From the Smart Card Interface panel, it is possible to select what smart card reader to use. This is useful if more than one smart card reader with valid smart cards inserted is connected to the computer. Selecting the reader is done using the drop down list.

The list of supported smart cards can be found from the Information tab.

To change the smart card administration key, select the Change Admin Key tab. Firstly, enter the current key value. If the card inserted is a card that has not had its administration key value changed, the current key would normally be the default key (0x48 zeros). This value is also, by default, entered when the application is started or when the Clear button is clicked. Enter the new administration key value and confirm the value. This can be done by entering the key value manually or by letting the application create a random key by clicking the Random button. If the Random button is used, it is recommended to copy the key value to a secure location for storage. This can be done by clicking the Copy button which puts the key value and the Card Serial Number (CSN) of the smart card into the copy buffer of the host system so it can be pasted into a file for storage. When the current and the new key have been provided and the card is connected, click the Write To Card button to set the new administration key value.

Important: it is possible to block the administration key if the current key entered during this process is presented in excess of the allowed number of entries. If the administration key becomes blocked the smart card will need to be replaced as it will not be possible to unblock the user PIN should the user block it in the future.

To change the smart card user PIN the Change PIN tab is used. Enter the current PIN, the new PIN and confirm the new PIN. If the smart card is a new smart card the Current PIN is often 0000. From the Change PIN for Key Container drop down list it is possible to change the PIN for a specific key container PIN type. This functionality depends on the supported smart card type used. This feature will only be enabled for smart cards that support multiple PIN types, therefore by default this functionality is disabled and with the PIN type set as the primary card PIN unless the attached smart card supports this feature. Please consult your smart card vendor documentation to determine whether the smart card used supports this feature. The PIN Policy panel will display the PIN policy set on the smart card that needs to be met in order for the change of PIN to succeed. When the Current and the New PINs have been provided and the smart card is connected, click the Write To Card button to change the user PIN.

In order to unblock the user smart card click the 1. Start button to begin the process. Ensure that a smart card is attached, and on clicking the button the vSEC:CMS® U2.3 will automatically get the CSN (smart card serial number) and the challenge. Click the 2. Copy button to copy the CSN and challenge to the system clipboard. These values can then be pasted, for example, to an email and should be sent to the smart card administrator in order for the administrator to find the corresponding administration key value for the smart card that is to be unblocked and which is used to generate the response unblock code. Next to the field there is a checksum of the challenge value that is automatically calculated and which should be used to validate that the correct values of the generated challenge are sent to the administrator. If the user knows the administration key value the user can click the 3. Proceed button which will present the screen (see the Calculate Response Screen below) where the user can enter the administration key value to generate the response code. Otherwise, the user will need to enter the response as sent by the administrator of the smart card into the Response field. Next to the field there is a checksum of the response value that is automatically calculated and which should be used to validate that the correct values of the generated response are received from the administrator. Click the Write To Card button to unblock the smart card and set the PIN. This will present the unblock PIN screen (see the Unblock PIN Screen below) where the user can enter their new PIN. From the Change PIN for Key Container drop down list it is possible to unblock the PIN for a specific key container PIN type. This functionality depends on the supported smart card type used. This feature will only be enabled for smart cards that support multiple PIN types, therefore by default this functionality is disabled and with the PIN type set as the primary card PIN unless the attached smart card supports this feature. In the dialog example below the smart card type supports multiple PIN types with the smart card provisioned with two PIN types set on the smart card. In this example the smart card has a Primary Card PIN and Encryption PIN set on the smart card. Select the PIN type that is to be unblocked. Please consult your smart card vendor documentation to determine whether the smart card used supports this feature. The unblock screen PIN Policy panel will display the PIN policy set on the smart card that needs to be met in order for the unblock of PIN to succeed.

Important: the smart card should not be removed and the tab should remain open during the process as there is a one to one relationship between the challenge and response.

Using the Certificate tab it is possible to manage the digital certificates stored on the smart card. If there are any certificates stored on the smart card the details will be presented in a table. The vSEC:CMS® U2.3 supports certificates in the following formats:

• .cer or .der format
• .pfx or .p12 format

Note: the PIN column provide the information on what PIN type is set for the key container that stores the certificate.

From the Information tab, general information about the vSEC:CMS® U2.3 is displayed. The supported smart card types are listed along with a legal notice regarding the usage of vSEC:CMS® U2.3.