CAC/PKI TRAINING GUIDE - IDManagement.gov

Table of Contents
2
Product Manager
Secure Electronic Transactions – Devices
1 GENERAL ...........................................................................................................................................................4
2 INTRODUCTION ...............................................................................................................................................4
3 WHAT IS PUBLIC KEY INFRASTRUCTURE? ............................................................................................6
3.1 WHAT IS A CERTIFICATE AUTHORITY?...........................................................................................................7
3.2 WHAT ARE CERTIFICATES?.............................................................................................................................8
3.3 WHAT IS THE COMMON ACCESS CARD? .........................................................................................................9
4 EXPLAINING DEERS AND RAPIDS ............................................................................................................10
5 DOD PUBLIC KEY INFRASTRUCTURE ROLES ......................................................................................11
5.1 RESPONSIBILITIES OF THE VO/LRA .............................................................................................................11
5.2 RESPONSIBILITIES OF THE DOIM .................................................................................................................12
5.3 RESPONSIBILITIES OF THE IMO ....................................................................................................................13
5.4 RESPONSIBILITIES OF THE CARD RECIPIENT .................................................................................................13
6 INSTALLATION TRAINING SCENARIOS .................................................................................................14
6.1 SYSTEM REQUIREMENTS ..............................................................................................................................14
6.1.1 Operating Systems ...............................................................................................................................14
6.1.2 Applications.........................................................................................................................................14
6.2 INSTALLING ACTIVCARD GOLD 2.0.1 MIDDLEWARE ...................................................................................15
6.3 INSTALLING CARD READER AND DRIVERS ...................................................................................................28
6.3.1 SCM SCR111 Serial SmartCard Reader..............................................................................................28
6.3.2 ActivCard Serial SmartCard Reader....................................................................................................40
6.3.3 Schlumberger Reflex 72 Serial Smart Card Reader.............................................................................49
6.3.4 Schlumberger Reflex USB Card Reader..............................................................................................57
6.3.5 Schlumberger Reflex PCMCIA Card Reader ......................................................................................64
6.4 CHECKING CARD READER INSTALLATION WITH DEVICE MANAGER ............................................................70
6.5 OBTAINING AND INSTALLING ROOT CERTIFICATES......................................................................................74
6.5.1 Obtaining and Installing Test CAC Root Certificates..........................................................................74
6.5.2 Obtaining Root Certificates .................................................................................................................88
6.5.3 Installing Root Certificates ..................................................................................................................94
6.6 REGISTERING CAC PKI CERTIFICATES ........................................................................................................99
6.7 CONFIGURE OUTLOOK 98/2000 CLIENT SECURITY PROFILE ......................................................................108
7 FUNCTIONAL TRAINING SCENARIOS...................................................................................................123
7.1 SENDING AND RECEIVING DIGITALLY SIGNED AND ENCRYPTED EMAIL ....................................................123
7.1.1 Sending Email....................................................................................................................................123
7.1.2 Receiving Email.................................................................................................................................128
7.2 RETRIEVING OTHER USERS CERTIFICATES.................................................................................................134
7.3.1 From a Signed Message.....................................................................................................................134
7.3.2 Retrieval from DOD PKI Directory...................................................................................................137
7.3 NETWORK LOGIN .......................................................................................................................................148
7.3.1 Windows NT & 2000 Network Login ...............................................................................................148
7.3.2 Windows 98 Network Login..............................................................................................................149
7.4 LOGIN TO A PK-ENABLED WEBSITE...........................................................................................................150
8 TROUBLESHOOTING GUIDE....................................................................................................................154