For scenarios that require a commercial password application security assessment, you can apply for compliant CA certificates with a private key through the Certificate Management Service console. To apply for a compliant CA certificate using a local key container, you must first install the USBKey control and connect your USBKey to your computer. This topic describes how to install and use the USBKey control.
Limitations
The USBKey control is supported only on the Windows operating system.
USBKey control user guide
The USBKey control lets you view, import, and delete certificates. You can also use it to change the display name of your USBKey and modify the login passphrase.
Install the USBKey control
Install the USBKey driver.
Download the USBKey Driver and follow the on-screen instructions to complete the default installation.
Install the USBKey control.
Download the USBKey Control, TopESA381Installer, and TopESA381Installer-0407. Follow the on-screen instructions to complete the default installation.
View USBKey information
Open the USBKey control. If your USBKey is connected to your Windows computer, it automatically appears in the device list.
In the USBKey List on the left, click your USBKey to view details such as the device name, capacity, and version.
Change the USBKey passphrase
In the USBKey List, select your USBKey and click Change Passphrase.
In the left panel, enter the Original Passphrase, and then enter the New Passphrase and Confirm Passphrase. Click Modify.
NoteThe passphrase must be 4 to 16 characters in length. We recommend that you create a passphrase that is both easy to remember and sufficiently complex to improve security.
Change the USBKey name
In the USBKey List, select your USBKey and click Change Name.
In the left panel, enter a new USBKey name and click Modify.
View certificates
In the USBKey List, select your USBKey and click Certificate.
In the left panel, enter the USBKey passphrase and click Log On.
ImportantIf you enter an incorrect passphrase 10 times, the USBKey is locked. You must use the USBKey control management tool to unlock it.
Each incorrect attempt reduces the remaining login attempts by one. The remaining login attempts are not affected by reconnecting the USBKey or the passage of time. Only entering the correct passphrase restores the counter to its default value.
After the passphrase is verified, the certificate container appears. Open the container to view the certificate. Double-click alitest to launch the Windows Certificate Viewer and view the certificate details.
USBKey control management tool administrator guide
The USBKey control management tool is used by administrators to manage USBKeys, including initializing USBKeys and unlocking them after they are locked.
Install the USBKey control management tool
Download the USBKey Control Management Tool and extract the archive.
Double-click USBKey Control Management Tool.exe and follow the on-screen instructions to complete the default installation.
Initialize the USBKey
Initializing a USBKey clears and resets all its content, including certificates, containers, and all passphrases (including the SO PIN). This operation is irreversible and previous data cannot be recovered after it is performed. Proceed with caution.
Open the USBKey control management tool. If your USBKey is connected to your Windows computer, it appears in the device list.
In the USBKey List on the left, find your USBKey and select Administrator > Initialize.
In the right panel, on the Basic Information tab, click Initialize.
Unlock the USBKey
In the USBKey List on the left, find your USBKey and select Administrator > Unlock.
When prompted, enter the SO PIN.
The default SO PIN is
admin. You can change it by following the instructions in Change the SO PIN.After successful verification, you can set a new user passphrase for the USBKey.
NoteThe SO PIN and the New User Password must be 4–16 characters long. For better security, create complex but memorable values. Avoid using overly simple or complex values.
Delete key containers and certificates
Warning: When you delete a container, all certificates and private keys within it are permanently deleted. After deletion, the certificates become unusable, and you cannot reinstall them from the Certificate Management Service console. Proceed with caution.
In the USBKey List on the left, find your USBKey and click Certificate.
In the right panel, select the container you want to delete and click Delete Container.
Change the SO PIN
Note: The SO PIN is required to unlock the USBKey. After changing the SO PIN, store it in a secure location.
In the USBKey List on the left, find your USBKey and select Administrator > Change SO PIN.
In the right panel, enter the Current SO PIN, the New SO PIN, and confirm the new PIN in the Confirm SO PIN field. Then, click Modify.