Rutoken documentation

Page tree

Versions Compared

Old Version 8

changes.mady.by.user Технический писатель

Saved on

compared with

New Version Current

changes.mady.by.user Чернуцкая Милена

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents
maxLevel2

General information

Signs of correct connection of Rutoken devices to the computer 

The main signs of Rutoken devices connection are indicated in Table 1.

Table 1

How to know if your Rutoken device is connected

Each Rutoken device has a specific sign of connetion, these signs are listed in the tabe down below.

Device type

Sign of connection

Rutoken with USB and NFC interfaces

an indicator lights up on its body

Rutoken Smart Cards

Device name

Property

Token, Bluetooth Token, Token with Type-C, Token with NFC

the indicator lights up on the device

Smart Card

an indicator lights up on

the

a smart card reader

Warning
During operations with the Rutoken device, do not disconnect it from the computer in any case. This may lead to

Do not disconnect your Rutoken from a computer while working with it, it may cause an error.

Rutoken Control Panel

The Rutoken Control Panel is a software tool designed to service maintaine Rutoken devices in Microsoft Windows operating systemsOS. The Rutoken Control Panel is installed in the system when installing along with the "Rutoken Drivers for Windows" kit.

Types of users in the Rutoken Control Panel:

...

The User's PIN code is a password that is used to access the main functions of the Rutoken device.

The default User's PIN code is 12345678.

Administrator's PIN code

...

The default Administrator PIN PIN  is 87654321.

Connecting Rutoken devices to a computer

Connecting

...

a token

To connect Insert the token , insert it into the a USB port of the computer to connect it. If the a token is connected correctly, then an its indicator will light lights up on it.

Connecting a smart card

A smart card reader is used to connect the a smart card to the a computer.

Both, an empty reader and a reader with an inserted smart card, can be connected to the a USB port of the your computer.

To connect a smart card to a computer:

  1. Insert the a smart card into the a reader.
  2. Connect the a reader to the a computer's USB port. If the a smart card is connected correctly, the an indicator on the a reader will light lights up. If the a smart card is inserted into the a reader incorrectly, the an indicator on the a reader may blink. 

...

  1. start flashing. 

Connecting a Bluetooth-token

A Bluetooth-token is connected to a computer via a microUSB cable. If a Bluetooth-token is connected correctly, its indicator lights up.

Connecting a Rutoken with a Type-C connector to a computer

A Rutoken with a Type-C connector connects to a computer that has a special specific USB Type-C port. On some computers , this port is designated indicated as a Thunderbolt 3 (USB-C).

If the token a Rutoken with Type-C is connected correctly, then an its indicator will light lights up on it.

Launching

...

Rutoken Control Panel

There are several ways to launch the Rutoken Control Panel:

Method 1.  Launching from

...

a desktop of

...

your computer (

...

use it if there is a Rutoken Control Panel icon on

...

a desktop)

Use Double-click with the left mouse button to double-click on thea Control panelPanel icon located on the desktop a dekstop of the a computer.

Method 2.  Launching from

...

a Start menu (

...

use it if there is no Rutoken Control Panel icon on

...

a desktop)

For Windows 10:

  1. Click Search in Windowson Start.
  2. Enter the line Type "Rutoken" in the search box. If the English version of the operating system is used, then enter the line "Rutoken".into a search box and press enter. 
  3. Left-click on the name icon of the found program.

For  Windows 7:

  1. Click on Start.
  2. Enter the line Type "Rutoken" in the search box. If the English version of the operating system is used, then enter the line "Rutoken".into a search box and press enter. 
  3. Left-click on the name icon of the found program.

For  Windows XP:

  1. Click on Start.
  2. Left-click on the Search menu item.
  3. On the left side of the window called Search results window left-click on the Files and Folders link.
  4. Type "Rutoken" In the a field for specifying the file name, enter the line "Rutoken". If the English version of the operating system is used, then enter the line "Rutoken".
  5. Click on Find. 
  6. In the right part of the window , double left-click twice on the name of the found program.

Method 3.  Launching from

...

a computer Control Panel (

...

use it if

...

a taskbar is hidden)

  1. Launch the a dialog box. To do this, press the Press Win+R key combination.
  2. In the a dialog box, enter the type "control panel" line and clickpress OK.  
  3. In Control Panel click on the link Equipment and sound.
  4. Click on the link Rutoken Control Panel.

Device selection in

...

Rutoken Control Panel

If several Rutoken devices are connected to the your computer at the same time, then before starting to work , you need to select the a device with which operations will be performed.

To select a device:

  1. Launch the Rutoken  Rutoken Control Panel.
  2. Select a needed device on the Administration tab in the Connected Rutoken drop-down list called Connected Rutoken.

Checking

...

if device selection is correct

To check the correctness of the device selectionif a device collection is correct:

  1. Launch the Rutoken  Rutoken Control Panel.
  2. Select the needed Rutoken device.
  3. Click on Information. The Information about Rutoken window will open.
  4. If a Bluetooth token is selected, then it is necessary to compare the value in the ID field (the last 5 digits) with the numbers indicated on the Bluetooth token case.If a token is selected, then it is necessary to compare the value in the ID field with the numbers indicated on the token token's body.

Viewing information about the Rutoken device

To view information about the Rutoken device:

  1. Launch the Rutoken Control Panel.
  2. Select the needed Rutoken device.
  3. Click on Information. The Information about Rutoken window will open.

The description of the information about the Rutoken device presented in the control panel Rutoken devices is given in Table 2.

Table 2

Field

Description

Name

Personalized device

label

name

Model

General device name

of the device

System name

The name

Name used to designate the device in other applications

ID

Unique digital device identifier

Version

Rutoken device

Device's firmware version and status flags

Shared

Total memory (bytes)

The total amount of memory of the selected device

Free memory (bytes)

The amount of device memory (available to

the user

use)

The

User's PIN code can be changed

The policy selected to change the User's PIN on the device

Using UTF-8 in PIN codes

The

ability

possibility to safely use сyrillic

characters

symbols when setting a PIN code

CryptoPro FKC Support

The device supports

working

the work with CryptoPro Rutoken CSP via a secure FKC channel

Microsoft Base Smart Card Crypto Provider

The device supports

working

the work with a standard cryptography provider for Microsoft's smart cards

from Microsoft

The device is connected via RDP

Is

If the device is connected via

the

a RDP protocol

Viewing the version of the installed kit "Rutoken Drivers for Windows"

...

  1. Launch the Rutoken Control Panel.
  2. Go to the tab About the program. The current version of the "Rutoken Drivers for Windows kit " installed on the computer is indicated in the field Version of the Rutoken drivers. 

Entering the User's PIN code to work with

...

a Rutoken device

Warning
After entering an incorrect User's PIN code several times in a row, the Rutoken device is with be blocked. Only the Administrator of the Rutoken device device's Administrator can unlock it.

To enter the User's PIN code:

  1. Launch the Rutoken Control Panel.
  2. Select the Rutoken device.
  3. Check the correctness of the device selection.
  4. Click on Enter the PIN code.
  5. Check that the switch is set to User.
  6. Enter the User's PIN.
  7. Click OK.
  8. If an incorrect PIN code is entered, a message about it will be displayed on the screen. The maximum number of of attempts to enter the PIN code is indicated in the attempts left field. 

...

  1. Launch the Rutoken Control Panel.
  2. Go to the Settings tab.
  3.  Click on Configuration Settings. 
  4. In the section Settings of the Aktive Co. Rutoken CSP v1.0 crypto provider  select a method for generating RSA 2048 bit key pairs for Rutoken EDS. To do this, set the switch to the desired position.
  5. To apply the changes and continue working with the settings, click on Apply. 
  6. To confirm the choice of a cryptographic provider, click OK.
  7. In the window requesting permission to make changes on the computer, click Yes.

...

You can set the settings for the PIN code in the Rutoken Control Panel. The list of settings is specified in Table 3.

Table 3

Setting

Result of setting selection

Remember the PIN code from the app...

The PIN code is entered once when using the Rutoken device for the first time in the application

Offer to change the PIN code every time...

Every time after entering the PIN code, a message is displayed on the screen with a suggestion to change the PIN code (if the user has not changed the default PIN code)

Encoding the PIN code in UTF-8...

The PIN code can consist of Cyrillic characters

The Remember PIN-code setting allows you to reduce the number of PIN-code entries in applications due to their short-term storage by the crypto provider in encrypted memory. Do not use this setting if you are not sure about the security of the computer.

...

  1. The minimum length of the PIN code.
  2. The policy of using the default PIN code.
  3. The policy of using a PIN code consisting of a single repeated character.
  4. The policy of using a PIN code consisting only of digits.
  5. The policy of using a PIN code consisting only of letters.
  6. The policy of using a PIN code that matches the previous PIN code.

When installing the "Rutoken Drivers for Windows" kit, the policy settings are set by default.

...

  1. Launch the Rutoken Control Panel.
  2. Go to the Settings tab.
  3. Click on Configuration Setting.
  4. In the drop-down list called Consider the PIN code as "weak" when the length is less than select the required number.
  5. In the section Policies check the boxes next to the policy names.
  6. In order to have a message warning that the PIN code does not comply with the selected policies displayed on the screen when entering an incorrect PIN code, select the value "Warn" in the drop-down list If a "weak" ("medium") PIN code is set.
  7. In order to prohibit the use of a "weak" password, select the value "Prohibit use" in the drop-down list If "weak" PIN code is set.
  8. To set the default policies and behavior when changing the PIN code, click Set Default.
  9. To confirm the changes, click OK.
  10. To apply the changes and continue working with the policies, click on Apply.
  11. In the window requesting permission to make changes on the computer, click Yes.

View key pairs and certificates stored on the Rutoken device

...

  1. Connect a smart card with NFC support (NFC token) to the device.
  2. Launch the Rutoken Control Panel app.
  3. Click on the device name in the application window. A window with basic information about the Rutoken will open.

Working with the Rutoken Control Panel application

Changing the PIN code

  1. Connect the Rutoken to your Android device.
  2. Launch the Rutoken Control Panel application.
  3. To open the menu, click on the icon in the upper right corner of the Rutoken card Image Added.
  4. Select the menu item called Change the PIN code. The application will display a window for entering a new PIN code.
  5. Go to the tab User (to enter a new User PIN) or Administrator (to enter a new Administrator PIN).
  6. Enter the current PIN.
  7. Enter the new PIN code twice.
  8. Click OK.

Changing the Rutoken device label

To change the device label:

  1. Connect the Rutoken to your Android device.
  2. Launch the Rutoken Control Panel application.
  3. To open the menu, click on the icon in the upper right corner of the Rutoken card Image Added.
  4. Select the menu item called Change the token label. The application will display a window for entering the User's PIN code and a new label.
  5. Enter the User's PIN.
  6. Enter a new label.
  7. Click OK.

Unlocking the PIN code

To unlock the User's PIN code:

  1. Connect the Rutoken to your Android device.
  2. Launch the Rutoken Control Panel application.
  3. To open the menu, click on the icon in the upper right corner of the Rutoken card Image Added.
  4. Select the Unlock menu item. The application will display a window for entering the Administrator's PIN code and a button for unlocking the User's PIN code.
  5. Enter the Administrator's PIN.
  6. Click OK.

Specific features related to working with the Rutoken EDS Flash device

An important feature of the Rutoken EDS Flash device is the presence of managed Flash memory. It can be divided into sections, access to which is delimited using PIN codes. Such memory is called protected and its state remains unchanged during the formatting of the device.