Certificate Entry Check
1. Open Microsoft Edge or IE, navigate to Settings and search for Manage certificates
2. Click on Manage certificates, a list of certificates should appear. Check that when the USB token is plugged in, the certificates issued by Netrust are listed.
3. In order to troubleshoot the Windows Security prompt issue, you will need to backup all certificates except Netrust certificates by clicking Export... on each of them
Example:
4. The Certificate Export Wizard window will appear, click on Next
5. Select Yes, export the private key, then click Next
6. Ensure that these are selected for Personal Information Exchange - PKCS #12 (.PFX)
7. (Optional) In order to protect the certificate information and keys, securing it with a strong password is recommended. For Security, select Password and type in your password. For Encryption, choose AES256-SHA256. You may however choose to proceed without securing the certificate with a password, click Next and proceed with step 8.
8. Provide a file path and name
Example:
9. Check the information and click Finish
10. Remove all certificates except Netrust certificates
11. A prompt will appear to confirm the deletion, click Yes
12. Remove and reinsert the USB token, the nSign Desktop should detect the token. The SafeNet Authentication Client (SAC) Token Logon should appear and prompt for the Token Password.
Enter your password and click OK.
13. You should now be able to login successfully.
Importing of Certificates
You may wish to import the certificates back, here are the steps:
1. Select Import...
2. The Certificate Export Wizard window will appear, click on Next
3. Select the certificate file that you would like to import
4. If there is password implemented during the exporting of the certificate, type in the password. For Import options, select Mark this key as exportable. Then click Next
5. For Certificate Store, select Automatically select the certificate store based on the type of certificate. Then click Next
6. Check the information and click Finish
7. The certificate will now be listed