id-card utility user’s guide · 4 1 launching id-card utility windows select start → programs...
TRANSCRIPT
1
ID-card Utility User’s Guide
Versioon 1.0
2
Dokumendi
informatsioon
Loomise kuupäev 01. oktoober 2010
Teema ID-kaardi haldusvahendi kasutusjuhend
Kellele Avalik
Koostajad
OÜ Smartlink, AS Sertifitseerimiskeskus, Riigi
Infosüsteemide Arenduskeskus
Versioon 1.0
Versiooninfo 1.0 – dokumendi kaasajastamine
3
Contents
1 Launching ID-card utility ...................................................................................... 4
2 ID-card utility’s user interface ............................................................................... 5
3 ID-card and personal data ...................................................................................... 6
3.1 Downloading and saving ID-card’s document picture ............................................. 6
4 Certificates and PIN codes ..................................................................................... 9
4.1 Changing PIN codes ................................................................................................. 9 4.1.1 Changing PIN codes using PUK code ............................................................................ 11
4.2 Revoking certificate use blockages ........................................................................ 12
4.3 Viewing certificate details and saving certificates ................................................. 13
4.4 Updating certificates .............................................................................................. 15
5 @eesti.ee email configuration and viewing forwarding information .................. 17
6 Activating Mobile-ID and viewing Mobile-ID data ............................................ 19
7 Changing PUK code ............................................................................................ 21
8 Settings and help .................................................................................................. 23
8.1 Language selection ................................................................................................. 23
8.2 Choosing between several ID-cards connected to the computer ............................ 23
8.3 Preparing diagnostics report ................................................................................... 23
8.4 Settings ................................................................................................................... 24
8.5 Help ........................................................................................................................ 25
4
1 Launching ID-card utility
Windows
Select START → Programs → ID Card → ID-card Utility or click on
the ID-card utility icon on your computer desktop.
Mac OS X
Select Applications → ID-Card Utility or click on the ID-card utility icon
in Dock.
Linux
Select Applications → Accessories → ID-card Utility or launch from command line
with the command qesteidutil.
The ID-card utility link also appears in DigiDoc3 Client and DigiDoc3 Crypto when
the signature or authentication certificate is about to expire or has expired (Image 1):
Image 1
5
2 ID-card utility’s user interface
Using ID-card utility you can read its owner’s personal data from the ID-card, save
certificates to file, change PIN and PUK codes, unblock locked PIN1 and PIN2 codes
and see statistics on used signature and authentication certificates. You can also
configure the ID-card application’s settings, such as ID-card software updates
installation.
The user interface (Image 2) contains four main sections:
ID-card and personal data section is constantly visible when the programme is
running.
Actions section lets you:
o View and, if necessary, update certificates and change PIN codes
o Configure and view the forwarding of your @eesti.ee email address
o Activate Mobile-ID and view its validity
o Change PUK code
Action content section enables you to perform your selected actions. Actions-
related information and explanations are also displayed here.
Settings and help section helps you find solutions to potential problems and
configure ID-card software. Here, you can:
o View the diagnostics report
o Change settings
o Find help to resolve problems
o Change the language
o Choose between several ID-cards that are connected to the computer
Image 2
ID-card and personal
data section Actions
Action content
Settings and help
6
3 ID-card and personal data
ID-card and personal data section (Image 3) contains the ID-card owner’s, ID-card’s
and ID-card validity information. This information is constantly visible when the ID-
card utility is running.
If for some reason it isn’t possible to read data from the ID-card, personal data will be
replaced with an error description, for example (Image 4):
3.1 Downloading and saving ID-card’s document picture
The photo on your ID-card originates from the Police and Border Guard Board
database. You can download your photo from there using the ID-card utility and save
it.
1. Launch ID-card utility.
2. Click on the words Load picture on the ID-card utility interface (Image 5).
Image 4
Image 3
7
3. Enter PIN1 in the dialogue window that will open (Image 6) and click OK.
By entering the PIN1 code you confirm that you are the rightful holder of
the ID-card used for loading the picture.
4. The photo downloaded from Police and Border Guard Board’s database is
displayed in the ID-card utility (Image 7).
5. Click on the word Save below the photo in order to save it.
6. Select the folder you would like to save the photo into in the saving window
that will open.
7. Here you can rename the photo and select the picture format (Image 8). Click
Save and your picture has been saved.
Image 7
Image 6
Image 5
8
Image 8
9
4 Certificates and PIN codes
When you open ID-card utility, as well as when you click on the Certificates button in
the actions section, you will see the pictured information on certificates (Image 9).
Among other information you will see how many times you have authenticated
yourself and signed digitally with the certificates in use.
If the certificate is invalid or fewer than 105 days remain until the certificate’s expiry
or use of the authentication or signature certificate has been blocked then it will be
clearly visible next to the certificate with a problem (Image 10). The button to update
certificates or revoke blocking will also be here.
4.1 Changing PIN codes
Procedure for changing the PIN1 and PIN2 code is essentially the same: you need to
enter the existing code once and the new code twice.
Permitted code lengths are different: PIN1 code must be within 4–12 digits and
PIN2 code must be within 5–12 digits.
The new code must be different from the existing code, only include numbers
and must not include your date or year of birth. If the entered new code doesn’t
comply with these rules, you will see an error message and will get a chance to
re-enter the code.
Image 10
Image 9
10
Important: if you enter an incorrect PIN1 or PIN2 code three times then the
use of authentication or signature certificate will be blocked and you cannot
authenticate yourself or sign digitally with your ID-card. You can revoke the
blockage with your PUK code.
1. Launch ID-card utility and click on the Certificates button in the actions
section.
2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2).
Image 11
3. The change PIN code window will open (Image 12).
4. Enter the existing PIN code.
5. Enter your new PIN code twice and click Change.
6. The PIN code will be changed. You will see a confirmation about the changed
code (Image 13).
From now on, use the new PIN code that you just entered.
Image 13
Image 12
2 2 1 2
11
If you make a mistake in repeating the code, you will see the error message
and can re-enter the codes.
4.1.1 Changing PIN codes using PUK code
You can change PIN codes even if you have lost your old PIN codes. In that case you
will need your PUK code to change the PIN codes.
1. Launch ID-card utility and click on the Certificates button in the actions
section.
2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2).
3. In the PIN code change window that will open, (Image 14) select Change PIN
code using PUK code.
4. A new window for changing the PIN code will open (Image 15).
5. Enter the PUK code.
6. Enter the new PIN code twice and click Change.
7. The PIN code will be changed and you will see a confirmation of the code
change (Image 16).
Image 15
Image 14
12
From now on, use the new PIN code that you just entered.
You can also initiate PIN code change using PUK code in the PUK code section of
the user interface (Image 17).
Image 17
4.2 Revoking certificate use blockages
You will see a message like this next to the blocked certificate (Image 18).
1. Launch ID-card utility and click on the Certificates button in the actions
section.
2. You will see the details of the certificate that is blocked for use in the
certificates section of the user interface window, click Revoke blocking.
3. The PIN code blockage revocation window will open (Image 19).
Image 19
Image 18
Image 16
13
4. Enter PUK code.
5. Enter new PIN code twice and click Change.
6. The certificate use blockage will be revoked, PIN code will be changed and
relevant message displayed (Image 20).
From now on, use the new PIN code that you just entered.
If you make a mistake in entering the code, you will see the error description and can
re-enter the codes.
If you enter your PUK code incorrectly three times it will also be locked. Then you
can no longer use your card, you need to go to a customer service centre where you
will get a new code envelope for your card. You can also get help from the customer
service centre if you have lost your old code envelope and have forgotten all of your
codes. You will see the list of customer service centres online from
http://www.sk.ee/kontorid.
4.3 Viewing certificate details and saving certificates
In order to view all the data on certificates and to save certificates, do the following:
1. Launch ID-card utility and click on the Certificates button in the actions
section.
2. You will see the certificates’ key data (Image 21).
3. Click on the View details button below the authentication certificate (Image 21,
1) or signature certificate (Image 21, 2).
4. The certificate details window will open (Image 22 and Image 23). On its two
tabs you can view technical certificate information.
Image 21
Image 20
1 2
14
The certificate display method depends on your operating system but the
contents are the same.
5. Authentication certificate details (Image 22).
6. Signature certificate details (Image 23).
7. Go to the Details tab to save the certificate.
8. Click the Save button.
Image 23
Image 22
15
9. Select the folder you would like to save the certificate into in the saving
dialogue that will open. You can also rename the file here and set the file format
(Image 24).
10. Click the Save button.
If a certificate file of the same name already exists in the destination folder
then it will prompt you whether to overwrite it or not.
4.4 Updating certificates
The ID-card utility only enables you to update certificates if they are expired or there
is fewer than 105 days until expiry. You cannot update certificates on an expired ID-
card. Apply for a new ID-card from the Police and Border Guard Board.
Your computer must have a working internet connection in order to update
certificates.
Important! Removing the ID-card from the card reader before the certificate updating
process is complete may damage the ID-card’s electronic part. Don’t terminate the
updating process before you see a confirmation on the success or failure of the
update.
1. Launch ID-card utility and go to the Certificates section.
2. If certificates are expired or are about to expire (105 days until expiry), the button
Update certificate will appear in the certificate’s general details section (Image 25).
3. A recommendation to close all applications using the ID-card will be displayed.
Close the mentioned applications and confirm your request to continue updating
certificates by clicking Yes (Image 26).
Image 25
Image 24
16
Image 26
4. Enter the PIN1 code in the dialogue window that will open (Image 27).
5. New keys will be generated as certificates are updated, certificate requests are
submitted, certificates are loaded onto the ID-card and finally new certificates will
be activated. You will see information on the ongoing process on your screen, it
will take 3–10 minutes.
6. Once updating has been completed, you will get a message that Certificate update
was successful and you will see new validity data in the certificate general details
section.
You can also update certificates online by going to http://www.sk.ee/id-kontroll
and at customer service centres, the list of which is available online at
http://www.sk.ee/kontorid.
Image 27
17
5 @eesti.ee email configuration and viewing forwarding information
You can use ID-card utility to forward your @eesti.ee email to one other email
address only if you have no valid forwarding already set up for your @eesti.ee
email address.
In case you have a valid forwarding already set up for your @eesti.ee email, you
can view the addresses where your emails are being forwarded using ID-card
utility. You can edit and add forwarding information in the State Portal eesti.ee.
1. Launch ID-card utility and click on the @eesti.ee e-mail button in the actions
section (Image 28, 1).
Image 28
2. Click the button Check your @eesti.ee email settings (Image 28, 2).
3. Enter your PIN1 in the window that opens and click OK (Image 29).
4. The email settings window will open.
If your @eesti.ee emails have already been forwarded, you will see your
official email addresses and addresses where email has been forwarded to,
instead of the email settings window (Image 30). You can edit your
forwarding information at the State Portal eesti.ee.
Image 29
1
2
18
5. Enter the email address where you would like your @eesti.ee emails to be
forwarded and click Activate @eesti.ee email.
Your email address must be in the format [email protected]. If you enter
an email address in the wrong format then an error message will be
displayed and you can re-enter your email address.
6. Enter PIN1 in the dialogue window that opens and click OK (Image 32).
7. A message will be displayed that a forwarding address activation key has been
sent to the email address you entered.
8. You will receive an email to the address you just entered, containing a link and
code for activating the email address along with instructions on how to do it.
You must log on to the State Portal eesti.ee in order to activate the forwarding
address and confirm your email forwarding address.
o If you entered an email address that you have previously used in the
eesti.ee system then active email settings will be loaded automatically.
You will receive an email containing a message about the successful
forwarding and you will not have to confirm your forwarding address
at the State Portal eesti.ee.
Image 32
Image 30
Image 31
19
6 Activating Mobile-ID and viewing Mobile-ID data
In the ID-card utility’s Mobile-ID section you can view your Mobile-ID details. You
can also activate the Mobile-ID service if you have received a new supported SIM
card from your mobile provider. You will find more information on id.ee.
1. Launch ID-card utility and click on the Mobile-ID button in the actions section
(Image 33, 1).
2. The Mobile-ID settings window will open.
3. Click on the button Check Mobile-ID status (Image 33, 2).
4. Enter your PIN1 code in the dialogue window that opens and click OK (Image
34).
If your Mobile-ID service has been activated, you will see the status of
your Mobile-ID certificates.
Image 33
Image 34
Image 35
1
2
20
If you are not a Mobile-ID service user, you will get the following
message (Image 36).
5. If your Mobile-ID service has not been activated, you can activate the Mobile-
ID service by clicking on the button Activate Mobile-ID service (Image 37).
You will be forwarded to the Certification Centre’s (SK) website
www.sk.ee/midaktiveerimine in order to activate Mobile-ID.
Image 36
Image 37
21
7 Changing PUK code
You will receive your PUK code in a code envelope together with your new ID-card
from the customer service centre.
When you go to the PUK code section of ID-card utility then you will see an
explanation of what PUK code is (Image 38) and you can change the PUK code. You
can also change PIN codes using PUK code.
1. Launch ID-card utility and click on the PUK code button in the actions section.
2. Click on Change PUK in the PUK code window that opens.
3. The change PUK code window will open (Image 39).
4. Enter your existing PUK once and your new PUK code twice, then click
Change.
The new code must be different from your old code, must be 8–12 digits
long and must not include your date or year of birth.
5. The PUK code is changed and you will see a confirmation about the code
change (Image 40).
Image 39
Image 40
Image 38
22
From now on, use the new PUK code that you just entered.
If you enter the code incorrectly, you will see an error description and can re-enter the
codes.
23
8 Settings and help
8.1 Language selection
In order to change the language:
1. Use your mouse to go to the language selection menu (Image 41).
Image 41
2. Click on your preferred language in the opening dropdown menu.
3. The selected language will appear in the language selection window and the
application’s user interface will be in another language.
8.2 Choosing between several ID-cards connected to the computer
The ID-card selection menu will only appear on the menu bar if several card readers
with ID-cards have been connected to the computer.
1. Click on the ID-card selection menu on the menu bar (Image 42).
2. A dropdown menu of all ID-cards that are connected will open.
Image 42
3. Click on your own ID-card number.
4. The application interface will display the selected ID-card’s card details and
personal details.
8.3 Preparing diagnostics report
The diagnostics window is the main tool for resolving problems that may occur in
installation and use of ID-card software.
The diagnostics report is primarily meant to be sent to ID-card’s user support,
however, more experienced users may use it to find information on resolving easier
problems: information on the card readers connected to the computer, etc.
1. Launch ID-card utility.
2. Click on Diagnostics in the settings and help section of the ID-card utility
(Image 43).
Image 43
24
3. The software collects information on your operating system, basic software
versions, card reader drivers and checks ID-card-related functions: card
authentication, reading the certificate list, reading the personal data file, etc.
4. A window will open with the pictured diagnostics report (Image 44).
5. If you cannot get your ID-card working on your own, save the diagnostics report
into a file by clicking Save.
6. Select the destination folder in the saving dialogue that opens.
The file containing the diagnostics report is saved in .txt format.
7. Email the report together with the error description to [email protected].
You will also see the installed software’s version number in the diagnostics report.
8.4 Settings
Click on the Settings button in the ID-card utility’s settings and help section (Image
45).
Image 45
In the ID-card utility’s settings window you can check ID-card software updates (In
MAC OS X) (Image 46).
Image 44
25
8.5 Help
Click on the Help button in the settings and help section of ID-card utility (Image
477).
Image 47
The ID-card utility user’s guide will open along with a link to the ID-card user
support website.
Image 46