INSTRUCTIONS FOR INSTALLING AND USING ELECTRONIC SIGNATURE CERTIFICATES UNDER LINUX Version 1.0 May 2006
CONTENTS I. SYSTEM REQUIREMENTS II. INSTALLING A SMART CARD READER DEVICE DRIVER III. INSTALLING SMART CARD DRIVERS IV. USING SIEMENS SMART CARDS WITH MOZILLA
I. System Requirements PC 32-bit x86 processor Linux kernel 2.4.21 or newer version glibc version 2.3.3 or newer PC/SC Lite version or newer II. Installing a Smart Card Reader Device Driver The Omnikey, Gemplus и ACS smart card readers offered by InfoNotary PLC for Linux environment are supported by the free driver CCID it is included in most of the popular distributions. In Debian and the distributions based on it, the package is called libccid. If in the distribution used by you the cciddriver is missing, you can download it from here: http://pcsclite.alioth.debian.org/ccid.html or you can install the drivers for the reader you have from its applied installation disk. After the installation of the driver is finished, restart the pcscd demon. Specific remarks for the different readers: Omnikey CardMan 3021 and CardMan 6121 are supported by ccid version 1.0 of higher. Gemplus if you want official support from the manufacturer, you must used the drivers included in the applied disk.
III. Installing Smart card Drivers Dearchive the tar archive HiPath_SIcurity_Card_API_V3_1_010_Linux.tar.gz in the main directory of your LinuxInstallation. Here is how: user@system > su - Enter password: root@system # cd / root@system # tar -xzvf HiPath_SIcurity_Card_API_<version>.tar.gz root@system # exit
IV. Using Siemens Smart Cards with Mozilla If you want to use your electronic signature certificate in the Mozilla based programs such as Firefox, Thunderbird, Seamonkey and Epiphany, you must register the PKCS#11 Siemens library in them. Follow these steps to complete the registration in Thunderbird 1.5: Start Thunderbird and from menu Edit select Preferences,click on the Privacy tab and select Security. Select Security Devices :
Click on the Load button Select the PKCS#11 Siemens library (/usr/local/lib/libsiecap11.so):
After you click on OK your smart card will show up in the list with devices: From this screen you can change the PIN code of your smart card. To do so, select the option Change Password.
Enter your current PIN code in the field Current password, and in the field New password enter the new one and re-enter it for verification in the field New password (again). Password quality meter indicates the security level of the new PIN code. The other Mozilla based programs are set up by analogy. To be able to sign electronic messages you must assign your mail account to the electronic signature certificate written on your smart card. Here is how: From menu Edit > Account Settings > Security :
Click the Select button from the column Digital Signing. In the new window that opens select the certificate from your smart card and confirm with OK.
Thunderbird will offer you to apply exactly the same certificate to decrypt the messages sent to you. In case you decline to do so, you could assign a certificate for email decryption from the Select button Select in the column Encryption. Keep in mind that not all certificates could be used for encryption and decryption.