UniToken Integration Guide Adobe PDF

Install the PKI package

This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.

1	Right-Click on the PKI package installation file and choose “Run as administrator” Execute the file with an account that has administrator rights on this computer.
2	Click on [Next] in the welcome screen.
3	Input your username and Company Name and click on [Next].
4	Select [Complete] and click on [Next].
5	Click on [Install] to begin the installation of the PKI package.
6	Verify that the install wizard completed correctly and click on [Finish].

Configure PKCS support in TrueCrypt

1	In the main menu, go to [Settings], [Security　Tokens].
2	In the [Options] window, [PKCS#11] tab, Check [Enable PKCS#11 support] and choose the library file. By default the PKI package will install this file in the Windows\System32\ folder. Choose where to save the settings in the field [Save above settings to] and click on OK to apply the settings.

Request a VeriSign Certificate

1	Open Internet Explorer and go to the page https://digitalid.verisign.com/client/class1MS.htm You can buy a digital certificate or can a free evaluation version that is fully usable for 60days.
2	In the field “Cryptographic Service Provider Name”, choose “UniToken PRO CSP v2.0”.
3	Click on [Accept] to request the certificate.
4	Type the correct user PIN for UniToken PRO and click on [OK].
5	Check the mailbox that you used to request the certificate. You should have receive a mail explaining how to continue the request procedure. Copy the Digital ID PIN and go to the URL written in the mail.( https://digitalid.verisign.com/enrollment/mspickup.htm).
6	Paste the Digital ID PIN that you copied from the mail in the corresponding field and click on [Submit].
7	Click on [INSTALL] to import the certificate inside your UniToken PRO. If you have UniToken Monitor running, you should get a “certificate imported successfully” message. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt mails.

Save the document with security options

1	Open the PDF document you want to protect with Adobe Acrobat PRO.
2	In the menu, click on [Advanced] [Security] [Encrypt with certificate] In Adobe Acrobat PRO X(version 10),this option can be found in [File] [Property], [Security] tab, [Protect with Certificate]
3	Choose the encryption strength and compatibility in the bottom of the window and click on [Next] More the encryption is strength, more the document will be secured but the compatibility will decrease.
4	Choose the certificate you want to use to encrypt the file and click on [Next]	File:Adobepdf img11
5	Check that the information about the protection applied to the document is correct and click on [Finish]	File:Adobepdf img12
6	When the warning message saying that you need to save to apply the security settings appears, click on [OK] and save your file. You can now close your file.

Mount the encrypted volume

1	Click on [Mount file] and select your volume.
2	Enter the password for the volume and click on [Advanced].
3	In the [Security Token/Smartcard PIN] window, input your password and click on [OK] to confirm.
4	Select the right secret key for the volume and click on [OK] to mount the volume. If a wrong password or a wrong key is selected, you will not be able to access the volume. Both password for the volume and the secret key stored inside UniToken are required to access the volume.

Glossary

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS refers to a group of public-key cryptography standards devised and published by RSA Security.