https://www.acs.com.hk
https://www.acs.com.hk

Search Keyword : ipm net minilector

  • In Thunderbird, how to encrypt e-mails?

    Encrypted e-mail adds another security feature because it prevents a third party entity to see the actual content of the e-mail and it also protects sending of e-mail message thru an unsecure medium (e.g. a compromised wireless network). Take note that you can't just encrypt any e-mail that you want to send. You also have to make sure that your recipients can decrypt the encrypted email you have just sent. This means that Encrypting an e-mail message with your own Digital Certificates and sending it out to your intended recipients will be useless, since you are the only one that can decrypt the e-mail that you have just sent. Your recipients cannot decrypt your email and thus would not be able to read it. This also means that people who want to send you an encrypted email should have a copy of your public key. The public key is the one needed to encrypt emails that people want to send to you. If you want to send your recipients a copy of your certificate, all you have to do is send a signed email to them. On the other hand if you have received a signed email, then you can also reply to that email and have it encrypted. When this happens you can follow the steps below to reply and encrypt a signed message: (for the sample purposes, the sender and the recipient below are the same). Once you have recieve a signed e-mail and you want your reply to that email encrypted just click the "Security" icon on the main panel then Select "Encrypt This Message" (Figure 8). Figure 8: Sending an encrypted reply email. When sending your reply email, a "Master Password" prompt will appear (similar to Figure 2), enter your card/token PIN. When you (or your) recipient(s) recieved your encrypted email, they will be prompted for the card/token PIN. Once you have entered your card/token PIN, the encrypted email should look similar with the one below (Figure 9). Figure 9: An encrypted and signed Email, as viewed in Thunderbird. If the encrypted email does not look similar to the one above, check the steps discussed here. When the envelope/padlock icon is clicked, you should see the Message Security information (Figure 10). Figure 10: Email Message Security information.

    https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
  • How to use certificates in MS domain logon?

    Before using your card/token for domain logon, you should first configure your computer to be connected on a particular domain (your company domain for example). This domain server should also be configured to issue certificates. There are many sources in the internet for configuring your Active Directory Certificate Service, so that will no longer be discussed here. First, configure your computer to connect to a particular domain. Follow the steps below to connect to a particular domain: In your Local Area Network Connection properties. Click "Internet Protocol (TCP/IP)" (Figure 1). Figure 1: Click your TCP/IP settings in your LAN connection. In your TCP/IP settings, check "Use the Following DNS server addreses" (Figure 2). Figure 2: Type in your DNS address. Type in the IP of the Domain Name server. If you don't know the IP address of your DNS server, contact your Network Administrator. Click OK. After successfully configuring your DNS server address. Right Click the "My Computer" icon on your desktop and select "Properties". In the "Computer Name" tab, click the "Change" button. A "Computer Name Changes" dialog box will appear (Figure 3). Figure 3: Computer Name Changes dialog box. Select "Domain" in the "Member of" Panel. Type in the Domain Name of the DNS Server that you are trying to connect to. When prompted for a username and password, type in the username and password that have been assigned to you by your Network Administrator. You will be prompted to restart your computer after you have successfully entered your username and password. Save all your work and restart the computer. After a reboot you will notice that the welcome screen of your OS is different. Just follow the instructions on the welcome screen. If you already have a card/token with a smart card logon certificate stored in it, you can now use this to login to your computer. If you don't have a smart card with a certificate then follow this link to request a smart card certificate or contact your network administrator so he/she can request one for you.

    https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
  • How to use certificates in VPN logon?

    Your Card/Token can be used to connect to a Virtual Private Network (VPN). Make sure that the VPN server is configured to issue smart card certificates. You may contact your Network Administrator regarding setting up a VPN server to accept smart card certificate connections. To set-up your PC to use smart card for VPN connection: In Control Panel. Select "Network Connections" double Click "New Connection Wizard" (Figure 4). Figure 4: New Connection Wizard. Click Next and Choose "Connect to the network at my workplace", click Next again. Choose "Virtual Private Network connection". Click Next. Enter a brief description of the Connection Name (preferably your Company Name). Click Next. If asked to dial an initial connection choose "Do not dial the initial connection" option. Click Next. You will be prompted to enter the IP address or Host Name of your VPN Server. Contact your Network Administrator if you do not know the Host Name or IP Address of your VPN server. Click Next Choose "Use my smart card" option (Figure 5). Insert your smart card/token (that already has a certificate issued by the VPN server) into a smart card reader or a USB slot. Click Next. Figure 5: Select "Use my smart card" option. Choose the appropriate "Connection Availability" option. Click Next then click Finish. Wait while the process reads certificate information in your card/token. If prompted to install a server certificate, choose "OK" (Figure 6 ). Figure 6: Select "OK" to install the server certificate to your computer. Enter the Smart Card PIN when prompted (Figure 7). Figure 7: Enter your Smart Card PIN. Wait until the process shows that you have been successfully authenticated with the VPN Server. An "Authenticated" dialog box will appear (Figure 8) Figure 8: You have successfully connected to a VPN using your Smart Card

    https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
  • How to create an encrypted portable volume using ACOS5 and ACR100?

    The ACR100 SIMFlash (CCID) is a reliable and cost-effective smart card reader for security-related applications. It is a USB full-speed plug-in card reader that, with the paired mass storage, enables you to do more than simply back up and manage your SIM card information on the PC. It supports most memory cards, MCU cards with T=0 and T=1 protocols, and GSM cards conforming to Spec 11.11 The ACR100 SIMFlash (CCID) also has a built-in 1-GB flash memory. Designed both to access SIM cards and for data or application storage, it is ideal for GSM solutions such as GSM management software and VoIP applications, electronic payment systems, e-commerce, home banking, transportation, and computer/network access. Designed both to access SIM cards and for data or application storage, it is ideal for GSM solutions such as GSM management software and VoIP applications, electronic payment systems, e-commerce, home banking, transportation, and computer/network access (Figure 1). Figure 1: ACR100 Reader With the the use of an ACR100, a sim-sized ACOS5 and TrueCrypt. You can create an Encrypted Portable Volume. The Encryption Key (that decrypts the Encrypted Volume) is stored in the sim-sized ACOS5 Card and the Encrypted Volume itself is stored in the ACR100. Follow the steps below to Create an Encrypted, Portable Volume: Insert your sim-sized ACOS5 card in the ACR100 Reader Slot. Insert your ACR100 (preferably ACR100F CCID) to an empty USB slot. The system should automatically detect the Removable Media and the Smart Card reader at once. Initialize the sim-sized ACOS5 card using the ACOS5 Initialization Tool. The ACOS5 Initialization Tool should detect the ACR100 Smart Card Reader as "    CCID USB Reader x" (Figure 2). Figure 2: ACR100 Reader in ACOS5 Initialization Tool After successfully initializing your ACOS5 Card. You can optionally run Admin Tool to change the Token Name. Changing the Token Name can be useful to easily identify which token belongs to a particular person. Create an Encypted Volume using the sim-sized ACOS5 inside the ACR100 Device (the ACR100 is detected as a removable media in Windows Explorer) using the steps discussed here. Once an Ecrypted Volume has been created. Create a "Traveler Disk" so that you can use your encrypted volume on any PC. To create a "Traveler Disk", run TrueCrypt and on the main menu, select "Tools" and then "Traveler Disk Setup. . ." (Figure 3). Figure 3: Creating a Traveler Disk In the "TrueCrypt Traveler Disk Setup", click the "Browse" button in the "File Settings" field. Select the ACR100 Removable Disk (Figure 4). In the "Autorun Configuration" field, select "Auto-mount TrueCrypt volume". In the "Mount Settings" filed click the "Browse. . ." button and select the Volume that you have created in Step 6 above (Figure 4). Figure 4: Travel Disk Setup Click the "Create" button to Create the "Traveler Disk" files in the ACR100 Removable Media. Take note of the warning after creating the "Traveler Disk" (Figure 5). Figure 5: Travel Disk Warning Once you have created the "Traveler Disk". Some TrueCrypt files will be copied to the ACR100 Removable Device. One of these files is an "autorun.inf" file that tells the Windows operating system to load the Encrypted volumes when an ACR100 device is plugged-in (Figure 6). Figure 6: Travel Disk Files You have to edit the autorun.inf file so that the sim-sized ACOS5 card will be utilized when decrypting the Volume that is stored in your ACR100 device (more in this later). Before Editing the autorun.inf file, copy the required ACS' PKCS Files first. Go to the directory; Program Files->Advanced Card Systems Ltd->ACOS5 SDK->Middleware->PKCS. Copy the file "acospkcs11.dll" and paste it in the ACR100 device inside the folder "TrueCrypt". Go to the system32 folder. (Click "Start"->"Run" and type in system32). Look for the files; libeay32.dll, MSVCRTD.DLL and MSVCIRTD.DLL. Copy these files and paste it in the ACR100 device inside the folder "TrueCrypt". Once you have copied all the files to the ACR100 Removable media, the TrueCrypt folder inside the ACR100 should look like the one in Figure 7. Figure 7: Travel Disk Files with the PKCS#11 middleware and its dependencies Open the autorun.inf that is stored in the ACR100 removable media. After following all the steps above, the autorun.inf file should look like the one below: [autorun] label=TrueCrypt Traveler Disk icon=TrueCryptTrueCrypt.exe action=Mount TrueCrypt volume open=TrueCryptTrueCrypt.exe /q background /m rm /v "PortableEncryptedVolume" shellstart=Start TrueCrypt Background Task shellstartcommand=TrueCryptTrueCrypt.exe shelldismount=Dismount all TrueCrypt volumes shelldismountcommand=TrueCryptTrueCrypt.exe /q /dFigure 8: The Traveler Disk autorun.inf Edit the 5th line so that it would look like the one below:[autorun] label=TrueCrypt Traveler Disk icon=TrueCryptTrueCrypt.exe action=Mount TrueCrypt volume open=TrueCryptTrueCrypt.exe /q background /m rm /tokenlib "Truecryptacospkcs11.dll" /k "token://slot/0/file/RandomKeyFile" /v "PortableEncryptedVolume" shellstart=Start TrueCrypt Background Task shellstartcommand=TrueCryptTrueCrypt.exe shelldismount=Dismount all TrueCrypt volumes shelldismountcommand=TrueCryptTrueCrypt.exe /q /dFigure 9: The Updated Traveler Disk autorun.inf. The texts in red are the added parameters. RandomKeyFile is the Keyfile used to decrypt the volume. Modify the "RandomKeyFile" to the the Keyfile that is currently stored in the sim-sized ACOS5 card. Also modify the "PortableEncryptedVolume" to the TrueCrypt Volume that you have created in Step 6. You can now plug-in the ACR100 to a system and your volume will be automatically mounted to the system.

    https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
  • Why do I need a PC-linked Reader with Mass Storage instead of using a simple SIM-sized Smart Card Reader?

    Aside from being a SIM-sized card reader, PC-linked readers with mass storage have a flash drive feature that extends the capabilities of your application, be it for GSM solutions, e-Commerce, e-Banking, Network Security, or Data/Application Storage. With various options for partitioning the flash drive, the PC-linked reader with mass storage enhances security and flexibility in storing different kinds of software or applications, such as PC log-on, instant messaging, or other corporate/government software requiring the user to plug in a valid SIM-sized smart card into the reader to log in and run certain programs. PC-linked readers with mass storage also enable you to carry more files wherever you go. You can retrieve and edit documents, view transaction histories, and run applications directly from the USB token as long as there is a computer around. Furthermore, you can utilize your smart card to secure confidential files—you can cut out a partition as a protected area, which can only be accessed after smart card authentication from the flash memory.

    https://www.acs.com.hk/en/frequently-asked-questions/8/pc-linked-readers-with-mass-storage/
  • What programming languages can access the PC-linked Readers with Mass Storage?

    Any languages that can access the dynamic libraries (DLL) can control the PC-linked Readers with Mass Storage. Additionally, PC/SC has its own DLLs that the readers can access. Some of the programming languages are MS Visual Basic, Visual C++, VB .NET, C#, and Borland Delphi.

    https://www.acs.com.hk/en/frequently-asked-questions/8/pc-linked-readers-with-mass-storage/
  • What are the PC-linked Contact Card Readers that ACS offers?

    ACS offers various forms of PC-linked contact card readers to cater to the varying needs of the user. Combining the latest technology with modern design, PC-linked Readers are designed to meet the user’s needs in different applications, such as in e-Government, e-Banking, e-Payment e-Healthcare, Public Key Infrastructure, Network Security, Access Control, and Loyalty Program.  

    https://www.acs.com.hk/en/frequently-asked-questions/2/contact-smart-card-readers/
  • What are the mobile card readers that ACS offers?

    ACS offers various readers to be used with most mobile devices in the market. These mobile card readers cater to diverse card technologies, from magnetic cards to smart cards, and have different connection interfaces to suit every user’s requirements.

    https://www.acs.com.hk/en/frequently-asked-questions/54/mobile-card-readers/
  • What types of cards are supported by the mobile card readers?

    ACS Mobile Card Readers support various magnetic cards and smart cards. You may visit the ACS Mobile Card Reader website for the complete list of cards supported by each mobile card reader.

    https://www.acs.com.hk/en/frequently-asked-questions/54/mobile-card-readers/
  • What is the advantage of mobile card reader over the PC-linked card reader?

    Mobile Card Readers are designed to be brought anytime, anywhere. Unlike the PC-linked card reader, mobile card readers have unique connection interfaces which allow them to be used with most mobile devices available in the market, such as tablets and smartphones. In addition, with its dual technology feature (at no additional cost), ACS Mobile Card Readers are perfect for users who would like to transition from magnetic card to smart card technologies.

    https://www.acs.com.hk/en/frequently-asked-questions/54/mobile-card-readers/
Page 24 of 24 (240 results)