INSTRUCTION FOR OPERATION WITH DESKTOP SIGNER

Transcription

1 INSTRUCTION FOR OPERATION WITH DESKTOP SIGNER Version 1.50, February 2017 B-Trust Instruction Page 1

2 TABLE OF CONTENTS I. About the Program... 3 II. System requirements... 3 III. Installation... 4 IV. Starting the Program... 4 V. Settings... 4 VI. Operation with Desktop Signer... 7 VII. Maintenance B-Trust Instruction Page 2

3 I. About the Program The B-Trust Desktop Signer Program is used for creation of (signing) a Qualified Electronic Signature (QES) to electronic documents/files in an automatic mode, in accordance with the LEDES and the document Terms and procedure for the use of QES and requirements for storing the private key, approved by the CRC and in accordance with the B-Trust document B-Trust Policy on signing with QES. Desktop Signer verifies QES with extended format in accordance with the Policy on Signing. Extended formats for electronic signature are the following: CMS Advanced Electronic Signature (CAdES) PDF Advanced Electronic Signature (PAdES) XML Advanced Electronic Signature (XAdES) Associate Advanced Electronic Signature (ASiC) which include additional attributes with vаlidation data for electronic signatures, as per the internationally recognized recommendations and specifications (RFC3369/ETSI TS and TS101903); In order to use the full functionality of the Program, you need to have Internet access to the following addresses: and (for certificates issued by the B-Trust Certification Services Provider). II. System requirements 1. Software requirement The Program is tested and operates under the following software requirements: 1.1. Windows Windows Windows 7 2. smart card drivers: 2.1. CryptoVision v5.0, v Gemalto ID Prime 2.3. Siemens CardOS API v4.3b B-Trust Instruction Page 3

4 2.4. Charismatics SmartSecurity Interface v4.7 In order to open the PDF files you need to have Adobe Reader version To visualize correctly the electronic signature in Adobe Reader, run the BTrustAcrobatReaderFix.exe in the Desktop Signer directory. In order to use the full functionality of the Program, you need to have Internet access to the following addresses: and (for certificates issued by the B- Trust Certification Services Provider). III. Installation For help with the installation and removal of Desktop Signer, please check: InstallationGuide.pdf. IV. Starting the Program Start the Program from: A) the icon on your Desktop B) the Start menu > Programs > Desktop Signer V. Settings After starting the Program from the Settings tab (see the picture below) you can change the default setting of the Program. B-Trust Instruction Page 4

5 1. Time Stamp On this screen you add settings for Time Stamp (certifying the time of signing for details. In the field URL address of Time Stamp server enter the address for connection to the relevant server. 2. Verification of a certificate as per OCSP B-Trust Instruction Page 5

6 Configuration for verification of a certificate when signing and verifying signatures as per the OCSP server. For details: You can take the address of the OCSP server from Authority Information Access attribute of the relevant certificate. 3. Certified certificates Certification of chains of trust upon signing and verification. If the certificates that form your chain of trust are installed in Microsoft Certificate Store, you can indicate this chain directly from there. Otherwise, you must indicate explicitly which certificates form your chain of trust B-Trust Instruction Page 6

7 VI. Operation with Desktop Signer The Desktop Signer Program gives possibility for signing and verification of universal electronic signature (QES) to electronic document/file. Note: The example below shows how to sign a PDF file; signing other types of electronic documents is performed in a similar way. 1. Signing one file To sign a PDF file, follow these steps: 1.1. Choose the type of the electronic document from the main menu of the Program. In this case choose the PDF icon. Select the icon for signing from the opened main window of the Program. B-Trust Instruction Page 7

8 Choose the tab for signing one file from the three fields (tabs) that appear. Click the Add button and select a document for signing. Select the necessary settings. Click the button in the Output file field. Here select/enter the name of the output file. Select the Sign button and as a result the following window appears: B-Trust Instruction Page 8

9 Only valid certificates, with which can be signed documents (have Digital Signature in Key Usage) and are not root (Root CA) appear. Select a certificate and click the Select a certificate button. The following window appears on the screen enter the PIN code for access to the smart card and click the Sign button. The following window appears upon successful signing: B-Trust Instruction Page 9

10 Click the ОК button. If you choose an archiving option, the outgoing file will be in archived ZIP format containing the file result from signing and ReadMe.txt file containing information about the result and way of validation of the signature. Note 1: If as a result of signing the file is bigger that 10 Мb, a validation of the result cannot be performed on the website for validation at: 2. Signing many files Choose the many files tab from the example showing how to sign one file (the second screen). B-Trust Instruction Page 10

11 Select the Add button and select the directory containing PDF files. Here you can change the options of the signature. Such are: signature s location, role of signing authority, etc. If the output directory contains file names coinciding with the names from the output files, you can choose the option rewrite the result if exists when signing. In the Output directory panel click the button and select a directory where the signed files will be saved. Click the Sign button. The following window appears and you should select a certificate. B-Trust Instruction Page 11

12 1) Select a certificate and click the Select a certificate button. 2) Enter the PIN code on the screen. Enter the PIN code and click the Sign button. 3) The following message about the status of the signed files appears upon successful signing: B-Trust Instruction Page 12

13 Click the ОК button. If you choose an archiving option, the outgoing file will be in archived ZIP format containing the file result from signing and ReadMe.txt file containing information about the result and way of validation of the signature. Note 1: If as a result of signing the file is bigger that 10 Мb, a validation of the result cannot be performed on the website for validation at: 3. Validation of a document Select the icon for validation of a document from the main menu. A window for validation of the electronic signature appears. B-Trust Instruction Page 13

14 Click the Add button and select a PDF file. The following window appears on the screen: The result from signing can be also checked on the website at: B-Trust Instruction Page 14

15 VII. Maintenance If you have any problems with the operation of Desktop Signer, please send an to: containing detailed description of the errors (if possible send Print Screen of the error) and attach the log-file or call B-Trust. The log-files of the Program are in directory: "%user%\.b-trust\desktopsigner.log ". (Example: C:\Users\vlivanov\.B-Trust\DesktopSigner.log) B-Trust Instruction Page 15