Initialize a SafeNet eToken 5110CC (2024)

Scenario

The token usesvarious passwordsfor authentication. If an Administrator Password or PUK is entered incorrectly 5 times, the eToken locks permanently.

Solution

Before you begin:

• Get your DigiCert provided 5110 CC eToken
• Install the SafeNet Authentication Drivers
• Get a copy of your eToken’s Administrator Password, available in CertCentral on your code signing certificate order page.
• Get a secure password manager.

Important: This process will require various password and incorrectly entering a password or losing a password can permanently disable your eToken.We recommend using a secure password manager to track the passwords used for initializing your eToken.

Passwords 101

The 5110-CC uses the following passwords:

• Administrator Password: Used tomanage the eToken. If lost, you are permanently locked out of the eToken and you must purchase a new one. This password is default on the device and ships as 48 "0"s (000000000000000000000000000000000000000000000000).
• Token Password: Used toaccess the eToken certificate store.If lost, you can reset the eToken and install a new certificate. The shipped Token password is provided in the CertCentral portal and should be changed once the token is received. If the token was recently re-initialized and has an empty keystore, the default password is 1234567890.
• Personal Unlocking Key (PUK): Not used by DigiCert.Default PUK is 000000.

Minimum Password Requirements:

• Your password should contain at least 8 characters.
• Your password should include both upper-case characters and lower-case characters as well as numerals and special characters (for example: !, $, %, #).
• The minimum password length and character requirements apply to both the Token password and the Administrator password.

Warning: The eToken uses various passwords for authentication. If an Administrator Password or PUK is entered incorrectly 5 times, the eToken is permanently locked.

Process:

1. Open the SafeNet Authentication Client, connect the eToken to your computer, and confirm that the client recognizes the eToken.
   Note:What do I do if it doesn’t recognize my eToken?

   

   See Also

   How to initialize or reset a SafeNet 5110FIPS USB Token Device password

2. On the top right click the cog icon (Configuration button). You should now see the eToken listed on the left side.
3. Right click on the eToken name and click “Initialize Token”.
   
   
4. In theInitialize Token – Initializing Optionswindow, select “Preserve the token settings and policies" and clickNext.

   

5. In theInitialize Token – Administrator Logonwindow, enter the currentAdministrator Password(screenshot shown on step 6.)

   Note: The Default Administrator password is "0" typed out 48 times (see above). This is not changed by DigiCert.

6. CheckUse factory default digital signature PUKand enter000000and clickNext.
   
   Note:The defaultPUKis 000000.

   

7. In theInitialize Token – Password Settingswindow, create new passwords.
   • CreateToken Password.
     Enter and confirm anew token password. This password is used to access the token certificate store.

     Note: If you lose this password, you can use the administrator password to reset the token and install a new certificate.

   • UncheckToken password must be changed on first logon.
     
   • Create anAdministrator Password.
     Create and confirm a new administrator password. This password is used to manage the eToken. We recommend that you use the default password.
     This will not grantaccess to the certificate store.
     Note: If you lose this password, new certificates may not be imported. You must purchase a new token.
     
   • ClickNext.

     

8. Save your passwordsin a secure place, such as a password manager.
9. In theInitialize Token – IDPrime Common Criteria Settingswindow, create anew PIN and PUKfor your token.
   These are not used typically although they can be used in place of the token and administrator passwords.

   Warning:Entering an incorrect PUK 5 times makes the token unusable and you will need to purchase a new one.

   • ClickNext.
     
   • Save yourPINandPUKin a secure place, such as a password manager.

     

10. Your eToken is initialized. You may now use the DigiCert Hardware Certificate Installer to install your code signing certificate on it. You can also import certificates as needed.

    

Troubleshooting


Token appears as “SafeNet Token JC 0”
The token has been permanently disabled due to incorrect password attempts. Please contact our support team if you need to order a new eToken.



Lost your Administrator password?
The administrator password is required to reset the device and is unrecoverable. Please contact our support team if you need to order a new eToken. The default password can be found above.

Lost your Token password?
The Token password is used to access the eToken certificate store. If lost, you can reset the eToken if you have the administrator password by following this guide and then using the DigiCert Certificate Hardware Installer.