UniToken Integration TrueCrypt Keyfile - Revision history

Bao at 06:05, 23 August 2016

2016-08-23T06:05:10Z

Joseph: moved UniToken TrueCrypt Keyfile Integration to UniToken Integration TrueCrypt Keyfile

2012-08-21T05:15:27Z

moved UniToken TrueCrypt Keyfile Integration to UniToken Integration TrueCrypt Keyfile

← Older revision	Revision as of 16:15, 21 August 2012
(No difference)

Joseph at 01:33, 15 May 2012

2012-05-15T01:33:21Z

← Older revision		Revision as of 12:33, 15 May 2012
Line 1:		Line 1:
	[[category:UniToken_Integration_Guide]]		[[category:UniToken_Integration_Guide]]

	== Install the PKI ~~package~~ ==		== Install the PKI Package ==

	This ~~part~~ explains how to install the PKI package that ~~you~~ can ~~find~~ inside the SDK. The End User package can be found inside the folder Redist/Enduser.		This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| Right-~~Click~~ on the PKI package installation file and choose ~~“Run~~ as ~~administrator”~~<br>Execute the file with an account that has administrator rights on this computer.<br><br>		\| width="400" \| Right-click on the PKI package installation file and choose [Run as administrator].<br>Execute the file with an account that has administrator rights on this computer.<br><br>
	\| [[Image:Bitlocker img01.jpg\|370x259px]]<br><br>		\| [[Image:Bitlocker img01.jpg\|370x259px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| Click on [Next] in the welcome screen.<br>		\| width="400" \| Click on [Next] in the InstallShield Wizard welcome screen.<br>
	\| [[Image:Bitlocker img02.jpg\|370px]]<br><br>		\| [[Image:Bitlocker img02.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''3'''		\| width="50" \|  '''3'''
	\| width="400" \| Input your ~~username~~ and Company Name and click on [Next].<br>		\| width="400" \| Input your User Name and Company Name and click on [Next].<br>
	\| [[Image:Bitlocker img03.jpg\|370px]]<br><br>		\| [[Image:Bitlocker img03.jpg\|370px]]<br><br>
	\|-		\|-
Line 28:		Line 28:
	\|-		\|-
	\| width="50" \|  '''6'''		\| width="50" \|  '''6'''
	\| width="400" \| Verify that the ~~install wizard~~ completed ~~correctly~~ and click on [Finish].<br>		\| width="400" \| Verify that the InstallShield Wizard completed successfully and click on [Finish].<br>
	\| [[Image:Bitlocker img06.jpg\|370px]]<br><br>		\| [[Image:Bitlocker img06.jpg\|370px]]<br><br>
	\|}		\|}
Line 34:		Line 34:
	<br>		<br>

	== Configure PKCS ~~support~~ in TrueCrypt ==		== Configure PKCS Support in TrueCrypt ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| In the main menu, ~~go to~~ [Settings],[Security Tokens]. <br><br>		\| width="400" \| In the main menu of TrueCrypt, click on [Settings],[Security Tokens].<br><br>
	\| <center>[[Image:truecrypt img01.jpg\|370px]]</center><br><br>		\| <center>[[Image:truecrypt img01.jpg\|370px]]</center><br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| In the [TrueCrypt – Security Token Preferences] window, click [Select Library] and ~~choose~~ the library file. By default the PKI package will install this file in the ~~Windows¥System32¥ folder. (~~utp11.dll)<br><br>		\| width="400" \| In the [TrueCrypt - Security Token Preferences] window, click [Select Library...] and select the library file to be used. By default, the PKI package will install this file in the Windows%System32% directory, library file "utp11.dll".<br><br>
	~~Once done, click~~ [OK] ~~to confirm your choice~~.<br>		Click [OK].<br>
	\| [[Image:truecrypt img02.jpg\|370px]]<br><br>		\| [[Image:truecrypt img02.jpg\|370px]]<br><br>
	\|}		\|}

	== Create an ~~encrypted volume~~ with TrueCrypt ==		== Create an Encrypted Volume with TrueCrypt ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""

Damien: /* Create an encrypted volume with FreeOTFE */

2012-04-11T08:31:14Z

Create an encrypted volume with FreeOTFE

← Older revision		Revision as of 19:31, 11 April 2012
Line 48:		Line 48:
	\|}		\|}

	== Create an encrypted volume with ~~FreeOTFE~~ ==		== Create an encrypted volume with TrueCrypt ==

	{\| cellspacing="0" cellpadding="0" border="0" width=""		{\| cellspacing="0" cellpadding="0" border="0" width=""
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| To create a new encrypted volume, click on [New].<br>		\| width="400" \| To create a new encrypted volume, in the main window, click [Create Volume]. Then, on the first page of the wizard, click [New].<br>
	\| [[Image:freeotfe img03.jpg\|370px]]<br><br>		\| [[Image:freeotfe img03.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| On the [~~FreeOTFE~~ Volume ~~Creation Wizard~~] ~~welcome~~ page, click on [Next] to ~~start~~ the volume creation procedure.<br>		\| width="400" \| On the [Volume Type] page, click on [Next] to continue the volume creation procedure.<br>

	\| [[Image:freeotfe img04.jpg\|370px]]<br><br>		\| [[Image:freeotfe img04.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''3'''		\| width="50" \|  '''3'''
	\| width="400" \| ~~You can~~ choose to store the encrypted volume ~~as a file or to encrypt a whole partition/disk. Choose the one that fits the best to your needs. <br>~~		\| width="400" \| Click [Select File] to choose where to store the encrypted volume. Click [Next] to continue. <br><br>
	~~In our case, we chose to store the encrypted volume as a file~~.~~<br>~~
	Click on [Next] to continue.<br>
	\| [[Image:freeotfe img05.jpg\|370px]]<br><br>		\| [[Image:freeotfe img05.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''4'''		\| width="50" \|  '''4'''
	\| width="400" \| Choose ~~where you want to store the~~ volume and click on [Next] to continue.<br>		\| width="400" \| Choose a file name for your encrypted volume and
			click [Next] to continue.<br>
	\| [[Image:freeotfe img06.jpg\|370px]]<br><br>		\| [[Image:freeotfe img06.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''5'''		\| width="50" \|  '''5'''
	\| width="400" \| ~~Choose the size of~~ your ~~encrypted volume and click on~~ [Next] to continue.<br>		\| width="400" \| Once you’ve chosen where to save your file. Click
			[Next] to continue.<br>
	\| [[Image:freeotfe img07.jpg\|370px]]<br><br>		\| [[Image:freeotfe img07.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''6'''		\| width="50" \|  '''6'''
	\| width="400" \| Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue.<br>		\| width="400" \| Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue.<br>
	\| [[Image:freeotfe img08.jpg\|370px]]<br><br>		\| [[Image:freeotfe img08.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''7'''		\| width="50" \|  '''7'''
	\| width="400" \| Choose the ~~elements to use to secure your volume, the more you use elements, the more you can secure~~ your volume.~~<br>~~		\| width="400" \| Choose the size for your volume. Click [Next].<br>
	~~We have chosen to use Microsoft CryptoAPI and PKCS#11 token~~.<br>
	\| [[Image:freeotfe img09.jpg\|370px]]<br><br>		\| [[Image:freeotfe img09.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''8'''		\| width="50" \|  '''8'''
	\| width="400" \| ~~Check~~ that ~~you have selected the right UniToken~~ and click on [~~Next~~] to ~~continue~~.<br>		\| width="400" \| Choose a password for your volume, make sure that [Use keyfiles] is checked and click on [Keyfiles] in order to create a keyfile for your volume (later we will store this keyfile inside the UniToken).<br>
	\| [[Image:freeotfe img10.jpg\|370px]]<br><br>		\| [[Image:freeotfe img10.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''9'''		\| width="50" \|  '''9'''
	\| width="400" \| ~~Input a password for your encrypted volume. This doesn’t have to be the same password with your UniToken.~~ Click on [~~Next~~] to ~~continue~~.<br>		\| width="400" \| Click [Generate Random Keyfile…] to generate a
			new keyfile.<br>
	\| [[Image:freeotfe img11.jpg\|370px]]<br><br>		\| [[Image:freeotfe img11.jpg\|370px]]<br><br>
	\|-		\|-
	\| width="50" \|  '''10'''		\| width="50" \|  '''10'''
	\| width="400" \| ~~Check that the details for the new volume creation are correct~~ and ~~click on [Finish~~] to ~~create~~ the ~~volume~~.<br>		\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
	\| [[Image:freeotfe img12.jpg\|370px]]<br><br>		\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''11'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''12'''
			\| width="400" \| Click [Generate Random Keyfile…] to generate a
			new keyfile.<br>
			\| [[Image:freeotfe img11.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''13'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''14'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''15'''
			\| width="400" \| Click [Generate Random Keyfile…] to generate a
			new keyfile.<br>
			\| [[Image:freeotfe img11.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''16'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''17'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''18'''
			\| width="400" \| Click [Generate Random Keyfile…] to generate a
			new keyfile.<br>
			\| [[Image:freeotfe img11.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''19'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''20'''
			\| width="400" \| Click [Generate and Save Keyfile] to save the file.<br>
			\| [[Image:freeotfe img12.jpg\|370px]]<br><br>
			\|-
			\| width="50" \|  '''21'''
			\| width="400" \| Click [Generate Random Keyfile…] to generate a
			new keyfile.<br>
			\| [[Image:freeotfe img11.jpg\|370px]]<br><br>
	\|}		\|}

Damien: /* Configure PKCS support in TrueCrypt */

2012-04-11T08:15:31Z

Configure PKCS support in TrueCrypt

← Older revision		Revision as of 19:15, 11 April 2012
Line 39:		Line 39:
	\|-		\|-
	\| width="50" \|  '''1'''		\| width="50" \|  '''1'''
	\| width="400" \| In the main menu, go to [Settings], [~~Security　Tokens~~]. <br><br>		\| width="400" \| In the main menu, go to [Settings],[Security Tokens]. <br><br>
	\| <center>[[Image:~~freeotfe~~ img01.jpg\|370px]]</center><br><br>		\| <center>[[Image:truecrypt img01.jpg\|370px]]</center><br><br>
	\|-		\|-
	\| width="50" \|  '''2'''		\| width="50" \|  '''2'''
	\| width="400" \| In the [~~Options~~] window, [~~PKCS#11] tab, Check [Enable PKCS#11 support~~] and choose the library file. By default the PKI package will install this file in the ~~Windows\System32\~~ folder.<br><br>		\| width="400" \| In the [TrueCrypt – Security Token Preferences] window, click [Select Library] and choose the library file. By default the PKI package will install this file in the Windows¥System32¥ folder. (utp11.dll)<br><br>
	~~Choose where to save the settings in the field~~ [~~Save above settings to~~] ~~and click on OK~~ to ~~apply the settings~~.<br>		Once done, click [OK] to confirm your choice.<br>
	\| [[Image:~~freeotfe~~ img02.jpg\|370px]]<br><br>		\| [[Image:truecrypt img02.jpg\|370px]]<br><br>
	\|}		\|}

Damien: Created page with "category:UniToken_Integration_Guide == Install the PKI package == This part explains how to install the PKI package that you can find inside the SDK. The End User packa..."

2012-04-11T08:06:33Z

Created page with "category:UniToken_Integration_Guide == Install the PKI package == This part explains how to install the PKI package that you can find inside the SDK. The End User packa..."

New page

[[category:UniToken_Integration_Guide]]

== Install the PKI package ==

This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.

{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" |  '''1'''
| width="400" | Right-Click on the PKI package installation file and choose “Run as administrator” Execute the file with an account that has administrator rights on this computer. 
| [[Image:Bitlocker img01.jpg|370x259px]] 
|-
| width="50" |  '''2'''
| width="400" | Click on [Next] in the welcome screen. 
| [[Image:Bitlocker img02.jpg|370px]] 
|-
| width="50" |  '''3'''
| width="400" | Input your username and Company Name and click on [Next]. 
| [[Image:Bitlocker img03.jpg|370px]] 
|-
| width="50" |  '''4'''
| width="400" | Select [Complete] and click on [Next]. 
| [[Image:Bitlocker img04.jpg|370px]] 
|-
| width="50" |  '''5'''
| width="400" | Click on [Install] to begin the installation of the PKI package. 
| [[Image:Bitlocker img05.jpg|370px]] 
|-
| width="50" |  '''6'''
| width="400" | Verify that the install wizard completed correctly and click on [Finish]. 
| [[Image:Bitlocker img06.jpg|370px]] 
|}

 

== Configure PKCS support in TrueCrypt ==

{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" |  '''1'''
| width="400" | In the main menu, go to [Settings], [Security　Tokens]. 
| <center>[[Image:freeotfe img01.jpg|370px]]</center> 
|-
| width="50" |  '''2'''
| width="400" | In the [Options] window, [PKCS#11] tab, Check [Enable PKCS#11 support] and choose the library file. By default the PKI package will install this file in the Windows\System32\ folder. 
Choose where to save the settings in the field [Save above settings to] and click on OK to apply the settings. 
| [[Image:freeotfe img02.jpg|370px]] 
|}

== Create an encrypted volume with FreeOTFE ==

{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" |  '''1'''
| width="400" | To create a new encrypted volume, click on [New]. 
| [[Image:freeotfe img03.jpg|370px]] 
|-
| width="50" |  '''2'''
| width="400" | On the [FreeOTFE Volume Creation Wizard] welcome page, click on [Next] to start the volume creation procedure. 

| [[Image:freeotfe img04.jpg|370px]] 
|-
| width="50" |  '''3'''
| width="400" | You can choose to store the encrypted volume as a file or to encrypt a whole partition/disk. Choose the one that fits the best to your needs. 
In our case, we chose to store the encrypted volume as a file. 
Click on [Next] to continue. 
| [[Image:freeotfe img05.jpg|370px]] 
|-
| width="50" |  '''4'''
| width="400" | Choose where you want to store the volume and click on [Next] to continue. 
| [[Image:freeotfe img06.jpg|370px]] 
|-
| width="50" |  '''5'''
| width="400" | Choose the size of your encrypted volume and click on [Next] to continue. 
| [[Image:freeotfe img07.jpg|370px]] 
|-
| width="50" |  '''6'''
| width="400" | Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue. 
| [[Image:freeotfe img08.jpg|370px]] 
|-
| width="50" |  '''7'''
| width="400" | Choose the elements to use to secure your volume, the more you use elements, the more you can secure your volume. 
We have chosen to use Microsoft CryptoAPI and PKCS#11 token. 
| [[Image:freeotfe img09.jpg|370px]] 
|-
| width="50" |  '''8'''
| width="400" | Check that you have selected the right UniToken and click on [Next] to continue. 
| [[Image:freeotfe img10.jpg|370px]] 
|-
| width="50" |  '''9'''
| width="400" | Input a password for your encrypted volume. This doesn’t have to be the same password with your UniToken. Click on [Next] to continue. 
| [[Image:freeotfe img11.jpg|370px]] 
|-
| width="50" |  '''10'''
| width="400" | Check that the details for the new volume creation are correct and click on [Finish] to create the volume. 
| [[Image:freeotfe img12.jpg|370px]] 
|}

== Create a keyfile for the encrypted volume and store it inside UniToken ==

{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" |  '''1'''
| width="400" | In the main menu, click on [Tools] [Create keyfile…] 
| [[Image:freeotfe img13.jpg|370px]] 
|-
| width="50" |  '''2'''
| width="400" | Choose the type of your encrypted volume (file or partition) and click on [Next]. 
| [[Image:freeotfe img14.jpg|370px]] 
|-
| width="50" |  '''3'''
| width="400" | Indicate where your encrypted volume is located and click on [Next]. 
| [[Image:freeotfe img15.jpg|370px]] 
|-
| width="50" |  '''4'''
| width="400" | Input the password of your volume and click on [Next]. 
| [[Image:freeotfe img16.jpg|370px]] 
|-
| width="50" |  '''5'''
| width="400" | Choose where you want to store the keyfile (At this step you cannot directly store the keyfile directly to the Token, you first have to save it to your computer and import it to your Token later). 
| [[Image:freeotfe img17.jpg|370px]] 
|-
| width="50" |  '''6'''
| width="400" | Input a password for your keyfile and confirm it. Click on [Next] to continue. 
| [[Image:freeotfe img18.jpg|370px]] 
|-
| width="50" |  '''7'''
| width="400" | Choose the elements that you want to use for password salting and random padding data. 
We have decided to choose Microsoft CrytoAPI and PKCS#11 Token. 
Click on [Next]. 
| [[Image:freeotfe img19.jpg|370px]] 
|-
| width="50" |  '''8'''
| width="400" | Check that the correct UniToken is selected and click on [Finish]. 
| [[Image:freeotfe img20.jpg|370px]] 
|-
| width="50" |  '''9'''
| width="400" | In the main menu, choose [Tools] [PKCS#11 token management]. 
| [[Image:freeotfe img21.jpg|370px]] 
|-
| width="50" |  '''10'''
| width="400" | Input the PIN for the UniToken and click on [OK]. 
| [[Image:freeotfe img22.jpg|370px]] 
|-
| width="50" |  '''11'''
| width="400" | In the [Keyfiles] tab, click on [Import] and select the keyfile that you just created. 
| [[Image:freeotfe img23.jpg|370px]] 
|-
| width="50" |  '''12'''
| width="400" | When the dialog box [Keyfile imported successfully as : (name of the keyfile)] appears, the import is finished. 
 
For more security, you can choose to delete the keyfile stored on your computer and keep only the one inside the UniToken.
 
| [[Image:freeotfe img24.jpg|370px]] 
|}

== Unlock the encrypted volume with the keyfile stored in UniToken ==

{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" |  '''1'''
| width="400" | If you lost the password for your volume, you can now use your UniToken to access the data. Click on [Mount file] (or [Mount Partition] if you encrypted a whole partition). 
| <center>[[Image:freeotfe img25.jpg|370px]]</center> 
|-
| width="50" |  '''2'''
| width="400" | Check [PKCS#11] and when the [Security Token/SmartCard PIN] dialog box appears, fill in your PIN and click on OK. 
| [[Image:freeotfe img26.jpg|370px]] 
|-
| width="50" |  '''3'''
| width="400" | Input the password for the keyfile in the password field and select the right keyfile in the PKCS#11 file. Click on [OK] to confirm and get access to your encrypted volume. 
| [[Image:freeotfe img27.jpg|370px]] 
|}

== Glossary ==

'''Public Key Infrastructure (PKI)''' is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

'''Microsoft Cryptography API, MS-CAPI''' is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

'''PKCS''' refers to a group of public-key cryptography standards devised and published by RSA Security.