Transcript
Installation Note Digipass CCID Filter Driver
Published by:
VASCO Data Security Raadhuisstraat 55 5241 BK Rosmalen Netherlands Phone: +31-(0)73-6918888 Fax: +31-(0)73-6918899
Author:
Rob van Hout
Date of Issue: Version:
13-04-2012 0.3
Project number:
92001
Reviewed by
Date
Signature
Copyright © 2012 VASCO Data Security The contents of this document are confidential and property of Vasco, protected by international treaties. Nothing from this document may be disclosed or copied, by any means, electronic, magnetic, optical or by photocopy, without the prior written permission of the publisher.
Installation Note, Digipass CCID Filter Driver
Disclaimer of Warranties and Limitation of Liabilities All information contained in this document is provided 'as is'; VASCO Data Security assumes no responsibility for its accuracy and/or completeness. In no event will VASCO Data Security be liable for damages arising directly or indirectly from any use of the information contained in this document.
Copyright VASCO Data Security 2011. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of VASCO Data Security.
Trademarks DIGIPASS and VACMAN are trademarks of VASCO Data Security. All other trademarks referenced are trademarks of their respective owners.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Installation Note, Digipass CCID Filter Driver
Release history Version 0.1 0.2
Date 15-07-2010 16-03-2011
Author Rob van Hout Rob van Hout
0.3
13-04-2012
Rob van Hout
Remarks Initial version Updated for Windows Vista Updated for signed drivers and Windows 7
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 3 of 23
Installation Note, Digipass CCID Filter Driver
Contents Release history .............................................................................................................................. 3 Related documents ........................................................................................................................ 5 1 Introduction .......................................................................................................................... 6 1.1 System Requirements ............................................................................................... 6 1.2 Known Limitations ..................................................................................................... 6 2 Installation – Windows XP ................................................................................................... 7 2.1 Preparing for installation............................................................................................ 7 2.2 Installing the VASCO Digipass CCID filter driver ...................................................... 7 3 Installation – Windows Vista.............................................................................................. 13 3.1 Preparing for installation.......................................................................................... 13 3.2 Installing the VASCO Digipass CCID filter driver .................................................... 13 4 Installation – Windows 7.................................................................................................... 18 4.1 Preparing for installation.......................................................................................... 18 4.2 Installing the VASCO Digipass CCID filter driver .................................................... 18 5 Appendix A: Installation Guides......................................................................................... 22 5.1 Windows XP: Installing the Microsoft CCID driver .................................................. 22
Table of Figures Figure 1 – Computer Management / Device Manager ................................................................. 7 Figure 2 – Hardware Update Wizard ............................................................................................ 8 Figure 3 – Update source selection .............................................................................................. 8 Figure 4 – Search and installation options.................................................................................... 9 Figure 5 – Device driver selection ................................................................................................ 9 Figure 6 – INF file location .......................................................................................................... 10 Figure 7 – Device driver selection continued.............................................................................. 10 Figure 8 – Unsigned driver warning............................................................................................ 11 Figure 9 – Successful filter driver installation ............................................................................. 11 Figure 10 – Device Manager showing VASCO Digipass reader ................................................ 12 Figure 11 – Computer Management / Device Manager ............................................................. 13 Figure 12 – How to search for driver software............................................................................ 14 Figure 13 – Browse for driver software....................................................................................... 14 Figure 14 – Device driver selection ............................................................................................ 15 Figure 15 – INF file location........................................................................................................ 15 Figure 16 – Device driver selection continued............................................................................ 16 Figure 17 – Driver signature ....................................................................................................... 16 Figure 18 – Successful filter driver installation ........................................................................... 17 Figure 19 – Device Manager showing VASCO Digipass reader ................................................ 17 Figure 20 – Computer Management / Device Manager ............................................................. 18 Figure 21 – How to search for driver software............................................................................ 19 Figure 22 – Browse for driver software....................................................................................... 19 Figure 23 – Driver signature ....................................................................................................... 20 Figure 24 – Successful filter driver installation ........................................................................... 20 Figure 25 – Device Manager showing VASCO Digipass reader ................................................ 21 Figure 26 – New Hardware Wizard............................................................................................. 22 Figure 27 – Installation source selection .................................................................................... 22 Figure 28 – Successful CCID driver installation ......................................................................... 23
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 4 of 23
Installation Note, Digipass CCID Filter Driver
Related documents The following documents are referred to within this document and are considered to be included portions of this document. In those cases where this document differs from a document referenced here, this document takes precedence. Ref 1
2
Title Interoperability Secification for ICCs and Personal Computer Systems – Part 10 IFDs with Secure PIN Entry Capabilities Specification for Integrated Circuit(s) Cards Interface Devices
Publisher PC/SC Workgroup
Date of issue 04-2010
Version 2.02.08
USB.org
22-04-2005
1.1
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 5 of 23
Installation Note, Digipass CCID Filter Driver
1 Introduction In order to standardize interaction with secure card readers (i.e. card readers sporting a built-in key pad for secure PIN entry), the PC/SC 2.0 standard [1] defines a set of features and control codes that can be used to interact with the reader directly through I/O control commands. Current versions of the Microsoft USB CCID class driver (which is used by VASCO secure card readers) however discard these I/O control commands rather than forwarding them to the CCID equivalents as defined in [2], effectively hiding the any features provided by the reader from PC/SC 2.0 enabled software. The VASCO Digipass CCID filter driver circumvents the shortcomings of the Microsoft CCID class driver by filtering I/O control commands before they are processed by the driver itself. This approach allows the filter driver to “re-map” the control commands to (proprietary) APDU calls to be interpreted by the VASCO Digipass card reader. The following commands and features as defined by [1] are forwarded by the VASCO Digipass CCID filter driver: • • • •
GET_FEATURE_REQUEST FEATURE_IFD_PIN_PROPERTIES FEATURE_VERIFY_PIN_DIRECT FEATURE_MODIFY_PIN_DIRECT
- see [1] paragraph 2.2 - see [1] paragraph 2.6.8 - see [1] paragraph 2.6.4 - see [1] paragraph 2.6.4
NOTE: Although this installation guide uses only the VASCO Digipass 865 in all instructions and sample screenshots, the installation procedure applies also to the VASCO Digipass 855 and Digipass 920 card readers.
1.1
System Requirements
The following hard- and software is required for using the VASCO Digipass CCID filter driver: • • •
1.2 • •
Microsoft Windows XP (x86 architecture), Microsoft Windows Vista (x86 or x86-64 architecture) or Microsoft Windows 7 (x86 or x86-64 architecture). Microsoft USB CCID driver; VASCO Digipass 855, 865 or 920 card reader.
Known Limitations Installation of the VASCO Digipass CCID filter driver requires the Microsoft USB CCID driver to be present on the system (for Windows XP, see paragraph 5.1); The filter driver is linked to a specific USB connection. If the reader is connected to a different USB port on the same system, the filter driver installation procedure needs to be repeated.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 6 of 23
Installation Note, Digipass CCID Filter Driver
2 Installation – Windows XP 2.1
Preparing for installation
Before installing, make sure that you have a working internet connection. To start the installation, connect your VASCO Digipass 865 card reader and let Windows Update download and install the Microsoft USB CCID driver. A detailed overview of the CCID driver installation procedure can be found in Appendix A, paragraph 5.1. Once the reader is installed with the Microsoft USB CCID driver, you can install the VASCO Digipass CCID filter driver as described in the next paragraph.
2.2
Installing the VASCO Digipass CCID filter driver
Open the “Computer Management” console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option. Locate the “USB Smart Card reader” device under “Smart card readers” in the Device Manager. Disconnect any other card readers connected to your system if you have multiple entries with the same name.
Figure 1 – Computer Management / Device Manager Right-click the “USB Smart Card reader” device and select the “Update driver…” option from the context menu. This will open the Hardware Update Wizard:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 7 of 23
Installation Note, Digipass CCID Filter Driver
Figure 2 – Hardware Update Wizard As we need to manually select the INF file for the filter driver, select “No, not this time” to prevent the Hardware Update Wizard searching Windows Update for software:
Figure 3 – Update source selection This page lets you choose between letting Windows automatically search typical local resources for drivers, or installing from a specific location. Select “Install from a list or specific location (Advanced)”:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 8 of 23
Installation Note, Digipass CCID Filter Driver
Figure 4 – Search and installation options We don’t need Windows to search local media, so select “Don’t search. I will choose the driver to install.” to continue:
Figure 5 – Device driver selection Click the “Have Disk…” button to open the file selection dialog:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 9 of 23
Installation Note, Digipass CCID Filter Driver
Figure 6 – INF file location Select the folder containing the installation files for the VASCO Digipass CCID filter driver. After clicking “OK”, the Hardware Update Wizard will show the following entry:
Figure 7 – Device driver selection continued Select the “VASCO Digipass 865” device from the list and click “Next” to install the driver:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 10 of 23
Installation Note, Digipass CCID Filter Driver
Figure 8 – Unsigned driver warning This driver has not been submitted for Microsoft WHQL signing. Click “Continue Anyway” to ignore the warning message and continue installation:
Figure 9 – Successful filter driver installation The driver is now installed, and the reader should show up as “VASCO Digipass 865” instead of “USB Smart Card reader” in the Computer Management console. You can open the Computer Management console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 11 of 23
Installation Note, Digipass CCID Filter Driver
Figure 10 – Device Manager showing VASCO Digipass reader The VASCO Digipass 865 reader is now ready for use with PC/SC 2.0 enabled applications.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 12 of 23
Installation Note, Digipass CCID Filter Driver
3 Installation – Windows Vista 3.1
Preparing for installation
Microsoft Windows Vista includes the standard Microsoft CCID driver. Connect the reader to initiate the installation process; once the reader is installed with the Microsoft USB CCID driver, you can install the VASCO Digipass CCID filter driver as described in the next paragraph.
3.2
Installing the VASCO Digipass CCID filter driver
Open the “Computer Management” console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option. Locate the “USB Smart Card reader” device under “Smart card readers” in the Device Manager. Disconnect any other card readers connected to your system if you have multiple entries with the same name.
Figure 11 – Computer Management / Device Manager Right-click the “USB Smart Card reader” device and select the “Update driver…” option from the context menu. This will open the Update Driver Software wizard:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 13 of 23
Installation Note, Digipass CCID Filter Driver
Figure 12 – How to search for driver software This page lets you choose between letting Windows automatically search for drivers, or installing from a specific location. Select “Browse my computer for driver software”:
Figure 13 – Browse for driver software Select “Let me pick from a list of device drivers on my computer” to continue:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 14 of 23
Installation Note, Digipass CCID Filter Driver
Figure 14 – Device driver selection Click the “Have Disk…” button to open the file selection dialog:
Figure 15 – INF file location Select the folder containing the installation files for the VASCO Digipass CCID filter driver. Be sure to select the correct architecture (i386 for 32-bit and amd64 for 64-bit systems). After clicking “OK”, the Update Driver Software Wizard will show the following entry:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 15 of 23
Installation Note, Digipass CCID Filter Driver
Figure 16 – Device driver selection continued Select the “VASCO Digipass 865” device from the list and click “Next” to install the driver:
Figure 17 – Driver signature Click “Install” to complete the installation:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 16 of 23
Installation Note, Digipass CCID Filter Driver
Figure 18 – Successful filter driver installation The driver is now installed, and the reader should show up as “VASCO Digipass 865” instead of “USB Smart Card reader” in the Computer Management console. You can open the Computer Management console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option.
Figure 19 – Device Manager showing VASCO Digipass reader The VASCO Digipass 865 reader is now ready for use with PC/SC 2.0 enabled applications.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 17 of 23
Installation Note, Digipass CCID Filter Driver
4 Installation – Windows 7 4.1
Preparing for installation
Microsoft Windows 7 includes the standard Microsoft CCID driver. Connect the reader to initiate the installation process; once the reader is installed with the Microsoft USB CCID driver, you can install the VASCO Digipass CCID filter driver as described in the next paragraph.
4.2
Installing the VASCO Digipass CCID filter driver
Open the “Computer Management” console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option. Locate the “Microsoft Usbccid Smartcard Reader (WUDF)” device under “Smart card readers” in the Device Manager. Disconnect any other card readers connected to your system if you have multiple entries with the same name.
Figure 20 – Computer Management / Device Manager Right-click the “Microsoft Usbccid Smartcard Reader (WUDF)” device and select the “Update driver…” option from the context menu. This will open the Update Driver Software wizard:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 18 of 23
Installation Note, Digipass CCID Filter Driver
Figure 21 – How to search for driver software This page lets you choose between letting Windows automatically search for drivers, or installing from a specific location. Select “Browse my computer for driver software”:
Figure 22 – Browse for driver software Click “Browse” to select the location of the filter driver for Windows 7. Be sure to select the correct architecture (i386 for 32-bit and amd64 for 64-bit systems). Click “Next” to continue:
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 19 of 23
Installation Note, Digipass CCID Filter Driver
Figure 23 – Driver signature Click “Install” to complete the installation:
Figure 24 – Successful filter driver installation The driver is now installed, and the reader should show up as “VASCO Digipass 865” instead of “Microsoft Usbccid Smartcard Reader (WUDF)” in the Computer Management console. You can open the Computer Management console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 20 of 23
Installation Note, Digipass CCID Filter Driver
Figure 25 – Device Manager showing VASCO Digipass reader The VASCO Digipass 865 reader is now ready for use with PC/SC 2.0 enabled applications.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 21 of 23
Installation Note, Digipass CCID Filter Driver
5 Appendix A: Installation Guides 5.1
Windows XP: Installing the Microsoft CCID driver
Connect the VASCO Digipass 865 reader and wait for the “Found New Hardware Wizard” dialog:
Figure 26 – New Hardware Wizard Make sure you have a working internet connection and select “Yes, this time only” for searching Windows Update:
Figure 27 – Installation source selection
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 22 of 23
Installation Note, Digipass CCID Filter Driver Select “Install the software automatically (Recommended)”.
Figure 28 – Successful CCID driver installation The Microsoft CCID driver is now installed. The reader will be listed in the device manager as “USB Smart Card reader”. You can open the Computer Management console by right-clicking “My Computer” in the Start menu and selecting the “Manage” menu option.
Copyright © 2012 VASCO Data Security
13-04-2012
INS-CCIDFilter-v0.3.doc
0.3
Page 23 of 23