User's Manual

CryptoIdentity User Guide – 1. Introduction to CryptoIdentity and CryptoKit
The parameters ("Attribute_(XX)") stored in this key are set into the CryptoIdentity by the
initialization process:
In details:
Parameter Explanation Name registry value Default value
Max PIN length Maximum PIN size
(alphanumeric characters)
Attribute_105 37 (Hex) - 55
(dec)
PIN expiration Number of days before the
PIN expires
Attribute_205 379 (hex) - 889
(dec)
Min PIN length Minimum PIN size
(alphanumeric characters)
Attribute_3 6 (Hex) - 6 (dec)
Max RSA private
keys
Maximum number of RSA
private keys into the token
Attribute_301 6 (Hex) - 6 (dec)
PIN attempts Number of sequential wrong
attempts before the PIN
locks
Attribute_302 0c (Hex) - 12
(dec)
SO PIN attempts Number of sequential wrong
attempts before the Security
Officer PIN locks
Attribute_303 6 (Hex) - 6 (dec)
It is possible to customize all these CryptoIdentity parameters. The customization must be
done before the CryptoIdentity initialization. To do so:
• Edit the previous registry values according to your needs. For example, to change the
CryptoIdentity “Max PIN length” parameter, edit the “Attribute_105” registry value and set
the desired length.
• Reboot the machine.
• After the reboot, initialize the CryptoIdentity through Init Token or AR Genie utility. For
details about the initialization process, refer to section "3.3 Init Token" or "3.1 AR Genie".
• The initialization process will configure the CryptoIdentity according to the desired
configuration. Regarding the previous example, a new “Max PIN length” parameter will be
set into the token.
In next chapters, this guide will provide examples and instructions related to
CryptoIdentity default configuration.