CA Certificat Trust Infrastructure MANUEL … · CA Certificat+ Trust Infrastructure MANUEL ... 3...

Page 1 of 39

MANUEL D'INSTALLATION CA CERTIFICAT SUR CLÉ USB CRYPTOGRAPHIQUE Version 1.4

© Crédit Agricole 2010-2011. This document is the property of Crédit Agricole. It can only be used by authorized people depending on their level of confidentiality.

Its reproduction is governed by the Intellectual Property Code which only authorizes the private use of the person making the copy.

CA Certificat+

Trust Infrastructure

MANUEL D'INSTALLATION CA CERTIFICAT SUR CLÉ USB

CRYPTOGRAPHIQUE

• ON A CRYPTOGRAPHIC USB dongle

Page 2 of 39




Contents

1 INTRODUCTION......................................................................................................................... 3

1.1 PURPOSE OF THIS DOCUMENT.................................................................................................. 3 1.2 OVERVIEW OF THE INSTALLATION PROCEDURE ...................................................................... 3

2 PREREQUISITES......................................................................................................................... 4

2.1 REGISTRATION DOSSIER PREREQUISITES................................................................................. 4 2.2 HARDWARE AND SOFTWARE REQUIREMENTS ......................................................................... 4

3 INSTALLING THE SAGEM HARDWARE.............................................................................. 5

3.1 INSTALLING THE SAGEM SOFTWARE – MIDDLEWARE YPSID............................................... 5 3.1.1 Connecting to the CA Certificat + website...................................................................... 5 3.1.2 Running the installation program ................................................................................... 8 3.1.3 Restarting ...................................................................................................................... 11

3.2 CONNECTING THE USB DONGLE (OR USB READER)............................................................. 11 3.2.1 Assembly........................................................................................................................ 11

3.3 CONNECTING FOR THE FIRST TIME ........................................................................................ 13 3.4 CHECKING THE HARDWARE................................................................................................... 14

4 DOWNLOAD THE CA CERTIFICAT+ CERTIFICATE ...................................................... 16

5 FINAL CHECKS......................................................................................................................... 27

5.1 CHECKING YOUR CERTIFICATE.............................................................................................. 27 5.2 CHECKING YOUR CERTIFICATE ON THE DONGLE. .................................................................. 29 5.3 CHANGING THE PIN CODE..................................................................................................... 31

6 INSTALLING THE CHAIN OF TRUST ................................................................................. 34

SPECIFICS FOR USING WINDOWS VISTA , WINDOWS 7 AND IE8............................38

Page 3 of 39




1 Introduction

If you have any questions or require information please contact CA Certificat + support

- by telephone : 01.57.72.84.84 - by email : [email protected] - by fax : 01.57.72.15.80

1.1 Purpose of this document This document is intended for users who have acquired; • a CA Certificat+ certificate on a SAGEM cryptographic USB dongle The purpose of this manual is to guide the user when installing the CA Certificat+ certificate onto a SAGEM cryptographic USB dongle. If you already have a certificate on a SAGEM USB dongle, then go to step 3: "Download the Certificate" in this manual.

1.2 Overview of the installation procedure The installation is done in four steps and takes about 15 minutes to complete:

1. Checking the prerequisites Chapter 2 2. Installing the SAGEM hardware Chapter 3

• Installing the SAGEM software Section 3.1 • Connecting the USB dongle or USB reader, Section 3.2 • Checking the installation Section 3.3

3. Downloading the certificate Chapter 4 4. Final checks and changing the PIN code Chapter 5

Please note: The user can only go to step 3 after receiving an email stating that the certificate is available on the CA Certificat+ website.

In all cases: • The installation can only be done by the computer's Local Administrator.

• In addition, if the computer is part of a domain and / or managed by a specific IT team, then the installation must be done by this team.

Page 4 of 39




2 Prerequisites

2.1 Registration file prerequisites The user must first make sure that the following items are to hand for downloading certificates:

• The user's personal code (specified in the application folder) • Download code (received by email) • The installation kit supplied by CA Certificat+ (USB dongle + SIM smart card)

2.2 Hardware and software requirements Hardware requirements:

• Computer workstation: o Pentium II 400 MHz or higher with 50 MB of free disk space o An Internet connection o A CD-ROM drive

• Several drives can be installed on the same workstation. On the other hand, it should not be installed in parallel with any virtual drivers (e.g. Ikey).

Required operating system:

o Windows 2000 (must have Service Pack (SP4), version v3.3.1) o Windows Server 2003 o Windows XP SP1, SP2 & SP3 o Windows Vista o Windows 7

Minimum software requirements:

o Internet Explorer 6 and later with 128-bit encryption Please note: the download can only be done with Internet Explorer. Once the certificate has been downloaded, you can use your usual browser.

Page 5 of 39




3 Installing the SAGEM hardware This chapter describes the SAGEM cryptographic USB dongle installation. Please keep to the following installation order:

1. Install the SAGEM management software (Middleware ypsID) in the Administrator mode then reboot the computer.

2. Connecting USB dongle for the first time.

3.1 Installing the SAGEM software – Middleware YpsID Please note:

• You might have to disable the computer's antivirus program during the installation (see the antivirus program help file for more information).

• Do not connect the USB dongle (or the USB reader).

3.1.1 Connecting to the CA Certificat + website

• Log on to the computer in the Administrator mode • Go to the http://www.ca-certificat-plus.com/ website

Description with Internet Explorer

Page 6 of 39




• Click on ‘RETIRER MON CERTIFICAT' (Download my certificate)

• Read the information on this page, then click on 'Continuer' (Continue)

Page 7 of 39




• Click on 'Télécharger le middleware SAGEM' (Download the SAGEM middleware) as indicated by the red arrow on the screenshot above.

Page 8 of 39




• Click on ‘toutes version Windows’ and then 'Driver ‘ Clé USB Windows 32 et 64 bits (2000, XP, VISTA, 7)' (as indicated by the red arrow on the screenshot above) and go to 3.1.2.

3.1.2 Running the installation program

After clicking on the link by following the procedure described in the previous paragraph (3.1.1), a pop-up window appears requesting confirmation,

• Click on 'Exécuter' (Run), or 'Enregistrer' (Save) the file to your computer.

• Double click on 'Exécuter' (Setup) to start the installation procedure. (as indicated by the

red arrow on the screenshot above). The following screens will appear:

Page 9 of 39




• Close all other applications then click on 'Suivant' (Next);

• Accept the licence and Click on 'Suivant' (Next);

Page 10 of 39




4/ You can select the folder for the installation. Then click on 'Suivant' (Next).

• The installation can take a few minutes:

Select the installation folder. You are about to install the Sagem middleware in the following folder.

Page 11 of 39




3.1.3 Restarting

You must restart your computer to complete the installation (See screenshot below). Whilst your computer is restarting, please assemble your USB media ready (dongle and smart card. See 3.2 below).

• The installation has finished: Click on 'Fermer' (Close): The computer will reboot. After rebooting the computer, an icon on the task bar will appear:

Now you can connect the hardware.

3.2 Connecting the USB dongle (or USB reader)

3.2.1 Assembly The cryptographic device comprises 2 items:

1/ a USB dongle; 2/ a smart card with the chip pre-cut, just like the SIM cards in a mobile phone.

The assembled dongle is a strong and dedicated device for storing your certificate securely, it will not allow you to store any files on it and it cannot be inserted into a mobile phone. There are three steps to inserting the smart card into the USB dongle:

Page 12 of 39




1/ Remove the chip card by rotating it slightly several times around the two removable tabs.

Figure 1 Removable smart card

2/ Look at the rear of the USB dongle: there is a slot at the rear of the dongle. An outline of the smart card is moulded into the side of the dongle.

Figure 2 USB dongle

3/ Insert the smart card into the slot by carefully positioning the smart card so that the bevelled corner is correctly aligned as shown on the moulded outline. Slide the smart card fully into the slot.

Figure 3 Inserting the smart card into the USB dongle

The assembly is complete: [The chip serial number is on the back of the card as well as on the back of the chip, however, we recommend that you should keep the card containing the chip in its original packaging.]

Page 13 of 39




If you need to remove the SIM card later on, press down firmly on the slide control and push it in the opposite direction.

Figure 4 Removing the smart card

3.3 Connecting for the first time

Log on to Windows once your computer has restarted. 1 / Before connecting the dongle for the first time and to avoid conflicts and detection problems, make sure that no other USB device and smart cards are connected to the computer. 2/ Connect the USB dongle into a USB port on your computer. Windows will automatically detect the hardware and will start the appropriate driver (if this does not happen, remove the dongle and reinsert it). You do not need to be an Administrator during this phase.

Figure 5 Detecting the hardware

3/ The USB dongle should light up and flash.

Page 14 of 39




Figure 6 Connecting the USB dongle

4/ A new icon is displayed in the bottom right of your taskbar: This icon is to access the USB dongle menu.

Figure 7 USB dongle menu icon

• Insert the USB dongle or the USB reader into the USB port that you have selected. • The process for recognizing the dongle or reader will start automatically. Wait a few

seconds for this process to finish (the recognition can take longer or shorter depending on the Windows version).

• The installation is complete. Go to the next section 3.4 to check that the dongle is

working correctly.

3.4 Checking the hardware Prerequisites:

• The dongle is inserted and connected to the USB port. • Check that the 'Outil Sagem Launcher' (Sagem launch tool) is in the 'Start /

Programs / SAGEM / Sagem Middleware ypsID / folder

• Click on it. The SAGEM Launcher icon appears (if it was not already displayed in the taskbar)

Page 15 of 39




• Using your mouse right button, click on the SAGEM Launcher icon in the taskbar,

• The following window should appear. Menus are used to administer the dongle's contents.

Please note: the menus can only be used if: A dongle is inserted AND at least one certificate is present.

The hardware installation is complete. Go to Chapter 4 to download your certificate.

Page 16 of 39




4 Downloading the CA Certificat+ certificate The SAGEM software and the USB dongle have been previously installed as described in the previous chapter, so the certificate can now be downloaded from the website: www.ca-certificat-plus.com. The download must be done by connecting to the certificate user's account. Description with Internet explorer (The only navigator authorized for the download)

• Insert the USB dongle into a USB port (or the smart card into the USB reader) and go to this website: http://www.ca-certificat-plus.com/

• Click on ‘RETIRE MON CERTIFICAT’ (Download my certificate), see red arrow.

Page 17 of 39




• Click on 'Continuer' (Continue).

• A new page will open:

• Enter the information requested into the boxes then click 'Valider' (Confirm).

Enter your email address here

Enter your download code here

Enter your user code here

Page 18 of 39




Please note that your User Personal Code is secret and you will be asked for it again when revoking your certificate. • A pop-up window will open:

• Click on ‘OK’ • A new window will open:

Please note: before entering the requested information, download the chain of trust, by using:

• The security information bar appears at the top of the window as shown by the red arrow in the screenshot above.

• Click on the bar to display the download option.

Enter your town of birth here

Enter your town of birth again here

Page 19 of 39




• The download option is displayed:

• Click on 'Télécharger le fichier' ( Download the file) • The download window will appear:

• Click on 'Exécuter' (Run)

Page 20 of 39




• Click on 'Exécuter' (Run)

• A warning window appears:

• Click on 'OUI' (Yes) • When the download has finished, the following window appears:

• Click on 'Fermer' (Close) • You can now enter the information requested on the screen and enter the 4

passphrases.

Page 21 of 39




Click on ‘VALIDER’ as shown by the red arrow. Please note:

• The information (4 passphrases) that you enter on this screen as well as your 'Code Personnel Utilisateur' (User Personal Code) will be requested again when revoking your certificate. It is therefore essential that you keep the four selected questions and the four answers that you have entered.

Page 22 of 39




• If the cryptographic module 'SAGEM Removable Token Cryptographic Provider'

is not automatically entered in the location indicated by the red arrow in the screenshot above, you must first download the SAGEM middleware by clicking on the link indicated by the blue arrow and you can refer to paragraph 3.1.1 in this manual.

• If not, click on 'VALIDER' (CONFIRM)

• A pop-up window will appear:

• Click on 'OUI' (Yes)

• The next window will appear:

Page 23 of 39




• Click on 'Oui' (Yes) • The following SAGEM window will appear:

• Click on 'OK'

Page 24 of 39




• The following window will appear:

• When requested, enter the dongle's PIN code in the’ Code porteur’ box (by default:

1234) then click ‘OK’ • Wait a few seconds for the certificate to be created. A blank page may be displayed

whilst computing the key on the dongle: Please note: Your dongle will flash quickly during this operation, whilst it generates your certificate.

Page 25 of 39




• A dialog box opens requesting permission to complete the operation:

• Click on 'Oui' (Yes) • The following window will appear:

• The certificate is now installed on the computer. • Check that the information displayed is correct. • Continue.

Congratulations! Your certificate will be installed on your computer. Check that the information is correct and click on ‘Continuer’.

Page 26 of 39




• The download site will offer to check your certificate, see Chapter 5 below.

The certificate download is complete. Go to Chapter 5 to carry out the final checks and change the dongle PIN code

Page 27 of 39




5 Final checks So as to use the CA Certificat+ certificate under the most secure conditions, the following checks must be carried out:

• Check your certificate. • Change the PIN code (this code is required to use the dongle and the code can be

from 4 to 25 alphanumeric characters: 123abcABC.)

5.1 Checking your certificate When you clicked on the 'Suivant' (Next) button in the previous step (see the end of chapter 5) the following screen will appear:

• Click on the 'Vérifier'(Verify) button.

Page 28 of 39




• Click on your certificate by using the mouse. Click on 'OK';

• If your certificate has been correctly installed, the following information page appears.

Click on 'Fin'(Finish).

If you do not see this page, then please contact CA Certificat+ support: - by telephone : 01.57.72.84.84 - by email : [email protected] - by fax : 01.57.72.15.80

Page 29 of 39




• Close the window by clicking on the cross in the top right of the screen.

5.2 Checking your certificate on the dongle. If you wish, you can check your certificate on your dongle.

• Using your mouse right button, click on the SAGEM Launcher icon in the taskbar on the bottom right as shown below.

• Select 'Afficher mes Certificats' (Display my certificates);

Page 30 of 39




• The following window appears; select your certificate, then click on the

'Visualiser' (Display) button.

• The certificate information is displayed.

Page 31 of 39




• You can now go to 'Modification du Code PIN' (Change the PIN Code). Changing the

PIN Code is highly recommended.

5.3 Changing the PIN code For security reasons, the PIN code must be changed as the default code is: 1234. The SAGEM software manages the CA Certificat+ dongles. In particular, the software checks that the certificate has been correctly installed on the dongle.

• Using your mouse right button, click on the SAGEM Launcher icon in the taskbar on the bottom right as shown below.

• The following window should appear. It is for managing the dongle's certificates and

contents.

Page 32 of 39




• Click on 'Modifier le PIN' (Change the PIN):

Page 33 of 39




• A window appears. Click on 'PIN_USER' then on 'OK'.

• You must enter the current PIN code in 'Ancien code'(current code), then select a new

code and confirm it. The code must be at least 4 alphanumeric characters long. You have three attempts to enter the correct code.

• If the new code and its

confirmation are identical and the code is long enough, the 'OK' is no longer ‘greyed-out’ and is enabled. If the current code is correct, the PIN code has been updated.

After this final check, the

certificate can be used. For example, you can register

with the Ministry of Finance and use the online e-filing

declaration process.

PIN name

Current code

New Code

Confirm new code

Read the Pin text

Page 34 of 39




6 Installing the chain of trust Installing the chain of trust is done during the download process (see chapter 5). However, you may need to reinstall the chain by itself. This chapter will guide you through this process. Description with Internet Explorer

• Go to the website: http://www.ca-certificat-plus.com/

• Click on 'TELECHARGEMENTS' (Downloads): ‘LA CHAINE DE CONFIANCE’

(chain of trust) as shown by the red arrow.

Page 35 of 39




• Click on the first link shown by the (red arrow), that will run an automatic installation

module for the chain of trust (see page 20). If you would like to carry out this task yourself, follow the instructions below. Otherwise you have finished the installation procedure. • Click on the blue arrow: Installer le certificat de l'Autorité de Certification CA

Certificat-Plus du Crédit Agricole.

• Select 'Ouvrir ce fichier à partir de son emplacement actuel' (Open this file from its current location), then click 'OK'

Page 36 of 39




• Click on 'Installer le certificat' (Install the certificate)

• Click on 'Suivant' (Next)

• Click on 'Suivant' (Next)

Page 37 of 39




• Then on 'Terminer' (Finish)

• Click on ‘OK’

• Click on the second arrow: ‘Installer le certificat de l'Autorité de Certification racine du Crédit Agricole’.

Page 38 of 39




And repeat the same process as before.

Please note with Windows Vista and Windows 7: The complete chain of trust must be installed and then carry out the following instructions: • Importing the Root Certificate must be ‘forced’ into the root certificate folder. • When importing it, select: 'placer tous les certificats dans le magasin suivant' • Then click on 'Parcourir' (scroll through). • Finally select the folder: « 'Autorités de certification racines de confiance'.

See the image below.

• The site must then be declared in the Trusted sites zone: • Click on: 'OUTILS/Option Internet' (TOOLS/Internet options in the browser) • Tab: 'Sécurité' (Security), Click/Select 'Site de Confiance' (Trusted sites) • Click on the Sites button. • In the 'Add' field box enter: https://ca-certificat.certificat.com • In the 'Add' field box enter: https://verif-ca.certificat.com

Page 39 of 39




• Click on 'OK'

The chain of trust has been installed. Go to Chapter 5 to download the CA Certificat+.

Date post:	15-Sep-2018
Category:	Documents
Upload:	dinhthuy
View:	215 times
Download:	0 times

CA Certificat Trust Infrastructure MANUEL … · CA Certificat+ Trust Infrastructure MANUEL ... 3...

Documents