metal
Middleware PKCS#11
MS-CAPI
Audio Authentication API
X.509 Digital Certificate
Performance
Min. Operating Voltage 5V
Current Consumption <= 50 mA
Operation Temperature 0℃ to 70℃
Storage Temperature -10℃ to 85℃
Humidity Rate 0-70% without condensation
Memory Data Retention At least 10 years
Memory Cell Rewriters At least 100,000 times
Supported Platforms Mobile OS: iOS, Android, Symbian, Windows Phone
PC: Windows, Linus, Mac OS X

UniMate USB

Key Features
PKI token with CCID interface
Embedded Smart Card
Onboard Encryption
Three-level Permission System
Secure File System
Auto-lock Mechanism
MS-CAPI, PKCS#11 and X.509 v3 Standard Compliant
Globally Unique Hardware ID (32-bit)
User-Defined Token ID
Lead-Free
Robust Case
Hardware
Dimensions 52.8x17x7 mm
Weight 6.4g/2.4g
Interface USB
Performance
Min. Operating Voltage 5V
Current Consumption <= 50 mA
Operation Temperature 0℃ to 70℃
Storage Temperature -10℃ to 85℃
Humidity Rate 0-70% without condensation
PKI PKCS#11
MS-CAPI
Onboard Encryption Algorithms 1024- and 2048-bit RSA
DSTU4145-series
128-, 192- and 256-bit AES
64-bit DES and 192-bit TDES
GOST28147
Onboard Hashing MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512
Supported Platforms Linux
Windows 2000, XP, 2003, Vista, 7, 8, 8.1, and 10
Windows Server 2008 and Server 2012
Software Developers UniMate USB API libraries in Windows and Linux
UniMate USB Console for management of UniMate USB devices
UniMate USB PKI middleware for PKCS# 11 and MS-CAPI applications
UniMate USB IE ActiveX Control, Firefox Plugin
Software - Users UniMate USB Monitor for registration and management of user digital certificates


Frequently Asked Questions

What is UniMate?

UniMate is SecuTech's mobile authentication product family focusing on secure transaction authentication and platform interchangeability by employing two-factor authentication.

How does UniMate work?

UniMate authentication utilizes PKI technology, where certificates are securely stored within the UniMate device and are inaccessible without the appropriate permissions to interact with the device.

The TRRS audio port found on most mobile devices is used for secure communication during use of the device, in addition to providing a micro USB interface for use and configuration on a desktop platform.

What is PKI?

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

What algorithms are supported?

UniMate supports 2048-bit RSA, 1024-bit RSA, 128-bit AES, 192-bit AES, 256-bit AES, 64-bit DES, and 192-bit TDES. More algorithms will be added and current info is subjected to change from time to time.

What is the middleware?

The middleware contains PKCS#11, MS-CAPI, and Audio Authentication APIs and X.509 Digital Certificates.

What is the default PIN?

The default Admin PIN is eight zeros, or "00000000", the default User PIN is eight ones, or "11111111", without quotation marks.

Where can I receive further assistance?

If you have any questions, please feel free to contact us at: http://www.esecutech.com/support or support@esecutech.com






About SecuTech

SecuTech Solution Inc. is a company specializing in data protection and strong authentication, providing total customer satisfaction in security systems & services for banks, financial institutions & other industries. Having extensive and in-depth experience within the information security market, SecuTech has drawn upon this experience to utilize today's cutting-edge technologies that are effective against increasingly sophisticated cyber attacks. Enabling enterprises, financial institutions, and government to safely adopt the economic benefits of mobile and cloud computing.

http://www.esecutech.com
SecuTech Solution Inc.

Contact Us:
North America China Asia-Pacific EMEA
Address 1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080 Suite 2.06, 32 Delhi Rd, North Ryde, NSW, 2113, Australia 4 Cours Bayard 69002 Lyon, France
Phone +1 -888-259-5825 +8610-8288 8834 00612-9888 6185 +33-042-600-2810
Fax +1 -888-259-5825 ext.0 +8610-8288 8834 00612-9888 6185 +33-042-600-2810
Email info@esecutech.com cn@esecutech.com aus@esecutech.com europe@esecutech.com

Copyright 2018 SecuTech Solution Inc. All rights reserved. Reproduction in whole or in part without written permission from SecuTech is prohibited. SecuTech UniMate and the SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks are properties of their respective owners. Features and specifications are subject to change without notice.



TOP

Retrieved from "https://esecutech.com/wiki/index.php?title=UniMate_USB_User_Manual&oldid=2736"