Search Keyword : 10

• ACS Selected for "Forbes Asia's Best Under a Billion"

  Bloomberg, 10 Dec 2014

  https://www.acs.com.hk/en/in-the-press/
• What is the accuracy of the fingerprint scanner?

  Fingerprint scanning technology today is roughly equivalent to a four-digit PIN, i.e. a false acceptance in the range of 1 in 10,000.

  https://www.acs.com.hk/en/frequently-asked-questions/4/smart-card-fingerprint-readers/
• In Internet Explorer, how to request certificate in Thawte?

  Creating an Account Before you can request a personal certificate in Thawte, you have to first create an account. To create an account in Thawte: Follow url: https://www.thawte.com/cgi/enroll/personal/step1.exe Click Next. Select Charset and Fill in the Form. Click Next. Fill in your ID and email address (e.g. [email protected]) Click Next. Enter a password two times. Click Next. Enter Phone Number. Answer 5 Questions. Click Next. Confirm your Information. Click Next. Wait for the Email from Thawte. Click on url in the confirmation email. Enter the Probe and Ping Information from the Email. Click Next. The Account Setup is completed. Click Next. Requesting Cerficate(s) To request for Personal Digital Certificate(s) from Thawte: Follow the Link https://www.thawte.com/cgi/personal/cert/contents.exe using your Internet Explorer web browser. When prompted for a username and password, input your e-mail and password that you have registered from the steps above. Click "request a certificate". (Figure 1). Figure 1: Click "request a certificate" Click "request" (Figure 2). Figure 2: Click the "request" button. A pop-up box should appear (Figure 3 ). Since you are in Internet Explorer, choose "Microsoft Internet Explorer, Outlook and Outlook Express". You can also request a certificate for "Lotus Notes R5" if you have installed Lotus Notes. Figure 3: Choose the appropriate certificate and Click "request" Click "request" and then click "next" on the "configure certificate name" page. The "configure email addresses for certificate" page will appear. Choose the e-mail in which you would like to include in your certificate and then click next Click "next" on the "configure extranet capabilities for certificate" page, and then click "accept" on the "configure X.509v3 certificate extensions" page. On the "generate certificate public key" page, select "Advanced Card Systems CSP vX.x" in the drop-down box (Figure 4). If the said selection is not in the list, make sure that you have successfully installed the ACOS5 SDK or the CryptoMate Client Kit.Figure 4: Choose "Advanced Card Systems CSP vX.x" If a Smart Card Selection Dialog UI appears (Figure 5) with a status text of "The card is being shared by another process." Then make sure to close Firefox, Thunderbird and/or Admin Tool. Do this to all applications that has access to the card/token until the status text becomes "The card is available for use." (Figure 6). Then Click OK on the Smart Card Selection Dialog. If no Smart Card Selection Dialog UI pops up you may skip this step and follow the next step.Figure 5: There is an application sharing the deviceFigure 6: The card/token can now be us The ACS' CSP PIN Dialog UI will pop-up (Figure 7). Input the PIN then click "OK".Figure 7: ACS' CSP PIN Dialog Box Wait while the device generates the keys for you. If the operation was successful, a "confirm certificate request" page will be shown. Click the "finish" button on the bottom of this page. A "personal certificate requested" page will pop-up. Wait for an e-mail confirming how and where to pick-up the certificate. Usually the Subject of this e-mail is "Thawte Personal Cert Issued". If the confirmation e-mail does not arrive in 2 hours, then go to the Alternative way of picking up your certificate(s). Once the e-mail has arrived follow the link given in the e-mail. Click on Install Your Cert. If a Smart Card Selection Dialog UI pops-up, follow Step 10. If a Message Box with the title "Certificate Installation Complete" pops-up, Click OK. Alternative Way of picking up your Certificate(s) If the E-mail confirmation from Thawte didn't arrive within 2 hours, then follow this link: https://www.thawte.com/cgi/personal/cert/status.exe Figure 8: Check the status of your requested cert Click the "MSIE " link (if the cert is requested in Firefox this will be Navigator ). You will now see a Certificate Summary page. At the bottom of the page click the "fetch" button and follow the instructions in the "install your MSIE/Navigator certificate" page. Click on Install Your Cert button. Click on Yes to allow the cert to be installed. Click Yes again. Your Certificate is now installed. Click OK.  

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• In Internet Explorer, how to request certificate in VeriSign?

  To request certificate in VerSign using Internet Explorer, you can follow the steps below: Go to https://digitalid.verisign.com/client/class1MS.htm Fill out your First Name, Last Name, E-mail Address and Challenge Phrase. You can either choose to buy or request a free certificate (Figure 9). Figure 9: Choose between a Free or a Full-Service Certificate Depending on the choice you filled out in Step 3, you can specify the Billing Information for full-service certificates. On the other hand, if you chose to request a free certificate, then you can skip the Billing Information section and go through the "Select Cryptographic Service" section (see Next Step). Choose "Advanced Card Systems CSP vX.x" in the drop-down box (Figure 10). If you cannot see the "Advanced Card Systems CSP vX.x" make sure you have properly installed the ACOS5 SDK/CryptoMate Client Kit. Figure 10: Choose ACS' CSP in the drop down box. Click the "Accept" button at the bottom of the page. If a Smart Card Selection Dialog UI appears (Figure 5) with a status text of "The card is being shared by another process.", make sure to close Firefox, Thunderbird and/or Admin Tool, do this to all applications that has access to the card/token until the status text becomes "The card is available for use." (Figure 6). Then Click OK on the Smart Card Selection Dialog. If no Smart Card Selection Dialog UI pops up you can skip this step and follow the next step. The ACS' CSP PIN Dialog UI will pop-up (Figure 7). Type in the PIN and click "OK". If the key generation process is successful, you will see a confirmation page for the next instruction (Figure 11). If the page is not the one below, then go back to the previous page and make sure you have filled out all the required fields. Figure 11: Next step in Verisign Certificate Request. A confirmation e-mail will be sent to the e-mail address you provided in Step 2. Wait for the E-Mail confirmation from VeriSign. Follow the steps that are described in the e-mail confirmation from VeriSign. You should now be in the "VeriSign's secure Digital ID Center" web page (Figure 12). Figure 12: Verisign Digital Certificate Pick-up Center. Copy the Digital ID PIN from the confirmation e-mail and paste it in the provided textbox found in the web page. Click the "Submit" button. You should now be able to see an "Install Digital ID" page. Click the "INSTALL" button at the bottom of the page. If a Smart Card Selection Dialog UI pops-up, follow Step 7. When prompted for a PIN. Enter the card/token's PIN in the PIN Dialog Box. If the Certificate Installation is successful, you will be transferred to a "Certificate Installation and Registration Page". (Figure 13). Figure 13: Verisign Certificate Installation and Registration Page.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• In Mozilla Firefox, how to request certiciate in VeriSign?

  To request certificate in Versign using Mozilla Firefox you can follow the steps below: Go to https://digitalid.verisign.com/client/class1Netscape.htm. Fill out your First Name, Last Name, E-mail Address and Challenge Phrase. You can either choose to buy or request a free certificate (Figure 9). Figure 9: Choose between a Free or a Full-Service Certificate Depending on the choice you filled out in Step 3, you can specify the Billing Information for full-service certificates. On the other hand, if you chose to request a free certificate, then you can skip the Billing Information section and go through the "Encryption Strength" section (see Next Step). Select which encryption strength you prefer (Figure 10). Figure 10: Choose between medium grade or high grade encryption strength. Click the "Accept" button at the bottom of the page. Click "OK" if a confirmation box appears. If a "Choose Token Dialog" box appears, choose which token/card to put the requested certificate into. The token/card are represented in the drop-down box as the Token Name that your card/token is associated with. (Figure 5). Do not choose "Software Security Device" as this will not save your keys/certificate in the card/token. If you cannot see your card/token name then make sure that you have installed the pkcs module in Mozilla Firefox. Click "OK" on the "Choose Token Dialog" box. A Password input box will appear. Enter the card/token PIN here (Figure 6). Wait while the key generation is in progress (Figure 7). If the key generation process was successful, then you should see a confirmation page for the next instruction (Figure 11). If the page is not the one below, then go back to the previous page and make sure you have filled out all the required fields. Figure 11: Next step in Verisign Certificate Request. A confirmation e-mail will be sent to the e-mail address you provided in Step 2. Wait for the E-Mail confirmation from verisign. Follow the steps that are described in the e-mail confirmation from Verisign. You should now be in the "VeriSign's secure Digital ID Center" web page (Figure 12). Figure 12: Verisign Certificate Pick-up. Copy the Digital ID PIN from the confirmation e-mail and paste it in the provided textbox found in the web page. Click the "Submit" button. Submit your PIN if Firefox requested. You should now be able to see a confirmation box if you have successfully installed your digital certificate in the card/token. Figure 13: Verisign Certificate installation.  

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• In MS Outlook/Outlook Express, how to encrypt e-mails?

  Encrypted e-mail adds another security featurEncrypted e-mail adds another security feature because it prevents a third party entity to see the actual content of the e-mail, and it also protects sending of e-mail message thru an unsecure medium (e.g. a compromised wireless network). Take note that you can't just encrypt any e-mail that you want to send. You also have to make sure that your recipients can decrypt the encrypted email you have just sent. That means that Encrypting an e-mail message with your own Digital Certificates and sending it out to your intended recipients will be useless, since you are the only one that can decrypt the e-mail that you have just sent. Your recipients cannot decrypt your email and thus would not be able to read it. This also means that people who wants to send This also means that people who wants to send you an encrypted email should have a copy of your public key. The public key is the one needed to encrypt emails that people want to send to you. If you want to send your recipients a copy of your certificate then all you have to do is send a signed email. On the other hand if you have received a signed On the other hand if you received a signed email, you can also reply to that email and have it encrypted. When this happens you can follow the steps below to reply and encrypt a signed message: (for the sample purposes, the sender and the recipient below are the same) Once you recieve a signed e-mail and you want your reply to that email encrypted just click the "Encrypt Message" icon on the upper right panel (Figure 10) Figure 10: Encrypting your email reply. Once you send your encrypted reply to your recipient, you may be prompted for the card/token PIN (Figure 11). Figure 11: Enter your card/token PIN. Now if your the recipient and you have just Now if you are the recipient and you received an encrypted email, you should be seeing something like the one below (Figure 12). Figure 12: An encrypted email. Notice the padlock icon, this indicates that the email is encrypted Upon Double-Clicking the message you will be Upon Double-Clicking the message you will be prompted for your card/token PIN. Key-in your PIN in the PIN dialog box. You can now see the email together with a blue icon that indicates the email is encrypted (Figure 13) Figure 13: A decrypted email. When you click the blue padlock icon on the When you click the blue padlock icon on the right, a "Message Security Properties" dialog box (Figure 14) will be displayed. Figure 14: Message Security Properties

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• In Thunderbird, how to encrypt e-mails?

  Encrypted e-mail adds another security feature because it prevents a third party entity to see the actual content of the e-mail and it also protects sending of e-mail message thru an unsecure medium (e.g. a compromised wireless network). Take note that you can't just encrypt any e-mail that you want to send. You also have to make sure that your recipients can decrypt the encrypted email you have just sent. This means that Encrypting an e-mail message with your own Digital Certificates and sending it out to your intended recipients will be useless, since you are the only one that can decrypt the e-mail that you have just sent. Your recipients cannot decrypt your email and thus would not be able to read it. This also means that people who want to send you an encrypted email should have a copy of your public key. The public key is the one needed to encrypt emails that people want to send to you. If you want to send your recipients a copy of your certificate, all you have to do is send a signed email to them. On the other hand if you have received a signed email, then you can also reply to that email and have it encrypted. When this happens you can follow the steps below to reply and encrypt a signed message: (for the sample purposes, the sender and the recipient below are the same). Once you have recieve a signed e-mail and you want your reply to that email encrypted just click the "Security" icon on the main panel then Select "Encrypt This Message" (Figure 8). Figure 8: Sending an encrypted reply email. When sending your reply email, a "Master Password" prompt will appear (similar to Figure 2), enter your card/token PIN. When you (or your) recipient(s) recieved your encrypted email, they will be prompted for the card/token PIN. Once you have entered your card/token PIN, the encrypted email should look similar with the one below (Figure 9). Figure 9: An encrypted and signed Email, as viewed in Thunderbird. If the encrypted email does not look similar to the one above, check the steps discussed here. When the envelope/padlock icon is clicked, you should see the Message Security information (Figure 10). Figure 10: Email Message Security information.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to create an encrypted volume using ACOS5/CryptoMate?

  After you have successfully set-up your TrueCrypt settings, follow the steps below to create an encrypted volume using ACOS5/Cryptomate. On the TrueCrypt main window, click the "Create Volume" button. The "TrueCrypt Volume Creation Wizard" should pop-up ( Figure 3 ). Figure 3: TrueCrypt Volume Creation Wizard. In the Volume Creation Wizard, select the "Create an encrypted file container" option and click "Next". In the "Volume Type" selection, click the "Standard TrueCrypt volume" option and click "Next". In the "Volume Location" selection, Select the file in which you want to create your TrueCrypt Volume. Make sure to read the WARNING in this dialog ( Figure 4 ). Figure 4: TrueCrypt Volume Creation Wizard, Volume Location selection. Select "Next" once you have selected the desired file. Next, you will be asked on the "Encryption Options" for your Volume. You can leave the default settings as it is and click "Next" Next, you will be asked on the desired size for your volume. Click "Next" once you have specified the desired size for your Volume. The size that you specify here will be the allocated space for the file that you have created in Step 5 ( Figure 5 ). Figure 5: Specify the size you want for your volume. Next, you will be asked for the Volume Password and (optionally) for the Keyfile that will be used to encrypt/decrypt your TrueCrypt volume. Enter your desired password and select the "Use keyfiles" check box. Selecting to use keyfiles will allow you to store securely the keyfiles to your ACOS5/CryptoMate device. ( Figure 6 ). Figure 6: Enter your password and select the "Use keyfiles" option Once you have set your password, and selected the "Use keyfiles" selection. Click the "Keyfiles.." button. The "TrueCrypt - Keyfiles" will appear ( Figure 7 ). Figure 7: TrueCrypt Keyfiles window. Remember the password that you have entered in this step.  You can select any files for your keyfile (as stated in Figure 7). You can also generate a random keyfile of your own, to do this just click "Generate Random Keyfile. . ." button. The "TrueCrypt Keyfile Generator" will appear. Click the "Generate and Save Keyfile. . ." button. Save your randomly generated keyfile to a temporary file in your hard drive. Once saved, a confirmation box will appear. ( Figure 8 ). Figure 8: Randomly Generate your own Keyfile. Once you have saved your Randomly generated Keyfile. Click the "Close" button in the "TrueCrypt Keyfile Generator". Click Click the "Add Token Files. . ." button in the "TrueCrypt - Keyfiles" dialog window. When prompted, enter the ACOS5/CryptoMate User PIN. ( Figure 9 ). Figure 9: Enter your ACOS5/CryptoMate User PIN when prompted. After successfully validating the PIN, the "Select Security Token Keyfiles" dialog window will show up. In the "Select Security Token Keyfiles" dialog, click "Import Keyfile to Token". Select the file that you have generated and saved in Step 10  Once selected, You will be prompted for a verification. Just Click OK on the "New Security Token Keyfile Properties" dialog. Wait for a while, the process might take some time depending on the size of the Keyfile. Once the Keyfile has been saved, it will be available for selection. ( Figure 10a and Figure 10b ). Figure 10b: Set the Keyfile Name or you can leave the default and select "OK" Figure 10a: The Keyfile is now saved in the ACOS5/CryptoMate token. Select the newly created Keyfile and Click "OK". You should now see your Keyfile in the Keyfiles list ( Figure 11). Figure 11: Newly Created Keyfile in the list.. Select "OK" and you will now go back to the "TrueCrypt Volume Creation Wizard" In the "TrueCrypt Volume Creation Wizard" Click "Next...". In the next Dialog you will be asked to Format your TrueCrypt Volume. Click the "Format" button and wait until the formatting process is done. The formatting process might take a while depending on the Volume size you specified in Step 7 above ( Figure 12 ). Figure 12: Your TrueCrypt Volume is now being formatted. After successfully formatting you Volume/ Your Volume is now created and ready for use ( Figure 13 ). Figure 13: Your TrueCrypt Volume is now being formatted. Click "Next" and then Click "Exit". Now that you have created an Encrypted Volume, you can now delete the file that you have generated in Step 10.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to mount / dismount a TrueCrypt volume?

  Once you have created an encrypted volume. You can now Mount / Unmount it and saved data into it. Follow the steps below in mounting / unmounting an encrypted volume. Open up the TrueCrypt main window ( Figure 1 in How to set up TrueCrypt for the ACOS5/ CryptoMage usage). In the TrueCrypt main window, click the "Select File" button. Navigate to the folder where you haved saved the file you have created in this step. Click the "Mount" button. In the "Enter Password" dialog box, enter the volume password. Also select the "Use keyfiles" options. ( Figure 14 ). Figure 14: TrueCrypt Password dialog box. In the TrueCrypt password dialog box. Click "Keyfiles..." button. The "TrueCrypt Keyfiles" will appear ( Figure 7 in How to create an encrypted volume using ACOS5/ CryptoMate). Click the "Add Token file..." button. When prompted, enter the ACOS5/CryptoMate User PIN. ( Figure 9 in How to create an encrypted volume using ACOS5/ CryptoMate) The "Select Security Token Keyfiles" will appear ( Figure 10a & 10b in How to create an encrypted volume using ACOS5/ CryptoMate). In here you can select the proper keyfiles to use for the your volume to be mounted. Select the proper Keyfiles ans Click "OK". In the "TrueCrypt Keyfiles" dialog window, select the Keyfiles that you have selected in the previous step and click "OK". The mounting process might take a while, when the mounting process is done, you can now see the mounted volume in the TrueCrypt main window ( Figure 14 ). Figure 14: Mounted TrueCrypt Volume. Once a TrueCrypt volume has been successfully mounted, you can have access to it similar to a normal volume or Hard Disk partition ( Figure 15 ). Figure 15: The Mounted TrueCrypt Volume as seen in "My Computer". To dismount a TrueCrypt Volume, Select the appropriate Volume you want to Dismount in the TrueCrypt main window. Select the "Dismount" button to remove the volume and save all its contents securely ( Figure 14 ).

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to create an encrypted portable volume using ACOS5 and ACR100?

  The ACR100 SIMFlash (CCID) is a reliable and cost-effective smart card reader for security-related applications. It is a USB full-speed plug-in card reader that, with the paired mass storage, enables you to do more than simply back up and manage your SIM card information on the PC. It supports most memory cards, MCU cards with T=0 and T=1 protocols, and GSM cards conforming to Spec 11.11 The ACR100 SIMFlash (CCID) also has a built-in 1-GB flash memory. Designed both to access SIM cards and for data or application storage, it is ideal for GSM solutions such as GSM management software and VoIP applications, electronic payment systems, e-commerce, home banking, transportation, and computer/network access. Designed both to access SIM cards and for data or application storage, it is ideal for GSM solutions such as GSM management software and VoIP applications, electronic payment systems, e-commerce, home banking, transportation, and computer/network access (Figure 1). Figure 1: ACR100 Reader With the the use of an ACR100, a sim-sized ACOS5 and TrueCrypt. You can create an Encrypted Portable Volume. The Encryption Key (that decrypts the Encrypted Volume) is stored in the sim-sized ACOS5 Card and the Encrypted Volume itself is stored in the ACR100. Follow the steps below to Create an Encrypted, Portable Volume: Insert your sim-sized ACOS5 card in the ACR100 Reader Slot. Insert your ACR100 (preferably ACR100F CCID) to an empty USB slot. The system should automatically detect the Removable Media and the Smart Card reader at once. Initialize the sim-sized ACOS5 card using the ACOS5 Initialization Tool. The ACOS5 Initialization Tool should detect the ACR100 Smart Card Reader as "    CCID USB Reader x" (Figure 2). Figure 2: ACR100 Reader in ACOS5 Initialization Tool After successfully initializing your ACOS5 Card. You can optionally run Admin Tool to change the Token Name. Changing the Token Name can be useful to easily identify which token belongs to a particular person. Create an Encypted Volume using the sim-sized ACOS5 inside the ACR100 Device (the ACR100 is detected as a removable media in Windows Explorer) using the steps discussed here. Once an Ecrypted Volume has been created. Create a "Traveler Disk" so that you can use your encrypted volume on any PC. To create a "Traveler Disk", run TrueCrypt and on the main menu, select "Tools" and then "Traveler Disk Setup. . ." (Figure 3). Figure 3: Creating a Traveler Disk In the "TrueCrypt Traveler Disk Setup", click the "Browse" button in the "File Settings" field. Select the ACR100 Removable Disk (Figure 4). In the "Autorun Configuration" field, select "Auto-mount TrueCrypt volume". In the "Mount Settings" filed click the "Browse. . ." button and select the Volume that you have created in Step 6 above (Figure 4). Figure 4: Travel Disk Setup Click the "Create" button to Create the "Traveler Disk" files in the ACR100 Removable Media. Take note of the warning after creating the "Traveler Disk" (Figure 5). Figure 5: Travel Disk Warning Once you have created the "Traveler Disk". Some TrueCrypt files will be copied to the ACR100 Removable Device. One of these files is an "autorun.inf" file that tells the Windows operating system to load the Encrypted volumes when an ACR100 device is plugged-in (Figure 6). Figure 6: Travel Disk Files You have to edit the autorun.inf file so that the sim-sized ACOS5 card will be utilized when decrypting the Volume that is stored in your ACR100 device (more in this later). Before Editing the autorun.inf file, copy the required ACS' PKCS Files first. Go to the directory; Program Files->Advanced Card Systems Ltd->ACOS5 SDK->Middleware->PKCS. Copy the file "acospkcs11.dll" and paste it in the ACR100 device inside the folder "TrueCrypt". Go to the system32 folder. (Click "Start"->"Run" and type in system32). Look for the files; libeay32.dll, MSVCRTD.DLL and MSVCIRTD.DLL. Copy these files and paste it in the ACR100 device inside the folder "TrueCrypt". Once you have copied all the files to the ACR100 Removable media, the TrueCrypt folder inside the ACR100 should look like the one in Figure 7. Figure 7: Travel Disk Files with the PKCS#11 middleware and its dependencies Open the autorun.inf that is stored in the ACR100 removable media. After following all the steps above, the autorun.inf file should look like the one below: [autorun] label=TrueCrypt Traveler Disk icon=TrueCryptTrueCrypt.exe action=Mount TrueCrypt volume open=TrueCryptTrueCrypt.exe /q background /m rm /v "PortableEncryptedVolume" shellstart=Start TrueCrypt Background Task shellstartcommand=TrueCryptTrueCrypt.exe shelldismount=Dismount all TrueCrypt volumes shelldismountcommand=TrueCryptTrueCrypt.exe /q /dFigure 8: The Traveler Disk autorun.inf Edit the 5th line so that it would look like the one below:[autorun] label=TrueCrypt Traveler Disk icon=TrueCryptTrueCrypt.exe action=Mount TrueCrypt volume open=TrueCryptTrueCrypt.exe /q background /m rm /tokenlib "Truecryptacospkcs11.dll" /k "token://slot/0/file/RandomKeyFile" /v "PortableEncryptedVolume" shellstart=Start TrueCrypt Background Task shellstartcommand=TrueCryptTrueCrypt.exe shelldismount=Dismount all TrueCrypt volumes shelldismountcommand=TrueCryptTrueCrypt.exe /q /dFigure 9: The Updated Traveler Disk autorun.inf. The texts in red are the added parameters. RandomKeyFile is the Keyfile used to decrypt the volume. Modify the "RandomKeyFile" to the the Keyfile that is currently stored in the sim-sized ACOS5 card. Also modify the "PortableEncryptedVolume" to the TrueCrypt Volume that you have created in Step 6. You can now plug-in the ACR100 to a system and your volume will be automatically mounted to the system.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/