FILESIGNER PLUS V7.3.1 USER GUIDE

Transcription

1 FLGR PLU V7.3.1 UR GUD

2 o n t e n t s G G ARD nstalling Fileigner Plus ystem Requirements A B U FLGR PLU About Fileigner Plus onfiguration manager Profile Manager Features Fileigner Plus wizard ign FileVerifier Plus Wizard Verify F G U R G FLGR PLU nvoking onfiguration manager Using onfiguration manager Desktop ettings etting location of source file(s) etting location to save result file(s) how ntroduction creen General ettings ignature standard Apply onfiguration ettings P R F L MAAGR Using Profile Manager... 8

3 4.1.1 Add a Profile... 8 P 1» L PRA B PRFRMD... 8 P 2» PRVD PRFL DAL... 9 P 3» L RFA FR GG Modify a Profile Delete a Profile Using Profile Manager From Fileigner Plus P R F R M G URY PRA Fileigner Plus Wizard nvoking Fileigner Plus Wizard From the tart Menu From the Desktop ign P 1» L PRA, UR FL() AD DA FLDR P 2» L GG RFA P R A AU» VW AU F GG PRA FileVerifier Plus Wizard nvoking FileVerifier Plus Wizard From the tart Menu From the Desktop ntroduction creen Verify P 1» L UR FL P 2» VRFY GAUR() P» L RFA RVA L (RL) P... 30» Revocation heck Required... 30» ertificate Validation ptions AV FL» AV H FRM H GAUR M A R ARD & HARDWAR K U A L L G FLGR PLU... 34

4 8 APPDX... 35

5 Fileigner Plus UR G U D 1 G G A R D 1. 1 A L L G F L G R P L U he installation procedure for Fileigner Plus is straightforward: 1 Double click Fileigner Plus etup. lick on ext to install the software. By default, software will be installed under :\Program Files. t is the user wish to install the software under any drive by creating a folder with the folder name Fileigner Plus Y M R Q U R M o install and use Fileigner Plus, the following are the system requirements: Processor: Pentium V (recommended) Memory: 1GB RAM (recommended) Browser: 7.x or above perating ystem: Windows XP P3 or above 32-bit JR update 29 or above Admin Rights For signing files, you will need a Digital ertificate issued by a licensed certifying authority such as ata onsultancy ervices ertifying Authority (-A). Visit to learn more about -A Digital ertificates. P A G 1

6 Fileigner Plus UR G U D 2 A B U F L G R P L U 2. 1 A B U F L G R P L U Fileigner Plus is a desktop utility designed to provide a simple interface for digital signing/verification of electronic documents. t includes: onfiguration Manager Fileigner Plus Wizard FileVerifier Plus Wizard F G U R A M A A G R he onfiguration Manager module allows you to configure Fileigner Plus according to your specific needs and preferences. Using this, you can: et a default location for source file(s) on which security operations are to be performed. et a default location for the file(s) produced as a result of performing security operations. nable/disable the wizard introduction screens. elect signature formats P R F L M A A G R he Profile Manager can be used for creating profiles for ign operation. hese profiles contain the settings required for the sign operation. nce a Profile is created the necessity of repeating certain inputs like certificate location, etc. is eliminated F e a t u r e s Profile Manager can be used to perform the following operations: Add Modify peration reate a new profile Purpose Modify an existing profile P A G 3

7 Fileigner Plus UR G U D Delete Delete an existing profile 2. 4 F L G R P L U W Z A R D he Fileigner Plus wizard guides you through a simple, step-by-step procedure to sign file(s). t may be used to perform the following operations: ign peration igned File(s) Result i g n Using Fileigner Plus, you can sign files of any format. PK-based Digital ignatures provide assurance over the source and ity (Authenticity) of electronic files and the information contained within. hey provide persistent approvals on documents, ensuring that information is tamper-proof (ntegrity). Digital ignatures also make it impossible for signing parties to dissociate themselves from documents signed by them (on-repudiation). Fileigner Plus allows you to sign multiple files at one go. his saves time when a large number of files are to be signed F L V R F R P L U W Z A R D he FileVerifier Plus wizard helps you to verify file(s). t may be used for the following operations File ype peration igned File Verify V e r i f y When you receive digitally signed documents, you can use FileVerifier Plus to verify the signature(s) on them. FileVerifier Plus also provides settings/options for flexible checking of the revocation status of signer certificate(s) depending on the level of security required. P A G 3

8 Fileigner Plus UR G U D Verification of signatures ensures that: he identity of the sender is irrefutably established. You are alerted if the information in the signed file has been tampered with. he sender cannot deny involvement at a later date. 2 P A G 3

9 Fileigner Plus UR G U D 3 F G U R G F L G R P L U 3. 1 V K G F G U R A M A A G R he onfiguration Manager can be accessed from the Fileigner Plus menu in Windows Program Files as follows: 3 tart Program Files Fileigner Plus onfiguration Manager P A G 7

10 Fileigner Plus UR G U D 3. 2 U G F G U R A M A A G R 3 nce onfiguration Manager is invoked, the above screen is displayed D e s k t o p e t t i n g s etting location of source file(s) lick [Browse] to select a default folder for the source file(s) for signing. ach time the Fileigner Plus wizard is invoked, it will automatically list the file(s) contained in the selected folder etting location to save result file(s) lick [Browse] to select a default folder for signed files. When the Fileigner Plus wizard is invoked, it will automatically use this as the destination folder for processed files. P A G 7

11 Fileigner Plus UR G U D how ntroduction creen heck/uncheck the [how ntroduction creen] box to enable/disable the introduction screen for the Fileigner Plus and FileVerifier Plus Wizards. f the introduction screen is disabled, you will be taken directly to the first step that needs to be performed in the selected wizard G e n e r a l e t t i n g s ignature standard Fileigner Plus allows you to generate two types of signature standards. You can choose between: Raw PK# A p p l y o n f i g u r a t i o n e t t i n g s nce you complete configuring Fileigner Plus according to your preferences, click [Apply] to apply the settings and close the onfiguration Manager. P A G 7

12 Fileigner Plus UR G U D 4. 1 U G P R F L M A A G R 4 P R F L M A A G R he following sections outline the procedure for creating, modifying and deleting a profile for ign operation: A d d a P r o f i l e 4 P 1» L PRA B PRFRMD elect [Add Profile] from the Profile Manager tart-up screen. P A G 8

13 Fileigner Plus UR G U D P 2» PRVD PRFL DAL 4 nter the name of the profile to be added. P A G 8

14 Fileigner Plus UR G U D P 3» L RFA FR GG 4 elect the certificate to be used for signing from the list displayed. his completes the settings for the signing operation. P A G 8

15 Fileigner Plus UR G U D M o d i f y a P r o f i l e 4 xisting profiles can be modified using Profile Manager. o modify a profile, select it from the list of available profiles and click [Modify Profile]. P A G 8

16 Fileigner Plus UR G U D D e l e t e a P r o f ile 4 xisting profiles can be deleted using Profile Manager. o delete a profile, select it from the list of available profiles and click [Delete Profile]. P A G 8

17 Fileigner Plus UR G U D 4. 2 U G P R F L M A A G R F R M F L G R P L U 4 Profiles created using Profile Manager can be used while performing security operations using Fileigner Plus. n order to use profiles, select hoose ettings from a Profile in the Fileigner Plus wizard. P A G 8

18 Fileigner Plus UR G U D n clicking [ext], the created Profiles (viz., ign) are displayed for selection as shown below. 4 elect the desired Profile and click [K]. A message will be displayed, as shown below, confirming that the selected profile will be used for the current operation. lick [K] to continue with the operation. P A G 8

19 Fileigner Plus UR G U D 5 P R F R M G U R Y P R A 5. 1 F L G R P L U W Z A R D n v o k i n g F i l e i g n e r P l u s W i z a r d From the tart Menu 5 7 tart Program Files Fileigner Plus Fileigner Plus P A G 16

20 Fileigner Plus UR G U D From the Desktop Double click the Fileigner Plus icon on your desktop. ntroduction creen for Raw signature standard 5 7 P A G 16

21 Fileigner Plus UR G U D ntroduction creen for PK#7 signature standard 5 7 nce the Fileigner Plus wizard is invoked, you will see the above introduction screen. he introduction screen can be disabled using the onfiguration Manager. lick [ext] to perform signing operations. P A G 16

22 Fileigner Plus UR G U D i g n P 1» L PRA, UR FL() AD DA FLDR 5 elect the file(s) to be signed. Fileigner Plus supports batch signing, hence, you can choose multiple files to sign at one go. While selecting a file to sign, ensure that: he file is not open. he file is not empty. elect the destination folder for the signed file. lick [ext] to continue. P A G 17

23 Fileigner Plus UR G U D P 2» L GG RFA 5 lick the [tore] button to select the digital certificate from certificate store, to be used for signing the file(s) selected in the previous section. nly those certificates whose key usage enables them to be used for signing will be displayed. lick the [File] button to select the digital certificate from a file P A G 17

24 Fileigner Plus UR G U D 5 You can view the details of any certificate by clicking the [View ertificate] button. lick [K] to select a certificate for signing. P A G 17

25 Fileigner Plus UR G U D 5 ow click [ign] to continue. P A G 17

26 Fileigner Plus UR G U D P R A AU» VW AU F GG PRA 5 nce the signing is complete, you will be able to view the final status of the operation. Files signed by Fileigner Plus have the same extension as input file. P A G 17

27 Fileigner Plus UR G U D 5. 2 F L V R F R P L U W Z A R D n v o k i n g F i l e V e r i f i e r P l u s W i z a r d From the tart Menu 5 tart Program Files Fileigner Plus FileVerifier Plus. P A G 17

28 Fileigner Plus UR G U D From the Desktop Double click the FileVerifier Plus icon on your desktop. 5 P A G 17

29 Fileigner Plus UR G U D n t r o d u c t i o n c r e e n 5 nce the FileVerifier Plus wizard is invoked, you will see the above introduction screen. he introduction screen can be disabled using the onfiguration Manager. lick [ext] to perform verification operations. P A G 17

30 Fileigner Plus UR G U D V e r i f y P 1» L UR FL 5 lick [Browse] to select the file to be verified. lick [ext] to view the signature details. nly one file may be verified at a time. P 2» VRFY GAUR() n successful extraction of signatures from the signed file, FileVerifier Plus displays the following screen: P A G 17

31 Fileigner Plus UR G U D 5 he details of certificate(s) used to sign the file being verified are displayed in the igner ertificate(s) list. n order to verify a signature, you need to perform the following steps: elect a certificate from the list of signer certificates displayed. P A G 17

32 Fileigner Plus UR G U D lick [View ertificate] to view the certificate details. [heck to see if the signer s information is as expected.] 5 P A G 17

33 Fileigner Plus UR G U D lick [Verify] to verify the signature. You will see the following summary screen. 5 You can customize the verification process depending on your requirements. lick [ptions] to view the ertificate Revocation List (RL) options available. P A G 17

34 Fileigner Plus UR G U D P» L RFA RVA L (RL) P 5» Revocation heck Required o ensure that the revocation status of the signer s certificate is verified, you can check the [Revocation heck Required] box. he RL Verification is done offline here, i.e. you need to manually place the corresponding RL in the RLs folder present in the installed directory of Fileigner Plus.fsp folder.» ertificate Validation ptions For certificate ation, the issuer certificates which are the public key certificates of ssuers like -A (A certificate) and A (Root A certificate), have to be placed in the ssuererts folder which is present in.fsp folder after the software installation. f the installation directory is :\Fileigner Plus then a folder.fsp is automatically created during installation of Fileigner Plus software. Under.fsp folder a folder ssuererts is created in which the issuer certificates have to be placed. For example, to verify a digital signature, which is signed using a -A issued digital certificate, you will need to place the -A and A certificate in the ssuererts folder to trust the signer s digital certificate. While verifying the signature, there is no need of providing public key certificate as the signature created out of Fileigner Plus software includes the signer s public key certificate as part of digital signature. f a signature without public key certificate P A G 17

35 Fileigner Plus UR G U D needs to be verified using Fileigner Plus software, verifier should place the signer s public key certificate in ignererts folder present in.fsp folder. For Verifying the revocation status, two options are available. You can check the revocation status for: he signer certificate only n this case only the signer s certificate is checked for revocation. he entire trust chain n this case, in addition to the signer s certificate, all the certificates in the trust chain are checked for revocation. his is the more secure option for verification. 5 nce the options are set, you can click [Verify] to verify the signer certificates with the new options. AV FL» AV H FRM H GAUR P A G 17

36 Fileigner Plus UR G U D o save the riginal data file ave File button is used. When the button is clicked the above screen is displayed. he location and name of the data file can be specified to save the data file at required location and then click on ave button. lick [Finish] to exit the Wizard. 5 P A G 17

37 Fileigner Plus UR G U D 6 M A R A R D & H A R D W A R K Fileigner Plus supports mart ards and Hardware okens. ertificates stored on these devices are automatically made available for selection to the user during signing. 6 P A G 32

38 7 U A L L G F L G R P L U o uninstall Fileigner Plus, you can do the following: 7 tart Program Files Fileigner Plus Uninstall P A G 33

39 8 A P P D X he following table shows the signer certificate ation results. igner certificate ation results will be based on the - Revocation check level that is selected in the RL ptions dialog - Validity of the signer certificate - igner certificate trust chain - Revocation status of the signer certificate Revocation Validity of ertificate Revocation Result check level the rust hain status (ot (ot certificate (omplete/ Requested/ requested / (Valid / ncomplete) Revoked / igner n - ot ertificate xpired or Revoked / only / ntire ot yet ot trust chain) ) available) ot Requested Valid omplete ot igner certificate is Requested igner certificate is Revocation status is not requested ot Requested n omplete ot Requested igner certificate is not igner certificate is not Revocation status is not requested 7 ot Requested Valid ncomplete ot Requested igner certificate is igner certificate is not Revocation status is P A G 33

40 not requested ot Requested n ncomplete ot Requested igner certificate is not igner certificate is not Revocation status in not requested igner Valid omplete ot Revoked igner certificate is ertificate only igner certificate is igner certificate is not revoked igner ertificate only n omplete ot Revoked igner certificate is not igner certificate is not igner certificate is not revoked igner Valid ncomplete ot Revoked igner certificate is ertificate only igner certificate is not igner certificate revocation status is not available igner Valid omplete Revoked igner certificate is ertificate only igner certificate is not igner certificate is revoked 7 P A G 33

41 igner ertificate only igner ertificate only igner ertificate only igner ertificate only igner ertificate only n ncomplete ot Revoked igner certificate is not igner certificate is not igner certificate revocation status is not available n omplete Revoked igner certificate is not igner certificate is not igner certificate is revoked Valid ncomplete Revoked igner certificate is igner certificate is not igner certificate revocation status is not available n ncomplete Revoked igner certificate is not igner certificate is not igner certificate revocation status is not available Valid omplete ot available igner certificate is igner certificate chain status is unknown igner certificate revocation status is not available 7 P A G 33

42 igner ertificate only igner ertificate only igner ertificate only ntire trust chain ntire trust chain Valid ncomplete ot available igner certificate is igner certificate is not igner certificate revocation status is not available n omplete ot available igner certificate is not igner certificate chain status is unknown igner certificate revocation status is not available n ncomplete ot available igner certificate is not igner certificate is not igner certificate revocation status is not available Valid omplete *ot igner certificate is Revoked igner certificate is igner certificate is not revoked n omplete *ot igner certificate is not Revoked igner certificate is not igner certificate is not revoked 7 P A G 33

43 ntire chain trust Valid ncomplete *ot Revoked igner certificate is igner certificate is not igner certificate revocation status is not ntire trust available Valid omplete **Revoked igner certificate is 7 chain igner certificate is not ne of the certificates in the chain is revoked ntire trust n ncomplete *ot igner certificate is not chain Revoked igner certificate is not igner certificate revocation status is not available ntire trust n omplete **Revoked igner certificate is not chain igner certificate is not ne of the certificates in the chain is revoked ntire trust Valid ncomplete **Revoked igner certificate is chain igner certificate is not ne of the certificates in the chain is revoked P A G 33

44 ntire chain trust n ncomplete **Revoked igner certificate is not igner certificate is not ne of the certificates in the chain is revoked ntire chain trust Valid omplete ot available igner certificate is 7 igner certificate chain status is unknown igner certificate revocation status is not available ntire trust Valid ncomplete ot available igner certificate is chain igner certificate is not igner certificate revocation status is not available ntire trust n omplete ot available igner certificate is not chain igner certificate is not igner certificate revocation status is not available ntire trust n ncomplete ot available igner certificate is not chain igner certificate is not igner certificate revocation status is not available P A G 33

45 ote: * - Revocation status is checked for all the certificates in the chain ** - Any one of the certificates in the chain may be revoked 7 P A G 33

46 ontact Us 7 P A G 33