HID Crescendo C1150 Administration Guide - Manual (Page 10)

HID Global Crescendo C1150 – Administration Guide
Page 10 of 115 November 2013
© 2013 HID Global Corporation. All rights reserved.
2.3.1 Standalone Mode with Mini Driver
This is the simplest (and also least secure) mode in which the Mini Driver can be installed and
used with the Crescendo C1150 card to provide the following services:
 The card comes with a default PIN code (00000000) that you can change at any time:
 On Microsoft Windows Vista and 7 - using the native Ctrl+Alt+Del Change
Password feature.
 On Microsoft Windows XP - using the Microsoft PIN Tool (pintool.exe) included
with the Base Smart Card CSP package.
 While there is no “simple” PIN unlock feature, if you know the ADMIN Key (set to a
default binary value 000000000000000000000000000000000000000000000000) and
have a tool to generate a response based on the challenge (3DES algorithm), you can
unlock the card.
The user can then use the Microsoft Windows 7 or Windows 8 PIN Unlock user
interface. It is recommended that you use card management software to manage these
keys.
 You can download a certificate onto the card from the Microsoft Certificate Authority (or
other CA), by selecting the Microsoft Base Smart Card CSP.
 You can use certificates for standard PKI services based on the Mini Driver, such as
Windows logon, authentication to web sites (with Internet Explorer) and PKI-compatible
VPNs, email signature and encryption (with Microsoft Outlook).
For further information, see chapter 4.0 Managing a Smart Card with the Mini Driver on page
20 .
2.3.2 Standalone Mode with Advanced Middleware
Using advanced middleware such as ActivID ActivClient, you have access to additional card
management services, and you can use your card with more applications.
 You can initialize a Crescendo C1150 card with the ActivClient PIN Initialization Tool,
resetting the PIN from the default value and obtaining a static unlock code.
 You can change the PIN using the ActivClient PIN Change Tool (on any Windows
version).
 If the card PIN is locked, you can unlock it with the static unlock code displayed at
initialization.
 You can reset the card with the ActivClient PIN Initialization Tool.
 You can download a certificate onto the card from the Microsoft CA (or other CA) by
selecting the ActivClient CSP.
 You can use certificates for standard PKI services based on the CSP or PKCS#11
technologies, which provides more options than in the previous mode – such as
Windows logon, authentication to web sites (with Internet Explorer or Mozilla Firefox)
and PKI-compatible VPNs, email signature and encryption (with Microsoft Outlook or
Lotus Notes).
 The user can use other ActivClient services for improved usability (card management
utility, card activity notification, application auto-configuration, etc.).