IDGo 800 Minidriver for Windows. User Guide

Transcription

1 IDGo 800 Minidriver for Windows User Guide

2 All information herein is either public information or is the property of and owned solely by Gemalto NV. and/or its subsidiaries who shall have and keep the sole right to file patent applications or any other kind of intellectual property protection in connection with such information. Nothing herein shall be construed as implying or granting to you any rights, by license, grant or otherwise, under any intellectual and/or industrial property rights of or concerning any of Gemalto s information. This document can be used for informational, non-commercial, internal and personal use only provided that: The copyright notice below, the confidentiality and proprietary legend and this full warning notice appear in all copies. This document shall not be posted on any network computer or broadcast in any media and no modification of any part of this document shall be made. Use for any other purpose is expressly prohibited and may result in severe civil and criminal liabilities. The information contained in this document is provided AS IS without any warranty of any kind. Unless otherwise expressly agreed in writing, Gemalto makes no warranty as to the value or accuracy of information contained herein. The document could include technical inaccuracies or typographical errors. Changes are periodically added to the information herein. Furthermore, Gemalto reserves the right to make any change or improvement in the specifications data, information, and the like described herein, at any time. Gemalto hereby disclaims all warranties and conditions with regard to the information contained herein, including all implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. In no event shall Gemalto be liable, whether in contract, tort or otherwise, for any indirect, special or consequential damages or any damages whatsoever including but not limited to damages resulting from loss of use, data, profits, revenues, or customers, arising out of or in connection with the use or performance of information contained in this document. Gemalto does not and shall not warrant that this product will be resistant to all possible attacks and shall not incur, and disclaims, any liability in this respect. Even if each product is compliant with current security standards in force on the date of their design, security mechanisms' resistance necessarily evolves according to the state of the art in security and notably under the emergence of new attacks. Under no circumstances, shall Gemalto be held liable for any third party actions and in particular in case of any successful attack against systems or equipment incorporating Gemalto products. Gemalto disclaims any liability with respect to security for direct, indirect, incidental or consequential damages that result from any use of its products. It is further stressed that independent testing and verification by the person using the product is particularly encouraged, especially in any application in which defective, incorrect or insecure functioning could result in damage to persons or property, denial of service or loss of privacy. Copyright Gemalto N.V. All rights reserved. Gemalto and the Gemalto logo are trademarks and service marks of Gemalto N.V. and/or its subsidiaries and are registered in certain countries. All other trademarks and service marks, whether registered or not in specific countries, are the property of their respective owners. GEMALTO, B.P. 100, GEMENOS CEDEX, FRANCE. Tel: +33 (0) Fax: +33 (0) Printed in France. Document Reference: D A February 8,

3 Preface iv Who Should Read This Book iv Documentation iv Conventions v Additional Resources v For Further Help v If You Find an Error v Chapter 1 Overview 1 What is the IDGo 800 Minidriver? What Can It Do? How is it Installed? System Requirements Installing the Minidriver Using Windows Update Installing the Minidriver Using the.msi File Uninstalling the Minidriver Contents List of Figures Figure 1 - Microsoft Update Catalog Figure 2 - Microsoft Update Catalog View Basket Figure 3 - MU Catalog - Download Options Page

4 This document introduces you to the IDGo 800 Minidriver for IDPrime smart cards and provides information about the installation, use and integration of this library. Who Should Read This Book This guide is intended for system integrators who want to integrate the software with other applications and for end-users. It is assumed that users are familiar with IDPrime smart cards/tokens and smart card reader technology, as well as computer hardware and software. It is assumed that the user of the IDGo 800 Minidriver has: an understanding of the basic operations in a computer OS. administrative privileges for the computer on which the IDGo 800 Minidriver will be installed. Preface Documentation The IDGo 800 Minidriver is delivered with the following documentation: IDGo 800 Minidriver for Windows User Guide (this document) - IDGo 800 MD Windows User Guide.pdf. A Release Notes file. This contains any relevant information about the installation and the complete version history. The IDGo 800, has two other components which can optionally be installed; Each of these has its own user guide: IDGo 800 PKCS#11 Library for Windows User Guide - IDGo 800 PKCS11_Lib_Windows_User_Guide.pdf. IDGo 800 Credential Provider for Windows User Guide - IDGo 800 Cred Prov Windows User Guide.pdf. For system integrators, there is also: IDGo 800 Middleware Integration Guide - IDGo 800 Middleware_Windows_Integration_Guide.pdf.

5 Preface v Conventions Where this document uses the generic term IDPrime cards, this should be taken to mean all of the following: IDPrime MD 830 IDPrime MD 3810 The IDPrime.NET range If a section of the document differs from one card to another, the specific differences are mentioned. Additional Resources For further information or more detailed use of the IDGo 800 Minidriver, additional resources and documentation are available on the following web site: For Further Help Further help is provided in the Gemalto Self Support portal at support.gemalto.com. You can find information on how to contact your Gemalto representative by clicking Contact Us at the Gemalto web site, If You Find an Error Gemalto makes every effort to prevent errors in its documentation. However, if you discover any errors or inaccuracies in this document, please inform your Gemalto representative. Please quote the document reference number found at the bottom of the legal notice on the inside front cover.

6 1 Overview What is the IDGo 800 Minidriver? The minidriver is one of the three components that make up Gemalto s IDGo 800 Middleware. The three components are: The Minidriver. This is a Gemalto proprietary read/write minidriver that is compliant with the Microsoft Minidriver V7 specification. The minidriver is called axaltocm.dll (or axaltocm64.dll in the case of the 64-bit version), so it overwrites Gemalto s IDPrime.NET minidriver if that is already installed on the same computer (since it too is called axaltocm.dll). The IDGo 800 Minidriver supports both IDPrime MD and IDPrime.NET smart cards. A PKCS#11 security module. This is compliant with v2.20 of the PKCS#11 specification. It supports multiple PINs and elliptic curve algorithms. A Gemalto proprietary Credential Provider (CP). This supports the loading and unblocking of multiple PINs and multiple PIN policies. It is available only for PCs running Windows 7 or later. If you do not require multiple PIN support, you can use the native Microsoft CP instead. Note: You can install any combination of the three IDGo 800 components, but bear in mind that the credential provider requires the minidriver. It must be the last component to be installed. The IDGo 800 Minidriver is designed to be used with the following Gemalto IDPrime smart cards: IDPrime MD 830 IDPrime MD 3810 The entire IDPrime.NET range Where this document uses the term IDPrime cards, this should be taken to mean all of the previously mentioned cards. If a section of the document differs from one card to another, the specific differences are mentioned. For information about the architecture of the IDGo 800 Minidriver, please refer to the IDGO 800 Middleware Integration Guide.

7 Overview 2 What Can It Do? It is the minidriver that enables you to use IDPrime cards to perform tasks such as: Smart Card logon (Lock and unlock the computer) SSL authentication (logging onto web sites securely) Sign s and verify signatures Encrypt and decrypt s Any other tasks proposed by an application that is compliant with Microsoft Base CSP. The Minidriver is compliant with v7.07 of the Microsoft Smart Card Minidriver Specification. For detailed information about the functions of the Microsoft specification that are supported by IDGo 800, please refer to the IDGO 800 Middleware Integration Guide. How is it Installed? The minidriver dll needs to be installed manually if you are using any of the following operating systems: Windows XP Windows Server 2003 Windows Vista Windows Server 2008 For details on how to do this, please refer to Installing the Minidriver Using the.msi File on page 4. For Windows 7 and later, the dll is installed automatically by the Windows plug and play feature when you insert the smart card. However if your administrator has blocked this function on your computer, you will need to install it using Windows Update or by using the.msi file provided by Gemalto. System Requirements Smart Card Reader Driver Installing the minidriver does not install the drivers for the smart card readers. Make sure you have installed them before installing the minidriver. You can find the drivers for Gemalto s smart card readers at To know which driver your reader requires, please refer to the Readers section of the Release Notes. Other IDGo 800 Components If you are going to install IDGo 800 Credential Provider, make sure that you install the IDGo 800 Minidriver first, as the CP needs the MD in order to work. There is no such restriction when installing the IDGo 800 PKCS#11 API.

8 3 IDGo 800 Minidriver for Windows User Guide Installing the Minidriver Using Windows Update To install the minidriver dll using Windows Update: 1 Click the following link to the Microsoft Update (MU) Catalog. If you are prompted to install the MU Catalog ActiveX Control, or MU Catalog addon, do so by following the displayed instructions. The catalog displays the list of Gemalto drivers for IDPrime smart cards as shown in Figure 1. Note: The version number in Figure 1 is an example and will change as the minidriver evolves. Figure 1 - Microsoft Update Catalog 2 Click Add on the latest version of the minidriver dll. The dll is added to the basket. The Add button changes to a Remove button. 3 Click View Basket at the top right of the window. This displays the basket as shown: Figure 2 - Microsoft Update Catalog View Basket 4 Click Download. A Download Options page appears like the one shown in Figure 3. Figure 3 - MU Catalog - Download Options Page

9 Overview 4 5 Either enter the path of the location where you want to download the driver or use the Browse button to navigate to it. Note: If User Account Control is activated, a message may appear asking if you want to allow a program from an unknown publisher to make changes to the computer. Click Yes. 6 When you have done this, the Continue button appears. Click it. 7 The progress column indicates the status of the download. Wait until the Progress column displays Done, then click Close. 8 In Windows Explorer, go to the location where you downloaded the minidriver dll. It appears as a zipped file with the.cab suffix. 9 Double-click the.cab file to open it. 10 Unzip the contents to a temporary directory on your computer. 11 Right-click the Gemalto.MiniDriver.IDPrime.inf file and choose Install. You will be informed that you need to restart your computer to apply the changes. 12 Click Restart Now. The installation is done. Installing the Minidriver Using the.msi File To install the Minidriver Using the.msi File: 1 Double-click the IDGo800_Minidriver_XX.msi file, where XX is 32 or 64 according to the version you want to install. This starts the installation wizard. 2 When the Welcome dialog box appears, click Next to continue. 3 When the License Agreement dialog box appears, read and accept the terms and click Next to continue. 4 When the Ready to Install the Program window appears, click Install. 5 If User Account Control is activated, a message appears asking if you want to allow a program from an unknown publisher to make changes to the computer. Click Yes. 6 A message appears telling you that you will need to reboot the computer after installation. Click OK. 7 A progress bar displays during the installation. 8 When the completed window appears, click Finish. 9 Reboot your computer if prompted. Uninstalling the Minidriver You do not need to uninstall the Minidriver as this happens automatically when you install a new version.