Zetes Sipiro User manual

Sipiro

2
Contents
Getting Started ..................................................................................................................................................................... 3
Installation............................................................................................................................................................................ 3
Supported Card Types ........................................................................................................................................................... 3
Belgian Eid Card detection .................................................................................................................................................... 4
Adjusting Contrast ................................................................................................................................................................ 4
Calculator ............................................................................................................................................................................. 5
Language .............................................................................................................................................................................. 5
Aut entication PIN ............................................................................................................................................................... 6
Aut entication Message ....................................................................................................................................................... 6
Qualified Signature PIN ......................................................................................................................................................... 7
Qualified Signature Message (1) ........................................................................................................................................... 7
Qualified Signature Message (2) ........................................................................................................................................... 8
EMV CAP aut entication ....................................................................................................................................................... 8
EMV CAP transactions ........................................................................................................................................................... 9
Frequently Asked Questions ................................................................................................................................................. 9

3
Getting Started
T e Sipiro is a portable and low-cost and eld smart card device t at is capable of managing One Time Passwords (OTP), C allenge-response
Aut entication Codes, and Transaction Data Signing (PKI digital signatures) based on t e security keys stored in t e EMV cards and eID cards. T e Sipiro is
compliant wit major federal, banking, computing and safety standards suc as t e Belgian eID card, MasterCard® C ip Aut entication Program (CAP),
MasterCard® Advanced Aut entication for C ip (AA4C/PLA), VISA Dynamic Passcode Aut entication (DPA) and EMV Level 1.
The Sipiro supports Secure PIN Entry (SPE) to assure secure PIN entry and PIN c ange w ile on PC-linked mode. On standalone mode, t e PIN is securely
entered into t e device and kept from being exposed to vulnerable PC’s or workstations, ence eliminating t e possibility of a Virus/Trojan getting old of
t e PIN.
Further ore the Sipiro can be used as a compact OTP (One-time password) generator w ic can perform aut entication for various applications eit er
on PC-linked or standalone mode. It uses two-factor aut entication w ic requires t e card older to insert t e EMV card (something you have) into t e
device and enter a PIN (something you know) using t e built-in pin-pad. T e display screen will t en let somebody see a generated dynamic one-time
password w ic can be used to perform secure online transactions, telep one orders or e-banking logons.
Installation
•Manual install: download t e driver as presented on www.belgeid.be and follow t ese procedures:
1. Do NOT connect t e reader!
2. Run setup.exe
3. Follow instructions on screen
4. Select destination folder or click next to confirm t e default installation folder
5. Once prompted t at t e operation is complete, click “Finis ”.
6. After installation is complete, plugin t e reader into an available USB port and wait until Windows finds t e new ardware.
7. Do not remove t e reader until “Ready to use” message is s own by t e windows device installation dialog.
Supported Card Types
•ISO7816 cards like Belgian eID card
•CAP certified EMV contact card, including:
a. M/C ip Lite 2.1 wit CAP personalization profile
b. M/C ip 4 wit CAP personalization profile
c. M/C ip Select 2.05 wit CAP personalization profile
•PLA/AA4C certified EMV contact card
•VISA DPA certified contact card

4
Belgian Eid Card detection
In PC connected mode t e Sipiro detects t e Belgian eID card automatically and contains special functions for securing all of your eID transactions.
Adjusting Contrast
In standalone mode (not connected to computer) you can adjust t e contrast.
•Press and old for 1-2 seconds to start up
•Press
•Press [2] for selecting contrast
•Press [1] for less contrast
•Press [3] for more contrast

5
Calculator
In standalone mode (not connected to computer) you can use t e calculator function.
•Press and old for 1-2 seconds to start up
•Press
•Press [1] for starting Calculator
Language
In standalone mode (not connected to computer) you can adjust t e language. In connected ode the application defines the language.
•Press and old for 1-2 seconds to start up
•Press 2 ti es
•Press [1] to select language setting
•Select language or press again to s ow ot er languages

6
Authentication PIN
W enever an application wants you to aut enticate yourself, it first asks for your aut entication PIN. T is can be a standard application or a web-
application using SSL. (eg. HTTPS ://...) t e aut entication pin protects t e aut entication key on your eID card.
After entering t e pin, press to confirm.
Press to cancel t e operation.
Press for backspace.
T e pin lengt of current aut . pin is between 4 and 12 digits in size.
(For current eID cards, authentication PIN is the sa e as the non-repudiation PIN)
Authentication Message
After entering t e aut entication pin, t is message could appear. T is means t at App xyz wants you to aut enticate by using your eID card. T e
application can display t e same message so you can easily verify t e application you are entering.
Press to confirm.
Press to cancel operation
In normal SSL connections ( ttps ://...) t is message will NOT appear.

7
Qualified Signature PIN
W en an application wants you to sign a document, if first asks you to enter t e non-repudiation or signing pin. T is pin protects t e key you need for
calculating official qualified signatures on documents.
After entering t e pin, press to confirm.
Press to cancel t e operation.
Press for backspace.
T e pin lengt of current aut . pin is between 4 and 12 digits in size.
(For current eID cards, authentication PIN is the sa e as the non-repudiation signing PIN)
Qualified Signature Message (1)
W en an application wants you to sign a document wit your eID card, it sends a small c eck value ( as ) to your card reader. T e card reader will display
t is value and asks you to confirm t e c eck value. T e application s ould display t e same value and t is way you know t e value originates from t e
genuine application.
Press to confirm t e c eck value.
Press to cancel t e operation.
Press or to scroll t e message.
If the value does not correspond to the value on screen, cancel the operation!
If this essage appears and you are not signing so e docu ent, cancel the operation!

8
Qualified Signature Message (2)
W en an application wants you to sign a small text value wit your eID card, it can send a small readable text message for you to confirm before signing. .
T e card reader will display t is message and asks you to sign t is message.
Press to confirm t e text to sign.
Press to cancel t e operation.
Press or to scroll t e message.
If the value does not correspond to the value on screen, cancel the operation!
If this essage appears and you don’t know why this appears, since you are not using an application that needs your eID card, cancel the operation!
EMV CAP authentication
1 2 3
4 5 6
7 8 9
. 0 =
Challenge
+
-
x
CE C+/-
C
CL
OK
M2
M1
ʘ
÷
Menu
T e Sipiro supports EMV aut entication as used in most online Belgian banking systems. W en you insert your debit card in t e reader, t e display will
s ow “Select enu”. To aut enticate in online banking applications:
•Press to enter t e c allenge given by t e online banking application and press
•Enter t e PIN of your debit card.
•T e display will s ow you t e secure code to login in your banking application.
= backspace
Cancel t is operation and return to t e menu

9
EMV CAP transactions
T e Sipiro supports EMV signing functions as used in most online Belgian banking systems. W en you insert your debit card in t e reader, t e display will
s ow “Select enu”. To sign a transaction in online banking applications wit your debit card:
•Press
•Enter t e PIN of your debit card.
•[Data: 1] will s ow up in t e display. Now enter t e data as s own on screen by t e banking application.
•[Data: 2 /OK?] will s ow up. Enter t e data as s own on screen by t e banking application or press w en t e banking application asks you to.
•T e display will s ow you t e secure code to sign t e transaction you are about to make.
= back space
Cancel t is operation and return to t e menu
Frequently Asked Questions
Q: How do I turn on/off the device when it is standalone?
A: You can press t e M2 button for few seconds, and it will be turned on/off.
Q: What should I do if there is no response fro Sipiro after card insertion?
A: You can remove t e card for a few seconds, reinsert it to t e Sipiro. If it still doesn’t work, c eck if t e batteries are out of power.
Q: How do I insert or replace the battery of the Sipiro?
A: T e battery of t e Sipiro could be replaced or inserted t roug t e following steps:
1. Pull out t e battery case.
2. Insert 2 CR2032 batteries into t e battery compartment.
3. Plug in t e battery case.