SecuTech Wiki - User contributions [en]

Category:UniKey Video Guides

2018-08-20T01:54:28Z

Mapril:

'''Enveloper Walkthrough Guide'''

<embedvideo service="youtube">https://youtu.be/N6B8vk3_S2w</embedvideo>

'''UniKey Basic Assist Walkthrough'''
<embedvideo service="youtube">https://youtu.be/nLAkW4rss7g</embedvideo>

'''UniKey Network Assist Walkthrough'''
<embedvideo service="youtube">https://youtu.be/Y98Qa4lzuX4</embedvideo>

'''Integrating UniKey into a Java program using the UniKey API'''
<embedvideo service="youtube">https://youtu.be/beD68COENM8</embedvideo>

'''Integrating UniKey into a Visual Studio program using the UniKey API'''
<embedvideo service="youtube">https://youtu.be/5Up5KVt0ZFA</embedvideo>

'''Integrating UniKey into a DotNet program using the UniKey API'''
<embedvideo service="youtube">https://youtu.be/avIagvNXRNc</embedvideo>

Category:UniOTP Video Guides

2018-08-20T01:48:06Z

Mapril:

'''Step 1: Unboxing the UniOTP SDK'''
<embedvideo service="youtube">https://youtu.be/weFS5sMle6I</embedvideo>

'''Step 2: Download Secret Keys'''
<embedvideo service="youtube">https://youtu.be/v5kp7Hld75g</embedvideo>

Category:UniOTP Video Guides

2018-08-20T01:46:31Z

Mapril: Created page with "'''Step 1: Unboxing the UniOTP SDK''' <embedvideo service="youtube">https://youtu.be/weFS5sMle6I</embedvideo>"

'''Step 1: Unboxing the UniOTP SDK'''
<embedvideo service="youtube">https://youtu.be/weFS5sMle6I</embedvideo>

Main Page

2018-08-08T01:33:19Z

Mapril: /* UniMate Drive */

[[category:UniMate Manuals]]

<div id = "Table of Contents"></div>

==UniMate Manual==

Version 2.1

<table class="wikitable">
<tr>
<td style="background-color: red;">Version</td>
<td style="background-color: red;">Date</td>
</tr>
<tr>
<td>1.0</td>
<td>2015.7</td>
</tr>
<tr>
<td>2.0</td>
<td>2016.7</td>
</tr>
<tr>
<td>2.1</td>
<td>2018.2</td>
</tr>
</table>

The data and information contained in this document cannot be altered without the express written permission of SecuTech Solution Inc. No part of this document can be reproduced or transmitted for any purpose whatsoever, either by electronic or mechanical means.

The general terms of trade of SecuTech Solution Inc. apply. Diverging agreements must be made in writing.

Copyright SecuTech Solution Inc. All rights reserved.

WINDOWS is a registered trademark of Microsoft Corporation.

The WINDOWS-logo is a registered trademark (TM) of Microsoft Corporation.

Software License

The software and the enclosed documentation are copyright-protected. By installing the software, you agree to the conditions of the licensing agreement.

Licensing Agreement

SecuTech Solution Inc. (SecuTech for short) gives the buyer the simple, exclusive and non-transferable licensing right to use the software on one individual computer or networked computer system (LAN). Copying and any other form of reproduction of the software in full or in part as well as mixing and linking it with others is prohibited. The buyer is authorized to make one single copy of the software as backup. SecuTech reserves the right to change or improve the software without notice or to replace it with a new development. SecuTech is not obliged to inform the buyer of changes, improvements or new developments or to make these available to him. A legally binding promise of certain qualities is not given. SecuTech is not responsible for damage unless it is the result of deliberate action or negligence on the part of SecuTech or its aids and assistants. SecuTech accepts no responsibility of any kind for indirect, accompanying or subsequent damage.

Contact Information

Web: http://www.esecutech.com

Email: [mailto:sales@eSecuTech.com sales@esecutech.com]

Please Email any comments, suggestions or questions regarding this document or our products to us at: [mailto:sales@eSecuTech.com sales@esecutech.com]

 
; CE Attestation of Conformity
[[File:CE Attestation.png|left|100px|top]]
: UniMate is in conformity with the protection requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024: 1998.
 
; FCC Standard
[[File:FCC.png|left|100px|top]]
: This device is in conformance with Part 15 of the FCC Rules and Regulation for Information Technology Equipment.
: Operation of this product is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
 
[[File:USB Logo.png|left|100px|top]] The equipment of UniMate is USBbased.
 
; Conformity to ISO 9001<nowiki>:</nowiki>2000
[[File:ISO 9001.png|left|100px|top]]
: The Quality System of SecuTech Solution Inc., including its implementation, meets the requirements of the standard ISO 9001:2000
 
; ROHS
[[File:ROHS.png|left|100px|top]]
: All UniMate products are environmentally friendly with ROHS certificates.
 

<div style="page-break-before:always"></div>

==Overview==

The UniMate USB, hereinafter referred to as UniMate, is a mobile authenticator and information security PKI product based on CCID technology (except UniMate Drive). It functions as a secure container for digital credentials. An advanced processor and secure memory are built into the device to provide security for exchanging, storing and handling of electronic information.

UniMate has achieved an effective rights management and provides a highly-secure file system. The built-in processor allows for fast and efficient information processing.

UniMate supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition). The abundant samples provided in the SDK help to ease integration.

UniMate also supports iOS, Android and a multitude of other devices through either a USB port using the CCID protocol or a 3.5mm TRRS audio jack.

==UniMate Features==

;Universal features of UniMate:
*Globally unique hardware ID.
*Customizable software ID.
*Smart card based.
*On-board encryption.
*Two levels of PIN management mechanism.
*A secure file system.
*Up to 64KB of memory.
*Stylish and cute case.
*Lead free.

===UniMate Drive===

The UniMate Drive is a mobile authenticator and information security PKI product which can store key certificates. UniMate Drive includes two storage types: flash memory and CD-ROM. You can set up the storage size using the Partition tool and the Value Added library. ISO files can be loaded into the CD-ROM partition. You can also format the flash memory and copy files into it, and so on. The total capacity of the UniMate Drive is between 2 to 32 GB, you can partition it as you wish. UniMate Drive supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition).

[[File:UniMate Drive Architecture.jpeg|450px|center|alt=UniMate Drive architecture Linux and Mac OS X (PKCS#11 and Value Added API)]]
[[File:UniMate Drive Architecture Win.jpeg|450px|center|alt=UniMate Drive architecture Windows (PKCS#11 and Value Added API and Windows CSP, minidriver and mass storage driver)]]

===UniMate Flex===
UniMate Flex is an interactive hybrid mobile authentication token designed particularly for use in banking. The two-factor authentication device makes use of a high-performance smart card, an LED display and confirmation buttons to verify the secondary form of authentication. Users can visually confirm transaction information on-screen and press the confirmation button to approve only authorized transactions.
 UniMate Flex features PKI based digital certificate and private key storage, as well as on-board encryption, with the ability to generate and store RSA secret key pairs within the key.

[[File:UniMate Collage.jpeg|center|675px|top|alt=UniMate Flex mobile authentication token]]

===UniMate USB===

[[File:UniMate USB Rot.png|left|95px|top|alt=UniMate driverless USB smart card authentication token]]
[[File:UniMate USB Collage Rot.png|right|375px|top|alt=multiple UniMate driverless USB smart card authentication tokens]]

UniMate USB is a FIPS 140-2 algorithm certified smart card USB authentication token which utilizes smart card technology for strong authentication. Smart card technology allows for highly robust authentication and verification solutions.

; Organizational Use
----
; Enhanced Business
: With secure access in place, organizations can enable business process and transactions through network connectivity and online services anytime, anywhere, with confidence.
; Security
: UniMate USB provides robust protection of sensitive business data from unauthorized access.
; Cost Effective
: UniMate USB reduces password administration costs and losses from data breaches, and provides multiple flexible solutions on one platform.
 
; Personal Use
----
; Identity Protection
: UniMate USB provides individuals with a secure digital identity and hence protected from theft and abuse.
; Portability and Convenience
: UniMate USB enables users to access their credentials securely wherever they go, whenever they want.

[[File:FLEX Architecture *nix.jpeg|450px|center|alt=UniMate USB/Flex architecture Linux and Mac OS X (PKCS#11 and Value Added API)]]
[[File:FLEX Architecture Mobile.jpeg|450px|center|alt=UniMate USB/Flex architecture iOS and Android (PKCS#11)]]
[[File:FLEX Architecture Win.jpeg|450px|center|alt=UniMate USB/Flex architecture Windows (PKCS#11, Value Added API and Windows CSP, minidriver, and CCID driver)]]

<div style="page-break-before:always"></div>

==Security==

Security is the most important feature of the UniMate system. It involves an identification and verification method, including a file access permission control mechanism inside the UniMate, a confidential access system. This security attribute is changed based on the current state of the device, when the card is reset or after the UniMate has finished some commands.

===PIN===
The following table describes different key types and use.
<table class="wikitable">
<tr>
<td style="background-color: red;">PIN Type</td>
<td style="background-color: red;">Use</td>
</tr>
<tr>
<td>User PIN</td>
<td>Directory level authentication. Control different users' read and write permissions. Generate key pairs. Certificate management. Sign and so on.</td>
</tr>
<tr>
<td>Admin PIN</td>
<td>Ensures the security during the card initialization To reset User PIN/unlock a user.</td>
</tr>
</table>

User PIN: a personal identification number which is firstly hashed and then stored in the device.

Admin PIN: a console identification number.

===Factory default settings===

The default User PIN is 11111111 and the default Admin PIN is 00000000.

<div style="page-break-before:always"></div>

==SDK==

<table class="wikitable">
<tr>
<td style="background-color: red;">Components</td>
<td style="background-color: red;">Description</td>
</tr>
<tr>
<td>CSP (MS-CAPI)</td>
<td>Declaration of standardized identifiers and interface of CSP CSP libraries Redists/PKI package.exe Samples for CSP CSP Manual.pdf</td>
</tr>
<tr>
<td>Documents</td>
<td>Manual.pdf (UniMate manual)</td>
</tr>
<tr>
<td>PKCS#11</td>
<td>Declaration of the standardized identifiers and interface of PKCS PKCS libraries Samples for PKCS PKCS#11.pdf</td>
</tr>
<tr>
<td>Utilities</td>
<td>Utilities Installation (Console setup.exe, Monitor setup.exe) Utilities Manual</td>
</tr>
<tr>
<td>Value Added API</td>
<td>Declaration of the standardized identifiers and interface of Value Added API Value Added API libraries Samples for Value Added API API Manual.pdf</td>
</tr>
<tr>
<td>Quick Start.pdf</td>
<td>Product overview Software introduction Utilities introduction Factory default settings</td>
</tr>
<tr>
<td>ReadMe.txt</td>
<td>Changelog</td>
</tr>
</table>

<div style="page-break-before:always"></div>
==Applying Digital Certificates==

UniMate provides a perfect container for digital certificates, supporting X.509 digital certificates. The UniMate PKI package is a middleware that provides digital certificate usage.

A digital certificate and authenticated access is needed to use the UniMate, as without it, any operation on the UniMate is forbidden. In this part, we will introduce how to apply digital certificates. We will take VeriSign certificates and Microsoft Certificates as examples.

===Applying Microsoft Certificates===

[[File:Cert Address.jpeg|500px|alt=Microsoft certificate address]]

Insert a UniMate into the USB port first, and start IE to open the Microsoft certificate application page. This is the home page of the certificate application site. Firstly, you should click "Request a certificate".

[[File:CertWelcome.png|500px|alt=Microsoft Active Directory Certificate Services homepage]]

And then, select "advanced certificate request".

[[File:CertRequestCrop.png|500px|alt=requesting a certificate]]

On the page of Advanced Certificate Request, select "Create and submit a request to this CA".

[[File:AdvCertRequestCrop.png|500px|alt=advanced certificate request page]]

For a certificate template, select "Smartcard User" in the list; for CSP, select "UniMateDRIVE CSP v2.0".

[[File:AdvCertRequestOptions.png|500px|alt=advanced certificate template page]]

Then, a window will appear to ask you to type in your UniMate's PIN. Click OK. The system will generate a certificate automatically.

[[File:User Pin.png|300px|alt=enter UniMate PIN]]

Click "Install this certificate" for installation.

[[File:Cert Issued Crop.jpeg|500px|alt=certificate issued]]

After installation, the system will prompt that the certificate has been successfully installed.

[[File:Cert Installed Crop.jpeg|500px|alt=certificate installed]]

===Using Digital Certificates===

SecuTech provides a series of solutions for the use of digital certificates, in the aspects of IE, Outlook, PDF, Office, and so on.

For detailed instructions about this, please download the related integration guides from https:\\www.esecutech.com.

<div style="page-break-before:always"></div>

==Specifications==

===UniMate Drive===
<table class="wikitable" style="max-width: 600px;">
<tr>
<td style="background-color: red;" colspan="2">Key Features</td>
</tr>
<tr>
<td colspan="2">Driverless Operation 2GB, 4GB, 8GB, 16GB and 32GB</td>
</tr>
<tr>
<td>Selective Mass Storage</td>
<td>Normal Partition Virtual CD-ROM</td>
</tr>
<tr>
<td>Dimensions</td>
<td>52.8x17x7 mm</td>
</tr>
<tr>
<td>Weight</td>
<td>7.2g</td>
</tr>
<tr>
<td>Min. Operating Voltage</td>
<td>5V</td>
</tr>
<tr>
<td>Current Consumption</td>
<td><=< 150 mA</td>
</tr>
<tr>
<td>Operating Temperature</td>
<td>0℃ to 70℃</td>
</tr>
<tr>
<td>Storage Temperature</td>
<td>-10℃ to 85℃</td>
</tr>
<tr>
<td>Humidity Rate</td>
<td>0-70% without condensation</td>
</tr>
<tr>
<td>Casing</td>
<td>Tamper-Resistant Metal</td>
</tr>
<tr>
<td>Memory Data Retention</td>
<td>At least 10 years</td>
</tr>
<tr>
<td>Memory Cell Rewrites</td>
<td>At least 100,000 times</td>
</tr>
<tr>
<td>PKI</td>
<td>PKCS#11 MS-CAPI</td>
</tr>
<tr>
<td>Onboard Encryption Algorithms</td>
<td>1024- and 2048-bit RSA 128- and 192-bit AES 64-bit DES and 192-bit TDES</td>
</tr>
<tr>
<td>Onboard Hashing</td>
<td>160-bit SHA-1</td>
</tr>
<tr>
<td>Operating System Compatibility</td>
<td>Linux Windows 98 SE, 2000, ME, XP, 2003, Vista, 7, 8, and 10 Windows Server 2000, 2008 and 2012</td>
</tr>
</table>

<div style="page-break-before:always"></div>

===UniMate Flex===

<table class="wikitable" style="max-width: 600px;">
<tr>
<td style="background-color: red;" colspan="2">Hardware</td>
</tr>
<tr>
<td>Dimensions</td>
<td>65x36x11.4 mm</td>
</tr>
<tr>
<td>Weight</td>
<td>23g</td>
</tr>
<tr>
<td>Audio Interface</td>
<td>3.5mm TRRS</td>
</tr>
<tr>
<td>USB Interface</td>
<td>USB Type A</td>
</tr>
<tr>
<td>Display</td>
<td>LCD</td>
</tr>
<tr>
<td>Hardware ID</td>
<td>64-bit Globally Unique</td>
</tr>
<tr>
<td>Internal Memory</td>
<td>> 16KB</td>
</tr>
<tr>
<td>Mobile Device Software</td>
<td>Audio Authentication Interface</td>
</tr>
<tr>
<td>Casing</td>
<td>Tamper-evident Metal</td>
</tr>
<tr>
<td>Middleware</td>
<td>PKCS#11 MS-CAPI Audio Authentication API X.509 Digital Certificate</td>
</tr>
<tr>
<td style="background-color: red;" colspan="2">Performance</td>
</tr>
<tr>
<td>Min. Operating Voltage</td>
<td>5V</td>
</tr>
<tr>
<td>Current Consumption</td>
<td><= 50 mA</td>
</tr>
<tr>
<td>Operation Temperature</td>
<td>0℃ to 70℃</td>
</tr>
<tr>
<td>Storage Temperature</td>
<td>-10℃ to 85℃</td>
</tr>
<tr>
<td>Humidity Rate</td>
<td>0-70% without condensation</td>
</tr>
<tr>
<td>Memory Data Retention</td>
<td>At least 10 years</td>
</tr>
<tr>
<td>Memory Cell Rewriters</td>
<td>At least 100,000 times</td>
</tr>
<tr>
<td>Supported Platforms</td>
<td>Mobile OS: iOS, Android, Symbian, Windows Phone PC: Windows, Linus, Mac OS X</td>
</tr>
</table>

<div style="page-break-before:always"></div>
===UniMate USB===

<table class="wikitable" style="max-width: 600px;">
<tr>
<td style="background-color: red;" colspan="2">Key Features</td>
</tr>
<tr>
<td colspan="2">PKI token with CCID interface Embedded Smart Card Onboard Encryption Three-level Permission System Secure File System Auto-lock Mechanism MS-CAPI, PKCS#11 and X.509 v3 Standard Compliant Globally Unique Hardware ID (32-bit) User-Defined Token ID Lead-Free Robust Case</td>
</tr>
<tr>
<td style="background-color: red;" colspan="2">Hardware</td>
</tr>
<tr>
<td>Dimensions</td>
<td>52.8x17x7 mm</td>
</tr>
<tr>
<td>Weight</td>
<td>6.4g/2.4g</td>
</tr>
<tr>
<td>Interface</td>
<td>USB</td>
</tr>
<tr>
<td style="background-color: red;" colspan="2">Performance</td>
</tr>
<tr>
<td>Min. Operating Voltage</td>
<td>5V</td>
</tr>
<tr>
<td>Current Consumption</td>
<td><= 50 mA</td>
</tr>
<tr>
<td>Operation Temperature</td>
<td>0℃ to 70℃</td>
</tr>
<tr>
<td>Storage Temperature</td>
<td>-10℃ to 85℃</td>
</tr>
<tr>
<td>Humidity Rate</td>
<td>0-70% without condensation</td>
</tr>
<tr>
<td>PKI</td>
<td>PKCS#11 MS-CAPI</td>
</tr>
<tr>
<td>Onboard Encryption Algorithms</td>
<td>1024- and 2048-bit RSA 128- and 192-bit AES 64-bit DES and 192-bit TDES</td>
</tr>
<tr>
<td>Onboard Hashing</td>
<td>160-bit SHA-1</td>
</tr>
<tr>
<td>Supported Platforms</td>
<td>Linux Windows 2000, XP, 2003, Vista, 7 and 8 Windows Server 2008 and Server 2012</td>
</tr>
<tr>
<td>Software Developers</td>
<td>UniMate USBAPI libraries in Windows and Linux UniMate USB Console for management of UniMate USB devices UniMate USB PKI middleware for PKCS# 11 and MS-CAPI applications UniMate USB IE ActiveX Control, Firefox Plugin</td>
</tr>
<tr>
<td>Software - Users</td>
<td>UniMate USB Monitor for registration and management of user digital certificates</td>
</tr>
</table>

<div style="page-break-before:always"></div>

==Frequently Asked Questions==

===What is UniMate?===

UniMate is SecuTech's mobile authentication product family focusing on secure transaction authentication and platform interchangeability by employing two-factor authentication.

===How does UniMate work?===

UniMate authentication utilizes PKI technology, where certificates are securely stored within theUniMate device and are inaccessible without the appropriate permissions to interact with the device.

The TRRS audio port found on most mobile devices is used for secure communication during use of the device, in addition to providing a micro USB interface for use and configuration on a desktop platform.

===What is PKI?===

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

===What algorithms are supported?===

UniMate supports 2048-bit RSA, 1024-bit RSA, 128-bit AES, 192-bit AES, 64-bit DES, and 192-bit TDES.

===What is the middleware?===

The middleware contains PKCS#11, MS-CAPI, and Audio Authentication APIs and X.509 Digital Certificates.

===What is the default PIN?===

The default Admin PIN is eight zeros, or
"00000000", the default User PIN is eight ones, or "11111111", without quotation marks.

===Where can I receive further assistance?===

If you have any questions, please feel free to contact us at: http://www.esecutech.com/support or [mailto:support@esecutech.com support@esecutech.com]

<div style="page-break-before:always"></div>

{| style="border-style: solid; border-width: 1px;" align="center"
|
<gallery class="center" mode="nolines" widths=175px heights=50px caption="Follow Us!">
File:Twitter.png|'''[https://twitter.com/eSecuTech Twitter]'''
File:Facebook.png|'''[https://www.facebook.com/eSecuTech/ Facebook]'''
File:YouTube.png|'''[https://www.youtube.com/user/esecutech YouTube]'''
File:Linked In.png|'''[https://ca.linkedin.com/in/secutech-solutions-inc-39110b25 LinkedIn]'''
</gallery>
|}

 
[[File:Footer Logo List.png|left]]
 
About SecuTech

SecuTech Solution Inc. is a company specializing in data protection and strong authentication, providing total customer satisfaction in security systems & services for banks, financial institutions & other industries. Having extensive and in-depth experience within the information security market, SecuTech has drawn upon this experience to utilize today's cutting-edge technologies that are effective against increasingly sophisticated cyber attacks. Enabling enterprises, financial institutions, and government to safely adopt the economic benefits of mobile and cloud computing.

http://www.esecutech.com SecuTech Solution Inc.

{| class="wikitable"
|+ style="text-align:left;" | Contact Us:
!
! scope="col"| North America
! scope="col"| China
! scope="col"| Asia-Pacific
! scope="col"| EMEA
|-
! scope="row"| Address
| 1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada
| Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080
| Suite 2.06, 32 Delhi Rd, North Ryde, NSW, 2113, Australia
| 4 Cours Bayard 69002 Lyon, France
|-
! scope="row"| Phone
| +1 -888-259-5825
| +8610-8288 8834
| 00612-9888 6185
| +33-042-600-2810
|-
! scope="row"| Fax
| +1 -888-259-5825 ext.0
| +8610-8288 8834
| 00612-9888 6185
| +33-042-600-2810
|-
! scope="row"| Email
| [mailto:info@esecutech.com info@esecutech.com]
| [mailto:cn@esecutech.com cn@esecutech.com]
| [mailto:aus@esecutech.com aus@esecutech.com]
| [mailto:europe@esecutech.com europe@esecutech.com]
|}

Copyright 2012 SecuTech Solution Inc. All rights reserved. Reproduction in whole or in part without written permission from SecuTech is prohibited. SecuTech UniMate and the SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks are properties of their respective owners. Features and specifications are subject to change without notice.

[[File:SecuTech Logo.png]]

 
[[#top|TOP]]

UniMate USB User Manual

2018-08-08T01:21:53Z

Mapril: /* UniMate Drive */

[[category:UniMate Manuals]]

<div id = "Table of Contents"></div>

==UniMate Manual==

Version 2.1

<table class="wikitable">
<tr>
<td style="background-color: red;">Version</td>
<td style="background-color: red;">Date</td>
</tr>
<tr>
<td>1.0</td>
<td>2015.7</td>
</tr>
<tr>
<td>2.0</td>
<td>2016.7</td>
</tr>
<tr>
<td>2.1</td>
<td>2018.2</td>
</tr>
</table>

The data and information contained in this document cannot be altered without the express written permission of SecuTech Solution Inc. No part of this document can be reproduced or transmitted for any purpose whatsoever, either by electronic or mechanical means.

The general terms of trade of SecuTech Solution Inc. apply. Diverging agreements must be made in writing.

Copyright SecuTech Solution Inc. All rights reserved.

WINDOWS is a registered trademark of Microsoft Corporation.

The WINDOWS-logo is a registered trademark (TM) of Microsoft Corporation.

Software License

The software and the enclosed documentation are copyright-protected. By installing the software, you agree to the conditions of the licensing agreement.

Licensing Agreement

SecuTech Solution Inc. (SecuTech for short) gives the buyer the simple, exclusive and non-transferable licensing right to use the software on one individual computer or networked computer system (LAN). Copying and any other form of reproduction of the software in full or in part as well as mixing and linking it with others is prohibited. The buyer is authorized to make one single copy of the software as backup. SecuTech reserves the right to change or improve the software without notice or to replace it with a new development. SecuTech is not obliged to inform the buyer of changes, improvements or new developments or to make these available to him. A legally binding promise of certain qualities is not given. SecuTech is not responsible for damage unless it is the result of deliberate action or negligence on the part of SecuTech or its aids and assistants. SecuTech accepts no responsibility of any kind for indirect, accompanying or subsequent damage.

Contact Information

Web: http://www.esecutech.com

Email: [mailto:sales@eSecuTech.com sales@esecutech.com]

Please Email any comments, suggestions or questions regarding this document or our products to us at: [mailto:sales@eSecuTech.com sales@esecutech.com]

 
; CE Attestation of Conformity
[[File:CE Attestation.png|left|100px|top]]
: UniMate is in conformity with the protection requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024: 1998.
 
; FCC Standard
[[File:FCC.png|left|100px|top]]
: This device is in conformance with Part 15 of the FCC Rules and Regulation for Information Technology Equipment.
: Operation of this product is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
 
[[File:USB Logo.png|left|100px|top]] The equipment of UniMate is USBbased.
 
; Conformity to ISO 9001<nowiki>:</nowiki>2000
[[File:ISO 9001.png|left|100px|top]]
: The Quality System of SecuTech Solution Inc., including its implementation, meets the requirements of the standard ISO 9001:2000
 
; ROHS
[[File:ROHS.png|left|100px|top]]
: All UniMate products are environmentally friendly with ROHS certificates.
 

<div style="page-break-before:always"></div>

==Overview==

The UniMate USB, hereinafter referred to as UniMate, is a mobile authenticator and information security PKI product based on CCID technology (except UniMate Drive). It functions as a secure container for digital credentials. An advanced processor and secure memory are built into the device to provide security for exchanging, storing and handling of electronic information.

UniMate has achieved an effective rights management and provides a highly-secure file system. The built-in processor allows for fast and efficient information processing.

UniMate supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition). The abundant samples provided in the SDK help to ease integration.

UniMate also supports iOS, Android and a multitude of other devices through either a USB port using the CCID protocol or a 3.5mm TRRS audio jack.

==UniMate Features==

;Universal features of UniMate:
*Globally unique hardware ID.
*Customizable software ID.
*Smart card based.
*On-board encryption.
*Two levels of PIN management mechanism.
*A secure file system.
*Up to 64KB of memory.
*Stylish and cute case.
*Lead free.

===UniMate Drive===

The UniMate Drive is a mobile authenticator and information security PKI product which can store key certificates. UniMate Drive includes two storage types: flash memory and CD-ROM. You can set up the storage size using the Partition tool and the Value Added library. ISO files can be loaded into the CD-ROM partition. You can also format the flash memory and copy files into it, and so on. The total capacity of the UniMate Drive is between 2 to 32 GB, you can partition it as you wish. UniMate Drive supports PKCS#11, CSP and Value Added APIs (CD-ROM and Partition).

[[File:UniMate Drive Architecture.jpeg|450px|center|alt=UniMate Drive architecture Linux and Mac OS X (PKCS#11 and Value Added API)]]
[[File:UniMate Drive Architecture Win.jpeg|450px|center|alt=UniMate Drive architecture Windows (PKCS#11 and Value Added API and Windows CSP, minidriver and mass storage driver)]]

===UniMate Flex===
UniMate Flex is an interactive hybrid mobile authentication token designed particularly for use in banking. The two-factor authentication device makes use of a high-performance smart card, an LED display and confirmation buttons to verify the secondary form of authentication. Users can visually confirm transaction information on-screen and press the confirmation button to approve only authorized transactions.
 UniMate Flex features PKI based digital certificate and private key storage, as well as on-board encryption, with the ability to generate and store RSA secret key pairs within the key.

[[File:UniMate Collage.jpeg|center|675px|top|alt=UniMate Flex mobile authentication token]]

===UniMate USB===

[[File:UniMate USB Rot.png|left|95px|top|alt=UniMate driverless USB smart card authentication token]]
[[File:UniMate USB Collage Rot.png|right|375px|top|alt=multiple UniMate driverless USB smart card authentication tokens]]

UniMate USB is a FIPS 140-2 algorithm certified smart card USB authentication token which utilizes smart card technology for strong authentication. Smart card technology allows for highly robust authentication and verification solutions.

; Organizational Use
----
; Enhanced Business
: With secure access in place, organizations can enable business process and transactions through network connectivity and online services anytime, anywhere, with confidence.
; Security
: UniMate USB provides robust protection of sensitive business data from unauthorized access.
; Cost Effective
: UniMate USB reduces password administration costs and losses from data breaches, and provides multiple flexible solutions on one platform.
 
; Personal Use
----
; Identity Protection
: UniMate USB provides individuals with a secure digital identity and hence protected from theft and abuse.
; Portability and Convenience
: UniMate USB enables users to access their credentials securely wherever they go, whenever they want.

[[File:FLEX Architecture *nix.jpeg|450px|center|alt=UniMate USB/Flex architecture Linux and Mac OS X (PKCS#11 and Value Added API)]]
[[File:FLEX Architecture Mobile.jpeg|450px|center|alt=UniMate USB/Flex architecture iOS and Android (PKCS#11)]]
[[File:FLEX Architecture Win.jpeg|450px|center|alt=UniMate USB/Flex architecture Windows (PKCS#11, Value Added API and Windows CSP, minidriver, and CCID driver)]]

<div style="page-break-before:always"></div>

==Security==

Security is the most important feature of the UniMate system. It involves an identification and verification method, including a file access permission control mechanism inside the UniMate, a confidential access system. This security attribute is changed based on the current state of the device, when the card is reset or after the UniMate has finished some commands.

===PIN===
The following table describes different key types and use.
<table class="wikitable">
<tr>
<td style="background-color: red;">PIN Type</td>
<td style="background-color: red;">Use</td>
</tr>
<tr>
<td>User PIN</td>
<td>Directory level authentication. Control different users' read and write permissions. Generate key pairs. Certificate management. Sign and so on.</td>
</tr>
<tr>
<td>Admin PIN</td>
<td>Ensures the security during the card initialization To reset User PIN/unlock a user.</td>
</tr>
</table>

User PIN: a personal identification number which is firstly hashed and then stored in the device.

Admin PIN: a console identification number.

===Factory default settings===

The default User PIN is 11111111 and the default Admin PIN is 00000000.

<div style="page-break-before:always"></div>

==SDK==

<table class="wikitable">
<tr>
<td style="background-color: red;">Components</td>
<td style="background-color: red;">Description</td>
</tr>
<tr>
<td>CSP (MS-CAPI)</td>
<td>Declaration of standardized identifiers and interface of CSP CSP libraries Redists/PKI package.exe Samples for CSP CSP Manual.pdf</td>
</tr>
<tr>
<td>Documents</td>
<td>Manual.pdf (UniMate manual)</td>
</tr>
<tr>
<td>PKCS#11</td>
<td>Declaration of the standardized identifiers and interface of PKCS PKCS libraries Samples for PKCS PKCS#11.pdf</td>
</tr>
<tr>
<td>Utilities</td>
<td>Utilities Installation (Console setup.exe, Monitor setup.exe) Utilities Manual</td>
</tr>
<tr>
<td>Value Added API</td>
<td>Declaration of the standardized identifiers and interface of Value Added API Value Added API libraries Samples for Value Added API API Manual.pdf</td>
</tr>
<tr>
<td>Quick Start.pdf</td>
<td>Product overview Software introduction Utilities introduction Factory default settings</td>
</tr>
<tr>
<td>ReadMe.txt</td>
<td>Changelog</td>
</tr>
</table>

<div style="page-break-before:always"></div>
==Applying Digital Certificates==

UniMate provides a perfect container for digital certificates, supporting X.509 digital certificates. The UniMate PKI package is a middleware that provides digital certificate usage.

A digital certificate and authenticated access is needed to use the UniMate, as without it, any operation on the UniMate is forbidden. In this part, we will introduce how to apply digital certificates. We will take VeriSign certificates and Microsoft Certificates as examples.

===Applying Microsoft Certificates===

[[File:Cert Address.jpeg|500px|alt=Microsoft certificate address]]

Insert a UniMate into the USB port first, and start IE to open the Microsoft certificate application page. This is the home page of the certificate application site. Firstly, you should click "Request a certificate".

[[File:CertWelcome.png|500px|alt=Microsoft Active Directory Certificate Services homepage]]

And then, select "advanced certificate request".

[[File:CertRequestCrop.png|500px|alt=requesting a certificate]]

On the page of Advanced Certificate Request, select "Create and submit a request to this CA".

[[File:AdvCertRequestCrop.png|500px|alt=advanced certificate request page]]

For a certificate template, select "Smartcard User" in the list; for CSP, select "UniMateDRIVE CSP v2.0".

[[File:AdvCertRequestOptions.png|500px|alt=advanced certificate template page]]

Then, a window will appear to ask you to type in your UniMate's PIN. Click OK. The system will generate a certificate automatically.

[[File:User Pin.png|300px|alt=enter UniMate PIN]]

Click "Install this certificate" for installation.

[[File:Cert Issued Crop.jpeg|500px|alt=certificate issued]]

After installation, the system will prompt that the certificate has been successfully installed.

[[File:Cert Installed Crop.jpeg|500px|alt=certificate installed]]

===Using Digital Certificates===

SecuTech provides a series of solutions for the use of digital certificates, in the aspects of IE, Outlook, PDF, Office, and so on.

For detailed instructions about this, please download the related integration guides from https:\\www.esecutech.com.

<div style="page-break-before:always"></div>

==Specifications==

===UniMate Drive===
<table class="wikitable" style="max-width: 600px;">
<tr>
<td style="background-color: red;" colspan="2">Key Features</td>
</tr>
<tr>
<td colspan="2">Driverless Operation 2GB, 4GB, 8GB, 16GB and 32GB</td>
</tr>
<tr>
<td>Selective Mass Storage</td>
<td>Normal Partition Virtual CD-ROM</td>
</tr>
<tr>
<td>Dimensions</td>
<td>52.8x17x7 mm</td>
</tr>
<tr>
<td>Weight</td>
<td>7.2g</td>
</tr>
<tr>
<td>Min. Operating Voltage</td>
<td>5V</td>
</tr>
<tr>
<td>Current Consumption</td>
<td><= 50 mA</td>
</tr>
<tr>
<td>Operating Temperature</td>
<td>0℃ to 70℃</td>
</tr>
<tr>
<td>Storage Temperature</td>
<td>-10℃ to 85℃</td>
</tr>
<tr>
<td>Humidity Rate</td>
<td>0-70% without condensation</td>
</tr>
<tr>
<td>Casing</td>
<td>Tamper-Resistant Metal</td>
</tr>
<tr>
<td>Memory Data Retention</td>
<td>At least 10 years</td>
</tr>
<tr>
<td>Memory Cell Rewrites</td>
<td>At least 100,000 times</td>
</tr>
<tr>
<td>PKI</td>
<td>PKCS#11 MS-CAPI</td>
</tr>
<tr>
<td>Onboard Encryption Algorithms</td>
<td>1024- and 2048-bit RSA 128- and 192-bit AES 64-bit DES and 192-bit TDES</td>
</tr>
<tr>
<td>Onboard Hashing</td>
<td>160-bit SHA-1</td>
</tr>
<tr>
<td>Operating System Compatibility</td>
<td>Linux Windows 98 SE, 2000, ME, XP, 2003, Vista, 7, 8, and 10 Windows Server 2000, 2008 and 2012</td>
</tr>
</table>

<div style="page-break-before:always"></div>

===UniMate Flex===

<table class="wikitable" style="max-width: 600px;">
<tr>
<td style="background-color: red;" colspan="2">Hardware</td>
</tr>
<tr>
<td>Dimensions</td>
<td>65x36x11.4 mm</td>
</tr>
<tr>
<td>Weight</td>
<td>23g</td>
</tr>
<tr>
<td>Audio Interface</td>
<td>3.5mm TRRS</td>
</tr>
<tr>
<td>USB Interface</td>
<td>USB Type A</td>
</tr>
<tr>
<td>Display</td>
<td>LCD</td>
</tr>
<tr>
<td>Hardware ID</td>
<td>64-bit Globally Unique</td>
</tr>
<tr>
<td>Internal Memory</td>
<td>> 16KB</td>
</tr>
<tr>
<td>Mobile Device Software</td>
<td>Audio Authentication Interface</td>
</tr>
<tr>
<td>Casing</td>
<td>Tamper-evident Metal</td>
</tr>
<tr>
<td>Middleware</td>
<td>PKCS#11 MS-CAPI Audio Authentication API X.509 Digital Certificate</td>
</tr>
<tr>
<td style="background-color: red;" colspan="2">Performance</td>
</tr>
<tr>
<td>Min. Operating Voltage</td>
<td>5V</td>
</tr>
<tr>
<td>Current Consumption</td>
<td><= 50 mA</td>
</tr>
<tr>
<td>Operation Temperature</td>
<td>0℃ to 70℃</td>
</tr>
<tr>
<td>Storage Temperature</td>
<td>-10℃ to 85℃</td>
</tr>
<tr>
<td>Humidity Rate</td>
<td>0-70% without condensation</td>
</tr>
<tr>
<td>Memory Data Retention</td>
<td>At least 10 years</td>
</tr>
<tr>
<td>Memory Cell Rewriters</td>
<td>At least 100,000 times</td>
</tr>
<tr>
<td>Supported Platforms</td>
<td>Mobile OS: iOS, Android, Symbian, Windows Phone PC: Windows, Linus, Mac OS X</td>
</tr>
</table>

<div style="page-break-before:always"></div>
===UniMate USB===

<table class="wikitable" style="max-width: 600px;">
<tr>
<td style="background-color: red;" colspan="2">Key Features</td>
</tr>
<tr>
<td colspan="2">PKI token with CCID interface Embedded Smart Card Onboard Encryption Three-level Permission System Secure File System Auto-lock Mechanism MS-CAPI, PKCS#11 and X.509 v3 Standard Compliant Globally Unique Hardware ID (32-bit) User-Defined Token ID Lead-Free Robust Case</td>
</tr>
<tr>
<td style="background-color: red;" colspan="2">Hardware</td>
</tr>
<tr>
<td>Dimensions</td>
<td>52.8x17x7 mm</td>
</tr>
<tr>
<td>Weight</td>
<td>6.4g/2.4g</td>
</tr>
<tr>
<td>Interface</td>
<td>USB</td>
</tr>
<tr>
<td style="background-color: red;" colspan="2">Performance</td>
</tr>
<tr>
<td>Min. Operating Voltage</td>
<td>5V</td>
</tr>
<tr>
<td>Current Consumption</td>
<td><= 50 mA</td>
</tr>
<tr>
<td>Operation Temperature</td>
<td>0℃ to 70℃</td>
</tr>
<tr>
<td>Storage Temperature</td>
<td>-10℃ to 85℃</td>
</tr>
<tr>
<td>Humidity Rate</td>
<td>0-70% without condensation</td>
</tr>
<tr>
<td>PKI</td>
<td>PKCS#11 MS-CAPI</td>
</tr>
<tr>
<td>Onboard Encryption Algorithms</td>
<td>1024- and 2048-bit RSA 128- and 192-bit AES 64-bit DES and 192-bit TDES</td>
</tr>
<tr>
<td>Onboard Hashing</td>
<td>160-bit SHA-1</td>
</tr>
<tr>
<td>Supported Platforms</td>
<td>Linux Windows 2000, XP, 2003, Vista, 7 and 8 Windows Server 2008 and Server 2012</td>
</tr>
<tr>
<td>Software Developers</td>
<td>UniMate USBAPI libraries in Windows and Linux UniMate USB Console for management of UniMate USB devices UniMate USB PKI middleware for PKCS# 11 and MS-CAPI applications UniMate USB IE ActiveX Control, Firefox Plugin</td>
</tr>
<tr>
<td>Software - Users</td>
<td>UniMate USB Monitor for registration and management of user digital certificates</td>
</tr>
</table>

<div style="page-break-before:always"></div>

==Frequently Asked Questions==

===What is UniMate?===

UniMate is SecuTech's mobile authentication product family focusing on secure transaction authentication and platform interchangeability by employing two-factor authentication.

===How does UniMate work?===

UniMate authentication utilizes PKI technology, where certificates are securely stored within theUniMate device and are inaccessible without the appropriate permissions to interact with the device.

The TRRS audio port found on most mobile devices is used for secure communication during use of the device, in addition to providing a micro USB interface for use and configuration on a desktop platform.

===What is PKI?===

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

===What algorithms are supported?===

UniMate supports 2048-bit RSA, 1024-bit RSA, 128-bit AES, 192-bit AES, 64-bit DES, and 192-bit TDES.

===What is the middleware?===

The middleware contains PKCS#11, MS-CAPI, and Audio Authentication APIs and X.509 Digital Certificates.

===What is the default PIN?===

The default Admin PIN is eight zeros, or
"00000000", the default User PIN is eight ones, or "11111111", without quotation marks.

===Where can I receive further assistance?===

If you have any questions, please feel free to contact us at: http://www.esecutech.com/support or [mailto:support@esecutech.com support@esecutech.com]

<div style="page-break-before:always"></div>

{| style="border-style: solid; border-width: 1px;" align="center"
|
<gallery class="center" mode="nolines" widths=175px heights=50px caption="Follow Us!">
File:Twitter.png|'''[https://twitter.com/eSecuTech Twitter]'''
File:Facebook.png|'''[https://www.facebook.com/eSecuTech/ Facebook]'''
File:YouTube.png|'''[https://www.youtube.com/user/esecutech YouTube]'''
File:Linked In.png|'''[https://ca.linkedin.com/in/secutech-solutions-inc-39110b25 LinkedIn]'''
</gallery>
|}

 
[[File:Footer Logo List.png|left]]
 
About SecuTech

SecuTech Solution Inc. is a company specializing in data protection and strong authentication, providing total customer satisfaction in security systems & services for banks, financial institutions & other industries. Having extensive and in-depth experience within the information security market, SecuTech has drawn upon this experience to utilize today's cutting-edge technologies that are effective against increasingly sophisticated cyber attacks. Enabling enterprises, financial institutions, and government to safely adopt the economic benefits of mobile and cloud computing.

http://www.esecutech.com SecuTech Solution Inc.

{| class="wikitable"
|+ style="text-align:left;" | Contact Us:
!
! scope="col"| North America
! scope="col"| China
! scope="col"| Asia-Pacific
! scope="col"| EMEA
|-
! scope="row"| Address
| 1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada
| Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080
| Suite 2.06, 32 Delhi Rd, North Ryde, NSW, 2113, Australia
| 4 Cours Bayard 69002 Lyon, France
|-
! scope="row"| Phone
| +1 -888-259-5825
| +8610-8288 8834
| 00612-9888 6185
| +33-042-600-2810
|-
! scope="row"| Fax
| +1 -888-259-5825 ext.0
| +8610-8288 8834
| 00612-9888 6185
| +33-042-600-2810
|-
! scope="row"| Email
| [mailto:info@esecutech.com info@esecutech.com]
| [mailto:cn@esecutech.com cn@esecutech.com]
| [mailto:aus@esecutech.com aus@esecutech.com]
| [mailto:europe@esecutech.com europe@esecutech.com]
|}

Copyright 2012 SecuTech Solution Inc. All rights reserved. Reproduction in whole or in part without written permission from SecuTech is prohibited. SecuTech UniMate and the SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks are properties of their respective owners. Features and specifications are subject to change without notice.

[[File:SecuTech Logo.png]]

 
[[#top|TOP]]