UniToken Integration Guide Adobe PDF: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search

Bao (talk | contribs)

0 edits
Created page with "category:UniToken_Integration_Guide == Install the PKI package == This part explains how to install the PKI package that you can find inside the SDK. The End User packa..."
 
Bao (talk | contribs)
0 edits
mNo edit summary
 
(17 intermediate revisions by 2 users not shown)
Line 3: Line 3:
== Install the PKI package  ==
== Install the PKI package  ==


This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.  
This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" |  '''1'''  
| width="50" | '''1'''  
| width="400" | Right-Click on the PKI package installation file and choose “Run as administrator”<br>Execute the file with an account that has administrator rights on this computer.<br><br>
| width="400" | Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
| [[Image:Bitlocker img01.jpg|370x259px]]<br><br>
| [[Image:Bitlocker img01.jpg|370x259px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Click on [Next] in the welcome screen.<br>
| width="400" | Click on [Next] in the InstallShield Wizard welcome screen.
| [[Image:Bitlocker img02.jpg|370px]]<br><br>
| [[Image:Bitlocker img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Input your username and Company Name and click on [Next].<br>
| width="400" | Input your User Name and Company Name and click on [Next].
| [[Image:Bitlocker img03.jpg|370px]]<br><br>
| [[Image:Bitlocker img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Select [Complete] and click on [Next].<br>
| width="400" | Select [Complete] and click on [Next].
| [[Image:Bitlocker img04.jpg|370px]]<br><br>
| [[Image:Bitlocker img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Click on [Install] to begin the installation of the PKI package.<br>
| width="400" | Click on [Install] to begin the installation of the PKI package.
| [[Image:Bitlocker img05.jpg|370px]]<br><br>
| [[Image:Bitlocker img05.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Verify that the install wizard completed correctly and click on [Finish].<br>
| width="400" | Verify that the InstallShield Wizard completed successfully and click on [Finish].
| [[Image:Bitlocker img06.jpg|370px]]<br><br>
| [[Image:Bitlocker img06.jpg|370px]]
|}
|}


<br>


== Configure PKCS support in TrueCrypt ==
== Request a VeriSign Certificate ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | In the main menu, go to [Settings], [Security　Tokens]. <br><br>
| width="400" | Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
| <center>[[Image:freeotfe img01.jpg|370px]]</center><br><br>
| [[Image:adobepdf img01.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | In the [Options] window, [PKCS#11] tab, Check [Enable PKCS#11 support] and choose the library file. By default the PKI package will install this file in the Windows\System32\ folder.<br><br>
| width="400" | In the field "Cryptographic Service  Provider Name", choose [UniToken PRO CSP v2.0].
Choose where to save the settings in the field [Save above settings to] and click on OK to apply the settings.<br>
| [[Image:freeotfe img02.jpg|370px]]<br><br>
|}
 
== Create an encrypted volume with FreeOTFE ==
 
{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" | &nbsp;'''1'''
| width="400" | To create a new encrypted volume, click on [New].<br>
| [[Image:freeotfe img03.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''2'''
| width="400" | On the [FreeOTFE Volume Creation Wizard] welcome page, click on [Next] to start the volume creation procedure.<br>


| [[Image:freeotfe img04.jpg|370px]]<br><br>
| [[Image:adobepdf img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | You can choose to store the encrypted volume as a file or to encrypt a whole partition/disk. Choose the one that fits the best to your needs. <br>
| width="400" | Click on [Accept] to request the certificate.  
In our case, we chose to store the encrypted volume as a file.<br>
| [[Image:adobepdf img03.jpg|370px]]
Click on [Next] to continue.<br>
| [[Image:freeotfe img05.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Choose where you want to store the volume and click on [Next] to continue.<br>
| width="400" | Type the corresponding User PIN for the UniToken PRO device and click [OK].
| [[Image:freeotfe img06.jpg|370px]]<br><br>
| [[Image:adobepdf img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Choose the size of your encrypted volume and click on [Next] to continue.<br>
| width="400" | An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
| [[Image:freeotfe img07.jpg|370px]]<br><br>
| [[Image:adobepdf img05.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue.<br>
| width="400" | Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
| [[Image:freeotfe img08.jpg|370px]]<br><br>
| [[Image:adobepdf img06.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''7'''  
| width="50" | '''7'''  
| width="400" | Choose the elements to use to secure your volume, the more you use elements, the more you can secure your volume.<br>
| width="400" | Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.
We have chosen to use Microsoft CryptoAPI and PKCS#11 token.<br>
| [[Image:adobepdf img07.jpg|370px]]
| [[Image:freeotfe img09.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''8'''
| width="400" | Check that you have selected the right UniToken and click on [Next] to continue.<br>
| [[Image:freeotfe img10.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''9'''
| width="400" | Input a password for your encrypted volume. This doesn’t have to be the same password with your UniToken. Click on [Next] to continue.<br>
| [[Image:freeotfe img11.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''10'''
| width="400" | Check that the details for the new volume creation are correct and click on [Finish] to create the volume.<br>
| [[Image:freeotfe img12.jpg|370px]]<br><br>
|}
|}


== Create a secret file inside UniToken and use it to secure your volume ==
== Encrypt a PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | Select [Tools] [PKCS#11 token management]<br>
| width="400" | With Adobe Acrobat Pro, open the PDF document you wish to protect.
| [[Image:freeotfe img28.jpg|370px]]<br><br>
| [[Image:adobepdf img08.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Input your User PIN for your UniToken and click on [OK]<br>
| width="400" | In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. ''In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].''
| [[Image:freeotfe img29.jpg|370px]]<br><br>
| [[Image:adobepdf img09.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | In the [Secret Keys] tab, click on [New].<br>
| width="400" | Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. ''The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however.'' Click [Next].
In the [New PKCS#11 Secret Key] window, input a name for your Secret Key and click on [OK]
| [[Image:adobepdf img10.jpg|370px]]
<br>
| [[Image:freeotfe img30.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Click on [OK] to close the information window confirming that the Secret Key was created successfully.<br>
| width="400" | Choose the certificate you wish to use to encrypt the document with, then click on [Next].
| [[Image:freeotfe img31.jpg|370px]]<br><br>
| [[Image:adobepdf img11.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Select the Secret file that you created and click on [Secure].<br>
| width="400" | Verify the configured settings are correct, then click on [Finish].
| [[Image:freeotfe img32.jpg|370px]]<br><br>
| [[Image:adobepdf img12.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Click on the icon corresponding to your type of volume (file or partition) and select the volume that you want to protect with the Secret Key. Click on [OK] to confirm.<br>
| width="400" | A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.
| [[Image:freeotfe img33.jpg|370px]]<br><br>
| [[Image:adobepdf img13.jpg|370px]]
|-
| width="50" | &nbsp;'''7'''
| width="400" | Click on [Yes] to confirm that you want to protect the volume.<br>
A dialog pop will appear to confirm that the volume has been correctly protected.<br>
| [[Image:freeotfe img34.jpg|370px]]<br><br>
|}
|}


== Mount the encrypted volume ==
== Open an Encrypted PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | Click on [Mount file] and select your volume.<br>
| width="400" | When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
| <center>[[Image:freeotfe img35.jpg|370px]]</center><br><br>
| <center>[[Image:adobepdf img14.jpg|370px]]</center>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Enter the password for the volume and click on [Advanced].<br>
| width="400" | The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
| [[Image:freeotfe img36.jpg|370px]]<br><br>
| [[Image:adobepdf img15.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.<br>
| width="400" | If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.
| [[Image:freeotfe img37.jpg|370px]]<br><br>
| [[Image:adobepdf img16.jpg|370px]]
|-
| width="50" | &nbsp;'''4'''
| width="400" | Select the right secret key for the volume and click on [OK] to mount the volume.<br>
If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.<br><br>
| [[Image:freeotfe img38.jpg|370px]]<br><br>
|}
|}


== Glossary ==
== Glossary ==


'''Public Key Infrastructure (PKI)''' is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.
'''PDF''': Portable document format
 
'''Public Key Infrastructure (PKI)''': a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.


'''Microsoft Cryptography API, MS-CAPI''' is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.
'''Microsoft Cryptography API, MS-CAPI''': an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.


'''PKCS''' refers to a group of public-key cryptography standards devised and published by RSA Security.
'''PKCS''': refers to a group of public-key cryptography standards devised and published by RSA Security.

Latest revision as of 16:43, 23 August 2016


Install the PKI package

This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".

1 Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
2 Click on [Next] in the InstallShield Wizard welcome screen.
3 Input your User Name and Company Name and click on [Next].
4 Select [Complete] and click on [Next].
5 Click on [Install] to begin the installation of the PKI package.
6 Verify that the InstallShield Wizard completed successfully and click on [Finish].


Request a VeriSign Certificate

1 Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
2 In the field "Cryptographic Service Provider Name", choose [UniToken PRO CSP v2.0].
3 Click on [Accept] to request the certificate.
4 Type the corresponding User PIN for the UniToken PRO device and click [OK].
5 An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
6 Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
7 Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.

Encrypt a PDF Document

1 With Adobe Acrobat Pro, open the PDF document you wish to protect.
2 In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].
3 Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however. Click [Next].
4 Choose the certificate you wish to use to encrypt the document with, then click on [Next].
5 Verify the configured settings are correct, then click on [Finish].
6 A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.

Open an Encrypted PDF Document

1 When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
2 The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
3 If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.

Glossary

PDF: Portable document format

Public Key Infrastructure (PKI): a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI: an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS: refers to a group of public-key cryptography standards devised and published by RSA Security.

Retrieved from "https://esecutech.com/wiki/index.php?title=UniToken_Integration_Guide_Adobe_PDF&oldid=583"