PDC FAQ

Administration of your eToken

Your eToken is designed to be maintenance free. If you would like to learn more about the eToken and your personal digital certificate, here are a few common questions and answers.

 

 

Question: What are Student Network Services and Software Distribution Office hours for eToken requests?

Answer:

NOTE: Student Network Services Office will only process eToken requests during the following hours, or call 540-231-3000 for an appointment.

Dates Time Place Organization Members
Monday, Wednesday and Thursday 2:00 to 4:30 PM Student Network Services Office
120 Student Services Building
Open enrollment and password resets.
Monday - Friday 8:00 to 11:00 AM Software Distribution Office
3240 Torgersen Hall
Open enrollment and password resets.

 

Question: How do I obtain or renew an eToken in the National Capital Region?

Answer:

If you are located on the National Capital Region satellite campus, you can obtain or renew an eToken by contacting the National Capital Region office at 571-858-3009.

 

Question: How do I know if I have a Silver eToken PDC?

Answer:

  • Insert the eToken into a USB slot.
  • In Internet Explorer;
    1. Open IE, click on Tools -> Internet Options.
    2. Click on the Content tab and the Certificate button under Certificates.
    3. Click the Personal tab and then on your certificate (it should have your name in it). Click on the View button just above the Close button.
    4. Click on the Details tab, and then in the Field view area find and click on Certificate Policies.
    5. Check the area below the Field view, only Silver eTokens have a Certificate Policy with a Policy Identifier = 1.3.6.1.4.1.6760.5.2.2.5.1.
  • In Firefox:
    1. Open Firefox
      1. In Mac OS X select Firefox -> Preferences.
      2. In Windows select Option -> Options from the Firefox drop down or Tools -> Options from the Menu Bar.
      3. In Linux select Edit -> Preferences.
    2. In the ribbon bar select the Advanced icon, then click on the last tab on the right, depending on your OS and the version of Firefox, it may be labeled Security, Encryption or Certificates. Finally, click on the View Certificates button.
    3. Click the Your Certificates tab and then on your certificate (it should have your name in it). Click on the View... button.
    4. Click on the Details tab, and then in the Certificate Fields view area find and click on Certificate Policies - you may have to click on the triangle next to Extensions to make Certificate Policies visible.
    5. Check the area below the Field view, only Silver eTokens have a Certificate Policy of 1.3.6.1.4.1.6760.5.2.2.5.1.
  • Top

     

    Question: How do I change my eToken password?

    Answer:

    Notes:

    • You must have the SafeNet Authentication Client software for your OS platform installed before attempting to change your eToken password. If you have not already installed the SafeNet Authentication Client, follow the instructions provided at Installing and configuring software to use your PDC
    • The eToken password which you create must meet the following requirements:
      • Your password must be at least 8 characters long
      • You password must contain at least three of these four types of characters:
        - Numbers: 0-9
        - Uppercase English Letters A-Z
        - Lowercase English Letters a-z
        - Special Characters ~!@#$%^&*()_+`-{[|\;'./:"<>?
      • You may not use the characters }] or =

    For Windows

    1. Insert your eToken security device into an available USB port.
    2. Use one of the two following methods:
      a. for SafeNet Authentication Client Users: Right click on the SafeNet Authentication Client (White circle, red S) icon in the Notification Area (bottom right near the Date Time), and select Tools or Change Token Password (skip to step 4) OR Click Start ->All Programs -> SafeNet->SafeNet Authentication Client->SafeNet Authentication Client Tools.
      b. for Aladdin eToken PKI client users: Click Start ->All Programs -> eToken ->eToken PKI Client->eToken Properties.
    3. Click Change Password.
    4. Enter your "Current Token Password”.
    5. Enter the “New Token Password”.
    6. Reenter that password in the field labeled “Confirm Password”.
    7. Click the OK button to change the password.

    For Apple Macintosh with OS X or Linux

    1. Insert your eToken security device into an available USB port.
    2. Open Firefox.
    3. Mac select Firefox" -> “Preferences. Linux select Edit -> Preferences. .
    4. In the ribbon bar select the Advanced icon, then click on the last tab on the right, depending on your OS and the version of Firefox it may be labeled Security, Encryption or Certificates. Finally, click on the Security Devices button.
    5. Your eToken should be listed. If your device is not listed or the Aladdin eToken module is not listed underneath the “NSS Internal PKCS #11 Module” and the “Builtin Roots Module ”, then please make sure that the Safenet Authentication Client software has been installed for the computer you are using, and then restart your browser. Please refer to the instructions at: Installing and configuring software to use your PDC
    6. Highlight the row under the Aladdin Module that lists your eToken’s name.
    7. Click Change password.
    8. Enter your “Current password”.
    9. Enter the “New password”.
    10. Reenter that password in the “New password (again)” field.
    11. Click the OK button to change the password.

    Top

     

    Question: I have forgotten my eToken password, how do I reset it?

    Answer:

    In order to get your eToken reset, you must take your eToken to the nearest office that issues PDCs on eTokens in your area. Offices that issue eTokens on the Blacksburg campus are listed here.

    Top

     

    Question: What if my eToken becomes blocked?

    Answer:

    It's important to remember your eToken password. After 10 consecutive failed password attempts your eToken will become blocked.

    With the Safenet Authentication Client Tools you can check your current number of failed attempts by inserting your eToken in an USB slot, and selecting the "View Token Information" button. "Token password retries remaining" is listed in the lower third of the page.

    Entering a correct password anytime before the eToken is blocked will reset the "Token password retries remaining" counter to 10.

    In order to get your eToken reset, you must take your eToken to the nearest office that issues PDCs on eTokens in your area. Offices that issue eTokens on the Blacksburg campus are listed here .

    Top

     

    Question: How do I renew my certificate when it expires?

    Answer:

    Your personal digital certificate has been issued with a validity period of two years. If your certificate is near expiration or has already expired, you must take your eToken to the nearest office that issues PDCs on eTokens in your area to have a new personal digital certificate issued to you. Offices that issue eTokens on the Blacksburg campus are listed here .

    You can check to see the validity period for your personal digital certificate by using your browser to view your certificate "Valid From" and "Valid To" dates. If needed, instructions on how to use your browser to view the personal digital certificate stored on your eToken are provided in the article: How do I view my eToken digital certificate using Internet Explorer, Mozilla, FireFox, or Netscape browsers?

    Top

     

    Question: How do I have a PDC revoked?

    Answer:

    Revoking a PDC means that it can no longer be used with applications that check to see if a PDC is valid. If you need to have a PDC revoked for any reason, contact Student Network Services 540-231-3000 or 4Help 540-231-4357.

    Top

     

    Question: My eToken is damaged. How can I get a new one?

    Answer:

    If your eToken is damaged, you will need to return your eToken in person to the nearest office that issues PDCs on eTokens in your area and enroll for a new personal digital certificate and eToken. Offices that issue eTokens on the Blacksburg campus are listed here .

    Top

     

    Question: My eToken has been lost or stolen. What do I do?

    Answer:

    1. Contact Student Network Services 540-231-3000 or 4Help 540-231-4357 and ask to have your Personal Digital Certificate (PDC) revoked. (For further information, see “How do I have a PDC revoked?”)
    2. Go in person to the Student Network Services Office located at 120 Student Services building on the Blacksburg campus to obtain a new PDC. Before you go, see “What do I need to do to enroll for a personal digital certificate?

    Top

     

    Question: What should I do with my PDC if I change jobs within Virginia Tech or leave Virginia Tech completely?

    Answer:

    Employees:

    If you change jobs within Virginia Tech you should keep your eToken.

    If you are terminating your employment at Virginia Tech, you should return your eToken to your supervisor, who will request that your PDC be revoked. If for some reason you are not able to return the eToken to your supervisor, contact Student Network Services at 540-231-3000. If you received your eToken in the National Capital Region, contact the NCR office at 571-858-3009.

    Students:

    If your enrollment at Virginia Tech is ending, you should return your eToken to your department head or their designee, who will request that your PDC be revoked. If for some reason you are not able to return the eToken to the appropriate departmental designee, contact Student Network Services at 540-231-3000. If you received your eToken in the National Capital Region, contact the NCR office at 571-858-3009.

    Top

     

    Question: An employee or student returned a eToken to me. What do I do with it?

    Answer:

    Supervisors and department heads or departmental designees who receive eTokens from people who are leaving the university should request the PDC be revoked using the following method:

    1. Call Student Network Services (540-231-3000) and request that the PDC be revoked. Then return the eToken to the nearest office that issues PDCs on eTokens in your local area. Offices that issue eTokens on the Blacksburg campus are listed here .

    Top

     

    Question: How do I get help for problems with the SafeNet Authentication Client?

    Answer:

    If you are having problems installing the SafeNet Authentication Client software or using your eToken, please send your questions to 4Help.

    Top

     

    Question: What applications support the use of my eToken and personal digital certificate?

    Answer per SafeNet documentation:

    For Windows:

    Adobe Acrobat\Reader 9 and later
    Firefox 5.x or later
    Google Chrome Version 14 and later, for authentication only
    Internet Explorer 7.x or later
    Microsoft Office 2007 (including Outlook) and later

    For Mac:

    Adobe Acrobat\Reader 9 and later on Mac OS 10.7 and later
    Firefox 5.x and later
    Mail.app
    Thunderbird (digital signing only)
    Safari, for authentication only

    For Linux:

    Firefox 18

    Top

     

    Question: Is there a way to test my eToken to be sure it is working properly?

    Answer:

    If your eToken is working properly, you should be able to test your personal digital certificate on the eToken by following the instructions provided below. If your test fails, please see the troubleshooting page contact 4Help for assistance.

     

    1. Insert your eToken into your computer’s USB port.
    2. Verify that your software and eToken are properly configured by using the VT Digital Signature Test Page at https://ash.eprov.seti.vt.edu/pdctest/

      Note: In order for the test page to display properly, you must have Adobe Reader installed. Cancel downloading any programs the browser suggests. Use the "Download Adobe Reader" button if you want to see the test signing sheet or just click on the "Sign" button. Ensure that you are using a supported browser, your default browser may not be supported i.e. Safari for Mac.
    3. Click on the Sign button.
    4. Enter your master password which is your eToken password. Click OK. You should see a red light flickering on your eToken device when you insert the eToken in an USB slot.
    5. Another dialog box will appear on your screen. Verify that your eToken name is in the Signing Certificate window. Enter your eToken password in the master password window. Click OK. Enter your eToken password again in the next dialog box.
    6. After entering a correct password, you will see the Valid Signature Page, which indicates that your browser is properly configured and your eToken is working properly.

    Top

     

     

    Last updated on May 1, 2014