ID-card Utility User s Guide Versioon 1.0 1
Dokumendi informatsioon Loomise kuupäev 01. oktoober 2010 Teema ID-kaardi haldusvahendi kasutusjuhend Kellele Avalik OÜ Smartlink, AS Sertifitseerimiskeskus, Riigi Infosüsteemide Arenduskeskus Koostajad Versioon 1.0 Versiooninfo 1.0 dokumendi kaasajastamine 2
Contents 1 Launching ID-card utility... 4 2 ID-card utility s user interface... 5 3 ID-card and personal data... 6 3.1 Downloading and saving ID-card s document picture... 6 4 Certificates and PIN codes... 9 4.1 Changing PIN codes... 9 4.1.1 Changing PIN codes using PUK code... 11 4.2 Revoking certificate use blockages... 12 4.3 Viewing certificate details and saving certificates... 13 4.4 Updating certificates... 15 5 @eesti.ee email configuration and viewing forwarding information... 17 6 Activating Mobile-ID and viewing Mobile-ID data... 19 7 Changing PUK code... 21 8 Settings and help... 23 8.1 Language selection... 23 8.2 Choosing between several ID-cards connected to the computer... 23 8.3 Preparing diagnostics report... 23 8.4 Settings... 24 8.5 Help... 25 3
1 Launching ID-card utility Windows Select START Programs ID Card ID-card Utility or click on the ID-card utility icon on your computer desktop. Mac OS X Select Applications ID-Card Utility or click on the ID-card utility icon in Dock. Linux Select Applications Accessories ID-card Utility or launch from command line with the command qesteidutil. The ID-card utility link also appears in DigiDoc3 Client and DigiDoc3 Crypto when the signature or authentication certificate is about to expire or has expired (Image 1): Image 1 4
2 ID-card utility s user interface Using ID-card utility you can read its owner s personal data from the ID-card, save certificates to file, change PIN and PUK codes, unblock locked PIN1 and PIN2 codes and see statistics on used signature and authentication certificates. You can also configure the ID-card application s settings, such as ID-card software updates installation. Settings and help Actions ID-card and personal data section Action content Image 2 The user interface (Image 2) contains four main sections: ID-card and personal data section is constantly visible when the programme is running. Actions section lets you: o View and, if necessary, update certificates and change PIN codes o Configure and view the forwarding of your @eesti.ee email address o Activate Mobile-ID and view its validity o Change PUK code Action content section enables you to perform your selected actions. Actionsrelated information and explanations are also displayed here. Settings and help section helps you find solutions to potential problems and configure ID-card software. Here, you can: o View the diagnostics report o Change settings o Find help to resolve problems o Change the language o Choose between several ID-cards that are connected to the computer 5
3 ID-card and personal data ID-card and personal data section (Image 3) contains the ID-card owner s, ID-card s and ID-card validity information. This information is constantly visible when the IDcard utility is running. Image 3 If for some reason it isn t possible to read data from the ID-card, personal data will be replaced with an error description, for example (Image 4): Image 4 3.1 Downloading and saving ID-card s document picture The photo on your ID-card originates from the Police and Border Guard Board database. You can download your photo from there using the ID-card utility and save it. 1. Launch ID-card utility. 2. Click on the words Load picture on the ID-card utility interface (Image 5). 6
Image 5 3. Enter PIN1 in the dialogue window that will open (Image 6) and click OK. Image 6 By entering the PIN1 code you confirm that you are the rightful holder of the ID-card used for loading the picture. 4. The photo downloaded from Police and Border Guard Board s database is displayed in the ID-card utility (Image 7). Image 7 5. Click on the word Save below the photo in order to save it. 6. Select the folder you would like to save the photo into in the saving window that will open. 7. Here you can rename the photo and select the picture format (Image 8). Click Save and your picture has been saved. 7
Image 8 8
4 Certificates and PIN codes When you open ID-card utility, as well as when you click on the Certificates button in the actions section, you will see the pictured information on certificates (Image 9). Image 9 Among other information you will see how many times you have authenticated yourself and signed digitally with the certificates in use. If the certificate is invalid or fewer than 105 days remain until the certificate s expiry or use of the authentication or signature certificate has been blocked then it will be clearly visible next to the certificate with a problem (Image 10). The button to update certificates or revoke blocking will also be here. Image 10 4.1 Changing PIN codes Procedure for changing the PIN1 and PIN2 code is essentially the same: you need to enter the existing code once and the new code twice. Permitted code lengths are different: PIN1 code must be within 4 12 digits and PIN2 code must be within 5 12 digits. The new code must be different from the existing code, only include numbers and must not include your date or year of birth. If the entered new code doesn t comply with these rules, you will see an error message and will get a chance to re-enter the code. 9
Important: if you enter an incorrect PIN1 or PIN2 code three times then the use of authentication or signature certificate will be blocked and you cannot authenticate yourself or sign digitally with your ID-card. You can revoke the blockage with your PUK code. 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2). 1 2 Image 11 3. The change PIN code window will open (Image 12). Image 12 4. Enter the existing PIN code. 5. Enter your new PIN code twice and click Change. 6. The PIN code will be changed. You will see a confirmation about the changed code (Image 13). Image 13 From now on, use the new PIN code that you just entered. 10
If you make a mistake in repeating the code, you will see the error message and can re-enter the codes. 4.1.1 Changing PIN codes using PUK code You can change PIN codes even if you have lost your old PIN codes. In that case you will need your PUK code to change the PIN codes. 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2). 3. In the PIN code change window that will open, (Image 14) select Change PIN code using PUK code. Image 14 4. A new window for changing the PIN code will open (Image 15). Image 15 5. Enter the PUK code. 6. Enter the new PIN code twice and click Change. 7. The PIN code will be changed and you will see a confirmation of the code change (Image 16). 11
Image 16 From now on, use the new PIN code that you just entered. You can also initiate PIN code change using PUK code in the PUK code section of the user interface (Image 17). Image 17 4.2 Revoking certificate use blockages You will see a message like this next to the blocked certificate (Image 18). Image 18 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. You will see the details of the certificate that is blocked for use in the certificates section of the user interface window, click Revoke blocking. 3. The PIN code blockage revocation window will open (Image 19). Image 19 12
4. Enter PUK code. 5. Enter new PIN code twice and click Change. 6. The certificate use blockage will be revoked, PIN code will be changed and relevant message displayed (Image 20). Image 20 From now on, use the new PIN code that you just entered. If you make a mistake in entering the code, you will see the error description and can re-enter the codes. If you enter your PUK code incorrectly three times it will also be locked. Then you can no longer use your card, you need to go to a customer service centre where you will get a new code envelope for your card. You can also get help from the customer service centre if you have lost your old code envelope and have forgotten all of your codes. You will see the list of customer service centres online from http://www.sk.ee/kontorid. 4.3 Viewing certificate details and saving certificates In order to view all the data on certificates and to save certificates, do the following: 1. Launch ID-card utility and click on the Certificates button in the actions section. 2. You will see the certificates key data (Image 21). 3. Click on the View details button below the authentication certificate (Image 21, 1) or signature certificate (Image 21, 2). 1 2 Image 21 4. The certificate details window will open (Image 22 and Image 23). On its two tabs you can view technical certificate information. 13
The certificate display method depends on your operating system but the contents are the same. 5. Authentication certificate details (Image 22). Image 22 6. Signature certificate details (Image 23). Image 23 7. Go to the Details tab to save the certificate. 8. Click the Save button. 14
9. Select the folder you would like to save the certificate into in the saving dialogue that will open. You can also rename the file here and set the file format (Image 24). Image 24 10. Click the Save button. If a certificate file of the same name already exists in the destination folder then it will prompt you whether to overwrite it or not. 4.4 Updating certificates The ID-card utility only enables you to update certificates if they are expired or there is fewer than 105 days until expiry. You cannot update certificates on an expired IDcard. Apply for a new ID-card from the Police and Border Guard Board. Your computer must have a working internet connection in order to update certificates. Important! Removing the ID-card from the card reader before the certificate updating process is complete may damage the ID-card s electronic part. Don t terminate the updating process before you see a confirmation on the success or failure of the update. 1. Launch ID-card utility and go to the Certificates section. 2. If certificates are expired or are about to expire (105 days until expiry), the button Update certificate will appear in the certificate s general details section (Image 25). Image 25 3. A recommendation to close all applications using the ID-card will be displayed. Close the mentioned applications and confirm your request to continue updating certificates by clicking Yes (Image 26). 15
Image 26 4. Enter the PIN1 code in the dialogue window that will open (Image 27). Image 27 5. New keys will be generated as certificates are updated, certificate requests are submitted, certificates are loaded onto the ID-card and finally new certificates will be activated. You will see information on the ongoing process on your screen, it will take 3 10 minutes. 6. Once updating has been completed, you will get a message that Certificate update was successful and you will see new validity data in the certificate general details section. You can also update certificates online by going to http://www.sk.ee/id-kontroll and at customer service centres, the list of which is available online at http://www.sk.ee/kontorid. 16
5 @eesti.ee email configuration and viewing forwarding information You can use ID-card utility to forward your @eesti.ee email to one other email address only if you have no valid forwarding already set up for your @eesti.ee email address. In case you have a valid forwarding already set up for your @eesti.ee email, you can view the addresses where your emails are being forwarded using ID-card utility. You can edit and add forwarding information in the State Portal eesti.ee. 1. Launch ID-card utility and click on the @eesti.ee e-mail button in the actions section (Image 28, 1). 1 2 Image 28 2. Click the button Check your @eesti.ee email settings (Image 28, 2). 3. Enter your PIN1 in the window that opens and click OK (Image 29). Image 29 4. The email settings window will open. If your @eesti.ee emails have already been forwarded, you will see your official email addresses and addresses where email has been forwarded to, instead of the email settings window (Image 30). You can edit your forwarding information at the State Portal eesti.ee. 17
Image 30 5. Enter the email address where you would like your @eesti.ee emails to be forwarded and click Activate @eesti.ee email. Image 31 Your email address must be in the format nimi@domeen.xx. If you enter an email address in the wrong format then an error message will be displayed and you can re-enter your email address. 6. Enter PIN1 in the dialogue window that opens and click OK (Image 32). Image 32 7. A message will be displayed that a forwarding address activation key has been sent to the email address you entered. 8. You will receive an email to the address you just entered, containing a link and code for activating the email address along with instructions on how to do it. You must log on to the State Portal eesti.ee in order to activate the forwarding address and confirm your email forwarding address. o If you entered an email address that you have previously used in the eesti.ee system then active email settings will be loaded automatically. You will receive an email containing a message about the successful forwarding and you will not have to confirm your forwarding address at the State Portal eesti.ee. 18
6 Activating Mobile-ID and viewing Mobile-ID data In the ID-card utility s Mobile-ID section you can view your Mobile-ID details. You can also activate the Mobile-ID service if you have received a new supported SIM card from your mobile provider. You will find more information on id.ee. 1. Launch ID-card utility and click on the Mobile-ID button in the actions section (Image 33, 1). 2. The Mobile-ID settings window will open. 1 Image 33 2 3. Click on the button Check Mobile-ID status (Image 33, 2). 4. Enter your PIN1 code in the dialogue window that opens and click OK (Image 34). Image 34 If your Mobile-ID service has been activated, you will see the status of your Mobile-ID certificates. Image 35 19
If you are not a Mobile-ID service user, you will get the following message (Image 36). Image 36 5. If your Mobile-ID service has not been activated, you can activate the Mobile- ID service by clicking on the button Activate Mobile-ID service (Image 37). You will be forwarded to the Certification Centre s (SK) website www.sk.ee/midaktiveerimine in order to activate Mobile-ID. Image 37 20
7 Changing PUK code You will receive your PUK code in a code envelope together with your new ID-card from the customer service centre. When you go to the PUK code section of ID-card utility then you will see an explanation of what PUK code is (Image 38) and you can change the PUK code. You can also change PIN codes using PUK code. Image 38 1. Launch ID-card utility and click on the PUK code button in the actions section. 2. Click on Change PUK in the PUK code window that opens. 3. The change PUK code window will open (Image 39). Image 39 4. Enter your existing PUK once and your new PUK code twice, then click Change. The new code must be different from your old code, must be 8 12 digits long and must not include your date or year of birth. 5. The PUK code is changed and you will see a confirmation about the code change (Image 40). Image 40 21
From now on, use the new PUK code that you just entered. If you enter the code incorrectly, you will see an error description and can re-enter the codes. 22
8 Settings and help 8.1 Language selection In order to change the language: 1. Use your mouse to go to the language selection menu (Image 41). Image 41 2. Click on your preferred language in the opening dropdown menu. 3. The selected language will appear in the language selection window and the application s user interface will be in another language. 8.2 Choosing between several ID-cards connected to the computer The ID-card selection menu will only appear on the menu bar if several card readers with ID-cards have been connected to the computer. 1. Click on the ID-card selection menu on the menu bar (Image 42). 2. A dropdown menu of all ID-cards that are connected will open. Image 42 3. Click on your own ID-card number. 4. The application interface will display the selected ID-card s card details and personal details. 8.3 Preparing diagnostics report The diagnostics window is the main tool for resolving problems that may occur in installation and use of ID-card software. The diagnostics report is primarily meant to be sent to ID-card s user support, however, more experienced users may use it to find information on resolving easier problems: information on the card readers connected to the computer, etc. 1. Launch ID-card utility. 2. Click on Diagnostics in the settings and help section of the ID-card utility (Image 43). Image 43 23
3. The software collects information on your operating system, basic software versions, card reader drivers and checks ID-card-related functions: card authentication, reading the certificate list, reading the personal data file, etc. 4. A window will open with the pictured diagnostics report (Image 44). Image 44 5. If you cannot get your ID-card working on your own, save the diagnostics report into a file by clicking Save. 6. Select the destination folder in the saving dialogue that opens. The file containing the diagnostics report is saved in.txt format. 7. Email the report together with the error description to abi@id.ee. You will also see the installed software s version number in the diagnostics report. 8.4 Settings Click on the Settings button in the ID-card utility s settings and help section (Image 45). Image 45 In the ID-card utility s settings window you can check ID-card software updates (In MAC OS X) (Image 46). 24
Image 46 8.5 Help Click on the Help button in the settings and help section of ID-card utility (Image 477). Image 47 The ID-card utility user s guide will open along with a link to the ID-card user support website. 25