USB Tokens and SmartCards
TheGreenBow IPSec VPN client supports USB Tokens as a mean to increase identify authentication, to enforce security policy while keeping it simple for users and IT managers.
New Token ATR Codes
The Token and SmartCard ATR Code list below are the new ATR Codes that have not yet been added the Generally Available software release of TheGreenBow IPSec VPN Client software.
Note: TheGreenBow IPSec VPN Client software requires only one "vpnconf.ini" file to be defined (see how to declare or to submit it below), so if you need to support multiple new ATR codes in the same time you can add them all into the same "vpnconf.ini" file, one after the others.
Download any ATR Code file below and rename it "vpnconf.ini".
How to declare a new Token
The syntax for declaring an ATR in the file "vpnconf.ini" is:
- atr: Token ATR code
- mask: Token mask code
- scname: Token name
- manufacturer: Token manufacturer's name
- pkcs11DllName: PKCS#11 middleware file.
- registry: Value in the registry that points to the complete path of the DLL.
This information is available from the Token manufacturer.
- If the PKCS#11 DLL (here as pkcs11.dll) is not in c:\windows\system32\ then "registry" must be set.
Registry is the value in the registry that points to the complete path of the DLL. The syntax is HKEY_LOCAL_MACHINE:<registry key>:<value in the registry key>.
For example, if a value "DllPath" with content "C:\Program Files\TheGreenBow\TheGreenBow VPN\pkcs11.dll" is created in "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\TgbIke.exe", registry line is : "HKEY_LOCAL_MACHINE:SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\TgbIke.exe:DllPath".
Since release 4.6, the IPSec VPN Client may take into account new Token ATR Code as soon as they are declared in an initialization file called "vpnconf.ini". This file "vpnconf.ini" must be saved in the same folder as tgbike.exe (install folder). Create a new "vpnconf.ini" file here.
Follow these instructions to install "vpnconf.ini" on your computer:
1. Download vpnconf.ini
2. Copy "vpnconf.ini" in "TheGreenBow VPN" install folder (the same folder as tgbike.exe)
The software can't find middleware
In case of the middleware was not found:
1. Check in the file "vpnconf.ini" that the keys
"pkcs11DllName" and "registry" are correct (See How to declare a new Token ATR Code
2. Check that the middleware inform in the file "vpnconf.ini" exists on the system
I can't find my token in Token list
Please fill the following form, so we can provide you help:
Submit a Token
Your token works with TheGreenBow IPSec VPN Client, but it is not in our list: submit us your token