UniMate USB Utilities Manual

Utilities Manual

Version 2.0

Version	Date
1.0	2015.7
2.0	2016.7

The data and information contained in this document cannot be altered without the express written permission of SecuTech Solution Inc. No part of this document can be reproduced or transmitted for any purpose whatsoever, either by electronic or mechanical means.

The general terms of trade of SecuTech Solution Inc. apply. Diverging agreements must be made in writing.

Copyright SecuTech Solution Inc. All rights reserved.

WINDOWS is a registered trademark of Microsoft Corporation.

The WINDOWS-logo is a registered trademark ^(TM) of Microsoft Corporation.

Software License

The software and the enclosed documentation are copyright-protected. By installing the software, you agree to the conditions of the licensing agreement.

Licensing Agreement

SecuTech Solution Inc. (SecuTech for short) gives the buyer the simple, exclusive and non-transferable licensing right to use the software on one individual computer or networked computer system (LAN). Copying and any other form of reproduction of the software in full or in part as well as mixing and linking it with others is prohibited. The buyer is authorized to make one single copy of the software as backup. SecuTech reserves the right to change or improve the software without notice or to replace it with a new development. SecuTech is not obliged to inform the buyer of changes, improvements or new developments or to make these available to him. A legally binding promise of certain qualities is not given. SecuTech is not responsible for damage unless it is the result of deliberate action or negligence on the part of SecuTech or its aids and assistants. SecuTech accepts no responsibility of any kind for indirect, accompanying or subsequent damage.

Contact Information

Web: http://www.esecutech.com

Email: sales@esecutech.com

Please Email any comments, suggestions or questions regarding this document or our products to us at: sales@esecutech.com

CE Attestation of Conformity

UniMate is in conformity with the protection requirements of CE Directives 89/336/EEC Amending Directive 92/31/EEC. UniMate satisfies the limits and verifying methods: EN55022/CISPR 22 Class B, EN55024: 1998.

FCC Standard

This device is in conformance with Part 15 of the FCC Rules and Regulation for Information Technology Equipment.

Operation of this product is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

The equipment of UniMate is USBbased.

Conformity to ISO 9001:2000

The Quality System of SecuTech Solution Inc., including its implementation, meets the requirements of the standard ISO 9001:2000

ROHS

All UniMate products are environmentally friendly with ROHS certificates.

Console

UniMate Console is used to manage devices, initialize a UniMate as well as manage certificates and keys.

Installation

Console setup.exe can be found in the Utilities folder of the UniMate SDK.

Run Console setup.exe and click Next.

Choose where to install the program to, and click Install.

At last, click Finish to close the setup wizard.

Initialize a UniMate

This operation will clean up all the certificates and keys on the PKI file system. Please proceed with caution. Click PKI Format on the menu bar. Input a device name when a new name is required and click Format.

Please verify administrator rights for this operation, and if correct a prompt indicating completion should pop-up.

Manage PINs

PINs should be between 8 and 24 characters long, if a user PIN is locked, you can reset it using an administrator account.

Click PIN Management on the menu bar.

To change a PIN; enter the old PIN, create a new PIN and then re-enter it to confirm, and finally click Apply.

To reset a user PIN; enter the admin PIN, enter the new user PIN and then re-type the user PIN to confirm, followed by clicking Apply.

Manage certificates

Certificates Container displays the existing certificates. Each UniMate can carry a maximum of 8 certificates or asymmetric key pairs.

Importing certificates

Click Certificate Management on the menu bar, then click on the "+" button.

If you do not have the correct permissions; log in using a user PIN, then select a certificate file (.pfx or .p12 formats), input the password, and click Import.

Now that certificate has been imported, hover the mouse over it, and the certificates details will be listed as below.

View certificates

To view a certificate, click on a certificate to select it, followed by View to see the certificates details.

Export certificates

To export a certificate, click on a certificate to select it, followed by pressing Export.

Select the file path you want to save the certificate to and click Export.

A success prompt will pop up if the certificate exported correctly.

Signing with certificates

To sign with a private key or verify the public key of a certificate. Click on a certificate to select it, and then click Sign.

To sign with a private key. Choose Sign for the Action and select the mode (hashing function). Input the data to be signed in hexadecimal format. For example, you could enter 0d0a, which consists of four hexadecimal digits (two bytes) and represents 0x0d0a. At last, click Sign; the signed data will be displayed on the right side.

To verify with a public key, choose Verify for the action and select the mode. Input the data to be signed as well as the signed data and then click Verify.

A success prompt will appear if the signed and unsigned data match.

Deleting certificates

Click to select a certificate, and then click Delete.

Select Yes to delete the selected certificate.

Manage keys or key pairs

Existing keys and key pairs are shown in the symmetric keys and asymmetric key pairs container respectively. Each UniMate can carry a maximum of 12 symmetric keys and a maximum of 4 certificates or asymmetric key pairs.

Key generation

Click Key Management on the menu bar; if you dont have the required permissions, log in with a user PIN. Next, click on the + button for the type of key you want to generate.

Select Auto if you want to automatically generate a key. By clicking Manual, you will have to input the keys manually. On placing the mouse over the field Input it will display greater detail on what needs to be entered. Next, please input a key ID as a unique identification number respective to the key, and at last, click OK.

Now that a symmetric key has been generated, move the mouse to it, the key ID will be displayed as shown below.

Encrypt or decrypt with a symmetric key

Click to select a symmetric key and click Encrypt.

Select the action and mode to be performed (please input an initialization vector (iv) when CBC or CBC_PAD is chosen). Next, input the data to be operated on and click Encrypt or Decrypt, the output data will be displayed on the right side.

Delete a symmetric key

Select the symmetric key in the Key Management tab and then click Delete.

Click Yes to delete the selected key.

Manage asymmetric key pairs

Generate a key pair

Click Key Management on the menu bar; if you do not have the correct permissions, log in with a user PIN. Next, click on the + button in the Asymmetric Key Pairs Container window.

Select a key pair type and input a key pair ID as a unique identification number, and then click Generate.

Encrypt, decrypt, sign or verify with an asymmetric key pair

Select an already created asymmetric key pair and click Encrypt.

Select the action to be performed. If you click Private-Key Sign or Public-Key Verify, you have to choose a mode. Next, input the data to be operated on. Click Encrypt/Decrypt/Sign, and the output data will display on the right side. If you selected Public-Key Verify, you should input the data to be signed as well as the signed data. Click Verify, and a success prompt will appear if the data is verified correctly.

Delete an asymmetric key pair

To delete an asymmetric key pair, select the key pair to be deleted and click the Delete option in the main window.

Click Yes to delete the selected key pair.

CONTENTS

Monitor tool

UniMate Monitor is used to view detailed information about certificates imported into the UniMate, and register or delete certificates. It also provides a way to check information about the UniMate itself and to change User PINs.

Installation

Run Monitor setup.exe and follow the onscreen instructions.

Choose an install location, and click Install.

Click Finish to close the setup wizard.

UniMate detection

Once the Monitor tool is installed, a new icon appears in the system tray, it will inform you when a UniMate is detected like so:

Insert a UniMate	Remove a UniMate

Change PINs

Insert a UniMate and select a target device, then click Change PIN.

To change a PIN; enter the old PIN, create a new PIN and then re-enter the new PIN and click OK to confirm.

Assuming everything was correct, a success prompt will appear.

Import certificates

Click Import.

If you do not have the required permissions, you will need to log in using a user PIN.

Select a certificate file (.pfx or .p12 formats).

Input the password of the certificate.

A success prompt will appear if certificate imports correctly.

The certificate should now be displayed in the list.

Register or unregister certificates

In Internet Explorer -- Tools -- Internet Options -- Content -- Certificates check the registered certificates.

As an example, there is no certificate listed yet.

To register a certificate, select the certificate and then click Register.

A prompt should appear to tell you that the certificate has been registered.

Go back to Internet Explorer -- Tools -- Internet Options -- Content -- Certificates; the registered certificate should now be displayed on the list.

To unregister a certificate, select a certificate and click Un-Register.

After confirming, the certificate will be deregistered.

Back in Internet Explorer -- Tools -- Internet Options -- Content -- Certificates, the registered certificate will have been removed.

View certificates

Select a certificate.

Click View to see the certificates details.

Expiration reminder

You can set an expiration reminder time.

Click Set.

When the expiration date is close to arriving, a balloon notification will appear to provide a warning that the certificate is close to expiring.

CONTENTS

Partition Tool (only for UniMate drive)

UniMate Drive Partition tool allows developer to set partitions, and to upload an ISO image to the Drives CD-ROM.

Click Get, and you will be provided with the total usable size of the UniMate Drive. You can set partition sizes as you wish, and then click Partition to perform the resize operation.

In the Load Image tab, you can load an ISO image to the Drives CD-ROM partition.

Write ISO Tool

UniMate Write ISO Tool is used for writing ISO images to UniKey dongles.

Change Language Mode Tool (For UniMate Flex)

UniMate Change Language Mode Tool is used with the UniMate Flex to change the display language.

If you have any questions, please feel free to contact us at: http://www.esecutech.com/support or support@esecutech.com

Follow Us! Twitter Facebook YouTube LinkedIn

About SecuTech

SecuTech Solution Inc. is a company specializing in data protection and strong authentication, providing total customer satisfaction in security systems & services for banks, financial institutions & other industries. Having extensive and in-depth experience within the information security market, SecuTech has drawn upon this experience to utilize today's cutting-edge technologies that are effective against increasingly sophisticated cyber attacks. Enabling enterprises, financial institutions, and government to safely adopt the economic benefits of mobile and cloud computing.

http://www.esecutech.com
SecuTech Solution Inc.

Contact Us:

	North America	China	Asia-Pacific	EMEA
Address	1250 Boulevard Ren-Lvesque Ouest, #2200, Montreal, QC, H3B 4W8, Canada	Level 12, #67 Bei Si Huan Xi Lu, Beijing, China, 100080	Suite 5.14, 32 Delhi Rd, North Ryde, NSW, 2113, Australia	4 Cours Bayard 69002 Lyon, France
Phone	+1 -888-259-5825	+8610-8288 8834	00612-9888 6185	+33-042-600-2810
Fax	+1 -888-259-5825 ext.0	+8610-8288 8834	00612-9888 6185	+33-042-600-2810
Email	info@esecutech.com	cn@esecutech.com	aus@esecutech.com	europe@esecutech.com

Copyright 2012 SecuTech Solution Inc. All rights reserved. Reproduction in whole or in part without written permission from SecuTech is prohibited. SecuTech UniMate and the SecuTech logo are trademarks of SecuTech Inc. Windows and all other trademarks are properties of their respective owners. Features and specifications are subject to change without notice.

TOP