User manual CHARISMATHICS SMART SECURITY INTERFACE VERSION 4.7

[. . . ] Charismathics Smart Security InterfaceTM V4. 7 Manual Contents 1 2 3 3. 1 3. 2 3. 3 3. 4 3. 5 4 4. 1 4. 1. 1 4. 1. 2 4. 1. 3 4. 1. 4 4. 1. 5 4. 1. 6 4. 1. 7 4. 2 4. 3 4. 4 4. 4. 1 4. 4. 2 4. 4. 3 4. 4. 4 4. 5 4. 5. 1 4. 5. 2 4. 6 4. 6. 1 4. 6. 2 4. 7 4. 7. 1 4. 7. 2 4. 8 4. 8. 1 4. 8. 2 4. 8. 3 4. 8. 4 Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 About this Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Installation Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] To this end you highlight the Private Key and select one of the "Create. . . " entries from the "Certificates" menu. In order to generate the certificate request you enter the data into the corresponding fields. In case of a certificate request, you create a file to send it to the authority that should sign the certificate (e. g. Therefore, you store the request as a p10 file in a directory and follow the instructions of the corresponding authority intended to sign the certificate. Once the certificate has been returned by the issuer, you have to import the certificate using the menu item "Import Certificate". Note: There is an explanation of the certificate attributes and how to employ the keys in the appendix B of this manual. 4. 5. 2 Importing Certificates In case you already own certificates that you intend to employ, you can import them with the menu "Certificate" under the item "Import Certificate". Certificates which belong to key pairs are directly assigned to the associated "container" after the importation. Certificates without keys - as for example CA certificates - are assigned to the file "Certificates". 19 4. 6 Creating Profiles If you want to use a smart card, there must be a profile on this smart card. In a first step you have to setup the corporate profile on this smart card. Click the menu "Manager" "Create Token Profile". 4. 6. 1 Smart Card with Profile If there is already a profile on the card and you want to create a new one, the existing one will be deleted as a first step. If you have created the profile yourself, you have to enter the Card PIN you have assigned to the card. The default Card PIN is "0987654321". The further proceedings are the same as in the following section ". . . in the case of an empty smart card". Please follow the instructions which are described below. 4. 6. 2 Empty Smart Card If the profile is set up (Initialization) on an empty smart card, the "Card PIN", the "SO PIN", the "User PIN" and a Serial Number must be defined. Additionally a Label for the token can be assigned. If multiple profiles are available you can choose one now. CSSI supports five profiles (corporate, PKCS#15, CNS, FINEID and AET) for CardOS V4. x smartcards, and supports two profiles (corporate and PKCS#15) for JCOP smartcards. With the help of the Card PIN, the smart card can be deleted later again. With the SO PIN the smart card can be unlocked. Therefore you should not assign "simple" PINs. The input of the SO PIN and the User PIN 20 is also not displayed in plain text but with asterisks (*) in the input mask. Further explanations regarding the PINs can be found in the section 4. 2. 4. 7 Preparing a Token (Initialization and Personalization) In order that a user can employ his smart card, it must be prepared, i. e. [. . . ] C_DecryptInit, C_DecryptUpdate, C_DecryptFinal or C_DecryptInit, C_Decrypt C_Decrypt works as if C_DecryptUpdate and then C_DecryptFinal were called. C_DecryptUpdate stores the data temporarily. And you can pick up finished data with C_DecryptUpdate. If you don't do this, you receive with C_DecryptFinal all data at one time. [. . . ]