Welcome to the Trusted PC developed by Wave Systems Corp. The
Trusted PC is a set of applications consisting of Assistant and
Document Manager running on the EMBASSY® 2100 Smart Card
Reader, a programmable platform to enhance your PC’s security.
EMBASSY Trusted PC User Guide
EMBASSY
Assistant
Document
Manager
EMBASSY CSP
The EMBASSY (EMBedded Application Security SYstem) platform
consists of your EMBASSY Smart Card Reader and associated
software. This programmable hardware security subsystem hosts
secure application processing and provides access to secure resources
such as storage, time, cryptography, and key management. EMBASSY
is the underlying technology that embeds security and trust in the
Trusted PC application.
Assistant is an application that provides a secure and convenient way to
manage your Internet experience. Assistant provides wallet functionality
for web browsing. Its features include form fill capability, and the secure
storage of URLs, credit card, personal and contact information,
usernames, and passwords.
Document Manager is a tool that provides a secure and convenient
way to manage your documents. Document Manager secures digital
files locally using the EMBASSY Cryptographic Service Provider(CSP) technology.
Independent of the Trusted PC application, you can use the EMBASSY
Cryptographic Service Provider(CSP) technology to encrypt and
decrypt files, documents, or text with applications that are designed to
use a CSP. For example, the EMBASSY CSP can be easily used with
Microsoft Outlook for encrypting email.
• EMBASSY 2100 USB Smart Card Reader. This special USB
device is essential for Trusted PC use.
• Trusted PC Smart Card. This Smart Card is essential for Trusted
PC use.
• Trusted PC Quick Start Guide. Information to get you up and
running quickly.
• Trusted PC User Guide (this document). A manual with basic
information on installation and usage of the Trusted PC. For more
detailed information, please refer to the Assistant online help.
Should you be missing any of these components, please contact
Customer Support (see page 57).
To use the Trusted PC, you will need the following minimum hardware:
Minimum Hardware Requirements
• PC with a microprocessor, 100 MHz or greater.
• VGA monitor or better, set to a minimum resolution of 800 x 600 and
256 colors, or better. A screen resolution of at least 1024 x 768 is
recommended for the install process.
• Modem or network card for Internet connection.
• EMBASSY 2100 USB Smart Card Reader.
• Trusted PC Smart Card.
• Hard disk space available: 9.5 MB
• USB port available.
These are the minimum hardware requirements; you may see an
improvement in performance if your PC exceeds these requirements.
Minimum Software Requirements
• Microsoft ® Windows® XP operating system.
• Microsoft Internet Explorer ® (version 6.0 or above). If you do not
have Internet Explorer, you may download it free-of-charge from the
Microsoft website (www.microsoft.com).
• Internet Service. Connectivity may be obtained through any ISP
(Internet Service Provider) via a dialup modem, DSL (digital
subscriber line) modem, cable modem, etc.
• Adobe Acrobat Reader. This so ftware is required to be able to read
the EMBASSY Online User Documentation. You may download the
software free of charge from the Adobe website
(http://www.acrobat.com/).
Go to “Start>All Programs>PC Tool Kit and Services” and click
“Trusted PC Install.”
1. The following message is displayed prompting you to continue. Click
Yes.
Figure 1: EMBASSY Software Installation
2. Choose the setup language by selecting your option from the drop
down box. Click OK.
Figure 2: Choose Setup language
3. A wizard is installed to guide you through the rest of the installation,
and the EMBASSY Trusted PC welcome window is displayed. Click
Next to continue.
4. The EMBASSY Trusted PC License Agreement is displayed.
Please read the license agreement. In order to continue, the License
Agreement must be accepted (the installation will stop if the License
Agreement is not accepted). Click Yes to continue.
Figure 4: EMBASSY Trusted PC License Agreement
5. The Legal Notice screen appears. You must check all the boxes and
click I Agree to proceed:
o I agree that Wave Systems may use passive
tracking mechanisms in the manner described in
the Policy.
Because the servers used to provide portions of the
Services are located in the United States, we will need
to transfer your personal information to the United
States. The laws of certain countries require us to
obtain your consent before we do so.
o I agree to the transfer of my personal information
to your servers located in the United States in
order to process my request.
o I understand that sensitive information will be
transferred to your servers located in the United
States to the extent I choose to use the Services in
conjunction with the same and I hereby consent to
such transfer in each instance.
6. The installation program checks for an Internet connection for the
registration process (described later in this document—see page 19)
and if there is none, prompts you to establish one. If prompted,
establish an Internet connection to continue.
7. To register your EMBASSY Smart Card Reader, the following
EMBASSY Manager window is displayed (for more information,
please see section 3 EMBASSY Registration):
Figure 5: EMBASSY Manager (Register tab)
Certain information must be input through the PC keyboard and other
information through the EMBASSY SCR keypad. This information is
identified within the installation program and also in the instructions
below.
Important:
Enter your information into the EMBASSY Manager using your PC
keyboard.
Enter your Required Information:
a) Country: select from among those listed in the drop-down list box.
Choose your Reset Password Question:
b) Question: you must select a question in order to reset your
password, which you will be prompted to answer after registration
(the following step). Select a question from the list of available
questions in the drop-down list box. Please keep in mind that the
answer will be input via the EMBASSY SCR keypad. The questions
have only a numeric answer.
Enter your Personal Information:
c) Select the desired registration option:
• Required for Customer Support and Advanced Services
q First Name, Last Name, Address Line 1, City,
State/Province, Zip/Postal Code
OR
q First Name, Last Name, Email Address
• Required for Customer Support Only:
q First Name, Last Name, Address Line 1, City,
State/Province, Zip/Postal Code
OR
q First Name, Last Name, Email Address
• None
q No required personal information
Important:
Have your numeric password selected before clicking the Register
button. You will have only 60 seconds to enter the answer to your
password-reset question and only 60 seconds to enter your password.
8. Click Register.
9. As the following message indicates, please watch the LCD on your
EMBASSY Smart Card Reader for the next set of instructions:
Figure 6: Registering Message (LCD instructions)
10. Registration may take a little while (this is normal). The EMBASSY
Smart Card Reader will prompt you to answer the Rest Password
Question you selected in the EMBASSY Manager screen. You will
also be prompted to create and re-enter your password.
Registration is a simple, one-time process that is completed during the
software installation. The registration process connects to the
EMBASSY server through the Internet and establishes an association for
installing applets. Registering with personal information also provides
the ability for you to receive technical support. Registration is a required
process in order to use your Trusted PC software.
After completing the required fields on the online registration form and
clicking “Register”, you will continue the registration process by:
EMBASSY Trusted PC User Guide
Required
Information
What Happens
With My
Information?
PINs and
Passwords
1. Creating your EMBASSY password (PIN), that will be used when you
install and uninstall EMBASSY applets.
2. Providing an answer to a pre-selected question that enables you to
reset your EMBASSY password (PIN).
The following entries are required for registration: Country, EMBASSY
password, and Password Reset Question and Answer.
While personal information is optional, registering with personal
information enables you to receive technical support and periodic
information about EMBASSY and the Trusted PC. If you supply
personal information, choose the option “For Customer Support and
Advanced Services,” if you wish to receive periodic updates.
Alternatively, choose the option “For Customer Support Only,” if you wish
your information to only be used for customer support purposes.
Any personal information that you provide during registration is secure
and only used for the purposes you agree to. (See page 66).
The numeric password that you create during the registration process is
also known as a Personal Identification Number (PIN). It never leaves
the security of the EMBASSY system. We will use the terms “PIN” and
“password” interchangeably.
In addition to the EMBASSY PIN you have created, the Assistant and
Document Manager applications also require PINs for their secure
functions. It is your responsibility to remember what you have set as a
password or PIN. While you may choose to set the PINs to be the same
as your EMBASSY password, it is your responsibility to keep track of
them. (The EMBASSY and Assistant applications both have functions
that enable you to reset the password/PIN if you forget them.)
To start the EMBASSY Trusted PC double click on the Trusted PC
icon, found on the Windows desktop or go to: Start>All
Programs>EMBASSY>TrustedPC.
The EMBASSY Trusted PC Launch Pad runs on the desktop. It is a
compact window that can be moved easily around the screen. The
Launch Pad can be kept open while other programs are running. It is
ready to assist in storing and accessing information. The Launch Pad
consists of the following:
• Assistant. Use this application to easily and securely manage your
online data.
• Packard Bell. Link to Packard Bell’s website.
• File Shredder. Use this application to completely remove files from
your PC.
• Document Manager. Use this applica tion to encrypt and decrypt
files.
• Wave Systems. Link to Wave System’s website for more
information on EMBASSY and the Trusted PC.
Assistant is an application that provides for secure data storage and
access. Its features include a variety of web companion functions that
simplify everyday use of the Internet. Together, these tools will enable
you to get to your favorite URLs quickly so that you can shop and
manage your finances with security and convenience. The Assistant
features include:
• Home Mode. You are in "Home Mode" when you run Assistant
from the PC where you originally installed the software. In "Home
Mode", your Smart Card is used for backup purposes and is not
required to run Assistant. You must backup your data to your Smart
Card to have updated data for "Guest Mode".
EMBASSY Trusted PC User Guide
• Guest Mode. You are in "Guest Mode" when you use your Smart
Card at another PC that has Assistant installed. In "Guest Mode",
your data is read from the Smart Card. While the data on the Smart
Card is read only, you can save new information that is good only for
your Guest Mode session.
• Form Fill. Quick, click -and-fill online form completion. The Form
Filler retrieves applicable profile information when making purchases
online.
• Settings. Administrative functions (options, backup, security, and
startup). This includes the feature to back up your Assistant data to
the Trusted PC Smart Card.
• Profile. Name and address information.
• Wallet. Credit card information.
• Contacts. Individual email addresses, telephone numbers, and
other information about your contacts.
• Favorites. Securely store favorite URLs with their associated User
IDs and passwords.
• The System Tray icon, located at the bottom of the Windows toolbar,
can be used to start the Launch Pad, perform certain administrative
functions, login or logout of Assistant, open the Form Filler, start the
online help, obtain information about Assistant, and exit Assistant.
• The Launch Pad runs on the desktop. It is a compact window that
can be moved easily around the screen. When your Smart Card is
inserted and the application is running, the Launch Pad view is the
best presentation for all normal uses of Assistant. The Launch Pad
can be kept open and is ready to assist in storing and accessing
information.
Getting Help
Figure 16: Trusted PC Launch Pad
For more detailed information about how to use Assistant, please refer
to the Assistant online help. To access the Assistant online help, click
the ? button. The online help is structured with a table of contents and
an index. You can also search for a particular topic and you can print
individual topics.