UniToken Integration Guide Adobe PDF: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
Joseph (talk | contribs)
Bao (talk | contribs)
mNo edit summary
 
(5 intermediate revisions by one other user not shown)
Line 5: Line 5:
This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".
This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" |  '''1'''  
| width="50" | '''1'''  
| width="400" | Right-click on the PKI package installation file and choose [Run as administrator].<br>Execute the file with an account that has administrator rights on this computer.<br><br>
| width="400" | Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
| [[Image:Bitlocker img01.jpg|370x259px]]<br><br>
| [[Image:Bitlocker img01.jpg|370x259px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Click on [Next] in the InstallShield Wizard welcome screen.<br>
| width="400" | Click on [Next] in the InstallShield Wizard welcome screen.
| [[Image:Bitlocker img02.jpg|370px]]<br><br>
| [[Image:Bitlocker img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Input your User Name and Company Name and click on [Next]..<br>
| width="400" | Input your User Name and Company Name and click on [Next].
| [[Image:Bitlocker img03.jpg|370px]]<br><br>
| [[Image:Bitlocker img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Select [Complete] and click on [Next].<br>
| width="400" | Select [Complete] and click on [Next].
| [[Image:Bitlocker img04.jpg|370px]]<br><br>
| [[Image:Bitlocker img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Click on [Install] to begin the installation of the PKI package.<br>
| width="400" | Click on [Install] to begin the installation of the PKI package.
| [[Image:Bitlocker img05.jpg|370px]]<br><br>
| [[Image:Bitlocker img05.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Verify that the InstallShield Wizard completed successfully and click on [Finish].<br>
| width="400" | Verify that the InstallShield Wizard completed successfully and click on [Finish].
| [[Image:Bitlocker img06.jpg|370px]]<br><br>
| [[Image:Bitlocker img06.jpg|370px]]
|}
|}


<br>


== Request a VeriSign Certificate ==
== Request a VeriSign Certificate ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | Open your internet browser of your choice and navigate to the page  
| width="400" | Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
https://digitalid.verisign.com/client/class1MS.htm<br><br>
| [[Image:adobepdf img01.jpg|370px]]
With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate fully usable for 60 days.<br>
| [[Image:adobepdf img01.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | In the field "Cryptographic Service  Provider Name", choose [UniToken PRO CSP v2.0].<br>
| width="400" | In the field "Cryptographic Service  Provider Name", choose [UniToken PRO CSP v2.0].


| [[Image:adobepdf img02.jpg|370px]]<br><br>
| [[Image:adobepdf img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Click on [Accept] to request the certificate. <br>
| width="400" | Click on [Accept] to request the certificate.  
| [[Image:adobepdf img03.jpg|370px]]<br><br>
| [[Image:adobepdf img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Type the corresponding Uuser PIN for the UniToken PRO device and click [OK].<br>
| width="400" | Type the corresponding User PIN for the UniToken PRO device and click [OK].
| [[Image:adobepdf img04.jpg|370px]]<br><br>
| [[Image:adobepdf img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier.<br>
| width="400" | An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
Copy the Digital ID PIN from the email and navigate to the URL specified in the email, https://digitalid.verisign.com/enrollment/mspickup.htm.<br>
| [[Image:adobepdf img05.jpg|370px]]
| [[Image:adobepdf img05.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Paste the Digital ID PIN that you copied from the email  
| width="400" | Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
in the corresponding field and click on [Submit].<br>
| [[Image:adobepdf img06.jpg|370px]]
| [[Image:adobepdf img06.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''7'''  
| width="50" | '''7'''  
| width="400" | Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a [Certificate Imported Successfully] message will appear.<br>
| width="400" | Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.
The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.<br>
| [[Image:adobepdf img07.jpg|370px]]
| [[Image:adobepdf img07.jpg|370px]]<br><br>
|}
|}


== Encrypt a PDF Document ==
== Encrypt a PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | With Adobe Acrobat Pro, open the PDF document you wish to protect. <br>
| width="400" | With Adobe Acrobat Pro, open the PDF document you wish to protect.  
| [[Image:adobepdf img08.jpg|370px]]<br><br>
| [[Image:adobepdf img08.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | In the menu, click on [Advanced], [Security], [Encrypt with Certificate].<br>
| width="400" | In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. ''In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].''
''In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].''
| [[Image:adobepdf img09.jpg|370px]]
| [[Image:adobepdf img09.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security, however.<br>
| width="400" | Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. ''The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however.'' Click [Next].
Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with.<br>
| [[Image:adobepdf img10.jpg|370px]]
''The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however.''<br>
Click [Next].<br>
| [[Image:adobepdf img10.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Choose the certificate you wish to use to encrypt the  
| width="400" | Choose the certificate you wish to use to encrypt the document with, then click on [Next].
document with, then click on [Next].<br>
| [[Image:adobepdf img11.jpg|370px]]
| [[Image:adobepdf img11.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Verify the configured settings are correct, then click on [Finish].<br>
| width="400" | Verify the configured settings are correct, then click on [Finish].
| [[Image:adobepdf img12.jpg|370px]]<br><br>
| [[Image:adobepdf img12.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.<br>
| width="400" | A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.
| [[Image:adobepdf img13.jpg|370px]]<br><br>
| [[Image:adobepdf img13.jpg|370px]]
|}
|}


== Open an Encrypted PDF Document ==
== Open an Encrypted PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].<br>
| width="400" | When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
| <center>[[Image:adobepdf img14.jpg|370px]]</center><br><br>
| <center>[[Image:adobepdf img14.jpg|370px]]</center>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.<br>
| width="400" | The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
| [[Image:adobepdf img15.jpg|370px]]<br><br>
| [[Image:adobepdf img15.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.<br>
| width="400" | If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.
| [[Image:adobepdf img16.jpg|370px]]<br><br>
| [[Image:adobepdf img16.jpg|370px]]
|}
|}


Line 128: Line 117:
'''PDF''': Portable document format
'''PDF''': Portable document format


'''Public Key Infrastructure (PKI)''' is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.
'''Public Key Infrastructure (PKI)''': a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.


'''Microsoft Cryptography API, MS-CAPI''' is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.
'''Microsoft Cryptography API, MS-CAPI''': an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.


'''PKCS''' refers to a group of public-key cryptography standards devised and published by RSA Security.
'''PKCS''': refers to a group of public-key cryptography standards devised and published by RSA Security.

Latest revision as of 16:43, 23 August 2016


Install the PKI package

This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".

1 Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
2 Click on [Next] in the InstallShield Wizard welcome screen.
3 Input your User Name and Company Name and click on [Next].
4 Select [Complete] and click on [Next].
5 Click on [Install] to begin the installation of the PKI package.
6 Verify that the InstallShield Wizard completed successfully and click on [Finish].


Request a VeriSign Certificate

1 Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
2 In the field "Cryptographic Service Provider Name", choose [UniToken PRO CSP v2.0].
3 Click on [Accept] to request the certificate.
4 Type the corresponding User PIN for the UniToken PRO device and click [OK].
5 An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
6 Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
7 Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.

Encrypt a PDF Document

1 With Adobe Acrobat Pro, open the PDF document you wish to protect.
2 In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].
3 Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however. Click [Next].
4 Choose the certificate you wish to use to encrypt the document with, then click on [Next].
5 Verify the configured settings are correct, then click on [Finish].
6 A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.

Open an Encrypted PDF Document

1 When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
2 The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
3 If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.

Glossary

PDF: Portable document format

Public Key Infrastructure (PKI): a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI: an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS: refers to a group of public-key cryptography standards devised and published by RSA Security.