Search Keyword : s

• How to sign PDF documents?

  Using the Adobe Professional Suite and ACS' CSP Middleware, users can sign and encrypt PDF documents using certificates that are stored on the ACOS5 Card/CryptoMate devices. Before signing PDFs, user must ensure that he/she had requested a digital certificate from a trusted CA. As an example, we will use Adobe Professional Suite 8 for the steps discussed below.   Signing your PDF documents ensures that your document had not been tampered since the signature has been applied. This security feature is particularly important when sending your document through e-mails. To put your digital signature on a newly created PDF document: Make sure that your ACOS5 card is inserted in the reader. If you are using a CryptoMate Device, make sure that it is inserted in a USB slot. Start the Adobe Professional Suite.If you have properly installed the Adobe Pro Suite, you should see a welcome screen similar to the one below (Figure 1). Figure 1: Creating a PDF using Adobe Pro Suite 8. Select "CREATE PDF". You can easily create a PDF document that comes from a *.doc, a .txt file or even from multiple files. Select the proper source file for your PDF documents (Figure 2). Figure 2: Select the appropriate source file in creating your PDF document. Once you have selected the proper source file for your PDF document, you can now start signing your documents. Note that you have to save the newly generated pdf file before you can put a digital signature in it. In the main panel of the Adobe Pro Suite, Click the "Sign" Drop Down button (Figure 3). Figure 3: Signing your document with a digital certificate. You can see from the drop down menu that you can choose how you will place your digital signature in a pdf document. For the purpose of this example we will choose "Certify with Visible Signature". Once you have chosen how to put your digital signature in the document, you will be prompted as to where to place the digital signature in the document. After this, you will also be prompted to choose which specific Digital Certificate to use for document signing Choose what particular Digital Certificate you want to use to sign your PDF document (Figure 4). If you can't see your digital certificate, try to re-insert the ACOS5 card or CryptoMate token and repeat Steps 5 to 7. If re-inserting your card/token does not solve the issue, restart the Adobe Suite or try the steps discussed here. Figure 4: Select which digital certificate to use for digital signing. Once you have selected which digital certificate to use for document signing, you will be prompted to enter your ACOS5 PIN. In this step you will also see how your Digital Signature is placed in the PDF document. Figure 5: Enter your Card/Token PIN. Upon entering the correct card/token PIN, your document will have a permanent watermark. This watermark indicates who signed the document. Upon giving your document to someone else, they will see the document having this watermark (Figure 6). Figure 6: The newly created PDF document as viewed in an Acrobat Reader 7. The user who is viewing this document can verify if the document has been modified since it was signed. By Double Clicking the watermark, the "Signature Properties" dialog box will show up. This shows information regarding the document modifications and the digital signature itself (Figure 7). Figure 7: Signature Properties of the Digital Signature embedded in a PDF document.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to encrypt PDF documents?

  Using the Adobe Professional Suite and ACS' CSP Middleware, users can sign and encrypt PDF documents using certificates that are stored on the ACOS5 Card/CryptoMate devices. Before encrypting PDFs, user must ensure that he/she had requested a digital certificate from a trusted CA. As an example, we will use Adobe Professional Suite 8 for the steps discussed below. Encrypting your PDF documents ensures that only the intended readers can decrypt and properly read your documents. To encrypt PDF documents: Make sure that your ACOS5 card is inserted in the reader. If you are using a CryptoMate Device, make sure that it is inserted in a USB slot. Start the Adobe Professional Suite.If you have properly installed the Adobe Pro Suite, you should see a welcome screen similar to the one below (Figure 1). Figure 1: Creating a PDF using Adobe Pro Suite 8. Select "CREATE PDF". You can easily create a PDF document that comes from a *.doc, a .txt file or even from multiple files. Select the proper source file for your PDF documents (Figure 2). Figure 2: Select the appropriate source file in creating your PDF document. Once you have your PDF document ready, select the "Secure" Drop down button in the main panel of the Adobe Pro Suite (Figure 3). Figure 3: Encrypting a PDF document in Adobe Pro Suite 8. Select "Certificate Encrypt" in the Drop down menu. A "Certificate Security Settings" dialog box will appear. You will be prompted for the General settings panel, Click "Next" to proceed to selecting recipients. The next panel will allow you to select the recipients. In this section you can now add the intended readers of your encrypted PDF document. This is the most important part of encrypting your document. If you don't add any recipients in this section, then your the only one who will be able to decrypt and read it properly. To add recipients of your document, you should first have a copy of the .cer certificate file of your recipient's digital certificate. If your recipients use ACOS5/CryptoMate to store their Digital Certificate, then they can easily export their digital certificate using Admin Tool. Click the "Browse..." button to add recipients for your encrypted document. Browse to where the *.cer file is located and then Click "OK" (Figure 4). Figure 4: Click "Browse..." to select the .cer file and then add them as your recipients. You can add as many recipients in your document as you want, as long as you have a copy of their *.cer digital certificate file. Click "Next" and then Click "Finish". Your PDF document is now encrypted, you can now start sending it to your intended recipients. When your recipients recieve the PDF document and they are also using ACOS5/CryptoMate to store their digital certitificates, they will be prompted for the Card/Token PIN (Figure 5). Figure 5: Opening an encrypted PDF file in Acrobat Reader 7.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to set up TrueCrypt for ACOS5/ CryptoMage usage?

  TrueCrypt is a software application used for real-time on-the-fly encryption. It is distributed without cost, and has source code available, although under a restrictive licence. It can create a virtual encrypted disk within a file or a device-hosted encrypted volume on either an individual partition or an entire storage device. It supports Microsoft Windows, Mac OS X and Linux (using FUSE) and encrypted volumes can be made portable ( Figure 1). ACOS5/CryptoMate can be used as the storage for key(s) that will be used in Encrypting/Decrypting of a TrueCrypt Volume.  Figure 1: TrueCrypt main window To Initialize your TrueCrypt with ACOS5/CryptoMate, follow the steps below: If you have a fresh card/token, please make sure to Initialize it first. Install the TrueCrypt software first by downloading the latest installer in http://www.truecrypt.org/downloads . In the TrueCrypt main menu, select "Settings" and click "Security Tokens...". The "TrueCrypt - Securty Token Preferences" should pop up ( Figure 2 ). Figure 2: Security Token Preferences window. Click the button "Auto-Detect Library". If you have multiple PKCS Library installed in the system, then click "Select Library . . ." button and navigate to the Program Files, Advanced Card Systems Ltd., then ACOS5 SDK, Middleware and finally the PKCS folder. Select the acospkcs11.dll file. Once you have selected the proper PKCS#11 Library, click the "OK" button on the "Securty Token Preferences" dialog.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to create an encrypted volume using ACOS5/CryptoMate?

  After you have successfully set-up your TrueCrypt settings, follow the steps below to create an encrypted volume using ACOS5/Cryptomate. On the TrueCrypt main window, click the "Create Volume" button. The "TrueCrypt Volume Creation Wizard" should pop-up ( Figure 3 ). Figure 3: TrueCrypt Volume Creation Wizard. In the Volume Creation Wizard, select the "Create an encrypted file container" option and click "Next". In the "Volume Type" selection, click the "Standard TrueCrypt volume" option and click "Next". In the "Volume Location" selection, Select the file in which you want to create your TrueCrypt Volume. Make sure to read the WARNING in this dialog ( Figure 4 ). Figure 4: TrueCrypt Volume Creation Wizard, Volume Location selection. Select "Next" once you have selected the desired file. Next, you will be asked on the "Encryption Options" for your Volume. You can leave the default settings as it is and click "Next" Next, you will be asked on the desired size for your volume. Click "Next" once you have specified the desired size for your Volume. The size that you specify here will be the allocated space for the file that you have created in Step 5 ( Figure 5 ). Figure 5: Specify the size you want for your volume. Next, you will be asked for the Volume Password and (optionally) for the Keyfile that will be used to encrypt/decrypt your TrueCrypt volume. Enter your desired password and select the "Use keyfiles" check box. Selecting to use keyfiles will allow you to store securely the keyfiles to your ACOS5/CryptoMate device. ( Figure 6 ). Figure 6: Enter your password and select the "Use keyfiles" option Once you have set your password, and selected the "Use keyfiles" selection. Click the "Keyfiles.." button. The "TrueCrypt - Keyfiles" will appear ( Figure 7 ). Figure 7: TrueCrypt Keyfiles window. Remember the password that you have entered in this step.  You can select any files for your keyfile (as stated in Figure 7). You can also generate a random keyfile of your own, to do this just click "Generate Random Keyfile. . ." button. The "TrueCrypt Keyfile Generator" will appear. Click the "Generate and Save Keyfile. . ." button. Save your randomly generated keyfile to a temporary file in your hard drive. Once saved, a confirmation box will appear. ( Figure 8 ). Figure 8: Randomly Generate your own Keyfile. Once you have saved your Randomly generated Keyfile. Click the "Close" button in the "TrueCrypt Keyfile Generator". Click Click the "Add Token Files. . ." button in the "TrueCrypt - Keyfiles" dialog window. When prompted, enter the ACOS5/CryptoMate User PIN. ( Figure 9 ). Figure 9: Enter your ACOS5/CryptoMate User PIN when prompted. After successfully validating the PIN, the "Select Security Token Keyfiles" dialog window will show up. In the "Select Security Token Keyfiles" dialog, click "Import Keyfile to Token". Select the file that you have generated and saved in Step 10  Once selected, You will be prompted for a verification. Just Click OK on the "New Security Token Keyfile Properties" dialog. Wait for a while, the process might take some time depending on the size of the Keyfile. Once the Keyfile has been saved, it will be available for selection. ( Figure 10a and Figure 10b ). Figure 10b: Set the Keyfile Name or you can leave the default and select "OK" Figure 10a: The Keyfile is now saved in the ACOS5/CryptoMate token. Select the newly created Keyfile and Click "OK". You should now see your Keyfile in the Keyfiles list ( Figure 11). Figure 11: Newly Created Keyfile in the list.. Select "OK" and you will now go back to the "TrueCrypt Volume Creation Wizard" In the "TrueCrypt Volume Creation Wizard" Click "Next...". In the next Dialog you will be asked to Format your TrueCrypt Volume. Click the "Format" button and wait until the formatting process is done. The formatting process might take a while depending on the Volume size you specified in Step 7 above ( Figure 12 ). Figure 12: Your TrueCrypt Volume is now being formatted. After successfully formatting you Volume/ Your Volume is now created and ready for use ( Figure 13 ). Figure 13: Your TrueCrypt Volume is now being formatted. Click "Next" and then Click "Exit". Now that you have created an Encrypted Volume, you can now delete the file that you have generated in Step 10.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to mount / dismount a TrueCrypt volume?

  Once you have created an encrypted volume. You can now Mount / Unmount it and saved data into it. Follow the steps below in mounting / unmounting an encrypted volume. Open up the TrueCrypt main window ( Figure 1 in How to set up TrueCrypt for the ACOS5/ CryptoMage usage). In the TrueCrypt main window, click the "Select File" button. Navigate to the folder where you haved saved the file you have created in this step. Click the "Mount" button. In the "Enter Password" dialog box, enter the volume password. Also select the "Use keyfiles" options. ( Figure 14 ). Figure 14: TrueCrypt Password dialog box. In the TrueCrypt password dialog box. Click "Keyfiles..." button. The "TrueCrypt Keyfiles" will appear ( Figure 7 in How to create an encrypted volume using ACOS5/ CryptoMate). Click the "Add Token file..." button. When prompted, enter the ACOS5/CryptoMate User PIN. ( Figure 9 in How to create an encrypted volume using ACOS5/ CryptoMate) The "Select Security Token Keyfiles" will appear ( Figure 10a & 10b in How to create an encrypted volume using ACOS5/ CryptoMate). In here you can select the proper keyfiles to use for the your volume to be mounted. Select the proper Keyfiles ans Click "OK". In the "TrueCrypt Keyfiles" dialog window, select the Keyfiles that you have selected in the previous step and click "OK". The mounting process might take a while, when the mounting process is done, you can now see the mounted volume in the TrueCrypt main window ( Figure 14 ). Figure 14: Mounted TrueCrypt Volume. Once a TrueCrypt volume has been successfully mounted, you can have access to it similar to a normal volume or Hard Disk partition ( Figure 15 ). Figure 15: The Mounted TrueCrypt Volume as seen in "My Computer". To dismount a TrueCrypt Volume, Select the appropriate Volume you want to Dismount in the TrueCrypt main window. Select the "Dismount" button to remove the volume and save all its contents securely ( Figure 14 ).

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• How to create an encrypted portable volume using ACOS5 and ACR100?

  The ACR100 SIMFlash (CCID) is a reliable and cost-effective smart card reader for security-related applications. It is a USB full-speed plug-in card reader that, with the paired mass storage, enables you to do more than simply back up and manage your SIM card information on the PC. It supports most memory cards, MCU cards with T=0 and T=1 protocols, and GSM cards conforming to Spec 11.11 The ACR100 SIMFlash (CCID) also has a built-in 1-GB flash memory. Designed both to access SIM cards and for data or application storage, it is ideal for GSM solutions such as GSM management software and VoIP applications, electronic payment systems, e-commerce, home banking, transportation, and computer/network access. Designed both to access SIM cards and for data or application storage, it is ideal for GSM solutions such as GSM management software and VoIP applications, electronic payment systems, e-commerce, home banking, transportation, and computer/network access (Figure 1). Figure 1: ACR100 Reader With the the use of an ACR100, a sim-sized ACOS5 and TrueCrypt. You can create an Encrypted Portable Volume. The Encryption Key (that decrypts the Encrypted Volume) is stored in the sim-sized ACOS5 Card and the Encrypted Volume itself is stored in the ACR100. Follow the steps below to Create an Encrypted, Portable Volume: Insert your sim-sized ACOS5 card in the ACR100 Reader Slot. Insert your ACR100 (preferably ACR100F CCID) to an empty USB slot. The system should automatically detect the Removable Media and the Smart Card reader at once. Initialize the sim-sized ACOS5 card using the ACOS5 Initialization Tool. The ACOS5 Initialization Tool should detect the ACR100 Smart Card Reader as "    CCID USB Reader x" (Figure 2). Figure 2: ACR100 Reader in ACOS5 Initialization Tool After successfully initializing your ACOS5 Card. You can optionally run Admin Tool to change the Token Name. Changing the Token Name can be useful to easily identify which token belongs to a particular person. Create an Encypted Volume using the sim-sized ACOS5 inside the ACR100 Device (the ACR100 is detected as a removable media in Windows Explorer) using the steps discussed here. Once an Ecrypted Volume has been created. Create a "Traveler Disk" so that you can use your encrypted volume on any PC. To create a "Traveler Disk", run TrueCrypt and on the main menu, select "Tools" and then "Traveler Disk Setup. . ." (Figure 3). Figure 3: Creating a Traveler Disk In the "TrueCrypt Traveler Disk Setup", click the "Browse" button in the "File Settings" field. Select the ACR100 Removable Disk (Figure 4). In the "Autorun Configuration" field, select "Auto-mount TrueCrypt volume". In the "Mount Settings" filed click the "Browse. . ." button and select the Volume that you have created in Step 6 above (Figure 4). Figure 4: Travel Disk Setup Click the "Create" button to Create the "Traveler Disk" files in the ACR100 Removable Media. Take note of the warning after creating the "Traveler Disk" (Figure 5). Figure 5: Travel Disk Warning Once you have created the "Traveler Disk". Some TrueCrypt files will be copied to the ACR100 Removable Device. One of these files is an "autorun.inf" file that tells the Windows operating system to load the Encrypted volumes when an ACR100 device is plugged-in (Figure 6). Figure 6: Travel Disk Files You have to edit the autorun.inf file so that the sim-sized ACOS5 card will be utilized when decrypting the Volume that is stored in your ACR100 device (more in this later). Before Editing the autorun.inf file, copy the required ACS' PKCS Files first. Go to the directory; Program Files->Advanced Card Systems Ltd->ACOS5 SDK->Middleware->PKCS. Copy the file "acospkcs11.dll" and paste it in the ACR100 device inside the folder "TrueCrypt". Go to the system32 folder. (Click "Start"->"Run" and type in system32). Look for the files; libeay32.dll, MSVCRTD.DLL and MSVCIRTD.DLL. Copy these files and paste it in the ACR100 device inside the folder "TrueCrypt". Once you have copied all the files to the ACR100 Removable media, the TrueCrypt folder inside the ACR100 should look like the one in Figure 7. Figure 7: Travel Disk Files with the PKCS#11 middleware and its dependencies Open the autorun.inf that is stored in the ACR100 removable media. After following all the steps above, the autorun.inf file should look like the one below: [autorun] label=TrueCrypt Traveler Disk icon=TrueCryptTrueCrypt.exe action=Mount TrueCrypt volume open=TrueCryptTrueCrypt.exe /q background /m rm /v "PortableEncryptedVolume" shellstart=Start TrueCrypt Background Task shellstartcommand=TrueCryptTrueCrypt.exe shelldismount=Dismount all TrueCrypt volumes shelldismountcommand=TrueCryptTrueCrypt.exe /q /dFigure 8: The Traveler Disk autorun.inf Edit the 5th line so that it would look like the one below:[autorun] label=TrueCrypt Traveler Disk icon=TrueCryptTrueCrypt.exe action=Mount TrueCrypt volume open=TrueCryptTrueCrypt.exe /q background /m rm /tokenlib "Truecryptacospkcs11.dll" /k "token://slot/0/file/RandomKeyFile" /v "PortableEncryptedVolume" shellstart=Start TrueCrypt Background Task shellstartcommand=TrueCryptTrueCrypt.exe shelldismount=Dismount all TrueCrypt volumes shelldismountcommand=TrueCryptTrueCrypt.exe /q /dFigure 9: The Updated Traveler Disk autorun.inf. The texts in red are the added parameters. RandomKeyFile is the Keyfile used to decrypt the volume. Modify the "RandomKeyFile" to the the Keyfile that is currently stored in the sim-sized ACOS5 card. Also modify the "PortableEncryptedVolume" to the TrueCrypt Volume that you have created in Step 6. You can now plug-in the ACR100 to a system and your volume will be automatically mounted to the system.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• In MS Outlook/Outlook Express, how to set up digital certificate?

  Before Signing/Encrypting an E-Mail, MS Outlook and Outlook Express should know which Digital Certificate(s) to use for each operation. Make sure that you already had requested a Digital Certificate from a Certificate Authority before doing the steps below. To set-up the digital certificate to be used for signing/encrypting e-mails in MS Outlook/Outlook Express: Make sure that you have requested a certificate in a Certificate Authority. The e-mail address that you registered when requesting a certificate SHOULD be the same e-mail account tbe the same e-mail account that you will be using in MS Outlook/Outlook Express. After successfully requesting a digital certificate. Launch MS Outlook or Outlook Express.Navigate thru Tools->Options. Select the "Security" tab (Figure 1). Figure 1: Security Tab in MS Outlook. Click the "Settings" button In the Security tab, select "Settings". The "Change Security Settings" will be displayed. In the "Certificates and Algorithms" panel, select "Choose..." to select your Signing Certificate. Figure 2: Select "Choose..." to select your Signing Certificate.   Figure 3: A "Select Certificate" dialog should appear, choose the digital certificate you want to use for signing e-mails. If your certificate is not present in the "Select Certificate" dialog (Figure 3), then close the dialog and then re-inser), close the dialog and then re-insert the card/token to the reader/USB slot. Wait until the reader/token had stopped blinking. Repeat step 5 and see if the certificate present in your card/token can already be selected. Select the digital certificate that you want to use in "Select Certificate" dialog. If you still can't see the Digital Certificate that you have requested, then make sure that the E-Mail account you are using in MS Outlook is the same with the E-Mail account found in the "Subject Alternative Name" of the certificate (Figure 4). You can view the certificate in Admin Tool's Certificate Manager dialog. Figure 4: The Subject Alternative Name of the certificate should be the same account you are using in MS Outlook or Outlook Express. Once you have successfully selected your signing certificate, you can now choose an "Encryption Certificate". Select the second "Choose..." button in the "Change Security Settings" dialog (Figure 2). Check "Send these certificates with signed Check "Send these certificates with signed messages". If everything goes well then your Security settings should look like the one below (Figure 5) Figure 5: Security Settings for using Card/Token in your MS Outlook/Outlook Express E-mail client. Click "OK" in the "Security Settings" dialog and click "Apply" in the "Options" dialog. Close the "Options" dialog.

  https://www.acs.com.hk/en/frequently-asked-questions/1/smart-cards-smart-card-os/
• What are the key benefits of AET65 and AET62 over conventional fingerprint scanners?

  Simple fingerprint system Only AET62 / AET65 , PC and smart cards are needed No need for external hardware & software No need for super server, mega database & complicated software Undemanding system administration and maintenance More efficient and cost-effective than conventional fingerprint scanners When encrypted fingerprint templates are stored in smart cards, matching just involves checking the live fingerprint against the stored template. Hence, no expensive mega database, super server or powerful software is needed. Efficiency is enhanced due to a simpler—yet reliable—system. Users carry their fingerprint templates with them and fingerprint verification authenticates only the smart card user, neutralizing privacy concerns and security risks posed by lost or stolen cards. High-Level Security A major drawback of fingerprint technology is its vulnerability to security threats. For example, security systems may be breached through the reproduction of fingerprints left on surfaces. Smart card-fingerprint technology eliminates this kind of threat by implementing two-factor authentication, verifying something you have (smart card) and something you are (fingerprint). You can have additional security measures such as password or PIN verification—something you know—to increase the level of authentication in your application.

  https://www.acs.com.hk/en/frequently-asked-questions/4/smart-card-fingerprint-readers/
• Can the smart card reader or the fingerprint scanner of AET62 and AET65 be used independently for different applications?

  Yes, AET62 NFC Reader with Fingerprint Sensor and AET65 Smart Card Reader with Fingerprint Sensor allow separate or independent usage of the fingerprint scanner and the smart card reader, allowing applications to accept either  a smart card  OR a fingerprint.

  https://www.acs.com.hk/en/frequently-asked-questions/4/smart-card-fingerprint-readers/
• What type of fingerprint sensor is incorporated into the AET65/AET62?

  The AET65/62 both use a swipe fingerprint sensor TCS4CB and TCD50A for the algorithm chip from Authentec.

  https://www.acs.com.hk/en/frequently-asked-questions/4/smart-card-fingerprint-readers/