UniToken Integration Outlook Express

Install the PKI package

This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.

1	Right-Click on the PKI package installation file and choose “Run as administrator” Execute the file with an account that has administrator rights on this computer.
2	Click on [Next] in the welcome screen.
3	Input your username and Company Name and click on [Next].
4	Select [Complete] and click on [Next].
5	Click on [Install] to begin the installation of the PKI package.
6	Verify that the install wizard completed correctly and click on [Finish].

Request a VeriSign Certificate

1	Open Internet Explorer and go to the page https://digitalid.verisign.com/client/class1MS.htm You can buy a digital certificate or can a free evaluation version that is fully usable for 60days.
2	In the field “Cryptographic Service Provider Name”, choose “UniToken PRO CSP v2.0”.
3	Click on [Accept] to request the certificate.
4	Type the correct user PIN for UniToken PRO and click on [OK].
5	Check the mailbox that you used to request the certificate. You should have receive a mail explaining how to continue the request procedure. Copy the Digital ID PIN and go to the URL written in the mail.( https://digitalid.verisign.com/enrollment/mspickup.htm).
6	Paste the Digital ID PIN that you copied from the mail in the corresponding field and click on [Submit].
7	Click on [INSTALL] to import the certificate inside your UniToken PRO. If you have UniToken Monitor running, you should get a “certificate imported successfully” message. The request procedure is complete. You can now use this certificate to protect documents, sign and encrypt mails.

Sign and encrypt mail

In the case you asked for an evaluation certificate from VeriSign, you must trust it in the Internet Explorer Options first to be able to see it in Outlook Express.(please find in the SDK the certificate that you must install for it). Certificates to install:

• VeriSign Class 1 Individual Subscriber CA - G3.cer
• VeriSign Class 1 Public Primary Certification Authority - G3.cer

1	User 1 mailbox (receiver.secutech) In Microsoft Outlook 2003, below the main menu, select [New] to create a new message.
2	Below the main menu, in the tool bar click on [Options].
3	On the [Message Options] page, click on [Security Settings]
4	On the [Security Properties] page, check [Add digital signature to this message] and click on [Change Settings]
5	Click on [Choose] to Select the certificate stored inside the UniToken and click on [OK] consecutively until you get back to [New Message] window.
6	In the new mail window, click on [Send] to send the signed mail. You will be asked for the UniToken password.
7	User 2 mailbox (helper.secutech) Go the mail account that you’ve just sent the signed mail to, and click on [Send/Recv]. Open the signed mail, right-click on the sender name and choose [Add to Outlook Contacts]
8	Click on [Save and Close] to save the information about User 1 (receiver.secutech) as well as his certificate.
9	Back to the main window of Microsoft 2003, select the signed email and click on [Reply]. Now that you have received that user’s digital signature, you can send encrypted mails to that user (The public key of that user is included in the signature)
10	Click on the [ ] icon on the top right of the windows and click on [Send] to send the encrypted message. If the signature and encryption icon doesn’t appear, you can configure message encryption from [Options…] [Security settings] [Encrypt message and attachment]

Open an encrypted mail

1	User 1 mailbox (receiver.secutech) Go back to User 1’s mailbox and check your mail. You should have received the encrypted mail from User 2. Double-click on it to open it.
2	If your UniToken is inserted, you will be able to see the content of the mail. Note: If you’ve just inserted UniToken, you will be asked for the user password to decrypt the mail. Otherwise, there is no need to input the password once again
3	If UniToken is not inserted or if the certificate is incorrect, the message [Cannot Open this item. Your digital ID name cannot be found by the underlying system]
4	If UniToken is not inserted or if the certificate is incorrect, the message [Cannot Open this item. Your digital ID name cannot be found by the underlying system]

Glossary

Digital Signature: is a mathematical scheme for demonstrating the authenticity of a digital message or document. A valid digital signature gives a recipient reason to believe that the message was created by a known sender, and that it was not altered in transit.

Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

Microsoft Cryptography API, MS-CAPI is an application programming interface included with Microsoft Windows operating systems that provides services to enable developers to secure Windows-based applications using cryptography.

PKCS refers to a group of public-key cryptography standards devised and published by RSA Security.