UniToken Integration Guide Adobe PDF

Install the PKI package

This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.

1	Right-Click on the PKI package installation file and choose “Run as administrator” Execute the file with an account that has administrator rights on this computer.
2	Click on [Next] in the welcome screen.
3	Input your username and Company Name and click on [Next].
4	Select [Complete] and click on [Next].
5	Click on [Install] to begin the installation of the PKI package.
6	Verify that the install wizard completed correctly and click on [Finish].

Configure PKCS support in TrueCrypt

1	In the main menu, go to [Settings], [Security　Tokens].
2	In the [Options] window, [PKCS#11] tab, Check [Enable PKCS#11 support] and choose the library file. By default the PKI package will install this file in the Windows\System32\ folder. Choose where to save the settings in the field [Save above settings to] and click on OK to apply the settings.

Request a VeriSign Certificate

1	Open Internet Explorer and go to the page https://digitalid.verisign.com/client/class1MS.htm You can buy a digital certificate or can a free evaluation version that is fully usable for 60days.
2	In the field “Cryptographic Service Provider Name”, choose “UniToken PRO CSP v2.0”.
3	Click on [Accept] to request the certificate.
4	Type the correct user PIN for UniToken PRO and click on [OK].
5	Check the mailbox that you used to request the certificate. You should have receive a mail explaining how to continue the request procedure. Copy the Digital ID PIN and go to the URL written in the mail.( https://digitalid.verisign.com/enrollment/mspick up.htm).
6	Keep the default encryption algorithms or change it depending on your needs. Click on [Next] to continue.
7	Choose the elements to use to secure your volume, the more you use elements, the more you can secure your volume. We have chosen to use Microsoft CryptoAPI and PKCS#11 token.

Create a secret file inside UniToken and use it to secure your volume

1	Select [Tools] [PKCS#11 token management]
2	Input your User PIN for your UniToken and click on [OK]
3	In the [Secret Keys] tab, click on [New]. In the [New PKCS#11 Secret Key] window, input a name for your Secret Key and click on [OK]
4	Click on [OK] to close the information window confirming that the Secret Key was created successfully.
5	Select the Secret file that you created and click on [Secure].
6	Click on the icon corresponding to your type of volume (file or partition) and select the volume that you want to protect with the Secret Key. Click on [OK] to confirm.
7	Click on [Yes] to confirm that you want to protect the volume. A dialog pop will appear to confirm that the volume has been correctly protected.

Mount the encrypted volume

1	Click on [Mount file] and select your volume.
2	Enter the password for the volume and click on [Advanced].
3	In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.
4	Select the right secret key for the volume and click on [OK] to mount the volume. If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.

Glossary

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS refers to a group of public-key cryptography standards devised and published by RSA Security.