UniToken Console Tool: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
Bao (talk | contribs)
mNo edit summary
 
(5 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[Category:UniToken_Tools]]
[[Category:UniToken_Tools]]


<p>UniToken Console is used to  manage devices, set user permission as well as control file system and certificates. </p>
UniToken Console is used for the management of devices, including specifying user permissions and maintaining certificates and the file system.


== Device Management ==
== Device Management ==


==== Logon ====
=== Logon ===
To log onto the device:


Select the UniToken icon in the device list. <br>  
# Select the corresponding UniToken from the UniToken icon in the device list.   
Input the corresponding PIN in “PIN”. <br>
# Input the corresponding PIN in PIN.
Click “Logon”.<br>
# Click Logon.


[[Image:unitokenconsole img01.jpg|370px]]<br>
[[Image:unitokenconsole img01.jpg|500px|alt='logged on successfully' message]]
[[Image:unitokenconsole img02.jpg|370px]]


After logon, the current permission will change from “Guest” to “Admin”. <br>
[[Image:unitokenconsole img02.jpg|500px|alt=UniToken Console device list]]


==== Logoff ====
After successfully logging on, the current user will be granted corresponding permissions.


Select the UniToken in the device list.<br>
=== Logoff ===
Click “Logoff”.<br>


[[Image:unitokenconsole img03.jpg|370px]]<br>
To log off the device:


<p>Once logged off, the permission will be changed back to “Guest”. </p>
# Select the UniToken in the device list.
# Click Logoff.
<p>The  default  user  permission  is  Guest  when  UniToken is  attached  to  the  computer  and recognized, then the icon    will appear besides the name of the device in the device list.</p>
 
[[Image:unitokenconsole img03.jpg|500px|alt=admin permissions reverting to guest permissions after log off]]
<p>To  obtain  higher-level  permission,  a  user  needs  to logon  the  UniToken  with  his corresponding  username  and  PIN.  When  you  logon  as  a  user,  the  icon    will  appear besides the icon in the device list; if you logon as an administrator,    will appear. </p>


<p>
Once logged off, the Console will revert back to Guest permissions. When the UniToken device is initially connected to the computer, the device automatically defaults to the "Guest" permission. If an incorrect User PIN is entered over 15 times in succession (this number, known as the Maximal Attempt Times, by default 15, but may be changed by the administrator), the UniToken device will automatically lock itself to prevent any further login attempts as a security measure, regardless if the correct PIN is entered afterwards. The administrator must log in to unlock the UniToken device.
If a  PIN is wrongly  input  over 15 times successively  (the default  
attempt  times  is  15), UniToken will lock itself even  though  the right PIN is input, and the user cannot logon again. Then, you have to log on
as  administrator  to unlock it.  The  administrator  can  also  reset  the  
maximal attempt times.</p>


== User Management ==
== User Management ==


<p>When click the User tab, UniToken detailed information will show on the right as below. It is allowed to edit token ID, change/reset User PIN, unlock token and edit software ID. </p>
Information about the UniToken device, such as UniToken ID, number of stored files, Current Permission, Used and Remaining Space, can be found under the User tab, as shown below. Functions that can be performed under the User tab depend on the permissions of the current user, and include Edit UniToken ID, Reset User PIN, Unlock, Edit SID and Change Admin PIN.  


[[Image:unitokenconsole img04.jpg|370px]]<br>
[[Image:unitokenconsole img04.jpg|500px|alt=UniToken Console user management tab]]


==== Edit UniToken ID ====
=== Edit UniToken ID (Admin, User) ===


<p>UniToken ID is the name that can be defined by customers, which is comprehensible for humans. That helps customers to locate and remember the token sooner.</p>
The UniToken ID is the label assigned to the UniToken device to facilitate quick and easy identification of the token. To modify the UniToken ID:


[[Image:unitokenconsole img05.jpg|370px]]<br>
# Enter a UniToken ID (maximum 32 characters).
# Click OK.


==== Admin resets User PIN ====
[[Image:unitokenconsole img05.jpg|500px|alt=inputting a new UniToken ID]]


<p>UniToken  provides  a  multi-level  permission  management  system,  in  which  different permissions  are  required  when  users  want  to  perform  certain  operations.  In  this  section, Admin is allowed to change his own PIN and reset the User PIN. For User, it is allowed to change his own PIN but the Admin PIN. </p>
=== Reset User PIN (Admin) ===
 
<p>The picture below appears only when customer logs on as Admin.</p>
Under Reset User PIN, the Admin can reset the User PIN. To reset the PIN:
 
# Enter a new User PIN under New PIN.
# Re-enter the new User PIN under Verify PIN.
# Click OK.
 
[[Image:unitokenconsole img06.jpg|500px|alt=resetting a user PIN]]


[[Image:unitokenconsole img06.jpg|370px]]<br>
=== Unlock (Admin) ===


==== Unlock ====
If the maximum number of incorrect login attempts has been reached and, as a result, the UniToken device has locked itself, the Administrator must unlock the UniToken device to continue using the UniToken. To do so, the Administrator must log in, navigate to Unlock found under User, and complete the following steps:


<p>If a UniToken locked itself by wrong operation, you have to logon as an administrator and reset the permission.</p>
# Enter a new User PIN user under New User PIN.
<p>Click “Unlock” to enter unlocking interface:</p>
# Re-enter the new User PIN under Verify User PIN.
# Set the maximum number of incorrect PIN login attempts, between 0 and 15, under Pin attempts limit (0 - 15).
# Click OK.


[[Image:unitokenconsole img07.jpg|370px]]<br>
[[Image:unitokenconsole img07.jpg|500px|alt=unlocking the admin account]]


==== Edit SID ====
=== Edit SID (Admin, User) ===


<p>Software ID (hereafter  SID) is a 32-bit unsigned integer that can be modified  by customers  according  to  their  needs. It  can be used  to save  the  serial numbers  of  their software product or any number to identify a batch of tokens which share some common features.</p>
Software ID (SID) is a modifiable 32-bit unsigned integer that can be used a secondary form of identification for UniToken devices. The SID can be set to identify devices either through a software product’s individual serial number, or any unique or shared number to identify a batch of tokens which share some common feature(s).  
   
   
<p>Type in the new SID and click “OK”.</p>
To change the SID:
 
# Enter the new SID.
# Click OK.
 
[[Image:unitokenconsole img08.jpg|500px|alt=inputting a new SID between 0 and 4,294,967,295]]
 
=== Change Admin PIN (Admin) ===


[[Image:unitokenconsole img08.jpg|370px]]<br>
Logged in as the admin, to change the admin PIN:


==== Change Admin PIN ====
# Enter the old Admin PIN under Old PIN.
# Enter the new Admin PIN under New PIN.
# Re-enter the new Admin PIN under Verify PIN.
# Click OK.


[[Image:unitokenconsole img09.jpg|370px]]<br>
=== Change User PIN (User) ===


==== User changes user PIN ====
When logged into the UniToken device under the User permissions, the User has access to: Edit UniToken ID, and Change User PIN.


<p>When customer logs on as User, the options will narrow down to two: edit UniToken ID and change User PIN.</p>
[[Image:unitokenconsole img10.jpg|500px|alt=changing user PIN]]


[[Image:unitokenconsole img10.jpg|370px]]<br>
=== Disconnection ===


<p>If you remove UniToken from computer, the system will ask you to insert UniToken and display the picture below:</p>
If the UniToken device is removed from the computer at any point in time, the console will display a warning message to reconnect the UniToken device.


[[Image:unitokenconsole img11.jpg|370px]]<br>
[[Image:unitokenconsole img11.jpg|500px|alt='please insert UniToken' message]]


== File System Management ==
== File System Management ==
UniToken provides a secure file system for the storage of digital credentials and files using the three-level permission system. Under the File tab, a list of the files stored on the device can be viewed, including their respective number, name, size and file permission, as well as the ability to delete files and view the remaining space.
[[Image:unitokenconsole img12.jpg|500px|alt=UniToken Console file system tab]]
=== Create a file ===
When creating a file, the filename, file size and file permission of the file to be created are required.
[[Image:unitokenconsole img13.jpg|500px|alt=filename; file size; file permissiosn (guest r/w, user r/w, admin r/w)]]
=== Delete a file ===
To delete a file:
# Select the file from the File List under the File tab that you wish to delete.
# Click Delete.
[[Image:unitokenconsole img14.jpg|500px|alt=displaying current file list]]
A pop-up message will appear if the file was deleted successfully.
[[Image:unitokenconsole img15.jpg|500px|alt='file deleted successfully' message]]
=== Format ===
Formatting the UniToken device resets the UniToken’s ID, User PIN, and Certifictate Container, located under Format as shown below. Notably, when formatting the token, the option to either enable or disable the Certificate Container is available. If the Certificate Container is created, Users can import and use certificates on the device. Without the Certificate Container, Users will not be able to do so. '''Note: Formatting the UniToken device irreversibly deletes all data on the device! Ensure formatting the UniToken device is required before continuing!'''
[[Image:unitokenconsole img16.jpg|500px|alt=UniToken Console format tab]]


== Certificate Management ==
== Certificate Management ==
In the Certificate tab, a summary of certificates on the token can be viewed. Functions available to Users include viewing and importing certificates.
[[Image:unitokenconsole img17.jpg|500px|alt=UniToken Console certificate tab]]
=== View ===
To view a specific digital certificate:
# Select a certificate from the list under the Certificate tab.
# Click View.
A window will appear displaying all related information of the selected certificate.
[[Image:unitokenconsole img18.jpg|500px|alt=certificate: issued; issuer; validity; signature algorithm; serial number; public key; version]]
=== Import  ===
To import a digital certificate:
# Click Import.
# Browse to the directory of the certificate.
# With the chosen certificate selected, click Open.
# Input a password for the imported certificate.
# Click OK.
[[Image:unitokenconsole img19.jpg|500px|alt='please input certificate password' message]]
After importing the certificate, the certificate will appear in the list of stored digital certificates on the token.

Latest revision as of 13:18, 17 August 2016


UniToken Console is used for the management of devices, including specifying user permissions and maintaining certificates and the file system.

Device Management

Logon

To log onto the device:

  1. Select the corresponding UniToken from the UniToken icon in the device list.
  2. Input the corresponding PIN in PIN.
  3. Click Logon.

'logged on successfully' message

UniToken Console device list

After successfully logging on, the current user will be granted corresponding permissions.

Logoff

To log off the device:

  1. Select the UniToken in the device list.
  2. Click Logoff.

admin permissions reverting to guest permissions after log off

Once logged off, the Console will revert back to Guest permissions. When the UniToken device is initially connected to the computer, the device automatically defaults to the "Guest" permission. If an incorrect User PIN is entered over 15 times in succession (this number, known as the Maximal Attempt Times, by default 15, but may be changed by the administrator), the UniToken device will automatically lock itself to prevent any further login attempts as a security measure, regardless if the correct PIN is entered afterwards. The administrator must log in to unlock the UniToken device.

User Management

Information about the UniToken device, such as UniToken ID, number of stored files, Current Permission, Used and Remaining Space, can be found under the User tab, as shown below. Functions that can be performed under the User tab depend on the permissions of the current user, and include Edit UniToken ID, Reset User PIN, Unlock, Edit SID and Change Admin PIN.

UniToken Console user management tab

Edit UniToken ID (Admin, User)

The UniToken ID is the label assigned to the UniToken device to facilitate quick and easy identification of the token. To modify the UniToken ID:

  1. Enter a UniToken ID (maximum 32 characters).
  2. Click OK.

inputting a new UniToken ID

Reset User PIN (Admin)

Under Reset User PIN, the Admin can reset the User PIN. To reset the PIN:

  1. Enter a new User PIN under New PIN.
  2. Re-enter the new User PIN under Verify PIN.
  3. Click OK.

resetting a user PIN

Unlock (Admin)

If the maximum number of incorrect login attempts has been reached and, as a result, the UniToken device has locked itself, the Administrator must unlock the UniToken device to continue using the UniToken. To do so, the Administrator must log in, navigate to Unlock found under User, and complete the following steps:

  1. Enter a new User PIN user under New User PIN.
  2. Re-enter the new User PIN under Verify User PIN.
  3. Set the maximum number of incorrect PIN login attempts, between 0 and 15, under Pin attempts limit (0 - 15).
  4. Click OK.

unlocking the admin account

Edit SID (Admin, User)

Software ID (SID) is a modifiable 32-bit unsigned integer that can be used a secondary form of identification for UniToken devices. The SID can be set to identify devices either through a software product’s individual serial number, or any unique or shared number to identify a batch of tokens which share some common feature(s).

To change the SID:

  1. Enter the new SID.
  2. Click OK.

inputting a new SID between 0 and 4,294,967,295

Change Admin PIN (Admin)

Logged in as the admin, to change the admin PIN:

  1. Enter the old Admin PIN under Old PIN.
  2. Enter the new Admin PIN under New PIN.
  3. Re-enter the new Admin PIN under Verify PIN.
  4. Click OK.

Change User PIN (User)

When logged into the UniToken device under the User permissions, the User has access to: Edit UniToken ID, and Change User PIN.

changing user PIN

Disconnection

If the UniToken device is removed from the computer at any point in time, the console will display a warning message to reconnect the UniToken device.

'please insert UniToken' message

File System Management

UniToken provides a secure file system for the storage of digital credentials and files using the three-level permission system. Under the File tab, a list of the files stored on the device can be viewed, including their respective number, name, size and file permission, as well as the ability to delete files and view the remaining space.

UniToken Console file system tab

Create a file

When creating a file, the filename, file size and file permission of the file to be created are required.

filename; file size; file permissiosn (guest r/w, user r/w, admin r/w)

Delete a file

To delete a file:

  1. Select the file from the File List under the File tab that you wish to delete.
  2. Click Delete.

displaying current file list

A pop-up message will appear if the file was deleted successfully.

'file deleted successfully' message

Format

Formatting the UniToken device resets the UniToken’s ID, User PIN, and Certifictate Container, located under Format as shown below. Notably, when formatting the token, the option to either enable or disable the Certificate Container is available. If the Certificate Container is created, Users can import and use certificates on the device. Without the Certificate Container, Users will not be able to do so. Note: Formatting the UniToken device irreversibly deletes all data on the device! Ensure formatting the UniToken device is required before continuing!

UniToken Console format tab

Certificate Management

In the Certificate tab, a summary of certificates on the token can be viewed. Functions available to Users include viewing and importing certificates.

UniToken Console certificate tab

View

To view a specific digital certificate:

  1. Select a certificate from the list under the Certificate tab.
  2. Click View.

A window will appear displaying all related information of the selected certificate.

certificate: issued; issuer; validity; signature algorithm; serial number; public key; version

Import

To import a digital certificate:

  1. Click Import.
  2. Browse to the directory of the certificate.
  3. With the chosen certificate selected, click Open.
  4. Input a password for the imported certificate.
  5. Click OK.

'please input certificate password' message

After importing the certificate, the certificate will appear in the list of stored digital certificates on the token.