User's Manual

EUTRON Infosecurity - Key Solutions for IT Security Tel. +39 035 - 6970.80 Fax: +39 035 - 6970.92
Via Gandhi 12 - I-24048 Treviolo (Bergamo) e-mail: [e-mail] web: www.eutron.com/infosecurity
• Flash Memory: 128 MB – 256MB – 512 MB – 1 GB – 2 GB – 4 GB
• Standard Mass Storage
• CD-ROM with autorun function
• Encrypted Mass Storage, with AES 256 bit
• Write-protected Mass Storage (read-only partition)
3. Models
• ITSEC-I with 32K EEPROM, RSA 1024 bit cryptography, INFINEON SLE66CX322P cryptographic
chip, CardOS 4.01A (ITSEC E4 High certified) or CardOS M4.2B (CC EAL 4+certified) or CardOS
M4.3B (CC EAL 4+ certified) Siemens - chip CC EAL 5+ certified
• ITSEC-I-64 with 64K EEPROM, RSA 2048 bit cryptography, INFINEON SLE66CX642P
cryptographic chip, CardOS M4.3B Siemens mask – Chip CC EAL 5+ certified and mask CC EAL 4+
certified
• ITSEC-P with 32K EEPROM, RSA 1024 bit cryptography, PHILIPS P8WE5032 cryptographic chip,
G&D StarCOS SPK 2.3 mask – Chip and mask ITSEC E4 High certified
• FIPS with 32K EEPROM, RSA 1024 bit cryptography, PHILIPS P8WE5032 cryptographic chip, G&D
StarCOS SPK 2.4 mask
4. Specifications
Standard
ISO 7816 3-4, PKCS#11 v2.11, PC/SC, Microsoft CAPI, S/MIME, IPSec/IKE, X.509 v3
Operating systems
Microsoft Windows 98/ME/2000/XP and LINUX
Interoperability
Microsoft Internet Explorer, Microsoft Outlook, Lotus Notes 6.0x, Adobe Acrobat, VPN clients and with
all applications using the reported standards
5. Technical specifications
OTP section
• 8 character LCD Display
• Real time clock on board
• Battery life: 5 years minimum
• Compatibility with the Digipass VASCO family
USB PKI section
• Transfer rate of cryptographic component: up to 115Kbps
• Flash memory data reading speed: 18 MB/s
• Flash memory data writing speed: 11 MB/s
• Power supply: from USB bus (4.5V - 5.5V)
Minimum hardware requirements
• Pentium 100MHz or higher
• 1 USB 1.1 port or higher
6. Activation and setup of OTP-PKI services
Integrating the OTP component in the existing networks is simple and easy. Any static password can be
replaced instantly with the more secure OTPSign Combo-generated dynamic password. You simply
start the programming procedure.
With the existing PKI facilities, activation of the device cryptographic component is direct. The device
flash memory can contain a CD-ROM partition, enabling simplified installation and configuration of the
token.