Administrating The Cryptographic Keys With The Smart Card; Creating The Cryptographic Keys - Digittrade HS256 S3 Benutzerhandbuch

4. Administrating the cryptographic keys with the
smart card
The cryptographic keys are created and encrypted on a certified smart card. After the
PIN has been correctly entered the cryptographic keys are transferred to the encryption
module of the HS256 S3 to de-/encrypt the data. The cryptographic keys can be copied
to other smart cards for using the storage device. The cryptographic keys can be created,
changed or deleted using the smart card PIN.
The function of administrating the cryptographic keys (creating, destroying and copying)
only works with smart cards that have the DIGITTRADE HS256 S3 Java Card Applet.
The HS256 S3 is (by default) distributed with 2 of the following type of smart cards NXP
J2E081_M64 R3, CC EAL 5.
Note: The HS256 S3 is delivered preconfigured and ready-to-use. For security reasons
it is very important that the cryptographic keys are changed and the smart cards are re-
initialized for the HS256 S3.

4.1 Creating the cryptographic keys

With the help of DIGITTRADE HS256 S3 the cryptographic keys can be created on a
working smart card. The integrated certified random number generator creates random
and safe cryptographic numbers.
Follow these steps to create cryptographic keys:
1) Insert a working smart card into the associated card slot (see chapter 1.4 and 3.1).
2) If the smart card has no cryptographic keys, the "ERROR"-LED as well as the
"STATUS"-LED illuminate red.
If the smart card already has cryptographic keys that are not initialized for the HS256
S3, the red "ERROR"-LED and the keypad iluminate. The smart card is already initialized
the key pad illuminates.
3) Press the "ADMIN"-button and afterwards "2".
4) Press the "ENTER"-button. The "STATUS"-LED flashes green several times.
5) Type in your 8-digit smart card PIN and press "ENTER" to confirm the entry.
Note: If the PIN entry was not successful, the red "ERROR"-LED flashes. Press the "ESC"
button and start again with the third step of creating the cryptographic keys. You have 8
66