ID-card Utility User s Guide. Versioon 1.0

Transcription

1 ID-card Utility User s Guide Versioon 1.0 1

2 Dokumendi informatsioon Loomise kuupäev 01. oktoober 2010 Teema ID-kaardi haldusvahendi kasutusjuhend Kellele Avalik OÜ Smartlink, AS Sertifitseerimiskeskus, Riigi Infosüsteemide Arenduskeskus Koostajad Versioon 1.0 Versiooninfo 1.0 dokumendi kaasajastamine 2

3 Contents 1 Launching ID-card utility ID-card utility s user interface ID-card and personal data Downloading and saving ID-card s document picture Certificates and PIN codes Changing PIN codes Changing PIN codes using PUK code Revoking certificate use blockages Viewing certificate details and saving certificates Updating certificates configuration and viewing forwarding information Activating Mobile-ID and viewing Mobile-ID data Changing PUK code Settings and help Language selection Choosing between several ID-cards connected to the computer Preparing diagnostics report Settings Help

4 1 Launching ID-card utility Windows Select START Programs ID Card ID-card Utility or click on the ID-card utility icon on your computer desktop. Mac OS X Select Applications ID-Card Utility or click on the ID-card utility icon in Dock. Linux Select Applications Accessories ID-card Utility or launch from command line with the command qesteidutil. The ID-card utility link also appears in DigiDoc3 Client and DigiDoc3 Crypto when the signature or authentication certificate is about to expire or has expired (Image 1): Image 1 4

5 2 ID-card utility s user interface Using ID-card utility you can read its owner s personal data from the ID-card, save certificates to file, change PIN and PUK codes, unblock locked PIN1 and PIN2 codes and see statistics on used signature and authentication certificates. You can also configure the ID-card application s settings, such as ID-card software updates installation. Settings and help Actions ID-card and personal data section Action content Image 2 The user interface (Image 2) contains four main sections: ID-card and personal data section is constantly visible when the programme is running. Actions section lets you: o View and, if necessary, update certificates and change PIN codes o Configure and view the forwarding of address o Activate Mobile-ID and view its validity o Change PUK code Action content section enables you to perform your selected actions. Actionsrelated information and explanations are also displayed here. Settings and help section helps you find solutions to potential problems and configure ID-card software. Here, you can: o View the diagnostics report o Change settings o Find help to resolve problems o Change the language o Choose between several ID-cards that are connected to the computer 5

6 3 ID-card and personal data ID-card and personal data section (Image 3) contains the ID-card owner s, ID-card s and ID-card validity information. This information is constantly visible when the IDcard utility is running. Image 3 If for some reason it isn t possible to read data from the ID-card, personal data will be replaced with an error description, for example (Image 4): Image Downloading and saving ID-card s document picture The photo on your ID-card originates from the Police and Border Guard Board database. You can download your photo from there using the ID-card utility and save it. 1. Launch ID-card utility. 2. Click on the words Load picture on the ID-card utility interface (Image 5). 6

7 Image 5 3. Enter PIN1 in the dialogue window that will open (Image 6) and click OK. Image 6 By entering the PIN1 code you confirm that you are the rightful holder of the ID-card used for loading the picture. 4. The photo downloaded from Police and Border Guard Board s database is displayed in the ID-card utility (Image 7). Image 7 5. Click on the word Save below the photo in order to save it. 6. Select the folder you would like to save the photo into in the saving window that will open. 7. Here you can rename the photo and select the picture format (Image 8). Click Save and your picture has been saved. 7

8 Image 8 8

9 4 Certificates and PIN codes When you open ID-card utility, as well as when you click on the Certificates button in the actions section, you will see the pictured information on certificates (Image 9). Image 9 Among other information you will see how many times you have authenticated yourself and signed digitally with the certificates in use. If the certificate is invalid or fewer than 105 days remain until the certificate s expiry or use of the authentication or signature certificate has been blocked then it will be clearly visible next to the certificate with a problem (Image 10). The button to update certificates or revoke blocking will also be here. Image Changing PIN codes Procedure for changing the PIN1 and PIN2 code is essentially the same: you need to enter the existing code once and the new code twice. Permitted code lengths are different: PIN1 code must be within 4 12 digits and PIN2 code must be within 5 12 digits. The new code must be different from the existing code, only include numbers and must not include your date or year of birth. If the entered new code doesn t comply with these rules, you will see an error message and will get a chance to re-enter the code. 9

10 Important: if you enter an incorrect PIN1 or PIN2 code three times then the use of authentication or signature certificate will be blocked and you cannot authenticate yourself or sign digitally with your ID-card. You can revoke the blockage with your PUK code. 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2). 1 2 Image The change PIN code window will open (Image 12). Image Enter the existing PIN code. 5. Enter your new PIN code twice and click Change. 6. The PIN code will be changed. You will see a confirmation about the changed code (Image 13). Image 13 From now on, use the new PIN code that you just entered. 10

11 If you make a mistake in repeating the code, you will see the error message and can re-enter the codes Changing PIN codes using PUK code You can change PIN codes even if you have lost your old PIN codes. In that case you will need your PUK code to change the PIN codes. 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2). 3. In the PIN code change window that will open, (Image 14) select Change PIN code using PUK code. Image A new window for changing the PIN code will open (Image 15). Image Enter the PUK code. 6. Enter the new PIN code twice and click Change. 7. The PIN code will be changed and you will see a confirmation of the code change (Image 16). 11

12 Image 16 From now on, use the new PIN code that you just entered. You can also initiate PIN code change using PUK code in the PUK code section of the user interface (Image 17). Image Revoking certificate use blockages You will see a message like this next to the blocked certificate (Image 18). Image Launch ID-card utility and click on the Certificates button in the actions section. 2. You will see the details of the certificate that is blocked for use in the certificates section of the user interface window, click Revoke blocking. 3. The PIN code blockage revocation window will open (Image 19). Image 19 12

13 4. Enter PUK code. 5. Enter new PIN code twice and click Change. 6. The certificate use blockage will be revoked, PIN code will be changed and relevant message displayed (Image 20). Image 20 From now on, use the new PIN code that you just entered. If you make a mistake in entering the code, you will see the error description and can re-enter the codes. If you enter your PUK code incorrectly three times it will also be locked. Then you can no longer use your card, you need to go to a customer service centre where you will get a new code envelope for your card. You can also get help from the customer service centre if you have lost your old code envelope and have forgotten all of your codes. You will see the list of customer service centres online from Viewing certificate details and saving certificates In order to view all the data on certificates and to save certificates, do the following: 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. You will see the certificates key data (Image 21). 3. Click on the View details button below the authentication certificate (Image 21, 1) or signature certificate (Image 21, 2). 1 2 Image The certificate details window will open (Image 22 and Image 23). On its two tabs you can view technical certificate information. 13

14 The certificate display method depends on your operating system but the contents are the same. 5. Authentication certificate details (Image 22). Image Signature certificate details (Image 23). Image Go to the Details tab to save the certificate. 8. Click the Save button. 14

15 9. Select the folder you would like to save the certificate into in the saving dialogue that will open. You can also rename the file here and set the file format (Image 24). Image Click the Save button. If a certificate file of the same name already exists in the destination folder then it will prompt you whether to overwrite it or not. 4.4 Updating certificates The ID-card utility only enables you to update certificates if they are expired or there is fewer than 105 days until expiry. You cannot update certificates on an expired IDcard. Apply for a new ID-card from the Police and Border Guard Board. Your computer must have a working internet connection in order to update certificates. Important! Removing the ID-card from the card reader before the certificate updating process is complete may damage the ID-card s electronic part. Don t terminate the updating process before you see a confirmation on the success or failure of the update. 1. Launch ID-card utility and go to the Certificates section. 2. If certificates are expired or are about to expire (105 days until expiry), the button Update certificate will appear in the certificate s general details section (Image 25). Image A recommendation to close all applications using the ID-card will be displayed. Close the mentioned applications and confirm your request to continue updating certificates by clicking Yes (Image 26). 15

16 Image Enter the PIN1 code in the dialogue window that will open (Image 27). Image New keys will be generated as certificates are updated, certificate requests are submitted, certificates are loaded onto the ID-card and finally new certificates will be activated. You will see information on the ongoing process on your screen, it will take 3 10 minutes. 6. Once updating has been completed, you will get a message that Certificate update was successful and you will see new validity data in the certificate general details section. You can also update certificates online by going to and at customer service centres, the list of which is available online at 16

17 configuration and viewing forwarding information You can use ID-card utility to forward to one other address only if you have no valid forwarding already set up for address. In case you have a valid forwarding already set up for , you can view the addresses where your s are being forwarded using ID-card utility. You can edit and add forwarding information in the State Portal eesti.ee. 1. Launch ID-card utility and click on button in the actions section (Image 28, 1). 1 2 Image Click the button Check settings (Image 28, 2). 3. Enter your PIN1 in the window that opens and click OK (Image 29). Image The settings window will open. If s have already been forwarded, you will see your official addresses and addresses where has been forwarded to, instead of the settings window (Image 30). You can edit your forwarding information at the State Portal eesti.ee. 17

18 Image Enter the address where you would like s to be forwarded and click . Image 31 Your address must be in the format If you enter an address in the wrong format then an error message will be displayed and you can re-enter your address. 6. Enter PIN1 in the dialogue window that opens and click OK (Image 32). Image A message will be displayed that a forwarding address activation key has been sent to the address you entered. 8. You will receive an to the address you just entered, containing a link and code for activating the address along with instructions on how to do it. You must log on to the State Portal eesti.ee in order to activate the forwarding address and confirm your forwarding address. o If you entered an address that you have previously used in the eesti.ee system then active settings will be loaded automatically. You will receive an containing a message about the successful forwarding and you will not have to confirm your forwarding address at the State Portal eesti.ee. 18

19 6 Activating Mobile-ID and viewing Mobile-ID data In the ID-card utility s Mobile-ID section you can view your Mobile-ID details. You can also activate the Mobile-ID service if you have received a new supported SIM card from your mobile provider. You will find more information on id.ee. 1. Launch ID-card utility and click on the Mobile-ID button in the actions section (Image 33, 1). 2. The Mobile-ID settings window will open. 1 Image Click on the button Check Mobile-ID status (Image 33, 2). 4. Enter your PIN1 code in the dialogue window that opens and click OK (Image 34). Image 34 If your Mobile-ID service has been activated, you will see the status of your Mobile-ID certificates. Image 35 19

20 If you are not a Mobile-ID service user, you will get the following message (Image 36). Image If your Mobile-ID service has not been activated, you can activate the Mobile- ID service by clicking on the button Activate Mobile-ID service (Image 37). You will be forwarded to the Certification Centre s (SK) website in order to activate Mobile-ID. Image 37 20

21 7 Changing PUK code You will receive your PUK code in a code envelope together with your new ID-card from the customer service centre. When you go to the PUK code section of ID-card utility then you will see an explanation of what PUK code is (Image 38) and you can change the PUK code. You can also change PIN codes using PUK code. Image Launch ID-card utility and click on the PUK code button in the actions section. 2. Click on Change PUK in the PUK code window that opens. 3. The change PUK code window will open (Image 39). Image Enter your existing PUK once and your new PUK code twice, then click Change. The new code must be different from your old code, must be 8 12 digits long and must not include your date or year of birth. 5. The PUK code is changed and you will see a confirmation about the code change (Image 40). Image 40 21

22 From now on, use the new PUK code that you just entered. If you enter the code incorrectly, you will see an error description and can re-enter the codes. 22

23 8 Settings and help 8.1 Language selection In order to change the language: 1. Use your mouse to go to the language selection menu (Image 41). Image Click on your preferred language in the opening dropdown menu. 3. The selected language will appear in the language selection window and the application s user interface will be in another language. 8.2 Choosing between several ID-cards connected to the computer The ID-card selection menu will only appear on the menu bar if several card readers with ID-cards have been connected to the computer. 1. Click on the ID-card selection menu on the menu bar (Image 42). 2. A dropdown menu of all ID-cards that are connected will open. Image Click on your own ID-card number. 4. The application interface will display the selected ID-card s card details and personal details. 8.3 Preparing diagnostics report The diagnostics window is the main tool for resolving problems that may occur in installation and use of ID-card software. The diagnostics report is primarily meant to be sent to ID-card s user support, however, more experienced users may use it to find information on resolving easier problems: information on the card readers connected to the computer, etc. 1. Launch ID-card utility. 2. Click on Diagnostics in the settings and help section of the ID-card utility (Image 43). Image 43 23

24 3. The software collects information on your operating system, basic software versions, card reader drivers and checks ID-card-related functions: card authentication, reading the certificate list, reading the personal data file, etc. 4. A window will open with the pictured diagnostics report (Image 44). Image If you cannot get your ID-card working on your own, save the diagnostics report into a file by clicking Save. 6. Select the destination folder in the saving dialogue that opens. The file containing the diagnostics report is saved in.txt format. 7. the report together with the error description to abi@id.ee. You will also see the installed software s version number in the diagnostics report. 8.4 Settings Click on the Settings button in the ID-card utility s settings and help section (Image 45). Image 45 In the ID-card utility s settings window you can check ID-card software updates (In MAC OS X) (Image 46). 24

25 Image Help Click on the Help button in the settings and help section of ID-card utility (Image 477). Image 47 The ID-card utility user s guide will open along with a link to the ID-card user support website. 25