iVEST ™ File 3.1 User’s Guide - DigiCert 3.1... · 2015. 9. 21. · iVEST™ File User's Guide...

iVEST™ File 3.1 User’s Guide

Windows 98/ME/NT/2000/XP

Documentation Version 3.1.0.4( 08-December-2003 )

MIMOS BERHAD

TECHNOLOGY PARK MALAYSIA

57000 KUALA LUMPUR

http://www.ivest.com.my

http://www.mimos.my

Copyright Notice

Information in this document is subject to change without notice and does notrepresent a commitment on the part of MIMOS Berhad. The software described inthis document is furnished under a license agreement or nondisclosure agreement.The software may be used or copied only in accordance with the terms of theagreement. It is against the law to copy the software on any medium except asspecifically allowed in the license or nondisclosure agreement. No part of this manualmay be reproduced or transmitted in any form or by any means, electronic ormechanical, including photocopying and recording, for any purpose without theexpress written permission of MIMOS Berhad.

© Copyright 1999-2003, MIMOS Berhad. All right reserved. iVEST™ is the trademarkof MIMOS Berhad, Malaysia.

The names used in this document are for internal development purposes only.

IN NO EVENT WILL MIMOS BERHAD BE LIABLE FOR DIRECT, INDIRECT,SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES RESULTING FROMANY DEFECT IN THE SOFTWARE OR ITS DOCUMENTATION, EVEN IF ADVISEDOF THE POSSIBILITY OF SUCH DAMAGES.

THE WARRANTY AND REMEDIES SET FORTH ABOVE ARE EXCLUSIVE AND INLIEU OF ALL OTHERS, ORAL OR WRITTEN, EXPRESS OR IMPLIED.

iVESTTM Client User's Guide Contents - 3

Contents

COPYRIGHT NOTICE................................................................................................................... 2

CONTENTS ..................................................................................................................................... 3

SECTION 1: INTRODUCTION...................................................................................................... 4

WHAT IS iVEST™ FILE?................................................................................................................. 4WHY USE iVEST™ FILE?................................................................................................................ 4

SECTION 2: INSTALLATION ....................................................................................................... 5

SYSTEM REQUIREMENT.................................................................................................................... 5iVEST™ FILE SOFTWARE INSTALLATION ......................................................................................... 5iVEST™ FILE SOFTWARE UPGRADING INSTALLATION ...................................................................... 8

SECTION 3: iVEST™ FILE BASICS........................................................................................... 10

GETTING STARTED ........................................................................................................................ 10CREATING IGN FILE THROUGH iVEST™ FILE WINDOWS.................................................................. 11

Encrypt ..................................................................................................................................... 12Decrypt encrypted ign file.......................................................................................................... 14Sign .......................................................................................................................................... 16Verify signed ign file ................................................................................................................. 18Sign and encrypt........................................................................................................................ 20

CREATING IGN FILE THROUGH WINDOWS EXPLORER....................................................................... 20Encrypt ..................................................................................................................................... 20Decrypt encrypted ign file.......................................................................................................... 21Sign .......................................................................................................................................... 22Verify signed ign file ................................................................................................................. 23

EDITING IGN FILE........................................................................................................................... 23

SECTION 4: MORE ABOUT iVEST™ FILE .............................................................................. 24

EXTRACT FILE ............................................................................................................................... 24CERTIFICATE MANAGER ................................................................................................................ 24

Search certificate ....................................................................................................................... 24Import certificate ....................................................................................................................... 24Save certificate .......................................................................................................................... 24Delete certificate ....................................................................................................................... 25

SECTION 5: UNINSTALLATION................................................................................................ 26

UNINSTALL INSTRUCTION THROUGH “UNINSTALL iVEST FILE”...................................................... 26UNINSTALL INSTRUCTION THROUGH “ADD/REMOVE PROGRAM” .................................................... 27

SECTION 6: TROUBLESHOOTING........................................................................................... 29

SECTION 7: GLOSSARY OF TERMS......................................................................................... 30

iVEST™ File User's Guide Section 1: Introduction-4

Section 1: Introduction

What is iVEST™ File?

iVEST™ File is a very useful secure storage system which encrypt file(s) for securetransmission through the Internet. iVEST™ File made it easy for user to securelysign, verify, encrypt and decrypt these files by completely eliminating any possibilityof theft.

Based on Public Key Infrastructure, it incorporates the best cryptographic techniques,which use a highly reliable user authentication; data confidentiality, integrity & non-repudiation; and legally binding digital signatures.

iVEST™ File is dependent to iVEST™ Client 3.0 software. iVEST™ File unable toinstall or function on a machine that do not have iVEST™ Client 3.0.

Why use iVEST™ File?

Most confidential attachment files are transmitted without any cryptographytechniques incorporated into them and therefore, you risk interception and theft ofthese files. iVEST™ File produces a new proprietary file known as .ign, which wrapsaround these files for secure and easy distribution in any preferred formats for theseemail attachments.

iVEST™ File is an add-on feature of iVEST™ Client and will not work without a pre-installed iVEST™ Client software.

iVEST™ File User's Guide Section 2: Installation-5

Section 2: Installation

System requirement

• Operating System:o Microsoft Windows 98o Microsoft Windows MEo Microsoft Windows NTo Microsoft Windows 2000 Professional/Servero Microsoft Windows XP Home Edition/Professional

Note: For Windows 98 and Windows NT machine, user are required to installvcredist.exe which is obtainable in the iVEST™ File CD.

• Hardware requirements:o Personal computer with a Pentium or higher microprocessoro 64 MB of RAMo 5 MB hard disk free spaceo 1 USB porto PC/SC compliant smart card readers certified by iVEST™

• Smart cards:o 64K MyKado iVEST™ Card

iVEST™ File software installationNote: For Win 2000 and Win XP, please ensure you have the Administrator’s rights

1. Insert the iVEST™ File CD into your CD drive (e.g. drive E:\).2. Click the Windows Start button and select Run.3. The Run dialog box will appear on your screen.

4. Type E:\iVESTFile-3-1.exe in the column and click OK button.5. There will be some extraction of files being done by the InstallShield Wizard.

This will take a moment.6. Please wait until the Welcome to iVEST File 3.1 Installation dialog box

appears.


Note: To stop the installation at any time, click Cancel and the Exit Setupscreen appears. Click Yes to quit the installation or click No to resume

7. Click Next > button, the Customer Information dialog box will appear. Enterthe requested information before clicking the Next > button. Make sure that itis typed correctly before you continue.

8. The Choose Destination Location appears. It is recommended to justaccept the default destination folder. Alternatively, you may change thedestination folder by clicking Browse… button.


9. Click Next > button, the Select Program Folder dialog box will appear.

10. Click Next > button, the Start Copying Files dialog box appears. This willallow you to review your settings before copying files into the folder.


11. Click Next > button, InstallShield will continue with the installation process.After the installation is completed, the iVEST File Installation Completedialog box will appear. You will be prompted to restart your PC.

12. iVEST™ File shortcut will be also installed on your desktop.

iVEST™ File software upgrading installation

Note: For Win 2000 and Win XP, please ensure you have the Administrator’srights

1. Insert the iVEST™ File CD into your CD drive (e.g. drive E:\).2. Click the Windows Start button and select Run.3. The Run dialog box will appear on your screen.


4. Type E:\iVESTFile-X-X.exe in the column and click OK button. (the X-Xreferring to iVEST™ File version)

5. You will notice that there will be some extraction of files being done followedby the preparation of the InstallShield Wizard. This will take a moment.

6. InstallShield will detect if you have a previous version of iVEST™ Fileinstalled. It will prompt to remove iVEST™ File. Click Yes to continue.

Note: If you choose not to remove previous iVEST™ File installed, theiVEST™ File installation warning will appear. You must remove in order toupgrade the software.

7. InstallShield will uninstall the previous iVEST™ File installed. Click OK.

8. InstallShield will continue installing new version of iVEST™ File. For the restof the steps, please refer page 5 on Install the iVESTTM File softwaresection (step 6 until finish).

iVEST™ File User's Guide Section 3: iVEST™ File Basics-10

Section 3: iVEST™ File Basics

Getting started

iVEST™ File document will have an extension of .ign. We address it as ign file.

To start using iVEST™ File:

1. Click Windows Start button > Programs > iVEST File > iVEST File.Alternatively, you may run iVEST™ File by double-clicking the iVEST™ Fileshortcut on your desktop.

2. iVEST File screen will appears. Please remember, before performing anyprocess with iVEST™ File, ensure iVEST™ Gate is running, insert yoursmart card into the smart card reader properly and iVEST™ Client is able toread your smart card.

3. At the iVEST™ File screen, the status taskbar states Choose “New” tocreate or “Open” to open an iVEST File. It is ready for you to start creatingign file or open existing ign file.

4. What does the iVEST™ File buttons and tabs mean?• New – to create new ign file• Open – to open existing ign file• Add File – to add file before it is being sign or encrypt.

Status Taskbar Operation Status

File Path Display


Note: You may add files of the same name if they are located at differentpath or directory. For example, if you have readme.txt at pathC:\mydocument\readme.txt and also at path D:\readme.txt. You may addboth files at the same time.

• Delete File – to delete file before it is being sign or encrypt• Extract File – to extract file into folder/directory• Sign – to sign document(s)• Encrypt – to encrypt document(s)

5. What does the iVEST™ File fields mean?• File Path Display– the location of the saved file• File Information – information of the added file to the ign file.• Certificate Information – signer’s name will be listed here. You may click

on the name(s) to view the signer’s certificate.• Status Taskbar – shows the status of every single process. Please view

the status taskbar every time you perform any operation with iVEST™File

• Operation StatusØ Green light indicates that it is ready to create new ign file or open

existing file.Ø Red light indicates that it is in the process of performing an operation.

6. Alternatively, you may also use iVEST™ File through windows explorer.Open windows explorer and select the file that you want to encrypt or sign.Right-click on the file and click iVEST File and choose either Encrypt orSign. It is faster and easier to create ign file through windows explorer.

7. The default icon for iVEST™ File document is as below,

8. You may view the version of iVEST™ File by clicking at Help > About iVESTFile…

Creating ign file through iVEST™ File windows


Encrypt1. Click New button, the Create a new iVEST™ File screen will appear. You

may also click File > New… to create new ign file.2. Enter the File name for your new ign file. For example Quotation. Click

Save button.

3. The Add Files screen will appear. Choose the file(s) that you want to encryptand click Open button to add. You will notice that Status Taskbar displaysAdding file…


4. The iVEST™ File screen appears with one file added to the File Informationfield. The File Path Display will display path of the ign file that you have justcreated.

5. You may add more file(s) by clicking at the Add File button or Edit > AddFile….

6. You may delete the file(s) that you have added by highlighting the filenameand click Delete File button or Edit > Delete File….

7. Click Encrypt button to encrypt the file. The iVEST File Select Certificatescreen will appear. Highlight on the person’s name that you want to encryptand click the Select >> button.

1 file added tothe list

Search engine to findcertificate


8. You will see the name has been selected and placed at the right column.9. Alternatively, if you have a lot of names in the list, you may use the search

engine on top to find the name. Click Find… button to search the name.10. You may also encrypt to multiple people. Highlight the name(s) and click

Select >> button to add more in the list.11. If you do not have the person’s certificate, please refer to iVEST Certificate

Manager on how to get the person’s certificate.12. Click OK button after you have choose the name(s) that you want to encrypt.

13. A message will prompt states that the encryption is successful and theStatus Taskbar will display Encryption is Successful….

14. Click OK button to close the screen.15. Quotation.ign file has successfully being created.

Decrypt encrypted ign file1. To open the encrypted ign file, click Open button and the Open an iVEST

File screen will appear. Alternatively, you may click File > Open… to openthe ign file. Choose the encrypted file that you want to decrypt and clickOpen button.


2. iVEST PIN Request screen will appear. Enter your smart card PIN and clickOK button.

3. Status Taskbar will display Decryption is successful…


Sign1. Click New button, the Create a new iVEST File screen will appear. You may

also click File > New… to create new ign file.2. Enter the File name for your new ign file. For example Quotation. Click

Save button.

3. The Add Files screen will appear. Choose the file(s) that you want to signand click Open button to add.


4. The iVEST™ File screen appears with one file added to the File Informationfield.

5. You may add more file(s) by clicking at the Add File button or Edit > AddFile….

6. You may delete the file(s) that you have added by highlighting the filenameand click Delete File button or Edit > Delete File….

7. Click Sign button to sign the file. iVEST PIN Request screen will appear.Enter your smart card PIN and click OK.

1 file added tothe list


8. Quotation.ign file has been successfully created and Status Taskbar willdisplay Verification of Signature is Successful….

Verify signed ign file1. To open signed ign file, click Open button and the Open an iVEST File

screen will appear. Alternatively, you may click File > Open… to open the ignfile. Choose the signed file that you want to verify and click Open button.


2. The ign file has been successfully verified and Status Taskbar will displayVerification of Signature is Successful….

3. You may click on signer’s name to view the certificate


Sign and encrypt

You may perform both sign and encrypt to the same file(s). You must performsign operation first before proceed with encryption.

Create a new ign file and perform sign (see sign section) and encrypt (seeencrypt section). Alternatively, you may open existing signed ign file and performencrypt operation on that file.

Creating ign file through Windows Explorer

Encrypt1. Open Windows Explorer.2. Select the file that you wish to encrypt.3. Right-click on the file > click iVEST File > Encrypt.


4. The iVEST Select Certificate screen appears. Highlight on the person’sname that you want to encrypt and click Select >> button.

5. You will see the name has been selected and placed at the right column.6. Alternatively, if you have a lot of names in the list, you may use the search

engine on top to find the name. Click Find… button to search the name.7. You may also encrypt to multiple people. Highlight the name(s) and click

Select >> button to add more in the list.8. If you do not have the person’s certificate, please refer to iVEST Certificate

Manager on how to get the person’s certificate.9. Click OK button after you have choose the name(s) that you want to encrypt.10. A message will prompt states that the encryption is successful.

Note: The ign filename will be automatically created based on the file added toencrypt. If you have multiple files, the first filename in the list will be your ignfilename.

Decrypt encrypted ign file1. Open Windows Explorer and select the file that you wish to decrypt.2. Double-click the file to open.3. PIN request will prompt to verify the decryption.


4. Enter PIN and click OK.5. The iVEST™ File screen will appear and Decryption is successful states at

the Status Taskbar.

Sign1. Open Windows Explorer.2. Locate the file that you wish to sign.3. Right-click on the file > click iVEST File > Sign.

4. iVEST PIN Request will prompt. Enter PIN and click OK.

5. The iVEST™ File screen will appear and Verification of signature issuccessful states at the Status Taskbar.


Note: The ign filename will be automatically created based on the file added tosign. If you have multiple files, the first filename in the list will be your ignfilename.

Verify signed ign file1. Open Windows Explorer and locate the file that you wish to decrypt.2. Double-click the file to open.3. The iVEST™ File screen will appear and Verification of signature is

successful states at the status taskbar.

Editing ign file

Only signed ign file can be edited. You may add more signers and also performencryption to the existing signed ign file.

1. Open existing signed ign file.2. Insert other smart card for different signer.3. Click Sign to sign.4. Click Encrypt to encrypt the signed ign file

iVEST™ File User's Guide Section 4: More About iVEST™ File-24

Section 4: More About iVEST™ File

Extract file

You may save the signed or encrypted file inside ign file by clicking the Extractbutton or Edit > Extract File….

1. Open existing ign file2. Click on the file that you want to extract.3. Click Extract button and the Browse for Folder screen appears.4. Choose your preference folder to extract the file.5. Click OK to extract.

Certificate Manager

Search certificateIf you have a lot of certificates in your certificate store, this search engine helps tosearch for the certificate that you want.

1. Click Tool > Search Certificate…2. The iVEST Search Certificate screen will appear.3. You may search by name, e-mail or certificate issuer4. Click Search button to start searching.

You may also find this search engine when you are performing encryption. At theiVEST File Select Certificate screen, there is a Find… button on top to searchfor certificate(s).

Import certificateYou may import certificate to be stored in your certificate store.

1. Click Tool > Manage Certificate…2. The iVEST Certificate Manager screen will appear.3. Click Import button and a screen will prompt to browse for the certificate that

you want to import.4. Choose the certificate and click Open.

Save certificateYou may save certificate from the certificate store to other folder/directory.

1. Click Tool > Manage Certificate…2. The iVEST Certificate Manager screen will appear.3. Highlight the certificate(s) that you want to save4. Click Save button if you highlighted only one certificate or click Save All

button if you highlighted more than one certificates. A screen will prompt tobrowse for the folder/directory to save.

Note: Save one certificate will save as .crt file. Save All (more than onecertificates) will save as .reg file.

iVEST™ File User's Guide Section 4: More About iVEST™ File-25

5. Choose the folder/directory and enter the name for the certificate to save.Click Save button.

6. A message will be prompted that you have successfully saved the certificate.

Delete certificateIn order to organize the certificate store, you can delete the certificate(s) from thelist. By deleting the certificate from the certificate store, you will not be able toencrypt file to this particular person.

1. Click Tool > Manage Certificate…2. The iVEST Certificate Manager screen will appear.3. Highlight the certificate that you want to delete and click Delete button.4. A screen will prompt to confirm the deletion process. Click Yes to continue.

iVEST™ File User's Guide Section 5: Uninstallation - 26

Section 5: Uninstallation

There are two methods to uninstall iVEST™ File software:1. Uninstall instruction through “Uninstall iVEST File” shortcut2. Uninstall instruction through “Add/Remove Program”

Note: Uninstall iVEST™ File will only remove iVEST™ File. If you need to uninstall iVEST™Client, ensure to uninstall iVEST™ File first before proceed to uninstall iVEST™ Client.

Uninstall Instruction through “Uninstall iVEST File”1. Exit iVEST™ File.2. Click Windows Start button > Program > iVEST File > click Uninstall iVEST

File.

3. The InstallShield Wizard pop-up message appears.

4. The Modify, repair and remove the program will appear. Click Next > tocontinue, else click Cancel.


5. After selecting Next > button, the whole uninstallation process will take place.

6. Click Finish to end the process.

Uninstall Instruction through “Add/Remove Program”

1. Close all web browsers and e-mail applications.2. Click the Windows Start button.3. Select Settings > click Control Panel. The Control Panel screen will

appear. Double-click Add/Remove Programs.


4. The Add/Remove Program dialog box will appear. Highlight iVEST File 3.1and click Add/Remove… button to remove iVEST™ File 3.1.

5. For the rest of the steps, please refer to page 26 at Uninstall instructionthrough “Uninstall iVEST File” section from step 3 until finish.

iVEST™ File User's Guide Section 6: Troubleshooting - 29

Section 6: Troubleshooting

Error message/symptom Cause/Solution/WorkaroundiVEST FileiVEST File does not supportAuthentication Certificate

You have chosen incorrect certificate to be imported to thecertificate store. Choose another certificate.

iVEST File InstallationWarningYou need to install iVESTClient 3.0 or later version of itto run iVEST File.Please ……

Your iVEST™ Client is version 2.4 or below. Please installiVEST™ Client 3.0 the least. By installing iVEST™ Client 3.0,it will automatically remove older version of iVEST™ Client.

When right-click file tosign/encrypt at windowsexplorer, iVEST File is notlisted in the menu.

Some of Windows system files are too old to work withiVEST™ File. It requires installing vcredist.exe by Microsoft.The vcredist.exe is applicable for Win 98 and NT platformsonly.Steps to install:• Uninstall iVEST™ File• Run VC6RedistSetup_enu.exe to extract the vcredist.exe• Install vcredist.exe• Reboot PC• Install iVEST™ File• Reboot PC• Launch Windows Explorer. Right-click on the file you

want to sign/encrypt and you will notice that iVEST File isin the list. Should be able to perform sign/encrypt throughWindows Explorer.

For advance information on vcredist.exe, please refer to thisURL:http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q259/4/03.ASP&NoWebContent=1

iVEST FileYour certificate has expired.Decrypting is cancelled

You are trying to decrypt using an expired iVEST™ smartcard.

iVEST FileLow memory

Prompted during encryption/signing due to PC performancedo not have enough memory.

You are not authorized toperform this operation

The certificate you are using is not match.

Digital Signature has beentampered

The file or signature is tampered.

Ivf.ocx failed to unregisteredduring uninstallation ofiVEST™ File on Windows ME

Click OK to proceed.

Re-install iVEST™ Client withiVEST™ File already exist

InstallShield will automatically remove iVEST™ Client only.However this is not recommended. Please follow these stepsif you need to re-install iVEST™ Client:• Uninstall iVEST™ File• Re-install iVEST™ Client• Re-install iVEST™ File

Uninstall iVEST™ File Uninstall iVEST™ File will only remove iVEST™ File. If youneed to uninstall iVEST™ Client, ensure to uninstall iVEST™File first before proceed to uninstall iVEST™ Client.

iVEST™ File User's Guide Section 7: Glossary of Terms - 30

Section 7: Glossary of Terms

CertificateThe digital ID of a user issued by a Certification Authority.

Certification Authority (CA)A trusted body that issues certificate to user.

Digital CertificateThe digital equivalent of a paper certificate (i.e. passport, driver’s license or identitycard). The file contains the individual’s public key and a signature made by aCertification Authority. It serves to prove the individual’s identity or right to accessinformation or services on the Internet.

Digital SignatureA digital code that can be attached to an electronically transmitted message touniquely identify the sender. The signature can be used to verify whether the dataactually came from the sender.

Personal Identification Number (PIN)A secret code used for identification purposes.

Public-key cryptographyA form of cryptography that makes use of a key-pair: a public key and a private key.Each user will have his/her own key pair. The private key is kept secret and knownonly to the owner; the public key is published yet cannot be modified by anyone. Amessage that is encrypted using the public key can only be decrypted using thecorresponding private key and vice versa. This infrastructure enables the use ofdigital signatures.

Private keyOne of the keys in a public-key cryptography key-pair. This one is kept by the ownerand should be used only by him/her. See public-key cryptography.

Public keyOne of the keys in a public-key cryptography key-pair. This one is published and usedby anyone to encrypt a message that is to be sent to the owner of the key. The ownerthen decrypts the message using his/her private key. See public-key cryptography.

Public-key infrastructure (PKI)A set of security services that enables the use of public key cryptography andcertificates in a distributed computing environment. The services include certificatemanagement (certificate generation and revocation, CRL creation and maintenanceand CA management) and secure administration of key pairs (key generation, back-up, recovery and update).

ReaderThe component that extracts data (the digital certificate and private key) from a token.

Reader and smart cardA pair that consists of a smart card and its reader. Since every token must have areader, this pair is treated as one object. (See reader, smart card).

Smart cardA plastic card (like a credit card) with a chip for storing information.

iVEST™ File User's Guide Section 7: Glossary of Terms - 31

Smart card readerIt is a hardware that is used to extract data from a smart card. It can be external(using a cable connection) or internal to a computer.

Window’s system trayThis is only available in a Windows environment. It is the box at the right end of yourtask bar where you can see icons of running applications.

Date post:	05-Feb-2021
Category:	Documents
Upload:	others
View:	6 times
Download:	0 times

iVEST ™ File 3.1 User’s Guide - DigiCert 3.1... · 2015. 9. 21. · iVEST™ File User's Guide...

Documents