HID Crescendo C1150 Administration Guide - Manual (Page 13)

HID Global Crescendo C1150 – Administration Guide
November 2013 Page 13 of 115
© 2013 HID Global Corporation. All rights reserved.
 Document signature with Microsoft Office and Adobe Acrobat
 File encryption with Windows EFS
 Disk encryption with Windows BitLocker To Go
 Compatibility with more applications based on Microsoft CAPI / CNG
Both middleware options support some basic card management services:
 PIN change
 PIN unlock (with Mini Driver, not applicable to all deployment modes – requires a card
management system or utility to support the challenge / response unlock model)
2.4.2 Additional Services Available with ActivClient
The following services are available only with the ActivClient middleware:
 ActivClient is compatible with a wider range of PKI-enabled applications thanks to a
PKCS#11 compliant library:
 Web authentication with Firefox.
 Email signature and encryption with Lotus Notes and Thunderbird.
 Compatibility with more applications based on PKCS#11.
 ActivClient provides usability enhancements with Microsoft Outlook, enabling users to
sign and encrypt emails without the need to learn how to configure and use it.
 Outlook is automatically configured on card insertion with the user’s signature and
encryption certificates. This guarantees that users are using up-to-date credentials,
and no longer use software certificates. This also automatically configures the hash
and encryption algorithms for consistency within an organization.
 Certificates are automatically published to the Exchange Global Address List (GAL)
on card insertion. This guarantees that all email encryption is performed with up-to-
date certificates.
 Contacts’ certificates are automatically added to the user’s Outlook Contacts upon
reception of an email.
 Option to automatically decrypt and save encrypted emails. This guarantees that
older encrypted emails can be read even if old encryption key is not on the card.
 ActivClient provides usability enhancements with Firefox and Thunderbird, making it
easier to use PKI services with Mozilla products: ActivClient PKCS#11 library is
automatically registered into these apps, to automatically enable new users with smart
card services, negating the need for additional configuration and training.