Frequently Asked Questions - Signature Cards

Batch signatures are with the D-TRUST Multicard 3.0 only with the qualified certificate possible. For signatures with the advanced certificate, there is one for each signature PIN-Entry required.

From D-TRUST multicard 3.1, a batch signature with the qualified and the advanced certificate is possible.

Status: May 2017

The PIN-Modification mechanism of Sign Live! CC only allows numbers to be entered by default. The certificates of all German trust centers are of such a nature that the personal PIN - to create a qualified electronic signature - must consist of numbers. The ones from BSI (Federal Office for Information Security) certified card readers are also designed for entering numbers.

In contrast to German signature cards, signature cards from Switzerland allow an alphanumeric PIN to. This one PINs not suitable for creating qualified signatures according to SigG are, the use of alphanumeric PINs of Sign Live! CC not offered. Would you still like to Sign Live! CC for initialization (creation of individual PINs) from Swiss signature cards, please proceed as follows:

1. Turn the safe PINInput from. (Menu "Extras> Settings> Signatures> Signature devices> signIT smartcard").
2. Start Sign Live! CC and select the menu item "Tools> Smartcard Tools> PIN-Management".
3. Select the certificate you want and click on "Initialize".
4. After following the instructions in the next FGWhen you have read it click on "Complete".
5. In the next window click on the switch "Input via keyboard".
6. Open any text editor and type the one you want PIN .
7. Highlight the entered PIN and copy them using the keyboard shortcut CTRL+ C.
8. Switch to Sign Live! CC and add the new PIN with the key combination CTRL+ V in the "new PIN"And" new PIN repeat "a.
9. Confirm your entry by clicking the "Finish" button.

Please note:

• That this only applies to signature cards from Switzerland, since German signature cards only allow numbers.
• Before using alphanumeric PINs you should consider that the creation of qualified signatures according to the German SigG with alphanumeric PINs is not possible.

Status: January 2015

Before using a Telesec signature card, it must be initialized. You assign individual PINs. In addition, receipt of the signature card must be confirmed. This can be done online.
Telesec provides the Sign Live! toolbox available for free. You can find it   here under "Public Key Service - Software Toolbox Sign Live! CC".

Updated: July 2020
Created: February 2016

After receiving your Telesec signature card, you must complete the initialization (PINAllocation) and send the confirmation of receipt to the Telesec. This is usually done via the Sign Live! Toolbox. You have received a corresponding notice together with your signature card.

A subsequent sending of the confirmation of receipt is on the Telesec side here is possible.

As of: 29.06.2018/XNUMX/XNUMX

In order to be able to use the signature card, you need different PINInitialize s on the card. You can do this with the free Sign Live! toolbox which can be downloaded from the Telesec website. Please go through all the steps. With that all will PINs initialized and at the end the confirmation of receipt is automatically transmitted to the Telesec.

T-Systems switches after receipt of the confirmation of receipt Free your signature card and send a corresponding email to the email address given in the application.

  Download Toolbox for WINDOWS

  Download Toolbox for Mac OS X

Status: August 2015

With a TeleSec card, you assign one when you initialize (activate) the card SigGPIN2 and GlobalPIN2. These have the function of a PUK.
To the blocked by multiple incorrect entries PIN start to restore Sign Live! CC and select the menu item "Tools> Smartcard Tools> PIN reset to default". Follow the instructions in the dialogs.

You shouldn't PIN2 the signature card is blocked.

Status: January 2015

There are 4 on a TeleSec signature card PINs that you all assign individually. Please make a note of all assigned PINs and keep this information in a safe place.

SigG PIN 1 (for qualified signature) - with this PIN execute the qualified signature.

Recognize PIN 1 (for encryption and authentication) - with this PIN encrypt documents or log into a portal.

SigG PIN 2 and Recognize PIN 2 if you need the respective PIN 1 blocked by entering incorrect entries several times. This is with one PUK comparable, with the difference that you are the PIN2 also awarded yourself.

How is it that the PIN 2 cannot be initialized with the message "The card reader ... is not supported"?

Card reader security is divided into classes. The card reader you are using probably has the maximum security class II and supports it in combination with the signature card used none safe PIN-Input.

Solution:
Please deactivate in Sign Live! CC via menu item EXTRAS-Settings the safe PIN -Input.
We strongly recommend the use of a BSI (Federal Office for Information Security) certified card reader. The card readers we tested can be found in our data sheet.

Status: July 2015

Included with Sign Live! CC a lot of certificates are included. These are shown in groups. For the sake of clarity, it makes sense to have a create your own groupin which you can file your own certificates.
To obtain a certificate e.g. For example, to make a signature card available to third parties, save the certificate in this new group and export it.

How to export a certificate from your signature card using Sign Live! CC.

• Start Sign Live! CC and there EXTRAS-> Certificates–> Certificate Management.
  The icons for editing are displayed in the top left.
• Click on that first symbol to a new group to create.
  (If the symbol is not active, click on a white area in the "Filter" window).
• Give the new group one Namur (in the window on the left), e.g. B. "My certificates" and confirm with "Close".
• Select the menu item again EXTRAS-> Certificates–> Certificate Management.
  Now select the new group "My Certificates".
  (Make sure the card reader is connected to your PC is connected and the card is inserted.)
• Click on the icon "Add entry".
  Select the action "Import certificate from a SmartCard" and "Next".
  The connection to the card is established and all certificates on the card are displayed.
• Select the certificate you want off and "Next".
  (If the recipient would like to insert the certificate into Adobe Reader, for example, in order to check your signature there in the future, the "qualified signature" certificate must be selected.)
• In the next window you have the opportunity to do that Name certificate or to use the standard identifier.
• In the next window, please mark the certificate as "trustworthy".
• After "Finish", the selected certificate is entered in the group.
• Now you can use the symbol for "Export entry" save the certificate in any directory.

You can use the exported certificate, for example. B. make it available to a third party by e-mail. The recipient must import the certificate into their software.

How to get a certificate in Sign Live! CC import is in the FAQ "Import certificates" is described.

Addendum:
All the necessary functions are available to you via the context menu (right mouse button).
 

Status: July 2015

How to import a certificate into Sign Live! CC:

• Start Sign Live! CC and choose
  Menu item Tools> Certificates> Certificate Management.
• Highlight the group in which the new certificate is to be added and select (top left) the second symbol to add the entry.
• Highlight in the next window the desired action and press "Next".
• Follow the further instructions.

Status: January 2014

If you are the PIN If you have entered incorrectly several times, the signature card will be blocked. Whether you can remove the block again depends on the signature card used.

Some cards are wrong after several times PIN Input locked forever. In this case you have to apply for a new (replacement) signature card, as the blocking cannot be canceled. For cards for which TrustCenter has also issued you with a PUK you can by typing the PUK the PIN-Enable entry again.

If you work with a TeleSec signature card, assign a SigG-PIN2 and a globalPIN2. These have the function of a PUK. To the blocked by multiple incorrect entries PIN to restore, start Sign Live! CC and select the menu item "Tools> Smartcard Tools>" PIN reset to default". Follow the information in the dialogs.

Updated: January 2015

Most signature cards come with a transportPIN delivered. This transportPIN you can with Sign Live! CC in your personal PIN to change. Depending on the signature card, this can also be several transportPINs, which then all have to be changed one after the other.

To do this, start Sign Live! CC and please select the menu item "Tools> Smartcard Tools> PIN Management". Follow the instructions in the dialogs.

Status: July 2015