UniToken Integration Guide GINA: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
Bao (talk | contribs)
mNo edit summary
 
(9 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[category:UniToken_Integration_Guide]]
[[category:UniToken_Integration_Guide]]


== UniToken GINA Package Installation ==
== UniToken GINA Package Installation ==


This part explains how to install the Standalone authentication package for Windows XP/2k that you can find inside the SDK.  
This section explains how to install the standalone authentication package for Windows XP/2k, which can be found inside the UniToken SDK.  


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" |  '''1'''  
| width="50" | '''1'''  
| width="400" | Go to the folder: Integration Guides/Smart Card  
| width="400" | Navigate to the folder "Integration Guides/Smart Card Logon Feature/Standalone SmartCard logon(GINA)". Find the file "UniTokenGina.exe" and execute it to begin the installation.
Logon Feature/Standalone SmartCard  
| [[Image:GINA img01.jpg|370px]]
logon(GINA). <br>Find the file “UniTokenGina.exe”  and double
click it to begin the installation.<br><br>
| [[Image:GINA img01.jpg|370x259px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Click on [Next] in the welcome screen.<br>
| width="400" | Click [Next] in the InstallShield welcome screen.
| [[Image:GINA img02.jpg|370px]]<br><br>
| [[Image:GINA img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | On the Installation welcome  page, click on  
| width="400" | Click on [Install] to begin the installation.
[Next].<br>
| [[Image:GINA img04.jpg|370px]]
| [[Image:GINA img03.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Click on [Install] to begin the installation.<br>
| width="400" | After installation has completed, the computer must be restarted. Choose either option and click [Finish] to complete the wizard.
| [[Image:GINA img04.jpg|370px]]<br><br>
| [[Image:GINA img05.jpg|370px]]
|-
| width="50" | &nbsp;'''5'''
| width="400" | Choose “Yes, I want to restart my computer now”
and click [Finish].<br>
| [[Image:GINA img05.jpg|370px]]<br><br>
|}
 
<br>
 
== Bind UniToken PRO to Windows Account ==
 
{| cellspacing="0" cellpadding="0" border="0" width=""
|-
| width="50" | &nbsp;'''1'''
| width="400" | Insert your UniToken PRO in your computer, input
the PIN code for the Token and click on [Settings].<br><br>
| <center>[[Image:GINA img06.jpg|370x259px]]</center><br><br>
|-
| width="50" | &nbsp;'''2'''
| width="400" | In [Add WinLogon User into Token] part, input username, domain (leave blank if the computer is not member of a domain) and password. Then, click on [Add] to add this user information inside the Token. <br><br>
Note: You can also delete a user from the Token and change your Token PIN using this tool.<br>
| [[Image:GINA img07.jpg|370px]]<br><br>
|}
|}


== Windows Logon ==
== Bind UniToken PRO to a Windows Account ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | When you start your computer, insert your UniToken, input your PIN and click on OK.<br><br>
| width="400" | Insert your UniToken PRO device into your computer, input the PIN code for the token and click on [Settings].
| [[Image:GINA img08.jpg|370x259px]]<br><br>
| <center>[[Image:GINA img06.jpg|370px]]</center>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Choose the user account that you want to use to access this computer (You can store many windows accounts settings in your UniToken). Click on [OK].<br><br>
| width="400" | In the "UniToken Settings" window, under the "Add WinLogon User into Token", input the username, domain (leave domain blank if the computer is not member of a domain) and password. Click [Add] to bind the user with the token. Click [OK] to finish. Note: You can also delete a user from the token and change your token PIN using this tool.
You don’t need to input your Windows account password again. You only need to input the password for your Token and have the UniToken plugged into your computer to log on.<br>
| [[Image:GINA img07.jpg|370px]]
| [[Image:GINA img09.jpg|370px]]<br><br>
|}
|}


== Access to the encrypted disk ==
== Logging onto Windows ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | When you insert the encrypted disk in your computer, the following dialog box will appear (you can also choose to unlock automatically the disk when it is inserted).<br>
| width="400" | When logging onto your computer, insert your UniToken, input your PIN and click on [OK].
Insert your UniToken and click on [Unlock]
| [[Image:GINA img08.jpg|370px]]
<br>
| [[Image:Bitlocker img22.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | You will be asked to type the User PIN for your UniToken to unlock the drive. The drive will be unlocked only if the correct password is entered.<br>
| width="400" | Select the user account that you wish to log in as (You can store numerous Windows account settings within your UniToken). Click on [OK] to log in. Logging onto the computer now only requires the correct UniToken device with it's corresponding password and no longer the Windows account password to log on.
| [[Image:Bitlocker img23.jpg|370px]]<br><br>
| [[Image:GINA img09.jpg|370px]]
|}
|}


== Glossary ==
== Glossary ==


'''SmartCard:''' is any pocket-sized card with embedded integrated circuits. There are two broad categories of ICCs. Memory cards contain only non-volatile memory storage components, and perhaps dedicated security logic. Microprocessor cards contain volatile memory and microprocessor components.
'''Graphical Identification and Authentication (GINA)''': a component of some Microsoft Windows operating systems that provides secure authentication and interactive logon services. GINA is also responsible for starting initial processes for a user (such as the Windows Shell) when they first log on. In Windows Vista, GINA has been entirely replaced by '''Credential Providers''', which allow for significantly increased flexibility in supporting multiple credential collection methods. GINA libraries do not work with Windows Vista and later Windows versions. One difference, however, is that GINA could completely replace the Windows logon user interface; Credential Providers cannot.
 
'''Public Key Infrastructure (PKI)''' is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.


'''Microsoft Cryptography API, MS-CAPI''' is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.
== Attachments ==


'''PKCS''' refers to a group of public-key cryptography standards devised and published by RSA Security.
*[[File:UniToken_Gina_WinXP_X86.zip]]
*[[File:UniToken_Gina_WinXP_X64.zip]]

Latest revision as of 16:56, 23 August 2016


UniToken GINA Package Installation

This section explains how to install the standalone authentication package for Windows XP/2k, which can be found inside the UniToken SDK.

1 Navigate to the folder "Integration Guides/Smart Card Logon Feature/Standalone SmartCard logon(GINA)". Find the file "UniTokenGina.exe" and execute it to begin the installation.
2 Click [Next] in the InstallShield welcome screen.
3 Click on [Install] to begin the installation.
4 After installation has completed, the computer must be restarted. Choose either option and click [Finish] to complete the wizard.

Bind UniToken PRO to a Windows Account

1 Insert your UniToken PRO device into your computer, input the PIN code for the token and click on [Settings].
2 In the "UniToken Settings" window, under the "Add WinLogon User into Token", input the username, domain (leave domain blank if the computer is not member of a domain) and password. Click [Add] to bind the user with the token. Click [OK] to finish. Note: You can also delete a user from the token and change your token PIN using this tool.

Logging onto Windows

1 When logging onto your computer, insert your UniToken, input your PIN and click on [OK].
2 Select the user account that you wish to log in as (You can store numerous Windows account settings within your UniToken). Click on [OK] to log in. Logging onto the computer now only requires the correct UniToken device with it's corresponding password and no longer the Windows account password to log on.

Glossary

Graphical Identification and Authentication (GINA): a component of some Microsoft Windows operating systems that provides secure authentication and interactive logon services. GINA is also responsible for starting initial processes for a user (such as the Windows Shell) when they first log on. In Windows Vista, GINA has been entirely replaced by Credential Providers, which allow for significantly increased flexibility in supporting multiple credential collection methods. GINA libraries do not work with Windows Vista and later Windows versions. One difference, however, is that GINA could completely replace the Windows logon user interface; Credential Providers cannot.

Attachments