Document Outline

• About this Guide
  • 1.1 Purpose
  • 1.2 Audience
  • 1.3 Scope of Document
  • 1.4 Typographic Conventions
• 2.0 Introduction
  • 2.1 Product Overview
  • 2.2 Installation and Upgrades
  • 2.3 Supported Deployment Modes
    • 2.3.1 Standalone Mode with Mini Driver
    • 2.3.2 Standalone Mode with Advanced Middleware
    • 2.3.3 Managed Mode with Microsoft Forefront Identity Manager (FIM)
    • 2.3.4 Managed Mode with HID Global naviGO
    • 2.3.5 Managed Mode with HID Global 4TRESS AAA Server
    • 2.3.6 Managed Mode with HID Global ActivID CMS and ActivID CMS Appliance
  • 2.4 Choosing Smart Card Middleware
    • 2.4.1 Services Available with Both Mini Driver and ActivClient
    • 2.4.2 Additional Services Available with ActivClient
• 3.0 Installing the Mini Driver
  • 3.1 Mini Driver System Requirements
  • 3.2 Automatic Download
  • 3.3 Manually Download and Install the Mini Driver
  • 3.4 Uninstall the Mini Driver
• 4.0 Managing a Smart Card with the Mini Driver
  • 4.1 Prerequisites
  • 4.2 Issuing a Smart Card using Microsoft Certificate Authority
    • 4.2.1 Enroll a Smart Card for a User with Internet Explorer
    • 4.2.2 Enroll a Smart Card for a User with MMC
  • 4.3 Importing Certificates Using Microsoft Windows
    • 4.3.1 Download a PKI Certificate with Internet Explorer
    • 4.3.2 Download a PKI Certificate with MMC
  • 4.4 Changing the PIN Code Using Microsoft Windows
    • 4.4.1 Change the PIN Code on Microsoft Windows Vista, Windows 7 or Windows 8
    • 4.4.2 Change the PIN Code on Microsoft Windows XP
  • 4.5 Unlocking the PIN Code Using Microsoft Windows
    • 4.5.1 Unlock the PIN Code on Microsoft Windows Vista, Windows 7 or Windows 8
    • 4.5.2 Unlock the PIN Code on Microsoft Windows XP
• 5.0 Managing a Smart Card using Microsoft Forefront Identify Manager (FIM)
  • 5.1 Prerequisites
  • 5.2 Initialize a Permanent Card
  • 5.3 Change the PIN Code Using FIM
  • 5.4 Unlocking the Smart Card Using FIM - Online
    • 5.4.1 Unlock the Smart Card as an Administrator
    • 5.4.2 Unlock the Smart Card as an End User
    • 5.4.3 Using the Unblock Wizard
  • 5.5 Unlocking the Smart Card Using FIM - Offline
    • 5.5.1 Verify that the Offline Unlock Policy is Enabled
    • 5.5.2 Launch Offline Unlock Request
  • 5.6 Reset the Smart Card Using FIM
• 6.0 Managing a Smart Card with ActivClient
  • 6.1 Issue a Smart Card with ActivClient
  • 6.2 Change the PIN Code with ActivClient
  • 6.3 Unlock the Smart Card Using ActivClient
  • 6.4 Reset the Smart Card Using ActivClient
  • 6.5 Importing Certificates Using ActivClient
    • 6.5.1 Request a Certificate
    • 6.5.2 Import the Certificate
• 7.0 Managing a Smart Card with naviGO
  • 7.1 Prerequisites
  • 7.2 Initialize a Smart Card
• 8.0 Managing a Smart Card with 4TRESS AAA Server
  • 8.1 Issue a Smart Card Using 4TRESS AAA Server
  • 8.2 Change the PIN Code
  • 8.3 Unlock the Smart Card with 4TRESS AAA Server
    • 8.3.1 Unlock the Smart Card with the Administration Console
    • 8.3.2 Unlock the Smart Card with the Web Help Desk
    • 8.3.3 Unlock the Smart Card with the Web Self Help Desk
  • 8.4 Importing Certificates
• 9.0 Using the Smart Card
  • 9.1 Logging On to Microsoft Windows
  • 9.2 Authenticating to Secure Websites
  • 9.3 Sending and Reading Secure Emails
    • 9.3.1 Send Signed/Encrypted Emails
    • 9.3.2 Read Signed/Encrypted Emails
  • 9.4 Encrypting and Decrypting Files
    • 9.4.1 Encrypt a File or Folder
    • 9.4.2 Decrypt a File or Folder
• 10.0 Troubleshooting
  • 10.1 ActiveX Error During Certificate Requests
  • 10.2 Smart Card Enrollment Errors
    • 10.2.1 Wrong CSP
    • 10.2.2 Key Length Setting
    • 10.2.3 Enrollment Rights
• 11.0 Security Guidelines
  • 11.1 SHA-2 Compliance
    • 11.1.1 Card Content Signed with SHA-2
    • 11.1.2 Using SHA-2 for Digital Signature Operations
  • 11.2 PIN Policies
  • 11.3 Log Handling
  • 11.4 Additional Recommendations