UniMate USB Utilities Manual

From SecuTech Wiki
Jump to: navigation, search


UniMate Utilities Manual

Version 2.0

Version Date
1.0 2015.7
2.0 2016.7
2.1 2018.2

The data and information contained in this document cannot be altered without the express written permission of SecuTech Solution Inc. No part of this document can be reproduced or transmitted for any purpose whatsoever, either by electronic or mechanical means.

The general terms of trade of SecuTech Solution Inc. apply. Diverging agreements must be made in writing.

Copyright SecuTech Solution Inc. All rights reserved.

WINDOWS is a registered trademark of Microsoft Corporation.

The WINDOWS-logo is a registered trademark (TM) of Microsoft Corporation.

Software License

The software and the enclosed documentation are copyright-protected. By installing the software, you agree to the conditions of the licensing agreement.

Licensing Agreement

SecuTech Solution Inc. (SecuTech for short) gives the buyer the simple, exclusive and non-transferable licensing right to use the software on one individual computer or networked computer system (LAN). Copying and any other form of reproduction of the software in full or in part as well as mixing and linking it with others is prohibited. The buyer is authorized to make one single copy of the software as backup. SecuTech reserves the right to change or improve the software without notice or to replace it with a new development. SecuTech is not obliged to inform the buyer of changes, improvements or new developments or to make these available to him. A legally binding promise of certain qualities is not given. SecuTech is not responsible for damage unless it is the result of deliberate action or negligence on the part of SecuTech or its aids and assistants. SecuTech accepts no responsibility of any kind for indirect, accompanying or subsequent damage.

Contact Information

Web: http://www.esecutech.com

Email: sales@esecutech.com

Please Email any comments, suggestions or questions regarding this document or our products to us at: sales@esecutech.com


CE Attestation of Conformity
CE Attestation.png
UniMate is in conformity with the protection requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024: 1998.




FCC Standard
FCC.png
This device is in conformance with Part 15 of the FCC Rules and Regulation for Information Technology Equipment.
Operation of this product is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.




USB Logo.png
The equipment of UniMate is USBbased.




Conformity to ISO 9001:2000
ISO 9001.png
The Quality System of SecuTech Solution Inc., including its implementation, meets the requirements of the standard ISO 9001:2000




ROHS
ROHS.png
All UniMate products are environmentally friendly with ROHS certificates.





Console

UniMate Console is used to manage devices, initialize a UniMate as well as manage certificates and keys.

Installation

Console setup.exe can be found in the Utilities folder of the UniMate SDK.

Run Console setup.exe and click "Next".

UniMate Console setup window

Choose where to install the program to, and click "Install".

UniMate Console path install location

At last, click "Finish" to close the setup wizard.

installed UniMate Console

Initialize a UniMate

This operation will clean up all the certificates and keys on the PKI file system. Please proceed with caution. Click "PKI Format" on the menu bar. Input a device name when a new name is required and click "Format".

UniMate Console PKI format

Please verify administrator rights for this operation, and if correct a prompt indicating completion should pop-up.

completed PKI format

Manage PINs

PINs should be between 8 and 24 characters long, if a user PIN is locked, you can reset it using an administrator account. Click "PIN Management" on the menu bar. To change a PIN; enter the old PIN, create a new PIN and then re-enter it to confirm, and finally click "Apply". The default admin pin is 00000000, default user pin is 11111111.

UniMate Console change PIN

To reset a user PIN; enter the admin PIN, enter the new user PIN and then re-type the user PIN to confirm, followed by clicking "Apply".

UniMate Console reset PIN

Manage certificates

Certificates Container displays any existing certificates saved in the attached UniMate. Each UniMate can carry a maximum of 8 certificates or asymmetric key pairs.

Importing certificates

Click "Certificate Management" on the left menu bar, then click on the "+" button.

UniMate Console certificate management

If you do not have the correct permissions; log in using a user PIN, then select a certificate file (.pfx or .p12 formats), input the password, and click Import.

UniMate Console import certificate path

Now that certificate has been imported, hover the mouse over it, and the certificates details will be listed as below.

display certificate details

View certificates

To view a certificate, click on a certificate to select it, followed by View to see the certificates details.

viewing a certificate

certificate viewer

Export certificates

To export a certificate, click on a certificate to select it, followed by clicking "Export".

viewing a certificate

Select the file path you want to save the certificate in and click "Export".

UniMate Console export certificate path

A success prompt will pop up if the certificate exported correctly.

certificate exported successfully

Signing with certificates

To sign with a private key or verify the public key of a certificate. Click on a certificate to select it, and then click "Sign".

viewing a certificate

To sign with a private key. Choose "Sign" for the Action and select the mode (hashing function). Input the data to be signed in hexadecimal format. For example, you could enter 0d0a, which consists of four hexadecimal digits (two bytes) and represents 0x0d0a. At last, click "Sign"; the signed data will be displayed on the right side.

signing a certificate

To verify with a public key, choose "Verify" for the action and select the mode. Input the data to be signed as well as the signed data and then click "Verify".

verifying a certificate

A success prompt will appear if the signed and unsigned data matches.

certificate verified successfully

Deleting certificates

Click to select a certificate, and then click "Delete".

delete a certificate

Select "Yes" to delete the selected certificate.

Manage keys or key pairs

Existing keys and key pairs are shown in the symmetric keys and asymmetric key pairs container respectively. Each UniMate can carry a maximum of 12 symmetric keys and a maximum of 4 certificates or asymmetric key pairs.

Key generation

Click "Key Management" on left the menu bar; if you do not have the required permissions, log in with a user PIN. Next, click on the + button for the type of key you want to generate.

UniMate Console key management

Select "Auto" if you want to automatically generate a key. By clicking "Manual", you will have to input the keys manually. On placing the mouse over the field, "Input" it will display in greater detail on what needs to be entered. Next, please input a key ID as a unique identification number respective to the key, and lastly, click "OK".

generate symmetric key

Now that a symmetric key has been generated, move the mouse to it, the key ID will be displayed as shown below.

display symmetric key ID

Encrypt or decrypt with a symmetric key

Click to select a symmetric key and click "Encrypt".

encrypt using a symmetric key

Select the action and mode to be performed (please input an initialization vector 'iv' when CBC or CBC_PAD is chosen). Next, input the data to be operated on and click "Encrypt" or "Decrypt", the output data will be displayed on the right side.

select action and mode for the encryption/decryption to be performed

Delete a symmetric key

Select the symmetric key in the Key Management tab and then click "Delete".

delete symmetric key

Click "Yes" to delete the selected key.

Manage asymmetric key pairs

Generate a key pair

Click "Key Management" on the left menu bar; if you do not have the correct permissions, log in with a user PIN. Next, click on the + button in the Asymmetric Key Pairs Container window.

UniMate Console key management

Select a key pair type and input a key pair ID as a unique identification number, and then click "Generate".

generate asymmetric key pair

Encrypt, decrypt, sign or verify with an asymmetric key pair

Select an already created asymmetric key pair and click "Encrypt".

asymmetric key pairs list

Select the action to be performed. If you click "Private-Key Sign" or "Public-Key Verify", you have to choose a mode. Next, input the data to be operated on. Click "Encrypt"/"Decrypt"/"Sign", and the output data will display on the right side. If you selected "Public-Key Verify", you should input the data to be signed as well as the signed data. Click "Verify", and a success prompt will appear if the data is verified correctly.

asymmetric key pair operations

Delete an asymmetric key pair

To delete an asymmetric key pair, select the key pair to be deleted and click "Delete" in the main window.

delete asymmetric key pair

Click "Yes" to delete the selected key pair.


Monitor tool

UniMate Monitor is used to view detailed information about certificates imported into the UniMate, and register or delete certificates. It also provides a way to check information about the UniMate itself and to change User PINs.

Installation

Run Monitor setup.exe and follow the onscreen instructions.

UniMate Monitor setup window

Choose an install location, and click Install.

UniMate Monitor installation path

Click Finish to close the setup wizard.

UniMate Monitor installed

UniMate detection

Once the Monitor tool is installed, a new icon appears in the system tray, it will inform you when a UniMate is detected like so:

Insert a UniMate Remove a UniMate
UniMate token hash been inserted UniMate token has been removed

Windows 10 will show the following notification:
UniMateTokenInserted.png

Change PINs

Insert a UniMate and select a target device, then click "Change PIN".

change a UniMate PIN

To change a PIN; enter the old PIN, create a new PIN and then re-enter the new PIN and click "OK" to confirm.

change UniMate password dialogue

Assuming everything was entered correctly, a success prompt will appear.

UniMate PIN successfully changed

Import certificates

Click "Import".

importing a certificate into UniMate

If you do not have the required permissions, you will need to log in using a user PIN.

log in as a user

Select a certificate file (.pfx or .p12 format).

import .pfx or .p12 certificate file

Input the password of the certificate.

input private key of the certificate to be imported

A success prompt will appear if certificate is imported correctly.

certificate imported successfully

The certificate should now be displayed in the list.

imported certificate displayed in list

Register or unregister certificates

In Internet Explorer -- Tools -- Internet Options -- Content -- Certificates check the registered certificates.

Alt=Internet Explorer Internet options certificates

As an example, there is no certificate listed yet.

no certificate listed in Internet Explorer

To register a certificate, select the certificate and then click "Register".

registering a certificate

A prompt should appear to tell you that the certificate has been registered.

certificate has been registered successfully

Go back to Internet Explorer -- Tools -- Internet Options -- Content -- Certificates; the registered certificate should now be displayed on the list.

registered certificate now displaying in Internet Explorer

To unregister a certificate, select a certificate and click "Un-Register".

deregistering a UniMate certificate

After confirming, the certificate will be removed.

certificate deregistered successfully

Back in Internet Explorer -- Tools -- Internet Options -- Content -- Certificates, the registered certificate will have been removed.

no certificate displayed in Internet Explorer

View certificates

Select a certificate.

selecting a certificate to view

Click "View" to see the certificates details.

certificate viewer

Expiration reminder

You can set an expiration reminder time.

setting an expiration date reminder

Click "Set".

expiration date reminder successfully set

When the expiration date is nearing, a balloon notification will appear to provide a warning that the certificate is close to expiring.

user's certificate will expire soon


Partition Tool (only for UniMate drive)

UniMate Drive Partition tool allows developer to set partitions, and to upload an ISO image to the Drives CD-ROM.

UniMate Drive partition tool

Click Get, and you will be provided with the total usable size of the UniMate Drive. You can set the partition as you wish, and then click Partition to perform the resize operation.

UniMate Drive partition tool, load ISO image

In the Load Image tab, you can load an ISO image to the Drives CD-ROM partition.

Write ISO Tool

UniMate Write ISO Tool is used for writing ISO images to UniMate dongles.

UniMate write ISO image to dongle tool

Change Language Mode Tool (For UniMate Flex)

UniMate Change Language Mode Tool is used with the UniMate Flex to change the display language.

UniMate change language mode


If you have any questions, please feel free to contact us at: http://www.esecutech.com/support or support@esecutech.com




Footer Logo List.png




About SecuTech

SecuTech Solution Inc. is a company specializing in data protection and strong authentication, providing total customer satisfaction in security systems & services for banks, financial institutions & other industries. Having extensive and in-depth experience within the information security market, SecuTech has drawn upon this experience to utilize today's cutting-edge technologies that are effective against increasingly sophisticated cyber attacks. Enabling enterprises, financial institutions, and government to safely adopt the economic benefits of mobile and cloud computing.

http://www.esecutech.com
SecuTech Solution Inc.

Contact Us:
North America China Asia-Pacific EMEA
Address 1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080 Suite 5.14, 32 Delhi Rd, North Ryde, NSW, 2113, Australia 4 Cours Bayard 69002 Lyon, France
Phone +1 -888-259-5825 +8610-8288 8834 00612-9888 6185 +33-042-600-2810
Fax +1 -888-259-5825 ext.0 +8610-8288 8834 00612-9888 6185 +33-042-600-2810
Email info@esecutech.com cn@esecutech.com aus@esecutech.com europe@esecutech.com

Copyright 2012 SecuTech Solution Inc. All rights reserved. Reproduction in whole or in part without written permission from SecuTech is prohibited. SecuTech UniMate and the SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks are properties of their respective owners. Features and specifications are subject to change without notice.

SecuTech Logo.png



TOP