How do I install the VT eToken software on Windows?

Answer:

Important: You must have administrative rights on your computer to perform this installation. Users without administrative rights please see the information at the end of these instructions for configuring your browser to enable signing with your eToken.

Important: If you are upgrading from a previous VT eToken PDC Setup or reinstalling the VT eToken PDC Setup please run the "Uninstall VT eToken and PDC Software" utility provided from the Start Menu in the SafeNet folder.

Important: Note the Troubleshooting section after the install instructions on this page.

  1. Download the proper version for your OS.

    Note: You must be using a Virginia Tech network address to access the site.

    Note: Roaming profile users should log out of their roaming profile and login as the local computer administrator to download and install the software.

    1. 32 bit version VT eToken x32 PDC Setup RTE v8.2a for Windows.exe
    2. 64 bit version VT eToken x64 PDC Setup RTE v8.2a for Windows.exe
  2. Enter your PID and password at the Network Software Login prompt.
  3. Click on the file link VT eToken xXX PDC Setup RTE vX.x for Windows.exe.
  4. Once the file is downloaded, double click on it to run the installer. If you see a Symantec Endpoint Protection pop-up, click on Allow this file.
  5. Click Next.
  6. Accept the license agreement.
  7. The installer will configure the SafeNet Authentication Client, install the root and user certificates, and configure your computer’s web browsers to use the eToken. If you see a popup stating that you must restart your system for changes to take effect, click NO. If you already clicked Yes, see bullet #6 in the Troubleshooting section below.
  8. Click Finish.

    Note: Roaming profile users should now log back into their roaming profile and run the Configure Browsers for eToken application in the Start\SafeNet folder or follow the steps in the Troubleshooting section below, bullet #4 to manually set up their browser.

  9. Insert your eToken into your computer’s USB port. The first time you use your eToken after installing the SafeNet software you will see a message about Windows installing a device driver. Once you get a message that the driver was sucessfully installed and the device is ready to use, you should see a red light flickering on your eToken device. Once the light is solid red, proceed to the next step.
  10. Verify that your software and eToken are properly configured by using the VT Digital Signature Test Page at https://ash.eprov.seti.vt.edu/pdctest/.

    Note: In order for the test page to display properly, you must have Adobe Reader installed.

  11. Click on the Sign button.

    Note: If you see a security alert dialog box, you must select Yes. To avoid this warning in the future, check Do not show this dialog box again.

  12. Enter your eToken password when prompted. If you have multiple PDCs on your computer, you will have to select the eToken PDC from the dropdown list. In Firefox you will need to enter your eToken password a second time.

    Note: After 10 consecutive failed password attempts, your eToken will become blocked, and the password will need to be reset at the nearest office that issues PDCs on eTokens in your area.
  13. After entering a correct password, you will see the Valid Signature page, which indicates that your browser is properly configured for this user only. All other users who have their own Windows logon must configure their browsers as described below.

 

Browser configuration for other users

Complete the following after an administrator has installed the VT eToken xXX PDC Setup RTE v8.2 for Windows and logged off.

 

  1. Logon to Windows with your user password.
  2. From Windows, select Start > All Programs > SafeNet> Configure Browsers for eToken.
  3. The VT Browser Configuration Wizard will appear. Click Next. This action will launch the wizard.
  4. Click Finish. Since the “Open Signature Test Page in a Web Browser” is checked by default, your default browser will automatically be launched when you click Finish and you will be directed to that page. 
  5. Insert your eToken into your computer’s USB port.
  6. Continue with Step 10 above.

 

Troubleshooting

1. Make sure you are using a supported browser. The only supported browsers on Windows are Internet Explorer and Firefox.

2. The most common problem is an error message "Please register capicom.dll" when signing the pdctest webpage with Internet Explorer. To correct this problem run the program at Start > All Programs > SafeNet> Configure Browsers for eToken or to correct the problem manually perform the following steps:

  • Make sure https://ash.eprov.seti.vt.edu and https://banweb.banner.vt.edu are in your trusted sites zone.

  • Windows XP click on Start-> Run and enter cmd in the dialog box. Windows Vista or 7 click on start-> All Programs -> Accessories. Right click Command Prompt and select “Run as administrator.”
  • Enter cd c:\windows\system32. For x64 bit OS's cd c:\windows\syswow64.
  • Enter regsvr32.exe /s capicom.dll.

3. If, when you click on the Sign button on the VT Digital Signature Test Page, you see a popup asking to download a file named PKIMGR.pdf_get.b64decode (or similar), cancel the download and click on the Install Adobe Reader link just below the Sign button at the top of the page. Once Adobe Reader is installed, reload the test page and if you can see the PDF document in the lower section of the webpage, click on the sign button to begin the test.

4. Manually configure Firefox to use the eToken:

  • Open Firefox and select Option -> Options from the Firefox drop down or Tools -> Options from the Menu Bar.
  • In the ribbon bar select the Advanced icon, then click on the last tab on the right, depending on your OS and the version of Firefox it may be labeled Security, Encryption or Certificates. Finally, click on the Security Devices button.
  • On the right, click on the Load button.
  • In the Module Name field, enter a name for the module, e.g. SafeNet eToken.
  • Use the browse button or enter C:\Windows\system32\etpkcs11.dll in the "Module filename" box and click on OK, click on OK in the confirmation popup.
  • Click the OK button repeatedly to exit from all of the dialog windows back to the browser application.
  • Remove your eToken if it is inserted in your computer - you cannot install certificates while the eToken is connected to a USB port.
  • Use the following link to navigate to the certificate download webpage: Install the VT User CA certificate. Click on BOTH Download to Firefox links in the CA: Virginia_tech_User_CA section. Click on all three checkboxes and OK in the popup after you click on the link.

  • Verify that your software and eToken are properly configured by using the VT Digital Signature Test Page at https://ash.eprov.seti.vt.edu/pdctest/.

5. Firefox specific problems, i.e. you can use your PDC with Internet Explorer but not Firefox. Normally Firefox is set up with the "Configure Browsers for eToken" utility in the eToken menu, however occasionally the browser setup needs to be manually checked using the following steps (remove any eTokens that may be attached to your PC before beginning):

  • Open Firefox and select Option -> Options from the Firefox drop down or Tools -> Options depending on which version of Firefox you are using,
  • In the ribbon bar select the Advanced icon, then click on the last tab on the right, depending on your OS and the version of Firefox it may be labeled Security, Encryption or Certificates. Finally, click on the Security Devices button.
  • Ensure that some form of Aladdin eToken Module, Aladdin, or eToken is listed in the left pane followed by 5 slots, 3 of them unnamed. One of the following 3 conditions will be observed:

    a. No Aladdin module - add one by clicking on the Load button, in the Module Name field, enter Aladdin eToken, use the browse button or enter C:\Windows\system32\etpkcs11.dll in the "Module filename" box and click on OK, click on OK in the confirmation popup .

    b. More than one module that includes any form of Aladdin eToken, Aladdin, or eToken with a path of C:\WINDOWS\system32\etpkcs11.dll (click on the module name, the path will be displayed in the right hand pane). More than one module connected to the same device will confuse the eToken. A symptom of the condition of having the two security modules causes Firefox to fail to restart once it is closed.  The firefox.exe process is not visible on the taskbar, but the process remains running in the background. Unless you kill the running process under taskmanager (CTRL + ALT + DEL, click on the Processes tab, ensure the "Show processes from all users" box on the bottom left is checked, find and click on the firefox.exe process, and click on the End Process button on the bottom right) or restart the computer, upon restarting Firefox you get "A copy of Firefox is already running.  Close Firefox and try again." Delete the extra module(s), by clicking on the module name and the clicking on the Unload button on the far right.

    c. One Aladdin eToken, Aladdin or eToken module with a path of C:\WINDOWS\system32\etpkcs11.dll (click on the module name, the path will be displayed in the right hand pane).To verify the proper operation of the module, insert your eToken into a USB slot, wait until the red light in the eToken stops flashing and becomes solid, at this point the top slot under the eToken should change from "AKS ifdh 0" to your eToken's name. Click on your eToken's name, click on the Log In button and enter your eToken password. After a few seconds your status should now be "Logged In" in the top line of the right hand panel.
  • Click the OK button at the bottom right of the Device Manager to return to Options.
  • Click on the View Certificates button.
  • Click on the Authorities tab and use the Scroll bar to find the Virginia Tech Root CA (Certificate Authorities are listed in alphabetical order).
  • Ensure that the Virginia Tech User CA and the Virginia Tech Root CA are all listed under Virginia Tech Root CA.

    a. If one or all of the certificates are missing use the following link to install them:

    NOTE: Remove your eToken if it is inserted in your computer - you cannot install certificates while the eToken is connected to a USB port.

    Use the following link to navigate to the certificate download webpage: Install the VT User CA certificate. Click on BOTH Download to Firefox links in the CA: Virginia_tech_User_CA section. Click on all three checkboxes and OK in the popup after you click on the link.

  • Verify that your software and eToken are properly configured by using the VT Digital Signature Test Page at https://ash.eprov.seti.vt.edu/pdctest/.

6. If you were notified that you must restart your system for changes to take effect during the installation of the VT eToken PDC Setup software and you are now experiencing problems with your digital signature:

  • Run the program at Start > All Programs > SafeNet> Configure Browsers for eToken.

7. If the program at Start > All Programs >SafeNet >Uninstall VT eToken and PDC software does not completely uninstall all the SafeNet files and folders:

  • Use Windows Explorer to remove the folders at Program Files\Common Files\SafeNet Shared and /or Program Files\SafeNet. Neither folder is needed once the VT eToken and PDC software has been uninstalled.
  • Remove Start > All Programs > SafeNet from the menu by right clicking on the menu item and selecting Delete.
  • 8. You've entered an incorrect password a number of times and you're not sure if your eToken has become blocked:

    • Insert your eToken into a usb slot.
    • Open Safenet Authentication Client Tools from the All Programs\SafeNet\SafeNet Authentication Client menu.
    • Click on the View Token Information box.
    • Near the bottom of the popup should be Token Password retries remaining.
    • If Token Password retries remaining = 0 then you will have to have the eToken replaced.

    9. If you have an entry on your Start menu listed as "eToken" with the contents listed as "<Empty>", a previous version of the eToken program did not completely uninstall properly and it is no longer in use so just right click on the "eToken" entry and select delete.

 

Last updated on October 24, 2014