NCR Self-Signed Certificate User Manual
Contents
1. NCR Self Signed Certificate B x Fille Help Input Process Status Validation of input data FSA Key File D AL2048E 0006553752006081 7082746734 R SA Browse Validation of input data succeeded Hash Algo ID SHAT The RSA File is valid Send call to the DEP Crypto Module Receive answer from the DEP Crypto Module Valid answer received Output Directory D AL2048E 00065537 Browse The Self Signed Certificate is written into the following D L2048E 00065537 pktest_1 txt The Fingerprint is written into the following file Properties of the output files D L2048E 00065537 pktest_1_Fingerprint txt UserName test Index fi Numeric gt 0 Fingerprint Algo ID SHAT oil Generate NCR Self Signed Certificate 2 Connected to 172 24 14 249 Crypto Module number 01 Description format of the parameters Field Name RSA Key File This field contains the file name of the RSA Key to use Hash Algo ID Identifier of the hash algorithm used for the generation of the Self Signed Certificate Accepted values SHA1 SHA256 and MDS Output Directory used for writing the 2 output files This Directory value is stored and reused the next time the application 15 started as default output directory UserName Represent the parameter UserName of the output file Represent the parameter Index of the output file Fingerprint Represents th2. C Program Files Banksys DEP_NMS PlugInsNCR SelfSignedCertificate NCR SelfSignedCertificate exe This 15 the default path Possibly another path can be defined during the installation paragraph 6 on page 13 The application can also be launched directly from the DEP NMS program For more details please refer to the DEP NMS User Manual Before starting the application when the application is not launched from the DEP NMS the communication must be defined paragraph 5 3 on page 7 5 2 DESCRIPTION Once the NCR Self Signed Certificate 1s started the following window is opened NCR Self Signed Certificate B x File Help Input Process Status RSA Key Browse Hash Algo ID Output Directory Browse Properties of the output files UserName Index Numeric gt 0 Fingerprint ID SHAT 4 Generate NCR Self Signed Certificate Connected to 172 24 14 249 4 Crypto Module number 01 In this window the user can find A memo blank part which will log the operations and their results banksys Technologies amp Products Page 7 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted e A menu at the top of the window that allows to have a look at the program version and also contact the DEP Hotline the help files or to exit The left panel contains list of parameters needed to generat
3. a NCR Self Signed Certificate and a Fingerprint on a RSA Public Key The document doesn t explain the functionalities of the DEP libraries on which this program is based 3 REFERENCES This document contains references to other documents about the DEP This paragraph gives a list of all the documents referred to DEP Host Interface Protocol DEP NMS User Manual DEP NT DEP Handler Supervision Program User Manual DEP Linux User Manual DEP T6 Owner Manual There are no references made to the following documents but they could be useful to understand this document PKI Library for DEP Reference DFS Manual DEP Introduction to DEP DEP General Architecture DEP Glossary DEP RSA Key Generation User Manual PURPOSE NCR SELF SIGNED CERTIFICATE PROGRAM The purpose of this program is to generate a NCR Self Signed Certificate and compute a Fingerprint on a RSA Public Key The program 15 intended to be used on a PC running on Microsoft Windows 2000 that 15 connected to a DEP Platform loaded with a DEP Application Software that can import RSA Keys and generate a PKCS10 Self Sign Certificate banksys Technologies amp Products Page 6 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted 5 USE OF NCR SELF SIGNED CERTIFICATE The installation procedure is reported to the Annex 1 on page 13 5 1 START UP The NCR Self Signed Certificate can be launched by executing
4. BDA ZEBSES3C 178D902093BH2856C5663D 8165 13E 1 991E73733R82RR5F 4 7DBETASS6 8856 BBESG6RBRA1879571293D387 2L OBC 1 1482 792FE158F9EZ3FDDDRGF 184n55CB205578545ED2E115nR826C6696416R8F EFDT1BS3A3EEBGF2B9F66332DDR2C6285CD336C 34885 SE527ESBH 1138D28B87F55438D92FBCFRA3BA483F86B8D339n53BR3E7 hBCEDBZ882745818CDCB5C65F372826EE42H3565493FB DO313 7 1B 4B2R 7 SAE 67 7 187ERGG6FB 6Rn 7D BBOSE A ACS 89 BCEPEG SIDA 516R0C8FCBSE26658BE 7BRn9 FAB69D CDFFAOSEFAE7 B46CCC927E GAZEAZE 671 85 H4 8552 BGBDABTBEPCFCCFSS3FAFFB7945F38CDBO775BW825 1B2985BB 5 4 2 Fingerprint file i pktest 1 Fingerprint Ext Notepad L BJ x Edit Format Help Fingerprint Algorithm SHA1 Ualue D1C6DD382B796Ch2B383b 7DBDRBS3537FBBD375163 This file contains two fields e The algorithm used for the generation of the fingerprint e The value of the fingerprint 5 5 LOGGING FILE When the user closes the application a logging file 15 created updated in installation directory NCR SelfSienedCertificate log txt banksys Technologies amp Products Page 11 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted es NHCAR_SelfSignedCertificate_log_txt Notepad Edit Format Help 25 18 2686 send call to the DEP Crypto Module Receive answer from the DEP Crypto Module Bad answer received Validation of input data The default Index is taken 1 The default UserName is
5. Module represents the DEP Crypto Module used to generate the self signed certificate the first byte will be always 01 and the second byte defines the target module 01 to 04 The four last parameters are described in the DEP Documentation DEP Host Interface Protocol 5 3 2 TCP IP Configuration window When the application starts in stand alone mode a configuration window appears with the last used parameters Configuration BI TCP IP Address i 2024004244 TCP IP Part o Response Time an Module Number i H Cancel The user can accept the parameters define another or click on cancel The Cancel button corresponds to use the default parameters even though the fields are modified The signification of the different fields is available in the previous chapter The input of the user is checked when he clicks on OK and an error message appears if necessary Error Please enter an integer value for the field Max Response Time The values are stored in the ini file NCR SelfSignedCertificate ini and will be reused as default value the next time that the application will be started 5 4 HOW TO GENERATE NCR SELF SIGNED banksys Technologies amp Products Page 9 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted CERTIFICATE All the fields on the left panel must be filled in
6. e hash algorithm used for the Algo ID generation of the fingerprint Accepted values are SHAI SHA224 SHA256 SHA384 SHA512 MD5 and 2 When the user clicks on Generate NCR Self Signed Certificate the TCP IP connection to the DEP Crypto Module 15 established and the certificate 1s generated banksys Technologies amp Products Page 10 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted The right panel shows the progress of the import The validation of the input data The validation of the RSA file The status of the call sent to the DEP Crypto Module The confirmation of the generation of the certificate The eventual errors 5 4 1 Certificate file i pktest_1 txt Notepad 2 Bl x Edit Format Help 3292 61 GA 8282 61 81 B6B2661D058149A106 82 7B1752BR3D BBSCI6F 6438906 691 SDICDFE FFOFDS82C7A6CEIBS9 SHRIBCGS S42 DS BAC HBSSES TED ORBCESCBR 25SATESSOBECBSES SS 29CSCREE BIBO9SR 1BETB 44 1F GEG9 154EE9 BA E669 BRBBBOA34CD69231D2680925437FG64DED1231D 83137 4DFB2EH159D9 11DDGECO3B2 OF GEFSBGES 4SAFGODFE1 96RDF827F5RBAaAShS6EC ODZ7R121D168935DOBBRRCFB58DE9A4F 18HF 7345239 46 B SESS CES 8223332 4BS3L DRE 188BC E8BRh n7 OLEbS9SBT76C5 190 DDE2 8D32567 38F2582DEDDEOBS 4 1F BC 1BSAF OD 7 BDGECBG6FB276 BE9 H2B3B397 35D1F82546HBD BCE3BEG6T1E10 7989965054505 7EDB260339719215 890765 88 6 BES6CCSAD B6R DA 2R9E224302838188816BBD883254H81hn538BF hn 11E 86335 2C
7. e the NCR self signed certificate and the fingerprint e A status bar contains the name or the TCP IP address of the connected platform and the DEP Crypto Module number used for the generation of the self signed certificate 5 3 COMMUNICATION If the application is launched by the DEP NMS the communication is automatically set by the DEP NMS If the application 15 used as stand alone application the user has two possibilities use the file SelfSignedCertificate ini usethe TCP IP Configuration for that appears at the start of the application 5 3 1 INI File LX SelfSignedCertificate im Notepad Edit Format Help GeneralParameters HbofDesiredConnections 1 Connection 8 Hddress 172 25 15 2549 Port 1 d d Timeout 18 6668 TimeoutConnection 5 668 Module 6181 1 SBHSBmnade L SB LSBHSBLength 4 DEPHagicHumber FE DEPUersionHumnber 3H NbOfDesiredConnections must be set to 1 e Address represents the IP address of the target DEP Platform e Port represents the TCP IP port used for the communication with the DEP Platform TimeOut represents in milliseconds the maximum waiting time for response from the DEP Crypto Module banksys Technologies amp Products Page 8 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted TimeOutConnection represents in milliseconds the maximum waiting time for establishing a connection e
8. end to end transactions Haachtsesteenwe g 1442 1130 Brussels Technologies amp Products Belgium DEP Documentation NCR Self Signed Certificate User Manual Version 01 01 Classification Restricted banksys Technologies amp Products Page 2 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted First version After review banksys Technologies amp Products Page 3 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted CONFIDENTIALITY The information in this document is confidential and shall not be disclosed to any third party in whole or in part without the prior written consent of Banksys S A N V COPYRIGHT The information in this document is subject to change without notice and shall not be construed as a commitment by Banksys S A N V The content of this document including but not limited to trademarks designs logos text images is the property of Banksys S A N V and is protected by the Belgian Act of 30 06 1994 related to author s right and by the other applicable Acts The contents of this document must not be reproduced in any form whatsoever by or on behalf of third parties without the prior written consent of Banksys S A N V Except with respect to the limited license to download and print certain material from this document for non commercial and personal use only nothing contained in this document shall grant any license or right to u
9. ksys Technologies amp Products Page 4 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted 1 TABLE OF CONTENTS 1 TABLE CONTENT S 4 2 SCOPE OF THE DOCUMENT 5 3 REFERENCES a a aae 5 4 PURPOSE OF NCR SELF SIGNED CERTIFICATE PROGRAM 5 5 USE OF NCR SELF SIGNED CERTIFICATE ecce eee e eere enne 6 S n 6 22 DESCRIPTION sonet ee eh ee 6 5 33 SCOMMUNICATION d t ctntdistess 7 INT TTC Land des 7 Ioa TCP IP Wind OW etui etu E EA 8 5 4 HOW TO GENERATE NCR SELF SIGNED CERTIFICATE 8 5 4 1 E E FU EA AE EAN IE EEE EE 10 5 4 2 V SLA a TET 10 MEC c cider E 10 5 0 ERRORS DURING EXBCUTION uet tude ett nd bi ap Ead 11 5 6 1 Valid tion Of input dala eoe tant esses et ein ee eus doutes esterne petens 11 5 6 2 Validation of the DEP Crypto Module sse 11 5 6 3 Error code from the DEP Crypto Module sss 12 6 ANNEX 1 INSTALLATION PROCEDURE ccce eee eee nnn 13 banksys Technologies amp Products Page 5 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted 2 SCOPE OF THE DOCUMENT This document describes the NCR Self Signed Certificate program This PC program can be used to generate
10. se any of Banksys S A N V s proprietary material LEGAL DISCLAIMER While Banksys S A N V has made every attempt to ensure that the information contained in this document is correct Banksys S A N V does not provide any legal or commercial warranty on the document that is described in this specification The technology is thus provided as is without warranties of any kind expressed or implied included those of merchantability and fitness for a particular purpose Banksys S A N V does not warrant or assume any legal liability or responsibility for the accuracy completeness or usefulness of any information product or process disclosed To the fullest extent permitted under applicable law neither Banksys S A N V nor its affiliates directors employees and agents shall be liable to any party for any damages that might result from the use of the technology as described in this document including without limitation direct indirect incidental special consequential and punitive damages lost profits JURISDICTION AND APPLICABLE LAW These terms shall be governed by and construed in accordance with the laws of Belgium You irrevocably consent to the jurisdiction of the courts located in Brussels for any action arising from or related to the use of this document sa Banksys nv Chauss e de Haecht 1442 Haachtsesteenweg B 1130 Bruxelles Brussel Belgium RPM RPR Bruxelles Brussel TVA BTW BE 0418 547 872 ban
11. taken xxxxxx Validation of input data succeeded 25 16 2666 This file contains the copy of the right window 5 6 ERRORS DURING EXECUTION 5 6 1 Validation of input data Some verifications are made before sending the call to the DEP Crypto Module and messages are displayed For example Error C The value of Index must be gt 0 empty Selecting the button sets the focus to the erroneous field for correction 5 6 2 Validation of the DEP Crypto Module After the input validation the application performs a DEP Crypto Module validation e Isthe DEP Crypto Module on line unlocked banksys Technologies amp Products Page 12 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted Does the DEP Crypto Module contain a valid DEP Application Software 5 the DEP Application Software able to import RSA Keys e Is the DEP Application Software able to generate PKCS10 self signed certificate e Is the key K PKI RSA TRANSPORT KEY loaded in the DEP Crypto Module If one of the verification failed a warning window 15 displayed Warning E4 Please load the corect application software N The called functionality i nat possible the loaded application software the interface IMPORT KEY is missing All warning windows disappear automatically when the problem is solved For example when the correct capability 1s loaded or when the DEP Cr
12. ypto Module 15 set on line unlocked AN The DEP Crypto Module is in OFF LINE LOCKED made Please select ON LINE UNLOCE made The user can also click on the OK button solve the problem and click again on Generate NCR Self Signed Certificate button 5 6 3 Error code from the DEP Crypto Module After all verifications are done successfully a call is sent to the DEP Crypto Module When no problem occurs the Self Signed Certificate 1s generated otherwise an error message 1s returned For example Error x e The 0 KEY present in the selected ASA file seems to be invalid F207 25000003000 0000 banksys Technologies amp Products Page 13 13 NCR Self Signed Certificate User Manual 01 01 Classification Restricted 6 ANNEX 1 INSTALLATION PROCEDURE There exists an installation procedure for the NCR Self Signed Certificate Program To begin the installation wizard of the program start the Setup exe The destination folder window allows defining the path where the application 15 installed The following default path is advised i HCA Sell Signed Certificate InstallShield Wizard Destination Folder Click Next to install to this Folder or click Change to install to a different Folder Install WCR Self Signed Certificate to Program FilesiBanksys DEP 5 Self Signed Change Certificate Installshield Cancel
Download Pdf Manuals
Related Search