UniToken Integration Guide Adobe PDF: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
← Older edit

Bao (talk | contribs)

0 edits
Bao (talk | contribs)
0 edits
mNo edit summary
 
(16 intermediate revisions by 2 users not shown)
Line 3: Line 3:
== Install the PKI package  ==
== Install the PKI package  ==


This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.  
This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" |  '''1'''  
| width="50" | '''1'''  
| width="400" | Right-Click on the PKI package installation file and choose “Run as administrator”<br>Execute the file with an account that has administrator rights on this computer.<br><br>
| width="400" | Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
| [[Image:Bitlocker img01.jpg|370x259px]]<br><br>
| [[Image:Bitlocker img01.jpg|370x259px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Click on [Next] in the welcome screen.<br>
| width="400" | Click on [Next] in the InstallShield Wizard welcome screen.
| [[Image:Bitlocker img02.jpg|370px]]<br><br>
| [[Image:Bitlocker img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Input your username and Company Name and click on [Next].<br>
| width="400" | Input your User Name and Company Name and click on [Next].
| [[Image:Bitlocker img03.jpg|370px]]<br><br>
| [[Image:Bitlocker img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Select [Complete] and click on [Next].<br>
| width="400" | Select [Complete] and click on [Next].
| [[Image:Bitlocker img04.jpg|370px]]<br><br>
| [[Image:Bitlocker img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Click on [Install] to begin the installation of the PKI package.<br>
| width="400" | Click on [Install] to begin the installation of the PKI package.
| [[Image:Bitlocker img05.jpg|370px]]<br><br>
| [[Image:Bitlocker img05.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Verify that the install wizard completed correctly and click on [Finish].<br>
| width="400" | Verify that the InstallShield Wizard completed successfully and click on [Finish].
| [[Image:Bitlocker img06.jpg|370px]]<br><br>
| [[Image:Bitlocker img06.jpg|370px]]
|}
|}


<br>
== Configure PKCS support in TrueCrypt ==
{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" | &nbsp;'''1'''
| width="400" | In the main menu, go to [Settings], [Security　Tokens]. <br><br>
| <center>[[Image:freeotfe img01.jpg|370px]]</center><br><br>
|-
| width="50" | &nbsp;'''2'''
| width="400" | In the [Options] window, [PKCS#11] tab, Check [Enable PKCS#11 support] and choose the library file. By default the PKI package will install this file in the Windows\System32\ folder.<br><br>
Choose where to save the settings in the field [Save above settings to] and click on OK to apply the settings.<br>
| [[Image:freeotfe img02.jpg|370px]]<br><br>
|}


== Request a VeriSign Certificate ==
== Request a VeriSign Certificate ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | Open Internet Explorer and go to the page  
| width="400" | Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
https://digitalid.verisign.com/client/class1MS.htm<br><br>
| [[Image:adobepdf img01.jpg|370px]]
You can buy a digital certificate or can a free evaluation version that is fully usable for 60days.<br>
| [[Image:adobepdf img01.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | In the field “Cryptographic Service  Provider Name”, choose “UniToken PRO CSP v2.0”.<br>
| width="400" | In the field "Cryptographic Service  Provider Name", choose [UniToken PRO CSP v2.0].


| [[Image:adobepdf img02.jpg|370px]]<br><br>
| [[Image:adobepdf img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Click on [Accept] to request the certificate. <br>
| width="400" | Click on [Accept] to request the certificate.  
| [[Image:adobepdf img03.jpg|370px]]<br><br>
| [[Image:adobepdf img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Type the correct user PIN for UniToken PRO and click on [OK].<br>
| width="400" | Type the corresponding User PIN for the UniToken PRO device and click [OK].
| [[Image:freeotfe img04.jpg|370px]]<br><br>
| [[Image:adobepdf img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Check the mailbox that you used to request the certificate. You should have receive a mail explaining how to continue the request procedure.<br>
| width="400" | An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
Copy the Digital ID PIN and go to the URL written in  
| [[Image:adobepdf img05.jpg|370px]]
the mail.( https://digitalid.verisign.com/enrollment/mspick
up.htm).<br>
| [[Image:adobepdf img05.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue.<br>
| width="400" | Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
| [[Image:adobepdf img06.jpg|370px]]<br><br>
| [[Image:adobepdf img06.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''7'''  
| width="50" | '''7'''  
| width="400" | Choose the elements to use to secure your volume, the more you use elements, the more you can secure your volume.<br>
| width="400" | Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.
We have chosen to use Microsoft CryptoAPI and PKCS#11 token.<br>
| [[Image:adobepdf img07.jpg|370px]]
| [[Image:adobepdf img07.jpg|370px]]<br><br>
|}
|}


== Create a secret file inside UniToken and use it to secure your volume ==
== Encrypt a PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
| width="50" | &nbsp;'''1'''
| width="400" | Select [Tools] [PKCS#11 token management]<br>
| [[Image:freeotfe img28.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''1'''  
| width="400" | Input your User PIN for your UniToken and click on [OK]<br>
| width="400" | With Adobe Acrobat Pro, open the PDF document you wish to protect.
| [[Image:freeotfe img29.jpg|370px]]<br><br>
| [[Image:adobepdf img08.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''2'''  
| width="400" | In the [Secret Keys] tab, click on [New].<br>
| width="400" | In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. ''In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].''
In the [New PKCS#11 Secret Key] window, input a name for your Secret Key and click on [OK]
| [[Image:adobepdf img09.jpg|370px]]
<br>
| [[Image:freeotfe img30.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''3'''  
| width="400" | Click on [OK] to close the information window confirming that the Secret Key was created successfully.<br>
| width="400" | Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. ''The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however.'' Click [Next].
| [[Image:freeotfe img31.jpg|370px]]<br><br>
| [[Image:adobepdf img10.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''4'''  
| width="400" | Select the Secret file that you created and click on [Secure].<br>
| width="400" | Choose the certificate you wish to use to encrypt the document with, then click on [Next].
| [[Image:freeotfe img32.jpg|370px]]<br><br>
| [[Image:adobepdf img11.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''5'''  
| width="400" | Click on the icon corresponding to your type of volume (file or partition) and select the volume that you want to protect with the Secret Key. Click on [OK] to confirm.<br>
| width="400" | Verify the configured settings are correct, then click on [Finish].
| [[Image:freeotfe img33.jpg|370px]]<br><br>
| [[Image:adobepdf img12.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''7'''  
| width="50" | '''6'''  
| width="400" | Click on [Yes] to confirm that you want to protect the volume.<br>
| width="400" | A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.
A dialog pop will appear to confirm that the volume has been correctly protected.<br>
| [[Image:adobepdf img13.jpg|370px]]
| [[Image:freeotfe img34.jpg|370px]]<br><br>
|}
|}


== Mount the encrypted volume ==
== Open an Encrypted PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
| width="50" | &nbsp;'''1'''
| width="400" | Click on [Mount file] and select your volume.<br>
| <center>[[Image:freeotfe img35.jpg|370px]]</center><br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''1'''  
| width="400" | Enter the password for the volume and click on [Advanced].<br>
| width="400" | When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
| [[Image:freeotfe img36.jpg|370px]]<br><br>
| <center>[[Image:adobepdf img14.jpg|370px]]</center>
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''2'''  
| width="400" | In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.<br>
| width="400" | The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
| [[Image:freeotfe img37.jpg|370px]]<br><br>
| [[Image:adobepdf img15.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''3'''  
| width="400" | Select the right secret key for the volume and click on [OK] to mount the volume.<br>
| width="400" | If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.
If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.<br><br>
| [[Image:adobepdf img16.jpg|370px]]
| [[Image:freeotfe img38.jpg|370px]]<br><br>
|}
|}


== Glossary ==
== Glossary ==


'''Public Key Infrastructure (PKI)''' is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.
'''PDF''': Portable document format
 
'''Public Key Infrastructure (PKI)''': a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.


'''Microsoft Cryptography API, MS-CAPI''' is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.
'''Microsoft Cryptography API, MS-CAPI''': an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.


'''PKCS''' refers to a group of public-key cryptography standards devised and published by RSA Security.
'''PKCS''': refers to a group of public-key cryptography standards devised and published by RSA Security.

Latest revision as of 16:43, 23 August 2016


Install the PKI package

This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".

1 Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
2 Click on [Next] in the InstallShield Wizard welcome screen.
3 Input your User Name and Company Name and click on [Next].
4 Select [Complete] and click on [Next].
5 Click on [Install] to begin the installation of the PKI package.
6 Verify that the InstallShield Wizard completed successfully and click on [Finish].


Request a VeriSign Certificate

1 Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
2 In the field "Cryptographic Service Provider Name", choose [UniToken PRO CSP v2.0].
3 Click on [Accept] to request the certificate.
4 Type the corresponding User PIN for the UniToken PRO device and click [OK].
5 An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
6 Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
7 Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.

Encrypt a PDF Document

1 With Adobe Acrobat Pro, open the PDF document you wish to protect.
2 In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].
3 Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however. Click [Next].
4 Choose the certificate you wish to use to encrypt the document with, then click on [Next].
5 Verify the configured settings are correct, then click on [Finish].
6 A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.

Open an Encrypted PDF Document

1 When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
2 The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
3 If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.

Glossary

PDF: Portable document format

Public Key Infrastructure (PKI): a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI: an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS: refers to a group of public-key cryptography standards devised and published by RSA Security.

Retrieved from "https://esecutech.com/wiki/index.php?title=UniToken_Integration_Guide_Adobe_PDF&oldid=583"