To be able to manage (unblock or modify) the PIN and PUK codes of a T-CAT of a Registry Entity operator, it is necessary to do it from the compatible software . Depending on the date of issuance of the operator's T-CAT, the software to be used will be Safesign or Bit4id - PKI Manager:
- Cards issued before April 13, 2023--> Safesign Program
- Cards issued after April 13, 2023--> Bit4id Program - PKI Manager
Safesign Program (Cards issued before April 13, 2023)
If an incorrect PIN code has been entered three times when using the TCAT, it is blocked and if it is used again, a message appears indicating that the Token is blocked.
In these cases, if you have the PUK code, follow these steps:
– Enter the TCAT in the reader.
– Access “Windows Start” by searching for “token” or “witness” (in Windows 10) or by searching in “All programs” folder “Catcert” or “Safesign Standard” (in Windows7)”
– Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the installed software version).
– From the TOKEN or Testimony option of the application, you must press the Unlock NIP menu entry:
· Enter the PUK code
· Enter a new PIN
· Confirm the new PIN
· Click on the "OK" button
If the PIN is successfully unlocked, a message appears indicating this and the T-CAT can be used again.
Important: If an incorrect PUK code is entered three times in a row, this will also be blocked and it will be necessary to manage the revocation and reissuance of the certificate included in the T-CAT.
It is recommended to change only the initial PIN to one of your choice. Remember that it must be a code that you can easily remember and that you do not indicate it to anyone.
In order to change the PIN and PUK codes, follow the steps below.
- - Enter the T-CAT in the reader.
- - Access Windows Start - All programs - Safesign Standard
- - Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the installed software version).
CHANGE PIN
From the TOKEN or Testimony option of the application, you must press the change PIN menu entry
The following screen will appear
If the PIN is changed successfully, a message appears indicating this.
CHANGE THE PUK
The following screen will appear
If the PUK is changed successfully, a message appears indicating this.
Related Content: T-CAT Installation Software
Bit4id Program - PKI Manager (Cards issued from April 13, 2023)
See the FAQ on how to manage codes with the Bit4id - PKI Manager
PIN and PUK codes of the T-CAT certificate
OBTAINING : When your organization's service manager completes the delivery of your T-CAT, you will receive an email with the PIN and PUK codes. You can change the initial PIN to one of your choice. It must be a code that you can easily remember and that you have not told anyone.
RECOVERY : in case of forgetting or loss, in order to recover the original PIN and PUK codes associated with your certificate, follow the steps in the section "How can I recover the PIN / PUK of the T-CAT?" which you will find in this same FAQ.
BLOCKING : If you have blocked the PIN code of the certificate (after entering three wrong attempts), you will need to unblock it, with the PUK following the steps at the beginning of this FAQ on how to unblock the PIN of the T-CAT ( depending on the software you use). In case you don't remember or can't find the PUK of the current certificate, you can do the recovery by following the steps in the following section "How can I recover the PIN / PUK of the T-CAT?".
If the PUK is blocked (after entering three incorrect attempts) you will have to contact the organization's service manager to process the revocation and reissuance of the digital certificate.
How can I recover the PIN / PUK of the T-CAT?
Access the link provided for the recovery of the PIN and the PUK and you will be able to indicate the data requested by the system.
If you have more than one card, the following screen will appear, so you can choose which one you want to retrieve the PIN and PUK from.
Once done, you will receive an email with the original PIN and PUK codes.
IMPORTANT: Keep in mind that if you changed the PIN, the one sent will no longer be useful to you. Therefore, to be able to use the certificate you can explicitly block it (after entering three wrong attempts). To do this, if you have a valid PUK, follow the steps on how to unlock the T-CAT PIN that you will find at the beginning of this FAQ.
Once done, you can set a new PIN.
However, if you changed the PUK and do not remember the current one, you will have to request the revocation of the certificate from the national service manager.