DEP RSA Key Loading Program User Manual
Contents
1. The address of the DEP ANT is not well defined In this case one must click on the OK button define correctly the needed parameters banksys Technologies amp Products Page 33 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted and launch again the operation When an error occurs the current operation 15 stopped and the whole process ends Some verification on parameters 1s also realized e g when trying to get the SSC and the fields do not have the good length an error is generated Here the import has been realized but the operation of getting the SSC has aborted The user must correct the data and launch the process again DepNT RSA KEY LOADING ME Semice Communication Tools Help Generation Self Signed Certificates started Self Signed Certificates faled E NOE Bad length for one of the fields Select Operation s Generation Import Putin Key Table Self Signed Certificate ID of Certificate Issuer L ertificate Expiry Date Certificate Serial Number Y Self Signed Certificates Export Issuer Public Key Index CA Target EUROPAY Target Filename Browse lt lt Previous eso 7 3 PROBLEM OF CONNECTION If there 1s a problem with the connection or with the answer of the DEP Platform to a message some information 1s reported in the memo Usually when a problem occurs the DEP RSA2. Haachtsesteenwe g 1442 1130 Brusse Is Technologies amp Products Belgium DEP Documentation DEP RSA Key Loading Program User Manual Version 03 04 Classification Restricted banksys Technologies amp Products Page 2 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Version Management Report 03 01 Paul Sti non 15 09 2003 Add of 3DSecure Pkcsl0 Certificate Request 03 02 Sam Yala 18 09 2003 Add Annex D New screen captures Changes in section 4 and in section 6 03 03 Paul STIENON 24 05 2005 More details in order of commands for self sign certificates 03 04 Paul STIENON 03 04 2006 banksys Technologies amp Products Page 3 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted CONFIDENTIALITY The information in this document is confidential and shall not be disclosed to any third party in whole or in part without the prior written consent of Banksys S A N V COPYRIGHT The information in this document is subject to change without notice and shall not be construed as a commitment by Banksys S A N V The content of this document including but not limited to trademarks designs logos text images is the property of Banksys S A N V and is protected by the Belgian Act of 30 06 1994 related to author s right and by the other applicable Acts The contents of this document must not be reproduced in any form whatsoever by or on behalf
3. Tools AS4 KEY LOADING Directories Files _DEISREG ISR _I SREG32 DLL IMI DelsL1 isu RHSAKEYLO ADING exe Dries E c pczb41 In the memo the user can find the public part of the generated RSA keys length of Modulus in Bits Modulus Public Exponent and the name of the generated files RSA and PUB These two files have the structure of windows N7 files Here is an example of an RSA file Infos Version 01 Datim 18 02 2002 15 58 20 Crypto nlen 1024 n A4D360CA19B98B9BA05C32E3281784296A791960AFED19073AA0D014B8EA79676A9B9862B70F716BCE50 8646E89DE189D8B79BAD457E48CDD2B44B634B97334E2373977CO05D9DAB19C525CFB850CC71A45E2F8A891 62DCF903D1E3628A9CE2DOAE123FB1075FB6913C9A07AA0C825303872D9DBD2DF1CA0220BF925EAF0602CB 65537 enckey 028F8000010881001406F8109FE9359F15AB63B2CD90F349E0A9AF80758200014283000742414E4 B535953840008DFA7BD4125C6333E850080A4D360CA19B98B9BA05C32E3281784296A791960AFED19073AA ODOl14B8EA79676A9B9862B70F716BCE508646E89DE189D8B79BAD457E48CDD2B44B634B97334E2373977CO 5D9DAB19C525CFB850CC71A45E2F8A89162DCF903D1E3628A9CE2DOAE123FB1075FB6913C9A07AA0C82530 3872D9DBD2DF1CA0220BF925EAF0602CB860003010001870080EBEA4FC334ECF412FADD24F88ED2A559CA6E 26BFA61DEFOCBOO9BBEG6ICCEIDEBA4595C21CA4CO7B227FA12FBD10E07751472E53EA41DEEFF68DFE0969B7B9D 0A32BEBB9B8F5DBDA8A6DCOF673C5F65BAllEAO0A89AEFA43F9E21BD240439B1D8A95D180584E16B7C5B8388 A20F3BCEABFA60716A8FFB518569BOB78F6
4. recommended to leave the default setting it is possible to select another existing program folder or to enter a new one Click the NEXT button to continue BACK to return to previous screen or CANCEL to abort the installation procedure 10 5 START COPYING FILES The Start Copying Files window gives an overview of the settings selected during the installation procedure banksys Technologies amp Products Page 41 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Start Copying Files cm ms D _ BER i T p un i When the information is correct click the NEXT button to continue go BACK to modify some settings or use CANCEL to abort the installation procedure 10 6 INSTALLING After having clicked on the NEXT button of the Start Copying Files window all the required installations are executed banksys Technologies amp Products Page 42 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Setup RSA KEY LOADING Decompressing Files In C Depnt Tools RSA KEY LOADING rsakeyloading exe A progress bar and one or more status messages shall appear during the installation of the files 10 7 SET UP COMPLETE When all the files and information are copied a Set up Complete window appears to confirm a successful installation banksys Technologies amp Products Page 43 45 DEP RSA Key Loading Program User Manual 03 04 C
5. 62DCF903D1E3628A9CE2D0OAE123FB1075FB6913C9A07AA0C825303872D9DBD2DF1CA0220BF925EAF0602CB e 65537 6 5 GENERATE CERTIFICATE REQUESTS BASED ON SELF SIGNED CERTIFICATES SSC In this case the user must activate the checkbox Self Signed Certificates Immediately the Parameters panel adjusts its content to show the data needed for the get SSC operation Select Uperation s f Generation t Import Putin Key Table Export banksys Technologies amp Products Page 27 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted JF DepNT RSA KEY LOADING _ D gt Semice Communication Tools Help Select peratian s Generation Import Putin Key Table Self Signed Certificate Lengthlin bytes ID of Certificate Issuer Certificate Expiry Date Certificate Serial Number Export Issuer Public Key Index CA Target EuR P amp Y Target Filename Browse 6 5 1 Choosing a CA Certifier selecting the CA Certifier in the scroll box CA Target automatically adjust the panel in order to show the necessary data to get the certificate requests files for that CA Certifier Only the second column Value can be modified with a given value the two other columns Field and Length in bytes are not to modify With the version 1 2 04 of the program three values are defined for CA Target 1 EUROPA Y selecting this value
6. Key Loading Program will try several times to do its current action before eventually stopping see paragraph 5 3 3 on page 11 banksys Technologies amp Products Page 34 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted DepNT RSA KEY LOADING ME Semice Communication Tools Help Generation Export started Error when ta connect ta DEPNT E CONNECTION not possible to connect to address 172 18 10 33 at port 1000 try times then self stopping Error when trying to connect to E BAD CONNECTION not possible to connect to address 172 18 10 99 at port 1000 will tre times then self stopping Error when to connect to BAD CONNECTION not possible to connect to address 172 18 10 99 at port 1000 will ry times then self stopping Select peratian s E spor Directory Path CADepnt Tools ASA KEY GEN amp USESASAKeps Browse Generation Import Putin Key Table Self Signed Certificates Y Export z Previous feeb se 7 3 MISSING KEY CAPABILITY In order to use the interfaces of the library PKI the user must not forget to introduce the transport key into the key table of the DEP Crypto Module and to activate the required capability to insert a generated RSA key pair in the key table see PKI Library for DEP Referenc
7. Service Communication Tools Help Generation Put n Key Table Tag Self Signed Certificates Export started Size of modulus in bits used for generation 1024 Public exponent used for generation 3 Creating C Depnt T ools ASA KEY BENSLIBESHSAKevus LT024E 0000352002091 9131 72 7071 ASAl PUB in 16324 msec Modulus S256 RAB 903402807 004996559201 EBSCACPFBFBE 3FFAFFADEFADDaB 2B 36269FE 0CEB 46E 48 5FO5020C26407F 8 Public Exponent 3 Creating hash C Depnt T aals HSA KEY GEN amp USESeuropay hip Creating self signed certificate CD epnt Taels amp RHSA KEY GEN amp USESeuropay sip Tag used for Putin key table one tag operation 04220365 Generation Put In Key Table Tag Self Signed Certificates Export done Select Operation s KEY Size of Modulus in Bits fi 024 Public Exponent 3 Generation Import Y Put In Key Table Y Self Signed Certificates Y Export lt lt Previous gt gt Please note that it is only allowed for EMV certificates 7 TROUBLESHOOTING In this chapter we show some of the troubleshooting that can occur when using the DEP RSA Key Loading Program 7 1 PARAMETERS NOT NOT WELL DEFINED For example when the user does not enter the TCP IP address of the DEP Platform but nevertheless clicks on the GO button an information window appears Information as
8. allows generating an EMV Certificate Request to submit to EUROPAY according to the following specifications EUROPAY Registration Authority RA Interface Specification version 2 1 November 2000 EUROPAY Registration Authority RA member Procedures version 5 3 November 2000 2 VISA Selecting this value allows generating an EMV Certificate Request to submit to VISA according to the following specification VISA Visa CA User s Guide version 2 1 31 March 2001 banksys Technologies amp Products Page 28 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted 3 3DSecure Selecting this value allows generating a PKCS 10 Certificate Request to submit to VISA within the framework of 3 D Secure protocol according to the following specification VISA 3 D Secure Certificates Certificate Request Process for Protocol 1 0 1 Member Version 1 2 5 June 24 2002 DepNT RSA KEY LOADING Service Communication Tools Memo Help Select Operations Generation Import Putin Key Table Y Self Signed Certificates Export Self Signed Certificates ID of Certificate Issuer Certificate Date Certificate Seral Number Issuer Public Key Index Target EUROPA Target Filename Wish 1 Browse lt lt Previous The number of CA Certifiers and their corresponding fields name length are defined in an INI file C
9. extension is present it will be ignored The program depending on the CA Certifier indicated in CA Target automatically adds the correct extension see paragraph 8 on page 34 for each created file Indicating the name of the file in Target Filename can be done either by giving it explicitly or by clicking on the BROWSE button A confirmation must be done to activate the selection If no directory is specified in the field of the Target Filename the default directory where the DEP RSA Key Loading Program 15 will be used banksys Technologies amp Products Page 30 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Open Look in E R54 KEY LOADING J L1O24E65537 _deisreg ist isreg32 dll s CA Certifier INI DelsL1 isu RSAKEYLOADING exe File name Files of type ERSA Cancel 6 5 4 Generating the Certificate Request based on SSC The user must click on the GO button to launch the operation Remember that it 1s not a stand alone operation it must be associated with Generate RSA key operation or Import RSA key operation 6 5 4 1 Generating PKCS 10 Certificates The generation of this type of certificate can only be done in 2 steps because the input data needed for the generation of the PKCS 710 certificate need public parts of the newly generated RSA key e First step Generate operation 1 e Generate radio button and Exp
10. of third parties without the prior written consent of Banksys S A N V Except with respect to the limited license to download and print certain material from this document for non commercial and personal use only nothing contained in this document shall grant any license or right to use any of Banksys S A N V s proprietary material LEGAL DISCLAIMER While Banksys S A N V has made every attempt to ensure that the information contained in this document is correct Banksys S A N V does not provide any legal or commercial warranty on the document that is described in this specification The technology is thus provided as 1s without warranties of any kind expressed or implied included those of merchantability and fitness for a particular purpose Banksys S A N V does not warrant or assume any legal liability or responsibility for the accuracy completeness or usefulness of any information product or process disclosed To the fullest extent permitted under applicable law neither Banksys S A N V nor its affiliates directors employees and agents shall be liable to any party for any damages that might result from the use of the technology as described in this document including without limitation direct indirect incidental special consequential and punitive damages lost profits JURISDICTION AND APPLICABLE LAW These terms shall be governed by and construed in accordance with the laws of Belgium You irrevocably
11. 04 Classification Restricted JF DepNT RSA KEY LOADING Eie E Semice Communication Tools Help Visualization of Hash amp Request Files started Chosen Hash Request File O wisaeuropay Bh ESS 020400 sip This is a EUROFAY Request File Content 541327 FFO2040001 8001 C3E 351 38 2350C2F 338BEECT244E 28F1145 C C57D218551EA 711bE811535CE844F 74E BF OSE 35E A 138 3E Analysis D af Certificate Issuer 541327 FF Issuer Public Key Index 020400 Issuer Public Algarithm Indicator 01 zsuer Public Key Length 80 Issuer Public Key Exponent Length 01 Leftmost R emainder of Issuer Public 3513B2350C2F 338BEE CT 244E 28F 11440057021 8541647116811 S96CE 344F 7 4E 1 zsuer Public Key Exponent U3 Issuer Public Key Certificate 88D CELCBS25BBCSESBEFDDD3ACT S38ACCEEOF 2AF 3CAE 7147717 C2FDFA485DETABS3321FF34 74F33B A54 Analysis of Issuer Public Certificate zzuer Public Certificate in clear 6417547 327FF1 2050200000101 8000 3513B 23500 2F 338BEECT244E 28F114ACC 57D 218551EA711E Header m Certificate Format 11 Select peratian s RSA Size of Modulus in Bits fi 024 Public Exponent 3 Generation Import Putin Key Table Self Signed Certificates 5 5 2 Check Certificates With this operation the user will not only read
12. AD833DBC186F1E5880040088E63D34BF2F5744DB3B4213D92F9F FB50202056E5210456F2F020F413655F5C7DB9483A8EA4C8B1E9820501DAA47729E06D72FE1669806ADEF843 14EC82E456A8900407219A6DC3B4497EF922492847074DC84249FEDOD196CCFE73FAC3DB83D25ADD37B8B9 B809260054500995BE0757AAl1A4D36AE5ABBFOABFC897D60869BC82DBD58A0040030C529A81DBC1CE93099 88430337E96DFE75FCEB9ES89FFFD530BD88E213BALIlF51F10994661EE9750AD7CAB79FFOC1ABA46C0836A3E5 50B1322F986D6A2C7AE538B00401CFA9815FA97ED6509CB7A6120B11740FA4357F1656D18B09BBC203B109 C27A98171D0329F6F1EA2E98707834B34FE9FEF647DEEDF1968121490F2B24BO0DC82C8C0040D2AA4E90E65F 9B7D0C490107D8E07222F7FCA6020B29D3879DF64AFB678D2AA5bE9A949FAF9BC6AAF1FD06A63D16CB36DC1 114056099418577060BDD08766049A8 The meanings of the different fields are Version version of the file structure of the RSA and PUB files Datim date and time of creation of the file length in bits of the modulus N modulus banksys Technologies amp Products Page 26 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted E public exponent Enckey secret part of the key encrypted with the transport key This 15 an example of the corresponding PUB file with the public part only Infos Version 01 Datim 18 02 2002 15 58 20 Crypto nlen 1024 n A4D360CA19B98B9BA05C32E3281784296A791960AFED19073AA0D014B8EA79676A9B9862B70F716BCE50 8646E89DE189D8B79BADA457E48CDD2B44B634B97334E2373977C05D9DAB19C525CFB850CC71AA45E2F8A891
13. A_Certifier INI that is delivered by banksys It must be present in the same directory than the DEP RSA Key Loading Program The user can have a look at an example of such a file in the paragraph 8 on page 34 6 5 2 Filling the Values in the Grid The user must fill the grid to define the necessary parameters to get the certificate request files Please note that the DEP RSA Key Loading Program does not verify these fields it only verifies the lengths of all the values A null value in the length column means no check is performed on the length of the corresponding field The meaning of the fields in the panel is given in ANNEX D remarks on the data used for defining the Certificate request banksys Technologies amp Products Page 29 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Parameters Self Signed Certificates Length in bytes Service Identifier 10105656 4 Issuer Identification Number 455 3838 4 Certificate Expin Date 1212 2 Tracking Number 3 Target visa Target Filename Browse When a field is optional and no value is entered the corresponding information 1s not sent to the DEP Platform 1 e Common Name for the 3Dsecure certificate 6 5 3 Defining the Target file name The result of Generate Certificates operation consists in one or more files Files that are created are named filename ext where filename is the name indicated as Target Filename if an
14. HECK button The success or not of the check 1s shown with the buttons V or X at the right of the BROWSE buttons banksys Technologies amp Products Page 16 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Hash Algorithm Indicator 01 Subject Public Rey Algorithm Indicator 01 Subject Public Rey Length 80 Subject Public Exponent Length UT Leftmost digitsEntire Subject Public Key C3bE3513B 2350C2F 338BEECT1244E 28F 11440057021 854164711681 1596CE S44F r 4EBFD BE 956419 Hash Result 4 75050 933236446 C0468 5F236E SBCDDEDAE Recovered Data Trailer BC Check Certificate Chosen Issuer Certifice This Europay has Content 2000000004 WwisaeuropaySBNkK S7 S 020400 sip Analysis TD af Certificate Subi I Europay Public Key D WwiseeuropaysE pite sep Subject Public Rey Certification Authorit D wisaeuropayBENKS rS D20400 CFE Checking of Certiticatic S In order to have a look at the results the user have to close the Check Certificate window banksys Technologies amp Products Page 17 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted DepNT RSA KEY LOADING Iof x Semice Communication Tools Help Hash Algarithm Indicator UT Subject Public Rey Algorithm Indicator 01 Subject Public Length 80 Subject Public R
15. Help Select Operation s Generation Import Putin Key Table Self Signed Certificates Esport RSA impar Chosen ASA KEY File banksys Technologies amp Products Page 21 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted 6 2 1 Definition of the RSA Key File The definition of the name of the RSA key file can be done either by writing it into the Edit box or by clicking on the button BROWSE In this case an Open window appears that allows the browsing along the files and directories The user must confirm his her selection by clicking on the OPEN button Open EES Lookin Ex RSA KEY LOADING amp ce ez Ell L1024E 65537 deisreg isr isreg32 dll E Certifier INI DelsL1 isu ASAKEYLOADING exe Files of type R54 id Cancel 6 2 2 Running the RSA Key Import Importing an RSA key pair is completely useless unless it is combined with at least one of the following associated operations a Put RSA Key Into The Key Table b Generate Certificate Request These associated operations are explained in the next sections Once the operation and the associated operation s are selected and the corresponding fields are correctly filled the user can click on the GO button Information on the evolution of the import is given in the memo name of the RSA key file version and date of this file clear modulus and publi
16. IMISSINGHCBY CAPABILITY susanne un ud ere etie RE de 34 8 ANNEX A CERTIFIER INI FILE ecce eee ee ee eee eene 34 9 ANNEX B SAVING OF A MEMO eee ee ee eee eee eese ees 36 10 ANNEX C INSTALLATION PROCEDURE ee eee eee eee eo 00000000000 36 10 1 WELCOME ar E EA 37 10 2 USER INFORMATION era ei as 37 10 3 CHOOSE DESTINATION LOCATION cccccceccecceccscescccsccscescesceccecescescesences 38 10 4 SELECT PROGRAM FOLDER vice are eek 39 10 5 START COPYING FILES ee MD 40 10 6 ENS BA TAG ING ur ee een ee se 41 10 7 SET UPCOMPERTE Brake 42 11 ANNEX D REMARKS ON THE DATA USED FOR DEFINING THE CERTIFICATE REQUES Picnics nee eee 43 11 1 IRE EE REIN ils en as 43 r2 CA TARGET EUROPA Y ve dine eee ees 44 11 3 CA TARGET VIS Meeres ANTEE ee ENEE 44 11 4 CA TARGET DS CURE AT 45 banksys Technologies amp Products Page 6 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted 2 SCOPE OF THE DOCUMENT This document describes the DEP RSA Key Loading Program This PC program can be used to generate RSA keys to import them from files to export them into files and to put them into the key table of the DEP Crypto Module The pro
17. KEY Size of Modulus in Bits 2048 Public Exponent 3 x Previous 6 1 1 Size of Modulus in Bits Here the user must give the length in bits of the modulus he she wants to create decimal value For the modulus the minimum size is 512 bits and the maximum size is 2048 bits 6 1 2 Public Exponent Here the user must give the Public Exponent he she wants to use for the generation of RSA keys uneven decimal value between 3 and 65537 6 1 3 Running the Generate RSA key Operation banksys Technologies amp Products Page 20 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Generating an RSA key pair is completely useless unless it is combined with at least one of the following associated operations functions a Put RSA Key Into The Key Table b Generate certificate requests In this case only the option EMV Visa or Europay certificate request is applicable c Export RSA key These associated operations are explained in the next sections Once the operation and the associated operation s are selected and the corresponding fields are filled the user can click on the GO button 6 2 IMPORT RSA KEY OPERATION The Import RSA Key operation allows the DEP getting the RSA key that is written in an RSA file The radio button Import allows selecting this operation DepNT RSA KEY LOADING ESI EI Service Communication Tools Memo
18. Put In Key Table One Tag Self Signed Certificates Export started Size of modulus in bits used for generation 1024 Public exponent used for generation 3 Creating files C Depnt Tools RSA KEY GEN amp USE RSAkeys L1024E00003 20020919141046209 RSA PUB in 17305 msec Modulus 87C8E27ADC137F58442FCDF19B8321B769C6060CAE939EDA4FDCCBDEEB3948F6E6A45B9F6EA99335798F1A8 CE2DDE403B9DOEA855B40CE040A316A36D9A03C153A66183FF35F78BA13F107AEB124CBOEE88CEA4ABB9CD3 442918342F4B1B22BA4684BCE7F24700B297E3F9860059068A12F4B96A621035E985C96FA6E60F423573 Public Exponent 3 Creating hash file C Depnt Tools RSA KEY GEN amp USE europay hip Creating self signed certificate file C Depnt Tools RSA KEY GEN amp USENeuropay sip Tag used for Put in key table one tag operation 04220355 Generation Put In Key Table One Tag Self Signed Certificates Export done 10 ANNEX C INSTALLATION PROCEDURE There exists an installation procedure for the DEP RSA Key Loading Program To begin the installation wizard of the program insert first the installation diskette or the CD ROM and start the Setup exe banksys Technologies amp Products Page 37 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted 10 1 WELCOME The execution of the Setup exe launches the installation by Install Shield of the Program RSA KEY LODADING A Welcome window appears at the center of a Setup screen It contains general recommendations and
19. amp Products Page 7 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Generate Import RSA Key Buffer Generate Certificate Request Purpose of the program The program is intended to be used on a DEP NT that can generate RSA keys configuration 1 or on a PC that 1s connected to a DEP Platform that can generate RSA keys configuration 2 DEP RSA Key Loading Program Module i DEP NT Configuration 1 the program is running on the DEP NT itself banksys Technologies amp Products Page 8 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted DEP RSA Key Loading Module i Program DEP Platform Host PC Configuration 2 the program is running on a Pc that is connected to the DEP Platform 5 GENERAL PARAMETERS The installation procedure is reported n paragraph 10 on page 36 5 1 START UP The DEP RSA Key Loading Program could be launched by executing C Depnt Tools RSA KEY LOADING RSAKEYLOADING exe This is the default path Possibly another path could be defined during the installation paragraph 10 on page 36 Once the DEP RSA Key Loading Program s started a dedicated RSA KEY LOADING window 15 opened banksys Technologies amp Products Page 9 45 DEP RSA Key Loading Program User Man
20. c key encrypted part Note that when an import has been done the Edit box with the name of the imported file is erased 6 3 PUT RSA KEY INTO THE KEY TABLE OPERATION The activation of the Put RSA Key Into The Key Table operation 15 done as follows the user must select the checkbox Put In Key Table Immediately the Parameters panel adjusts itself in order to present the data for this function banksys Technologies amp Products Page 22 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Select Uperation s Generation Import Self Signed Certificates Export 6 3 1 Definition of the Key Destination Tag In order to properly define the data necessary for the different operations the user must click on the PREVIOUS and NEXT buttons which allow the move through all windows defining parameters Non gt gt In this case a panel appears with the capability of defining the identification tag for the RSA key pair This tag should correspond to an RSA registered key in the key table of the DEP Crypto Module Please note that an empty Tag means that this RSA key pair will not be put into the key table of the DEP Crypto Module RSA Put In Key Table Key 6 3 2 Running the Put RSA Key Into The Key Table Operation As an associated operation this operation must be combined with the Generate RSA Key operation generation radio button selected or
21. consent to the jurisdiction of the courts located in Brussels for any action arising from or related to the use of this document sa Banksys nv Chauss e de Haecht 1442 Haachtsesteenweg B 1130 Bruxelles Brussel Belgium RPM RPR Bruxelles Brussel TVA BTW BE 0418 547 872 banksys Technologies amp Products Page 4 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted 1 TABLE OF CONTENTS 15 PABLE OEFECONTENTSE 4 2 SSCOPEOFTHEDOCUMENT 22225225582 6 Ba REFERENCES f cT 6 4 PURPOSE OF DEP RSA KEY LOADING 6 Se GENERALE PARA VIE TERS bist u eee a ES 8 Ou VAR TOP ea 8 9 2 TER VICE es cues 9 9 9 COMMUNICATION yasni 10 3 3 4 DEF Modules PFOlDGOL a ise coetus an ud se a 10 5 3 2 COMMUNICATION susanne 11 2209 11 54 PLUR 11 3 4 1 12 3 4 2 SAVE obovata abd e T 12 oer 12 5 5 1 Visualize Hash amp Request esses eene 13 DA CROCE COP oett deti eel bei ent ES En 14 3 05 IUS eR inte 17 6 see ee reset 18 O L GENERATE KEY OPERATION Eee anna 19 6 1 1 SIZe or Modul
22. e MaxLength 5 64 Length 5 0 Lad 53 69 Field 6 Organizational Unit Name MaxLength 6 64 Length 6 0 Tag 6 69 Field 7 Locality Name MaxLength 7 64 Length 7 0 Tag 7 69 Field 8 State Province MaxLength 8 128 Length 8 0 Tag_8 09 Field 9 Common Name MaxLength 9 64 Length 9 0 Tag_9 09 Page 35 45 Classification Restricted banksys Technologies amp Products Page 36 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted The meanings of the different fields are e Nb number of certifier authorities e Name name of the certifier number x Nbfield number of field for SSC for certifier number x Extension hash extension of the file for will contain the hash of the Issuer Extension selfcertisspk extension of the file that will contain the SSC of the Issuer Extension CAPublic extension of the Public Key File coming from the CA e Extension CACertificate extension of the certificate that comes from the CA Extension CAHash extension of the hash file coming back from the CA e Extension SELFPKCSIO extensions for the PKCSIO self signed certificate request e CA Target sequence number of the CA e Field y signification of field y of certifier x e Length y length of field y of certifier x e Tag y internal tag of field y of certifier x 9 ANNEX B SAVING OF A MEMO This 15 an example of file that contains the information that was given in the memo Generation
23. e issuer to uniquely identify the public key Certificate Expiry Date chosen by the Remarks l In the table above issuer also means the requester of the certificate 2 Fields that have fixed value are not mentioned here These fixed values are hard coded in the program and are according to the specifications ref 1 and ref 2 11 3 CA TARGET VISA Length Format 8 hexadecimal digits Description Identifies a Visa Service The proprietary Application Identifier Extension PIX is left justified and padded on the right with hex zeroes Valid values for VSDC 1010 Credit Debit 2010 Electron 3010 Interlink 8010 PLUS 999910 Proprietary ATM Issuer BIN left justified Service Identifier Issuer Identification 8 hexadecimal digits Number Certificate Expiry Date Tracking Number Remark consisting in numeric digits left justified and padded on the right with hex F s 4 numeric digits 6 numeric digits and padded on the right with hex F s Month and Year MMYY after which this certificate is invalid Tracking number to identify a request for a Public Key Certificate In the text above issuer also means the requester of the banksys Technologies amp Products Page 45 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted certificate 2 Fields that have a fixed value are not mentioned here These fixed values a
24. e DFS Manual 8 ANNEX A CERTIFIER INI FILE The content of the file is as follows NbCertifier Nb 3 Certifier 1 name EUROPAY NbField 4 Extension hash hip Extension selfcertisspk sip Extension CAPublic sep Extension CACertificate CFE Extension CAhash hep CA Target 01 Field 1 ID of Certificate Issuer Length 1 4 Tag 1 51 Field 2 Certificate Expiry Date banksys Technologies amp Products DEP RSA Key Loading Program User Manual 03 04 Length 2 2 Tag 2 92 Field 3 Certificate Serial Number Length 3 3 Tag 3 84 Field 4 Issuer Public Key Index Length 4 23 Tag 4 83 3 name VISA NbField 4 Extension hash vis Extension selfcertisspk inp Extension CAPublic v Extension CACertificate i Extension CAhash CA Target 02 Field 1 5 1 Identifier Length 1 4 Tag 1 94 Field 2 Issuer Identification Number Length 2 4 Tag _ 2 91 Field 3 Certificate Expiry Date Length 3 2 Tag gt 92 Field 4 Tracking Number Length 4 3 Tag 4 93 Certifier 3 name 3DSecure NbField 9 Extension hash Extension selfcerbisspk bin b564 Extension CAPublic lt Extension CACertificate Extension CAhash Extension SELFPKCS10 bin b64 CA Target 03 Field 1 Hash Algo ID Length 1 1 Tag_1 07 Field 2 Version Length 2 1 Tag 2 67 Field 3 Signature Algo MaxLength 3 2 Length 3 1 Fag 3 09 Field 4 Country Name Length 4 20 Tag 4 69 Field 5 Organization Nam
25. ey Exponent Length 01 Leftmast diaits Entire Subject Public C3bE 3813B Z350C2F 338BEELT 244E 28F114ACL 57D 218581EA711EB811536CE344F 4EBF BE 35E A13 Hash Result EEA4BF17505D 9332356446 C0408 5F2S6E SBCDDEDAE Recovered Data Trailer BC Chosen Issuer Certificate File O visaeuropaySe pite hep This 1 a Europan hash file Content ADDODODODAFEU1 942956 05F 8 390E F 7323F57518A3FDA2341FC34E 0 Analysis D af Certificate Subject 000000004 Eurapau Public Key Indes FE Subject Public Key Algorithm Indicator 01 Certification Authority Public Key Check Sum S amp 285B 5FB33DEF 7923576183 9F 042941 0 Checking of Certification files ended Select peratian s RSA Size of Modulus in Bits fi 024 Public Exponent 3 Generation Import Putin Key Table Self Signed Certificates When an error is found a warning is given and the process of checking certificate files 15 stopped The user can save this information of the memo in a file using the Save to File item of the Memo menu Pay attention that this type of crosscheck 15 not available for all type of certificate requests 5 6 HELP When clicking on the About RSA KEY LOADING item of the Help in the menu an About window appears with information on the DEP RSA Key Loading Program version and on the system using it J DepNT RSA KEY LOADING Service Communication Tools Memo Ab
26. gram also allows generating EMV and PKCS 10 public key certificate requests based on the certificate s requester Self Signed Certificate SSC This program can also read and check EMV certificates files The document does explain neither the functionalities of the PKI library most of the DEP functionality used by this program 15 based on the PKI library nor the detailed specific data that must be given n order to get the SSC 3 REFERENCES This document contains references to other documents about the DEP This paragraph gives a list of all the documents referred to e DEP Host Interface Protocol e DEP NT DEP Handler Supervision Program User Manual e DEP Linux User Manual There are no references made to the following documents but they could be useful to understand th s document PKI Library for DEP Reference DFS Manual DEP Introduction to DEP DEP General Architecture DEP Glossary PURPOSE OF DEP RSA KEY LOADING PROGRAM The main purpose of this program is to make the DEP generating an RSA key or importing such a key from an external file and to use that key for the following purposes Put the RSA key in the key table of the DEP crypto module Export the RSA key on files Generate EMV and PKCS 10 certificate requests These certificates are based on self signed public key certificates In addition the program provides some other facilities for managing public key certificates banksys Technologies
27. it 1s required that the timeout on the DEP Platform 1s high enough three minutes seems a good value 5 3 3 Status The value Maximum Number Of Try defines the maximum number of time an action with a bad response will be repeated bad or closed TCP IP connection DEP Crypto Module offline missing capability for a DEP Crypto Module When this value 1s reached the program stops all the operations 5 4 MEMO Selecting Memo in the menu allows the user to realize actions on the memo 1 the large white band with without text banksys Technologies amp Products Page 12 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted J DepNT RSA KEY LOADING Semice Communication Tools Help Clear Memo Save Memo To File 5 4 1 Clear Memo The effect of this 15 the clearing of the text of the memo Remember that this memo will contain information on the evolution of all the selected operations 5 4 2 Save Memo To File A Save Memo As window appears when the user clicks on the Save Memo To File item of the menu Save Memo As Save In E RSA KEY LOADING deisreg isr isreg32 dll s CA Certifier INI DelsL1 isu RSAKEYLOADING exe Save as type tat Cancel First specify the directory then the file where the text of the memo should be saved then click on the SAVE button to confirm the selection An example of file that contains the content of the memo 15 gi
28. lassification Restricted Setup Complete mw Setup has finished copying files ta your computer Setup will now launch the program Select your option below Click Finish to complete Setup Installs Click FINISH to end the installation 11 ANNEX D REMARKS ON THE DATA USED FOR DEFINING THE CERTIFICATE REQUEST 11 1 REFERENCES This annex contains references to some standards documents ref 1 EUROPAY Registration Authority RA Interface Specification version 2 1 November 2000 ref 2 EUROPAY Registration Authority RA member Procedures version 5 3 November 2000For the purpose of this annex some references are ref 3 VISA Visa CA User s Guide version 2 1 31 March 2001 ref 4 VISA 3 D Secure Certificates Certificate Request Protocol 1 0 1 member version 1 2 5 June 24 2002 banksys Technologies amp Products DEP RSA Key Loading Program User Manual 03 04 Page 44 45 Classification Restricted 11 2 CA TARGET EUROPAY Length Format ID of Certificate Issuer 8 hexadecimal digits consisting in numeric digits left justified and padded on the right with hex F s 4 numeric digits Description Left most 3 8 digits from the PAN right padded with hexadecimal F Month and Year MMYY after which this certificate is invalid Certificate Serial Number 6 hexadecimal digits Number issuer Issuer Public Key index 6 hexadecimal digits Number chosen by th
29. lic part of the key 1s recorded in clear and the secret part of the key 15 recorded encrypted The PUB file only contains the public part of the key in clear Export RSA Key is an associated operation Hence it must be selected in combination with the Generate RSA Key operation banksys Technologies amp Products Page 24 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Generation Export started Size of modulus in bits used for generation 1024 Public exponent used for generation 55537 Creating files c Depnt Tools AS4 KEY LOADINGSASAkeys4l1 0246 655372003091 9144955870 RSA PUB in 4025 msec Modulus 1 2604128 1009407 458F 25474969446 1 620 004E 8571 S87 F 306855 28DEASh515C BA 7 558B204E 137 40B 08E 26F 8 Public Exponent 5553 Generation Export done oe 6 4 1 Directory Path The user must select a directory to store the RSA keys that will be generated by the DEP Crypto Module he she can do that e either by choosing a complete path and writing it into the Edit box e or selecting one by clicking on the BROWSE button In this case a Select Directory window will appear Click on the OK button to confirm the choice of the selected directory banksys Technologies amp Products Page 25 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Select Directory Directory CAD epnt
30. ogies amp Products Page 39 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Choose Destination Location Setup will install ASA KEY LOADING in the following directory install to this directory click Next To install to a different directory click Browse and select another 3 directory You can choose not to install ASA KEY LOADING by clicking Cancel to exit Setup Although it is recommended to use the default path click the BROWSE button to select another directory for the installation of the DEP RSA Key Loading Program software Click the NEXT button to continue BACK to return to previous screen or CANCEL to abort the installation procedure 10 4 SELECT PROGRAM FOLDER The Select Program Folder window is used to define the Program Folder where the program icons will be created banksys Technologies amp Products Page 40 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Select Program Folder Setup will add program icons to the Program Folder listed below You may new folder name ar select one from the existing Folders list Click Next to continue i Program Folders KEY LOADING Existing Folders Network Associates New Visio Drawing PCIS DASE WANT Samples Reflection _ ASA KEY LOADING lt Back Cancel By default the Program Folders field contains RSA KEY LOADING Although it is
31. ort operation 1 e Export radio button e Final step Import RSA Key operation i e Import radio button and Generate Certificates 1 e Self Signed Certificates checkbox 6 5 4 2 Generating EMV Certificates For the generation of EMV Certificates 1 e CA Target EUROPAY or VISA two options exist e A simultaneous selection of Generate RSA Key operation 1 e Generation radio button Generate Certificates i e Self Signed Certificates checkbox Ora simultaneous selection of Import RSA Key operation i e Import radio button banksys Technologies amp Products Page 31 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Generate Certificates i e Self Signed Certificates checkbox A summary of the process is given in the memo P X DepNT RSA KEY LOADING Generation Self Signed Certificates started Size of modulus in bits used for generation 1024 Public exponent used for generation 3 Creating hash file C Depnt Tools AS4 KEY GEN amp USESEuropay hip Creating self signed certificate file C Depnt ToolssASA4 KEY GEN amp USESEuropay sip Generation Self Signed Certificates done E pires leis 6 6 RUNNING ALL IN ONCE The program also allows selecting one operation and all the three associated operations banksys Technologies amp Products Page 32 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted
32. out banksys Technologies amp Products Page 18 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted About RSA KEY LOADING PROGRAM i erd fo end irana aa iana Dep NT RSA KEY LOADING PROGRAM version 1 2 04 Copyright 2003 BANKSYS TCA TED BSA system Information Memory Load 5575 Load Physical Memory 229084 KB Free Paging File 905508 KB Free 6 OPERATIONS There are two basic operations l Generate RSA Key Generation radio button 2 Import RSA Key Import radio button Besides these basic operations three associated operations also called functions are defined a Put RSA Key Into The Key Table Put In Key Table checkbox b Generate Certificate Requests Self Signed Certificates checkbox c Export RSA Key Export checkbox To obtain a useful functionality one must combine a basic operation with at least one associated operation This 1s explained in the next sections banksys Technologies amp Products Page 19 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted 6 1 GENERATE RSA KEY OPERATION The user must select the radio button Generation in order to set the size of the modulus and the public exponent value needed for this operation J DepNT RSA KEY LOADING ME Semice Communication Tools Help Select Operations f Generation Import Putin Key Table Self Signed Certificates Export ASA
33. re hard coded in the program and are according to the specification ref 3 11 4 CA TARGET 3DSECURE Field Length Format Description Hash Algo ID 2 digits To indicate the hash algorithm Possible values are used 33 SHAI It shall be 33 in order to 34 SHA256 comply with the VISA s 3 D 35 MD5 Secure Certificate Request 40 ISO 10118 2 MDC2 Procedure ref 4 Version 2 digits Version number related to the version of PKCS 10 defining the syntax of the certificate request It shall be 00 for the version 1 7 of PKCS 10 standard Signature Algo 2 digits To comply with the VISA s 3 D Secure Certificate Request Procedure ref 4 it shall be 05 to indicate the PKCS 1 s Shal WithRSAEncryption 2 characters ISO 3166 1 country It shall be BE for Belgium codes Common Name The table below gives the only permitted character set to use for Organization Name Organization Unit Name Locality Name State Province Common Name in order to comply with the VISA s 3 D Secure Certificate Request Procedure ref 4 Permitted Character Set Uppercase alphabetic letters Lowercase alphabetic letters Decimal digits Underscore Space character Apostrophe Hyphen Period
34. the content of the certificates files but can also realize a crosscheck between these files The selection of the Check Certificates item of the Tool menu leads to the appearance of a Check Certificate window that allows the selection of several certificate files J Check Certificate a 7 CA Public Key ie Bram 2 lesuer Certificate File Browse 2 CA Hash File Browse 2 w Check To choose one of the files the user must click on one of the BROWSE button this leads to the appearance of an Open window with a filter on the possible extensions of the corresponding files coming from CERTIFIER INI file banksys Technologies amp Products Page 15 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Open Look in C3 visaeuropay BNKSYS O20400 sip 3 CC102301 inp Files of type Request Certificate Files sip inp Cancel The user has to select the files for the first three fields the last one CA hash file is optional in order to allow the crosscheck between different files Check Certificate Certificate Request D Avisaeuropay BNKSYS 020400 sip Browse 2 Public Key File D visaewopay Epifesep Browsen 2 lesuer Certificate File D Avisaeuropay ENKSYS O20400 CFE Browse CA Hash File D vsaewopaEpfehep wf Check The operation is launched while clicking on the C
35. ual 03 04 Classification Restricted DepNT RSA KEY LOADING In this window the user can find e amemo blank part which will log the operations and their results amenu at the top of the window that allows to define communication operate on the memo have a look at the program version or to exit e aSelect Operation s panel which defines all the possible operations that can be done generation or import put in key table get SSC e another panel named Parameters that allows the definition of the needed parameters for the preceding operations and execute them through the use of the Previous Next and Go Buttons 5 2 SERVICE Use the Exit in order to exit of the application DepNT RSA KEY LOADING banksys Technologies amp Products Page 10 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted A Confirmation window 15 displayed click YES to exit Confirm _ 5 3 COMMUNICATION Click on Communication and select Define Communication in the menu to define all the communication properties that are necessary to communicate with the DEP Crypto Module s of the DEP Platform that will be connected to this program A Communication window appears J DepNT RSA KEY LOADING Memo Help Service Welle Tools Communication Dep Madules Frotaca DEP TCP Address 1721812230 C DERTEP Name C Den Madule 3 2 DEP TCP Fort In Dep Module 4 Time C
36. us In Bis sent 19 6 1 2 PUDEL PONGE ae UR S O 19 6 1 3 Running the Generate RSA key Operation ees 19 02 IMPORT RSA KEY OPERATION en 20 6 2 1 Definition of tne RSA Key Flea epo 21 6 2 2 Running the RSA Key 1 21 6 3 PUT RSA KEY INTO THE KEY TABLE OPERATION eren 21 6 3 1 Definition of the Key Destination 22 6 3 2 Running the Put RSA Key Into The Key Table Operation 22 6 4 gt TESTORTRSARF Ye m etae Um n INIM eee 23 6 4 1 DIV su QUNM CPP 24 6 5 GENERATE CERTIFICATE REQUESTS BASED ON SELF SIGNED CERTIFICATES SSC 26 6 5 1 CNOOSIN SC CA C ORI TIPS duoc iconos titt oM COM EORNM 27 6 5 2 Filling the Values in the Grid asia 28 6 5 3 Defining the Target file 29 6 5 4 Generating the Certificate Request based on 30 6 5 4 1 Generating PKCS Cates an Socios eee e un 30 6 5 4 2 Generating tees teclas der decem a dede 30 6 62 RUNNING ALL IN ONCE tace erie secus ee e I DL LIE 3 banksys Technologies amp Products Page 5 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted Je TROUBLESHOOTING 32 7 1 PARAMETERS NOT NOT WELL DEFINED ccccecceccecceccccecceccescceccescescseuscass 32 du PROBLEM OF CONNECTION 2 een 33 1 53
37. ut of DEP in sec 120 DEF Mag c Number Dep Version Number 20 pos i Mazimum Number of Try 3 5 3 1 DEP Modules Protocol The used protocol 1s the Enhanced DEP Protocol for more information refer to the DEP Host Interface Protocol Manual Select Pool if the DEP Crypto Modules you want to use are working in Pool otherwise you select a specific DEP Crypto Module Define also the DEP Magic Number and the DEP Version Number The standard banksys Technologies amp Products Page 11 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted values are shown 1 default 5 3 2 Communication The user must select either the DEP TCP Address or the DEP TCP Name of the DEP Platform that will communicate in TCP IP with the DEP RSA Key Loading Program Communication Dep Madules Frotaca C DEPTCPAddess 1721812230 DEP TCP Name DEPNTTEST Dep Module 2 Dep Module 3 l DEP TCP Pott 1000 Dep Module 4 Time Out of DEP in sec 120 _ DEP Magic Number cc Dep Version Humber 5 See hd ain Humber al Try i The DEP TCP Port and the Time Out of this DEP Platform must also be defined Please note that this time out must be a little bigger than the one that 1s defined on the DEP Platform see DEP NT DEP Handler Supervision Program User Manual or DEP Linux User Manual for more details Be aware that the generation of RSA keys could take some time Therefore
38. ven in paragraph 9 on page 36 5 5 TOOLS If the user clicks on the Tools item of the menu he she can select the operation on the certificate files he she is going to realize e either reading an EMV certificate file certificate hash file or certificate request file without any check e either checking a list of EMV certificate files Issuer request file CA public key file CA certificate file CA hash file banksys Technologies amp Products Page 13 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted DepNT RSA KEY LOADING Semice Communication Memo Help Visualize Hash amp Request Files Check Certificates 5 5 1 Visualize Hash amp Request Files Once the user selects the Visualize Hash amp Request Files item of the Tools menu an Open window appears whose filter 15 automatically adapted from the CA CERTIFIER INI file in order to look for hash and request files Open Look in C3 RSAkevs 051 2 00003 23 LOS12E65537 L1024E 00003 23 L1024E 65537 1 L2048E 00003 _ L2048EB5537 Files of type Hash amp Request Files hip vis sip inp Cancel As soon as the user has chosen his her file the Open windows closes and the content of the selected file appears in the memo In this phase no check 1s realized during the reading of the files banksys Technologies amp Products Page 14 45 DEP RSA Key Loading Program User Manual 03
39. warnings about copyright laws and international treaties RSA KEY LOADING Welcome to the RSA KEY LOADING Setup program This Program wil install RSA KEY LOADING on your computer Ib RR that ou pelt al windows DID AE 5 before running this Setup program ES Ck Cancel to quit Setup and then close ary programs you have a Click Next to continue with the Setup program WARNING This program is protected by copyright law and 3 international treaties Unauthorized reproduction or distribution of this program or portion of it may result in severe civil and criminal penalties will be prosecuted to the maximum extent possible under law lt Beck Next gt 4 Click the NEXT button to continue the installation or click CANCEL to abort it 10 2 USER INFORMATION The User Information screen allows the user to enter the names of the person and the company that performs the installation banksys Technologies amp Products Page 38 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted User Information Enter the name and the company and click NEXT to continue BACK to return to previous screen and CANCEL to abort the installation procedure 10 3 CHOOSE DESTINATION LOCATION The Choose Destination Location window allows defining the path where the DEP RSA Key Loading Program is installed The default path is C Depnt Tools RSA KEY LOADING banksys Technol
40. with Import RSA Key operation import radio button selected By clicking on the PREVIOUS NEXT banksys Technologies amp Products Page 23 45 DEP RSA Key Loading Program User Manual 03 04 Classification Restricted buttons the user can define redefine the parameters necessary for the associated operation and the basic operation Then the user can click on the GO button n order to execute the selected operations the basic operation and the associated operation Again some information on the whole process 1s given in the memo DepNT LOADING ME Service Communication Tools Help Generation Put In Key Table One Tag started Size of modulus in bits used for generation 512 Public exponent used for generation 3 Tag used for Put in key table one tag operation 04220393 Generation Put In Key Table One Tag done Select Operations f Generation t Import Y Putin Key Table Self Signed Certificates Export RSA KEY Size of Modulus in Bits 51 2 Public Exponent 3 lt lt Previous Mest gt gt The user see that PREVIOUS NEXT buttons are disabled when he she 15 defining the first last operation 6 4 EXPORT RSA KEY When selecting the Export RSA Key operation Checkbox Export the user can have a copy of the generated RSA key pair into files one RSA file and one PUB file The RSA file contains the RSA key pair where the pub
Download Pdf Manuals
Related Search