UniToken Integration Guide GINA: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
Line 50: Line 50:
|}
|}


== Encrypt the hard disk with BitLocker ==
== Windows Logon ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| cellspacing="0" cellpadding="0" border="0" width=""
|-
|-
| width="50" |  '''1'''  
| width="50" |  '''1'''  
| width="400" | From the [Start] menu, type “BitLocker”, and from the results that appears, choose [Manage BitLocker].<br><br>
| width="400" | When you start your computer, insert your UniToken, input your PIN and click on OK.<br><br>
| [[Image:Bitlocker img15.jpg|370x259px]]<br><br>
| [[Image:GINA img08.jpg|370x259px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | &nbsp;'''2'''  
| width="400" | Choose the disk that you want to enable BitLocker and click on [Turn on BitLocker] on its right.<br>
| width="400" | Choose the user account that you want to use to access this computer (You can store many windows accounts settings in your UniToken). Click on [OK].<br><br>
| [[Image:Bitlocker img16.jpg|370px]]<br><br>
You don’t need to input your Windows account password again. You only need to input the password for your Token and have the UniToken plugged into your computer to log on.<br>
|-
| [[Image:GINA img09.jpg|370px]]<br><br>
| width="50" | &nbsp;'''3'''
| width="400" | On the screen [Choose how you want to unlock this drive], check [Use my smart card to unlock the drive] and click on [Next].<br>
''Options differ depending if you encrypt a partition from your internal hard disk or an external disk. For now, UniToken cannot be used to encrypt the system partition.''
| [[Image:Bitlocker img17.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''4'''
| width="400" | On the screen [How do you want to store your recovery key?] Choose where you want to save the file containing the recovery key. You can also choose to print it.<br>
''Make sure to keep the recovery key in a safe place, if you lose your SmartCard, it is the only way to decrypt the data on the encrypted drive. Otherwise, all the data will be lost.''
| [[Image:Bitlocker img18.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''5'''
| width="400" | On the screen [Are you ready to encrypt this drive].<br>
| [[Image:Bitlocker img19.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''6'''
| width="400" | Wait while the disk is encrypted, it can take a rather long time depending on your computer and the disk size. (On the tested configuration, encrypting a 8GB partition took around 30 minutes).<br>
| [[Image:Bitlocker img20.jpg|370px]]<br><br>
|-
| width="50" | &nbsp;'''7'''
| width="400" | When the dialog [Encryption of (disk letter) is complete] appears, the disk is protected, click on [Close] to finish. The encrypted disk will remain accessible until you remove it from your computer or reboot your computer.<br>
| [[Image:Bitlocker img21.jpg|370px]]<br><br>
|}
|}



Revision as of 19:12, 10 April 2012


UniToken GINA Package Installation

This part explains how to install the Standalone authentication package for Windows XP/2k that you can find inside the SDK.

 1 Go to the folder: Integration Guides/Smart Card

Logon Feature/Standalone SmartCard logon(GINA).
Find the file “UniTokenGina.exe” and double click it to begin the installation.



 2 Click on [Next] in the welcome screen.


 3 On the Installation welcome page, click on

[Next].



 4 Click on [Install] to begin the installation.


 5 Choose “Yes, I want to restart my computer now”

and click [Finish].




Bind UniToken PRO to Windows Account

 1 Insert your UniToken PRO in your computer, input

the PIN code for the Token and click on [Settings].



 2 In [Add WinLogon User into Token] part, input username, domain (leave blank if the computer is not member of a domain) and password. Then, click on [Add] to add this user information inside the Token.

Note: You can also delete a user from the Token and change your Token PIN using this tool.



Windows Logon

 1 When you start your computer, insert your UniToken, input your PIN and click on OK.



 2 Choose the user account that you want to use to access this computer (You can store many windows accounts settings in your UniToken). Click on [OK].

You don’t need to input your Windows account password again. You only need to input the password for your Token and have the UniToken plugged into your computer to log on.



Access to the encrypted disk

 1 When you insert the encrypted disk in your computer, the following dialog box will appear (you can also choose to unlock automatically the disk when it is inserted).

Insert your UniToken and click on [Unlock]



 2 You will be asked to type the User PIN for your UniToken to unlock the drive. The drive will be unlocked only if the correct password is entered.


Glossary

SmartCard: is any pocket-sized card with embedded integrated circuits. There are two broad categories of ICCs. Memory cards contain only non-volatile memory storage components, and perhaps dedicated security logic. Microprocessor cards contain volatile memory and microprocessor components.

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS refers to a group of public-key cryptography standards devised and published by RSA Security.