Problem

How do I manage my iKey USB token using Token Utilities?

Solution

This knowledgebase article answers some of the questions you may have about managing your SafeNet iKey Token.

How do I login to my iKey USB token on Token Utilities?

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to login to.
2. Click on the Login button.
3. Enter in your token password.

What if I think I have a problem with my iKey USB token?

If you have a problem with your iKey Token, you may want to try this first before obtaining a new token. Following these steps will give you the Token Status window which could display crucial troubleshooting information.

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to test.
2. Click on the Token Status button in the Token Operations section.
   A new window named Token Status will appear that will give you information about the token.

How do I change my iKey USB token password?

Changing your iKey USB token password will change the password used to access any certificate installed on the same token.  QuoVadis recommends a password that is at least 9 characters long with at least one lower-case letter ('a'), one upper-case letter ('A'), one special character ('$') and at least one numeral ('2').  Simple words and sequences ('car, 'bike' & '1234', 'abcd') are not recommended. 

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to change the password for.
2. Click on Token at the top left corner.
3. In the drop down menu, click on Change PIN.  Alternatively, you can press Ctrl+P.
   A new window will appear named Change PIN.
4. Type in your current password for you token into the Old PIN field.
5. Type in the new password for your token into the New PIN and the Reenter PIN field.
6. Click on the OK button.

How do I change my iKey USB Token Label?

The Token Label is the name given to the entire token.  In most cases, a token will be named with the user's name or initials for a system that the token provides access too.  This helps differentiate between tokens when selecting different slots in Token Utilities.  The Token Label defaults to the Serial Number of the token. 

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to change the label for.
2. Click on Options at the top left corner next to Token.
3. In the drop down menu, click on Settings.  Alternatively, you can press Ctrl+S.
   A new window will appear named Change Settings.
4. Type in the new name for your token in the Token Label field.
5. You will prompted to enter in your token password.  Enter in your password and click on the OK button.
6. Back in the Change Settings window, click on the OK button .

When you are back in the Token Utilities window, you should that the Label field in the Token section has the new name that you have specified.

How do I add a digital certificate to my iKey USB token?

SafeNet iKey tokens can hold multiple digital certificates on it. Below are the instructions on how to install these.

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to add a certificate to.
2. Click on the Certificates button in Token Operations section.
3. If you are not logged in, you will prompted to enter in your token password.  Enter in your token password and click on the OK button.
   A new window will appear named Certificates.
4. Click on the Import P12 File button at the bottom right in the Certificate Operations section.
   A browse window will appear.
5. Navigate to the .p12 or .pfx file on your computer.  Once you have selected it, then click on the Open button.
   The browsing window will disappear and another small window will appear with one entry field in it.
6. Enter in the password for the certificate file.  This should not be the password for your iKey token.
   Another window with an entry field will appear named Select Container Name.
7. Delete the letters and numbers in that field (optional) and type in a Friendly Name to recognize this certificate onto your token.
   After several seconds, a window will appear that says, "PKCS#12 import successful."

How do I delete a digital certificate from my iKey USB token?

When a certificate is no longer needed on a token, then it should be deleted off the iKey USB token for security reasons and to free up memory on the token.

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to add a certificate to.
2. Click on the Certificates button in Token Operations section.
3. If you are not logged in, you will prompted to enter in your token password.  Enter in your token password and click on the OK button.
   A new window will appear named Certificates.
4. There should be a list of all certificates on the iKey token.  Each certificate (called a container in this application) should have a + sign in front of it.
5. Right-click on the certificate (or container) that you would like to delete.
   A drop down menu will appear from the mouse cursor.
6. Click on the option, Delete Container.
   A small window will appear that reads "Delete Selected Container?".
   
7. Click on the Yes button.
   The container will be deleted.

What if I put in an incorrect password for my iKey USB token and I have blocked my token?

There is no way to unblock a token once it has been blocked.  This is part of the security feature of the iKey token to prevent a malicious user from using any credentials on the iKey token.  If you have done this, then you must initialize your token which will erase all data on the token and reset the password, turning it into a fresh new token.  Any certificates on the token will be lost.

How do I initialize my iKey USB token?

When you initialize the iKey token, it is wiped clean. All certificates and information stored on the token will be erased. The password on the token will also be reset to a generic default password specifed by the Token Utilities application. The only two aspects of the iKey USB token that is carried on is the Serial Number and the Token Label.

1. Underneath the SafeNet logo, select the appropriate Slot that contains the token you would like to initialize.
2. Click on Token at the top left corner.
3. In the drop down menu, click on Initialize Token.  Alternatively, you can press Ctrl+I.
   A Warning window will appear. This window contains the Serial Number and the Token Label of the iKey Token.
4. Click on the Continue Initialization button.
   Another window will appear that provides you with the new default password.
5. Once you have taken note of the newly set password, click on the OK button.

Can a token be reused?

Tokens can be reused between users.  It is recommended that iKey tokens are initialized before given to another user.  It is also a good idea to check the Token Label as this information is not changed during initialization.