1

ID-card Utility User’s Guide

Versioon 1.0

2

Dokumendi

informatsioon

Loomise kuupäev 01. oktoober 2010

Teema ID-kaardi haldusvahendi kasutusjuhend

Kellele Avalik

Koostajad

OÜ Smartlink, AS Sertifitseerimiskeskus, Riigi

Infosüsteemide Arenduskeskus

Versioon 1.0

Versiooninfo 1.0 – dokumendi kaasajastamine

3

Contents

1 Launching ID-card utility ...................................................................................... 4

2 ID-card utility’s user interface ............................................................................... 5

3 ID-card and personal data ...................................................................................... 6

3.1 Downloading and saving ID-card’s document picture ............................................. 6

4 Certificates and PIN codes ..................................................................................... 9

4.1 Changing PIN codes ................................................................................................. 9 4.1.1 Changing PIN codes using PUK code ............................................................................ 11

4.2 Revoking certificate use blockages ........................................................................ 12

4.3 Viewing certificate details and saving certificates ................................................. 13

4.4 Updating certificates .............................................................................................. 15

5 @eesti.ee email configuration and viewing forwarding information .................. 17

6 Activating Mobile-ID and viewing Mobile-ID data ............................................ 19

7 Changing PUK code ............................................................................................ 21

8 Settings and help .................................................................................................. 23

8.1 Language selection ................................................................................................. 23

8.2 Choosing between several ID-cards connected to the computer ............................ 23

8.3 Preparing diagnostics report ................................................................................... 23

8.4 Settings ................................................................................................................... 24

8.5 Help ........................................................................................................................ 25

4

1 Launching ID-card utility

Windows

Select START → Programs → ID Card → ID-card Utility or click on

the ID-card utility icon on your computer desktop.

Mac OS X

Select Applications → ID-Card Utility or click on the ID-card utility icon

in Dock.

Linux

Select Applications → Accessories → ID-card Utility or launch from command line

with the command qesteidutil.

The ID-card utility link also appears in DigiDoc3 Client and DigiDoc3 Crypto when

the signature or authentication certificate is about to expire or has expired (Image 1):

Image 1

5

2 ID-card utility’s user interface

Using ID-card utility you can read its owner’s personal data from the ID-card, save

certificates to file, change PIN and PUK codes, unblock locked PIN1 and PIN2 codes

and see statistics on used signature and authentication certificates. You can also

configure the ID-card application’s settings, such as ID-card software updates

installation.

The user interface (Image 2) contains four main sections:

ID-card and personal data section is constantly visible when the programme is

running.

Actions section lets you:

o View and, if necessary, update certificates and change PIN codes

o Configure and view the forwarding of your @eesti.ee email address

o Activate Mobile-ID and view its validity

o Change PUK code

Action content section enables you to perform your selected actions. Actions-

related information and explanations are also displayed here.

Settings and help section helps you find solutions to potential problems and

configure ID-card software. Here, you can:

o View the diagnostics report

o Change settings

o Find help to resolve problems

o Change the language

o Choose between several ID-cards that are connected to the computer

Image 2

ID-card and personal

data section Actions

Action content

Settings and help

6

3 ID-card and personal data

ID-card and personal data section (Image 3) contains the ID-card owner’s, ID-card’s

and ID-card validity information. This information is constantly visible when the ID-

card utility is running.

If for some reason it isn’t possible to read data from the ID-card, personal data will be

replaced with an error description, for example (Image 4):

3.1 Downloading and saving ID-card’s document picture

The photo on your ID-card originates from the Police and Border Guard Board

database. You can download your photo from there using the ID-card utility and save

it.

1. Launch ID-card utility.

2. Click on the words Load picture on the ID-card utility interface (Image 5).

Image 4

Image 3

7

3. Enter PIN1 in the dialogue window that will open (Image 6) and click OK.

By entering the PIN1 code you confirm that you are the rightful holder of

the ID-card used for loading the picture.

4. The photo downloaded from Police and Border Guard Board’s database is

displayed in the ID-card utility (Image 7).

5. Click on the word Save below the photo in order to save it.

6. Select the folder you would like to save the photo into in the saving window

that will open.

7. Here you can rename the photo and select the picture format (Image 8). Click

Save and your picture has been saved.

Image 7

Image 6

Image 5

8

Image 8

9

4 Certificates and PIN codes

When you open ID-card utility, as well as when you click on the Certificates button in

the actions section, you will see the pictured information on certificates (Image 9).

Among other information you will see how many times you have authenticated

yourself and signed digitally with the certificates in use.

If the certificate is invalid or fewer than 105 days remain until the certificate’s expiry

or use of the authentication or signature certificate has been blocked then it will be

clearly visible next to the certificate with a problem (Image 10). The button to update

certificates or revoke blocking will also be here.

4.1 Changing PIN codes

Procedure for changing the PIN1 and PIN2 code is essentially the same: you need to

enter the existing code once and the new code twice.

Permitted code lengths are different: PIN1 code must be within 4–12 digits and

PIN2 code must be within 5–12 digits.

The new code must be different from the existing code, only include numbers

and must not include your date or year of birth. If the entered new code doesn’t

comply with these rules, you will see an error message and will get a chance to

re-enter the code.

Image 10

Image 9

10

Important: if you enter an incorrect PIN1 or PIN2 code three times then the

use of authentication or signature certificate will be blocked and you cannot

authenticate yourself or sign digitally with your ID-card. You can revoke the

blockage with your PUK code.

1. Launch ID-card utility and click on the Certificates button in the actions

section.

2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2).

Image 11

3. The change PIN code window will open (Image 12).

4. Enter the existing PIN code.

5. Enter your new PIN code twice and click Change.

6. The PIN code will be changed. You will see a confirmation about the changed

code (Image 13).

From now on, use the new PIN code that you just entered.

Image 13

Image 12

2 2 1 2

11

If you make a mistake in repeating the code, you will see the error message

and can re-enter the codes.

4.1.1 Changing PIN codes using PUK code

You can change PIN codes even if you have lost your old PIN codes. In that case you

will need your PUK code to change the PIN codes.

1. Launch ID-card utility and click on the Certificates button in the actions

section.

2. Click the button Change PIN1 (Image 11, 1) or Change PIN2 (Image 11, 2).

3. In the PIN code change window that will open, (Image 14) select Change PIN

code using PUK code.

4. A new window for changing the PIN code will open (Image 15).

5. Enter the PUK code.

6. Enter the new PIN code twice and click Change.

7. The PIN code will be changed and you will see a confirmation of the code

change (Image 16).

Image 15

Image 14

12

From now on, use the new PIN code that you just entered.

You can also initiate PIN code change using PUK code in the PUK code section of

the user interface (Image 17).

Image 17

4.2 Revoking certificate use blockages

You will see a message like this next to the blocked certificate (Image 18).

1. Launch ID-card utility and click on the Certificates button in the actions

section.

2. You will see the details of the certificate that is blocked for use in the

certificates section of the user interface window, click Revoke blocking.

3. The PIN code blockage revocation window will open (Image 19).

Image 19

Image 18

Image 16

13

4. Enter PUK code.

5. Enter new PIN code twice and click Change.

6. The certificate use blockage will be revoked, PIN code will be changed and

relevant message displayed (Image 20).

From now on, use the new PIN code that you just entered.

If you make a mistake in entering the code, you will see the error description and can

re-enter the codes.

If you enter your PUK code incorrectly three times it will also be locked. Then you

can no longer use your card, you need to go to a customer service centre where you

will get a new code envelope for your card. You can also get help from the customer

service centre if you have lost your old code envelope and have forgotten all of your

codes. You will see the list of customer service centres online from

http://www.sk.ee/kontorid.

4.3 Viewing certificate details and saving certificates

In order to view all the data on certificates and to save certificates, do the following:

1. Launch ID-card utility and click on the Certificates button in the actions

section.

2. You will see the certificates’ key data (Image 21).

3. Click on the View details button below the authentication certificate (Image 21,

1) or signature certificate (Image 21, 2).

4. The certificate details window will open (Image 22 and Image 23). On its two

tabs you can view technical certificate information.

Image 21

Image 20

1 2

14

The certificate display method depends on your operating system but the

contents are the same.

5. Authentication certificate details (Image 22).

6. Signature certificate details (Image 23).

7. Go to the Details tab to save the certificate.

8. Click the Save button.

Image 23

Image 22

15

9. Select the folder you would like to save the certificate into in the saving

dialogue that will open. You can also rename the file here and set the file format

(Image 24).

10. Click the Save button.

If a certificate file of the same name already exists in the destination folder

then it will prompt you whether to overwrite it or not.

4.4 Updating certificates

The ID-card utility only enables you to update certificates if they are expired or there

is fewer than 105 days until expiry. You cannot update certificates on an expired ID-

card. Apply for a new ID-card from the Police and Border Guard Board.

Your computer must have a working internet connection in order to update

certificates.

Important! Removing the ID-card from the card reader before the certificate updating

process is complete may damage the ID-card’s electronic part. Don’t terminate the

updating process before you see a confirmation on the success or failure of the

update.

1. Launch ID-card utility and go to the Certificates section.

2. If certificates are expired or are about to expire (105 days until expiry), the button

Update certificate will appear in the certificate’s general details section (Image 25).

3. A recommendation to close all applications using the ID-card will be displayed.

Close the mentioned applications and confirm your request to continue updating

certificates by clicking Yes (Image 26).

Image 25

Image 24

16

Image 26

4. Enter the PIN1 code in the dialogue window that will open (Image 27).

5. New keys will be generated as certificates are updated, certificate requests are

submitted, certificates are loaded onto the ID-card and finally new certificates will

be activated. You will see information on the ongoing process on your screen, it

will take 3–10 minutes.

6. Once updating has been completed, you will get a message that Certificate update

was successful and you will see new validity data in the certificate general details

section.

You can also update certificates online by going to http://www.sk.ee/id-kontroll

and at customer service centres, the list of which is available online at

http://www.sk.ee/kontorid.

Image 27

17

5 @eesti.ee email configuration and viewing forwarding information

You can use ID-card utility to forward your @eesti.ee email to one other email

address only if you have no valid forwarding already set up for your @eesti.ee

email address.

In case you have a valid forwarding already set up for your @eesti.ee email, you

can view the addresses where your emails are being forwarded using ID-card

utility. You can edit and add forwarding information in the State Portal eesti.ee.

1. Launch ID-card utility and click on the @eesti.ee e-mail button in the actions

section (Image 28, 1).

Image 28

2. Click the button Check your @eesti.ee email settings (Image 28, 2).

3. Enter your PIN1 in the window that opens and click OK (Image 29).

4. The email settings window will open.

If your @eesti.ee emails have already been forwarded, you will see your

official email addresses and addresses where email has been forwarded to,

instead of the email settings window (Image 30). You can edit your

forwarding information at the State Portal eesti.ee.

Image 29

1

2

18

5. Enter the email address where you would like your @eesti.ee emails to be

forwarded and click Activate @eesti.ee email.

Your email address must be in the format nimi@domeen.xx. If you enter

an email address in the wrong format then an error message will be

displayed and you can re-enter your email address.

6. Enter PIN1 in the dialogue window that opens and click OK (Image 32).

7. A message will be displayed that a forwarding address activation key has been

sent to the email address you entered.

8. You will receive an email to the address you just entered, containing a link and

code for activating the email address along with instructions on how to do it.

You must log on to the State Portal eesti.ee in order to activate the forwarding

address and confirm your email forwarding address.

o If you entered an email address that you have previously used in the

eesti.ee system then active email settings will be loaded automatically.

You will receive an email containing a message about the successful

forwarding and you will not have to confirm your forwarding address

at the State Portal eesti.ee.

Image 32

Image 30

Image 31

19

6 Activating Mobile-ID and viewing Mobile-ID data

In the ID-card utility’s Mobile-ID section you can view your Mobile-ID details. You

can also activate the Mobile-ID service if you have received a new supported SIM

card from your mobile provider. You will find more information on id.ee.

1. Launch ID-card utility and click on the Mobile-ID button in the actions section

(Image 33, 1).

2. The Mobile-ID settings window will open.

3. Click on the button Check Mobile-ID status (Image 33, 2).

4. Enter your PIN1 code in the dialogue window that opens and click OK (Image

34).

If your Mobile-ID service has been activated, you will see the status of

your Mobile-ID certificates.

Image 33

Image 34

Image 35

1

2

20

If you are not a Mobile-ID service user, you will get the following

message (Image 36).

5. If your Mobile-ID service has not been activated, you can activate the Mobile-

ID service by clicking on the button Activate Mobile-ID service (Image 37).

You will be forwarded to the Certification Centre’s (SK) website

www.sk.ee/midaktiveerimine in order to activate Mobile-ID.

Image 36

Image 37

21

7 Changing PUK code

You will receive your PUK code in a code envelope together with your new ID-card

from the customer service centre.

When you go to the PUK code section of ID-card utility then you will see an

explanation of what PUK code is (Image 38) and you can change the PUK code. You

can also change PIN codes using PUK code.

1. Launch ID-card utility and click on the PUK code button in the actions section.

2. Click on Change PUK in the PUK code window that opens.

3. The change PUK code window will open (Image 39).

4. Enter your existing PUK once and your new PUK code twice, then click

Change.

The new code must be different from your old code, must be 8–12 digits

long and must not include your date or year of birth.

5. The PUK code is changed and you will see a confirmation about the code

change (Image 40).

Image 39

Image 40

Image 38

22

From now on, use the new PUK code that you just entered.

If you enter the code incorrectly, you will see an error description and can re-enter the

codes.

23

8 Settings and help

8.1 Language selection

In order to change the language:

1. Use your mouse to go to the language selection menu (Image 41).

Image 41

2. Click on your preferred language in the opening dropdown menu.

3. The selected language will appear in the language selection window and the

application’s user interface will be in another language.

8.2 Choosing between several ID-cards connected to the computer

The ID-card selection menu will only appear on the menu bar if several card readers

with ID-cards have been connected to the computer.

1. Click on the ID-card selection menu on the menu bar (Image 42).

2. A dropdown menu of all ID-cards that are connected will open.

Image 42

3. Click on your own ID-card number.

4. The application interface will display the selected ID-card’s card details and

personal details.

8.3 Preparing diagnostics report

The diagnostics window is the main tool for resolving problems that may occur in

installation and use of ID-card software.

The diagnostics report is primarily meant to be sent to ID-card’s user support,

however, more experienced users may use it to find information on resolving easier

problems: information on the card readers connected to the computer, etc.

1. Launch ID-card utility.

2. Click on Diagnostics in the settings and help section of the ID-card utility

(Image 43).

Image 43

24

3. The software collects information on your operating system, basic software

versions, card reader drivers and checks ID-card-related functions: card

authentication, reading the certificate list, reading the personal data file, etc.

4. A window will open with the pictured diagnostics report (Image 44).

5. If you cannot get your ID-card working on your own, save the diagnostics report

into a file by clicking Save.

6. Select the destination folder in the saving dialogue that opens.

The file containing the diagnostics report is saved in .txt format.

7. Email the report together with the error description to abi@id.ee.

You will also see the installed software’s version number in the diagnostics report.

8.4 Settings

Click on the Settings button in the ID-card utility’s settings and help section (Image

45).

Image 45

In the ID-card utility’s settings window you can check ID-card software updates (In

MAC OS X) (Image 46).

Image 44

25

8.5 Help

Click on the Help button in the settings and help section of ID-card utility (Image

477).

Image 47

The ID-card utility user’s guide will open along with a link to the ID-card user

support website.

Image 46