UniToken Integration Guide FreeOTFE Secretfile - Revision history

Bao at 05:54, 23 August 2016

2016-08-23T05:54:28Z

Joseph: moved Integration Guide FreeOTFE Secretfile to UniToken Integration Guide FreeOTFE Secretfile

2012-08-21T04:18:47Z

moved Integration Guide FreeOTFE Secretfile to UniToken Integration Guide FreeOTFE Secretfile

← Older revision	Revision as of 15:18, 21 August 2012
(No difference)

Joseph at 23:47, 14 May 2012

2012-05-14T23:47:54Z

← Older revision		Revision as of 10:47, 15 May 2012
Line 9:		Line 9:
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| Right-click on the PKI package installation file and choose ~~“Run~~ as ~~administrator”~~.<br>Execute the file with an account that has administrator rights on this computer.<br><br>		\| width="400" \| Right-click on the PKI package installation file and choose [Run as administrator].<br>Execute the file with an account that has administrator rights on this computer.<br><br>
	\| [[Image:Bitlocker img01.jpg\|370x259px]]<br><br>		\| [[Image:Bitlocker img01.jpg\|370x259px]]<br><br>
	\|-		\|-

Joseph at 00:58, 4 May 2012

2012-05-04T00:58:14Z

← Older revision		Revision as of 11:58, 4 May 2012
Line 98:		Line 98:
	\|}		\|}

	== Create a Secret File within UniToken to Secure ~~your~~ Volume ==		== Create a Secret File within UniToken to Secure a Volume ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""

Joseph at 00:46, 4 May 2012

2012-05-04T00:46:49Z

← Older revision		Revision as of 11:46, 4 May 2012
Line 152:		Line 152:
	\| width="50" \|  '''4'''		\| width="50" \|  '''4'''
	\| width="400" \| Select the corresponding Secret Key for the volume and click on [OK] to mount the volume.<br>		\| width="400" \| Select the corresponding Secret Key for the volume and click on [OK] to mount the volume.<br>
	If the incorrect password is entered or key is selected, you will not be able to access the volume. Both the password for the volume and the secret key stored within UniToken are required to access the volume.<br><br>		If the incorrect password is entered or incorrect key is selected, you will not be able to access the volume. Both the corresponding password for the volume and the secret key stored within UniToken are required to access the volume.<br><br>
	\| [[Image:freeotfe img38.jpg\|370px]]<br><br>		\| [[Image:freeotfe img38.jpg\|370px]]<br><br>
	\|}		\|}

Joseph at 00:45, 4 May 2012

2012-05-04T00:45:43Z

Show changes

Damien at 04:42, 2 May 2012

2012-05-02T04:42:19Z

@@ Line 1: / Line 1: @@
 [[category:UniToken_Integration_Guide]]
 [[category:UniToken_FreeOTFE_Integration]]
 == Install the PKI package  ==

Damien: /* Configure PKCS support in TrueCrypt */

2012-04-11T08:08:54Z

Configure PKCS support in TrueCrypt

← Older revision		Revision as of 19:08, 11 April 2012
Line 46:		Line 46:
	<br>		<br>

	== Configure PKCS support in ~~TrueCrypt~~ ==		== Configure PKCS support in FreeOTFE ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""

Damien: /* Unlock the encrypted volume with the keyfile stored in UniToken */

2012-04-10T07:23:09Z

Unlock the encrypted volume with the keyfile stored in UniToken

← Older revision		Revision as of 18:23, 10 April 2012
Line 145:		Line 145:
	\|}		\|}

	== ~~Unlock~~ the encrypted volume ~~with the keyfile stored in UniToken~~ ==		== Mount the encrypted volume ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| ~~If you lost the password for your volume, you can now use your UniToken to access the data.~~ Click on [Mount file] ~~(or [Mount Partition] if you encrypted a whole partition)~~. ~~<br>~~<br>		\| width="400" \| Click on [Mount file] and select your volume.<br>
	\| <center>[[Image:freeotfe ~~img25~~.jpg\|370px]]</center><br><br>		\| <center>[[Image:freeotfe img35.jpg\|370px]]</center><br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| ~~Check [PKCS#11] and when~~ the ~~[Security Token/SmartCard PIN] dialog box appears, fill in your PIN~~ and click on OK.~~<br>~~<br>		\| width="400" \| Enter the password for the volume and click on [Advanced].<br>
	\| [[Image:freeotfe ~~img26~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img36.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''3'''		\| width="50" \|  '''3'''
	\| width="400" \| ~~Input~~ the password ~~for the keyfile in the password field~~ and ~~select~~ the right ~~keyfile in~~ the ~~PKCS#11 file. Click~~ on [OK] to ~~confirm~~ and ~~get~~ access ~~to your encrypted~~ volume.<br>		\| width="400" \| In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.<br>
	\| [[Image:freeotfe ~~img27~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img37.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''4'''
			\| width="400" \| Select the right secret key for the volume and click on [OK] to mount the volume.<br>
			If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.<br><br>
			\| [[Image:freeotfe img38.jpg\|370px]]<br><br>
	\|}		\|}

Damien: /* Create a keyfile for the encrypted volume and store it inside UniToken */

2012-04-10T07:01:53Z

Create a keyfile for the encrypted volume and store it inside UniToken

← Older revision		Revision as of 18:01, 10 April 2012
Line 109:		Line 109:
	\|}		\|}

	== Create a ~~keyfile for the encrypted volume~~ and ~~store~~ it ~~inside UniToken~~ ==		== Create a secret file inside UniToken and use it to secure your volume ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| ~~In the main menu, click on~~ [Tools] [~~Create keyfile…~~]<br>		\| width="400" \| Select [Tools] [PKCS#11 token management]<br>
	\| [[Image:freeotfe ~~img13~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img28.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| ~~Choose the type of~~ your ~~encrypted volume (file or partition)~~ and click on [~~Next~~].<br>		\| width="400" \| Input your User PIN for your UniToken and click on [OK]<br>
	\| [[Image:freeotfe ~~img14~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img29.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''3'''		\| width="50" \|  '''3'''
	\| width="400" \| ~~Indicate where~~ your ~~encrypted volume is located~~ and click on [~~Next~~].<br>		\| width="400" \| In the [Secret Keys] tab, click on [New].<br>
	\| [[Image:freeotfe ~~img15~~.jpg\|370px]]<br><br>		In the [New PKCS#11 Secret Key] window, input a name for your Secret Key and click on [OK]
			<br>
			\| [[Image:freeotfe img30.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''4'''		\| width="50" \|  '''4'''
	\| width="400" \| ~~Input the password of your volume and click~~ on [~~Next~~].<br>		\| width="400" \| Click on [OK] to close the information window confirming that the Secret Key was created successfully.<br>
	\| [[Image:freeotfe ~~img16~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img31.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''5'''		\| width="50" \|  '''5'''
	\| width="400" \| ~~Choose where you want to store~~ the ~~keyfile (At this step~~ you ~~cannot directly store the keyfile directly to the Token, you first have to save it to your computer~~ and ~~import it to your Token later)~~.<br>		\| width="400" \| Select the Secret file that you created and click on [Secure].<br>
	\| [[Image:freeotfe ~~img17~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img32.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''6'''		\| width="50" \|  '''6'''
	\| width="400" \| ~~Input a password for~~ your ~~keyfile~~ and ~~confirm it~~. Click on [~~Next~~] to ~~continue~~.<br>		\| width="400" \| Click on the icon corresponding to your type of volume (file or partition) and select the volume that you want to protect with the Secret Key. Click on [OK] to confirm.<br>
	\| [[Image:freeotfe ~~img18~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img33.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''7'''		\| width="50" \|  '''7'''
	\| width="400" \| ~~Choose the elements that you want to use for password salting and random padding data.<br>~~		\| width="400" \| Click on [Yes] to confirm that you want to protect the volume.<br>
	~~We have decided to choose Microsoft CrytoAPI and PKCS#11 Token.<br>~~		A dialog pop will appear to confirm that the volume has been correctly protected.<br>
	Click on [~~Next~~]~~.<br>~~		\| [[Image:freeotfe img34.jpg\|370px]]<br><br>
	~~\| [[Image:freeotfe img19.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''8'''~~
	~~\| width="400" \| Check~~ that the ~~correct UniToken is selected and click on [Finish].<br>~~
	~~\| [[Image:freeotfe img20.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''9'''~~
	~~\| width="400" \| In the main menu, choose [Tools] [PKCS#11 token management]~~.<br>
	~~\| [[Image:freeotfe img21.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''10'''~~
	~~\| width="400" \| Input the PIN for the UniToken and click on [OK].<br>~~
	~~\| [[Image:freeotfe img22.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''11'''~~
	~~\| width="400" \| In the [Keyfiles] tab, click on [Import] and select the keyfile that you just created.<br>~~
	~~\| [[Image:freeotfe img23.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''12'''~~
	~~\| width="400" \| When the~~ dialog ~~box [Keyfile imported successfully as : (name of the keyfile)] appears, the import is finished.<br>~~
	~~<br>~~
	~~For more security, you can choose~~ to ~~delete the keyfile stored on your computer and keep only~~ the ~~one inside the UniToken~~.
	<br>
	\| [[Image:freeotfe ~~img24~~.jpg\|370px]]<br><br>
	\|}		\|}


	== Unlock the encrypted volume with the keyfile stored in UniToken ==		== Unlock the encrypted volume with the keyfile stored in UniToken ==

← Older revision		Revision as of 18:23, 10 April 2012
Line 145:		Line 145:
	\|}		\|}

	== ~~Unlock~~ the encrypted volume ~~with the keyfile stored in UniToken~~ ==		== Mount the encrypted volume ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| ~~If you lost the password for your volume, you can now use your UniToken to access the data.~~ Click on [Mount file] ~~(or [Mount Partition] if you encrypted a whole partition)~~. ~~<br>~~<br>		\| width="400" \| Click on [Mount file] and select your volume.<br>
	\| <center>[[Image:freeotfe ~~img25~~.jpg\|370px]]</center><br><br>		\| <center>[[Image:freeotfe img35.jpg\|370px]]</center><br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| ~~Check [PKCS#11] and when~~ the ~~[Security Token/SmartCard PIN] dialog box appears, fill in your PIN~~ and click on OK.~~<br>~~<br>		\| width="400" \| Enter the password for the volume and click on [Advanced].<br>
	\| [[Image:freeotfe ~~img26~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img36.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''3'''		\| width="50" \|  '''3'''
	\| width="400" \| ~~Input~~ the password ~~for the keyfile in the password field~~ and ~~select~~ the right ~~keyfile in~~ the ~~PKCS#11 file. Click~~ on [OK] to ~~confirm~~ and ~~get~~ access ~~to your encrypted~~ volume.<br>		\| width="400" \| In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.<br>
	\| [[Image:freeotfe ~~img27~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img37.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''4'''
			\| width="400" \| Select the right secret key for the volume and click on [OK] to mount the volume.<br>
			If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.<br><br>
			\| [[Image:freeotfe img38.jpg\|370px]]<br><br>
	\|}		\|}

← Older revision		Revision as of 18:01, 10 April 2012
Line 109:		Line 109:
	\|}		\|}

	== Create a ~~keyfile for the encrypted volume~~ and ~~store~~ it ~~inside UniToken~~ ==		== Create a secret file inside UniToken and use it to secure your volume ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| ~~In the main menu, click on~~ [Tools] [~~Create keyfile…~~]<br>		\| width="400" \| Select [Tools] [PKCS#11 token management]<br>
	\| [[Image:freeotfe ~~img13~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img28.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| ~~Choose the type of~~ your ~~encrypted volume (file or partition)~~ and click on [~~Next~~].<br>		\| width="400" \| Input your User PIN for your UniToken and click on [OK]<br>
	\| [[Image:freeotfe ~~img14~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img29.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''3'''		\| width="50" \|  '''3'''
	\| width="400" \| ~~Indicate where~~ your ~~encrypted volume is located~~ and click on [~~Next~~].<br>		\| width="400" \| In the [Secret Keys] tab, click on [New].<br>
	\| [[Image:freeotfe ~~img15~~.jpg\|370px]]<br><br>		In the [New PKCS#11 Secret Key] window, input a name for your Secret Key and click on [OK]
			<br>
			\| [[Image:freeotfe img30.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''4'''		\| width="50" \|  '''4'''
	\| width="400" \| ~~Input the password of your volume and click~~ on [~~Next~~].<br>		\| width="400" \| Click on [OK] to close the information window confirming that the Secret Key was created successfully.<br>
	\| [[Image:freeotfe ~~img16~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img31.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''5'''		\| width="50" \|  '''5'''
	\| width="400" \| ~~Choose where you want to store~~ the ~~keyfile (At this step~~ you ~~cannot directly store the keyfile directly to the Token, you first have to save it to your computer~~ and ~~import it to your Token later)~~.<br>		\| width="400" \| Select the Secret file that you created and click on [Secure].<br>
	\| [[Image:freeotfe ~~img17~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img32.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''6'''		\| width="50" \|  '''6'''
	\| width="400" \| ~~Input a password for~~ your ~~keyfile~~ and ~~confirm it~~. Click on [~~Next~~] to ~~continue~~.<br>		\| width="400" \| Click on the icon corresponding to your type of volume (file or partition) and select the volume that you want to protect with the Secret Key. Click on [OK] to confirm.<br>
	\| [[Image:freeotfe ~~img18~~.jpg\|370px]]<br><br>		\| [[Image:freeotfe img33.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''7'''		\| width="50" \|  '''7'''
	\| width="400" \| ~~Choose the elements that you want to use for password salting and random padding data.<br>~~		\| width="400" \| Click on [Yes] to confirm that you want to protect the volume.<br>
	~~We have decided to choose Microsoft CrytoAPI and PKCS#11 Token.<br>~~		A dialog pop will appear to confirm that the volume has been correctly protected.<br>
	Click on [~~Next~~]~~.<br>~~		\| [[Image:freeotfe img34.jpg\|370px]]<br><br>
	~~\| [[Image:freeotfe img19.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''8'''~~
	~~\| width="400" \| Check~~ that the ~~correct UniToken is selected and click on [Finish].<br>~~
	~~\| [[Image:freeotfe img20.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''9'''~~
	~~\| width="400" \| In the main menu, choose [Tools] [PKCS#11 token management]~~.<br>
	~~\| [[Image:freeotfe img21.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''10'''~~
	~~\| width="400" \| Input the PIN for the UniToken and click on [OK].<br>~~
	~~\| [[Image:freeotfe img22.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''11'''~~
	~~\| width="400" \| In the [Keyfiles] tab, click on [Import] and select the keyfile that you just created.<br>~~
	~~\| [[Image:freeotfe img23.jpg\|370px]]<br><br>~~
	\|-
	~~\| width="50" \|  '''12'''~~
	~~\| width="400" \| When the~~ dialog ~~box [Keyfile imported successfully as : (name of the keyfile)] appears, the import is finished.<br>~~
	~~<br>~~
	~~For more security, you can choose~~ to ~~delete the keyfile stored on your computer and keep only~~ the ~~one inside the UniToken~~.
	<br>
	\| [[Image:freeotfe ~~img24~~.jpg\|370px]]<br><br>
	\|}		\|}


	== Unlock the encrypted volume with the keyfile stored in UniToken ==		== Unlock the encrypted volume with the keyfile stored in UniToken ==