UniToken Integration Guide Adobe PDF: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
Bao (talk | contribs)
mNo edit summary
 
(9 intermediate revisions by 2 users not shown)
Line 3: Line 3:
== Install the PKI package  ==
== Install the PKI package  ==


This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.  
This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" |  '''1'''  
| width="50" | '''1'''  
| width="400" | Right-Click on the PKI package installation file and choose “Run as administrator”<br>Execute the file with an account that has administrator rights on this computer.<br><br>
| width="400" | Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
| [[Image:Bitlocker img01.jpg|370x259px]]<br><br>
| [[Image:Bitlocker img01.jpg|370x259px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Click on [Next] in the welcome screen.<br>
| width="400" | Click on [Next] in the InstallShield Wizard welcome screen.
| [[Image:Bitlocker img02.jpg|370px]]<br><br>
| [[Image:Bitlocker img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Input your username and Company Name and click on [Next].<br>
| width="400" | Input your User Name and Company Name and click on [Next].
| [[Image:Bitlocker img03.jpg|370px]]<br><br>
| [[Image:Bitlocker img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Select [Complete] and click on [Next].<br>
| width="400" | Select [Complete] and click on [Next].
| [[Image:Bitlocker img04.jpg|370px]]<br><br>
| [[Image:Bitlocker img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Click on [Install] to begin the installation of the PKI package.<br>
| width="400" | Click on [Install] to begin the installation of the PKI package.
| [[Image:Bitlocker img05.jpg|370px]]<br><br>
| [[Image:Bitlocker img05.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Verify that the install wizard completed correctly and click on [Finish].<br>
| width="400" | Verify that the InstallShield Wizard completed successfully and click on [Finish].
| [[Image:Bitlocker img06.jpg|370px]]<br><br>
| [[Image:Bitlocker img06.jpg|370px]]
|}
|}


<br>


== Request a VeriSign Certificate ==
== Request a VeriSign Certificate ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | Open Internet Explorer and go to the page  
| width="400" | Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
https://digitalid.verisign.com/client/class1MS.htm<br><br>
| [[Image:adobepdf img01.jpg|370px]]
You can buy a digital certificate or can a free evaluation version that is fully usable for 60days.<br>
| [[Image:adobepdf img01.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | In the field “Cryptographic Service  Provider Name”, choose “UniToken PRO CSP v2.0”.<br>
| width="400" | In the field "Cryptographic Service  Provider Name", choose [UniToken PRO CSP v2.0].


| [[Image:adobepdf img02.jpg|370px]]<br><br>
| [[Image:adobepdf img02.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Click on [Accept] to request the certificate. <br>
| width="400" | Click on [Accept] to request the certificate.  
| [[Image:adobepdf img03.jpg|370px]]<br><br>
| [[Image:adobepdf img03.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Type the correct user PIN for UniToken PRO and click on [OK].<br>
| width="400" | Type the corresponding User PIN for the UniToken PRO device and click [OK].
| [[Image:adobepdf img04.jpg|370px]]<br><br>
| [[Image:adobepdf img04.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Check the mailbox that you used to request the certificate. You should have receive a mail explaining how to continue the request procedure.<br>
| width="400" | An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
Copy the Digital ID PIN and go to the URL written in the mail.( https://digitalid.verisign.com/enrollment/mspickup.htm).<br>
| [[Image:adobepdf img05.jpg|370px]]
| [[Image:adobepdf img05.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | Paste the Digital ID PIN that you copied from the mail
| width="400" | Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
in the corresponding field and click on [Submit].<br>
| [[Image:adobepdf img06.jpg|370px]]
| [[Image:adobepdf img06.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''7'''  
| width="50" | '''7'''  
| width="400" | Click on [INSTALL] to import the certificate inside your UniToken PRO. If you have UniToken Monitor running, you should get a “certificate imported successfully” message.<br>
| width="400" | Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.
The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt mails.<br>
| [[Image:adobepdf img07.jpg|370px]]
| [[Image:adobepdf img07.jpg|370px]]<br><br>
|}
|}


== Save the document with security options ==
== Encrypt a PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | Open the PDF document you want to protect with Adobe Acrobat PRO. <br>
| width="400" | With Adobe Acrobat Pro, open the PDF document you wish to protect.  
| [[Image:adobepdf img08.jpg|370px]]<br><br>
| [[Image:adobepdf img08.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | In the menu, click on [Advanced] [Security] [Encrypt with certificate]<br>
| width="400" | In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. ''In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].''
''In Adobe Acrobat PRO X(version 10),this option can be found in [File] [Property], [Security] tab, [Protect with Certificate]''
| [[Image:adobepdf img09.jpg|370px]]
| [[Image:adobepdf img09.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | Choose the encryption strength and compatibility in the bottom of the window and click on [Next]
| width="400" | Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. ''The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however.'' Click [Next].
<br>
| [[Image:adobepdf img10.jpg|370px]]
''More the encryption is strength, more the document will be secured but the compatibility will decrease.''
| [[Image:adobepdf img10.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''4'''  
| width="50" | '''4'''  
| width="400" | Choose the certificate you want to use to encrypt the  
| width="400" | Choose the certificate you wish to use to encrypt the document with, then click on [Next].
file and click on [Next]<br>
| [[Image:adobepdf img11.jpg|370px]]
| [[Image:adobepdf img11.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''5'''  
| width="50" | '''5'''  
| width="400" | Check that the information about the protection 
| width="400" | Verify the configured settings are correct, then click on [Finish].
applied to the document is correct and click on [Finish]<br>
| [[Image:adobepdf img12.jpg|370px]]
| [[Image:adobepdf img12.jpg|370px]]<br><br>
|-
|-
| width="50" | &nbsp;'''6'''  
| width="50" | '''6'''  
| width="400" | When the warning message saying that you need to 
| width="400" | A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.
save to apply the security settings appears, click on 
| [[Image:adobepdf img13.jpg|370px]]
[OK] and save your file.<br>
You can now close your file.<br>
| [[Image:adobepdf img13.jpg|370px]]<br><br>
|}
|}


== Open an encrypted document ==
== Open an Encrypted PDF Document ==


{| cellspacing="0" cellpadding="0" border="0" width=""
{| class="wikitable"
|-
|-
| width="50" | &nbsp;'''1'''  
| width="50" | '''1'''  
| width="400" | When you double-click on your protected file to open it, you will be asked to type the user’s password for the UniToken. Type the password and click on [OK]<br>
| width="400" | When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
| <center>[[Image:adobepdf img14.jpg|370px]]</center><br><br>
| <center>[[Image:adobepdf img14.jpg|370px]]</center>
|-
|-
| width="50" | &nbsp;'''2'''  
| width="50" | '''2'''  
| width="400" | Only if the correct password is entered, the document will be opened. Otherwise you will not be able to see it.<br>
| width="400" | The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
| [[Image:adobepdf img15.jpg|370px]]<br><br>
| [[Image:adobepdf img15.jpg|370px]]
|-
|-
| width="50" | &nbsp;'''3'''  
| width="50" | '''3'''  
| width="400" | If you remove the token and try to open the document, you will get the error “You do not have access right to this encrypted document”<br>
| width="400" | If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.
| [[Image:adobepdf img16.jpg|370px]]<br><br>
| [[Image:adobepdf img16.jpg|370px]]
|}
|}


== Glossary ==
== Glossary ==


'''Public Key Infrastructure (PKI)''' is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.
'''PDF''': Portable document format


'''Microsoft Cryptography API, MS-CAPI''' is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.
'''Public Key Infrastructure (PKI)''': a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.


'''PKCS''' refers to a group of public-key cryptography standards devised and published by RSA Security.
'''Microsoft Cryptography API, MS-CAPI''': an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.
 
'''PKCS''': refers to a group of public-key cryptography standards devised and published by RSA Security.

Latest revision as of 16:43, 23 August 2016


Install the PKI package

This section explains how to install the PKI package that can be found inside the UniToken SDK. The End User package can be found inside the folder "Redist/Enduser/".

1 Right-click on the PKI package installation file and choose [Run as administrator]. Execute the file with an account that has administrator rights on this computer.
2 Click on [Next] in the InstallShield Wizard welcome screen.
3 Input your User Name and Company Name and click on [Next].
4 Select [Complete] and click on [Next].
5 Click on [Install] to begin the installation of the PKI package.
6 Verify that the InstallShield Wizard completed successfully and click on [Finish].


Request a VeriSign Certificate

1 Open your internet browser of your choice and navigate to the page https://digitalid.verisign.com/client/class1MS.htm With VeriSign, you have the option of either buying a digital certificate, or obtaining a free evaluation digital certificate usable for 60 days.
2 In the field "Cryptographic Service Provider Name", choose [UniToken PRO CSP v2.0].
3 Click on [Accept] to request the certificate.
4 Type the corresponding User PIN for the UniToken PRO device and click [OK].
5 An email containing a Digital ID PIN and explaining how to continue the request procedure will be sent to the email address specified earlier. Copy the Digital ID PIN from the email and navigate to the URL specified in the email: https://digitalid.verisign.com/enrollment/mspickup.htm.
6 Paste the Digital ID PIN copied from the email in the corresponding field and click on [Submit].
7 Click on [INSTALL] to import the certificate inside your UniToken PRO. If UniToken Monitor is running, a "Certificate Imported Successfully" message will appear. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt emails and related applications.

Encrypt a PDF Document

1 With Adobe Acrobat Pro, open the PDF document you wish to protect.
2 In the menu, click on [Advanced], [Security], [Encrypt with Certificate]. In Adobe Acrobat PRO X (version 10), this option can be found in [File], [Property], [Security] tab, [Protect with Certificate].
3 Under "Select Document Components to Encrypt", select the option best suited for your requirements; [Encrypt all document contents] is suggested for utmost security. Under "Encryption Algorithm", choose the encryption algorithm to encrypt the document with. The greater the encryption strength, the greater the security of the document, at the expense of compatibility, however. Click [Next].
4 Choose the certificate you wish to use to encrypt the document with, then click on [Next].
5 Verify the configured settings are correct, then click on [Finish].
6 A warning message will appear, stating that the document must be saved to apply the security settings. Click [OK] to acknowledge the warning, then proceed to save the file to apply changes.

Open an Encrypted PDF Document

1 When opening an encrypted PDF document, you will be prompted to type the UniToken User’s password. Input the password and click on [OK].
2 The appropriate UniToken device and corresponding password is required to open the document, otherwise, the document cannot be opened.
3 If the token is absent whilst attempting to open the document, an error "You do not have access right to this encrypted document" will appear and will be unable to open the document.

Glossary

PDF: Portable document format

Public Key Infrastructure (PKI): a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI: an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS: refers to a group of public-key cryptography standards devised and published by RSA Security.