Token Support

This section focuses mostly on Windows as the most popular operating system.

Tested tokens on IE plugin & Firefox Token Signing Plugin

• Estonian ID Card (works)
• Finnish ID Card (works)
• Latvian ID Card (works)
• Lithuanian ID Card (works)
• Aladdin eToken (works on IE)

General installation instructions

• Install your country specific eID driver software.
• Install plugin(s) for the browser(s) you wish to use for giving eSignatures.
  • Install IE Token Signing BHO plugin for giving eSignatures in Internet Explorer.
    • You can find the latest version at https://github.com/open-eid/browser-token-signing/releases
  • Restart Internet Explorer
  • Install Firefox Token Signing Plugin for giving eSignatures in Mozilla Firefox
    • You can find the latest version at https://github.com/open-eid/browser-token-signing/releases
  • Restart Mozilla Firefox
• Insert smart card to the reader
• Try testing at https://open-eid.github.io/hwcrypto.js/sign.html

Estonia

• Install Estonian ID-Card software (https://installer.id.ee).
  • Browser plugins are included in the installer
  • If you wish to to use one of the latest beta releases of browser plugins then additionally:
    • Install IE Token Signing BHO plugin (https://github.com/open-eid/browser-token-signing/releases)
    • Install Firefox Token Signing Plugin (https://github.com/open-eid/browser-token-signing/releases)
• Everything should work out of the box.

Limitations

• EstEID RSA 1024 first generation cards support only SHA1 and SHA224

Lithuania

• Install CryptoTech Software (http://www.nsc.vrm.lt/downloads.htm)
  • Lithuanian old pre 2012 card works with Gemalto Classic Client (http://www.nsc.vrm.lt/downloads.htm)
• Install IE Token Signing BHO plugin (https://github.com/open-eid/browser-token-signing/releases)
• Install Firefox Token Signing Plugin (https://github.com/open-eid/browser-token-signing/releases)
• Try signing. Everything should work out of the box.

If signing fails, then make sure your certificates have been loaded to the Windows Certificate Store

• If you try signing and it fails with the error: no_certificates
• Open Windows Certificate Store (certmgr.msc)
• See if your certificates have been loaded under the Personal certificates section
• If your certificates are not loaded then restart CryptoCard Monitor
• You should see the following message: "A new smart card has been detected. Certificates from the card have been registered to Windows Certificate Store"

Limitations

• Does not support SHA224
• Lithuanian first generation cards support only SHA1
• IE Token Signing BHO plugin only supports Lithuanian first generation cards when Protected Mode is turned off or when IE is run as administrator
  • Go to Internet Options -> Security & untick "Enable Protected Mode"

Latvia

• Install Latvian eID middleware (https://www.eparaksts.lv/en/eid-card/downloads/eid-card-middleware)
• Install IE Token Signing BHO plugin (https://github.com/open-eid/browser-token-signing/releases)
• Install Firefox Token Signing Plugin (https://github.com/open-eid/browser-token-signing/releases)
• Try signing. Everything should work
  • You can test at https://open-eid.github.io/hwcrypto.js/sign.html

Limitations

• Does not support SHA224
• Does not support SHA384
• Does not support SHA512

Finland

• Install Finnish eID Card Reader Software (https://eevertti.vrk.fi/Default.aspx?id=307)
• Install IE Token Signing BHO plugin (https://github.com/open-eid/browser-token-signing/releases)
• Install Firefox Token Signing Plugin (https://github.com/open-eid/browser-token-signing/releases)
• Try signing. Everything should work
  • You can test at https://open-eid.github.io/hwcrypto.js/sign.html

Aladdin USB eToken

• Install SafeNet Authentication Client Software
• Install IE Token Signing BHO plugin (https://github.com/open-eid/browser-token-signing/releases)
• Try signing. Everything should work

Limitations

• Not tested with Firefox Token Signing Plugin