------------------------------------------------------------------------------------------------------
This CD contains Charismathics Smart Security Interface 4.3
------------------------------------------------------------------------------------------------------

As the software solution Charismathics Smart Security Interface contains
-	the administration tool Smart Security Interface Manager
-	the user tool Smart Security Interface Utility
-	the Register Tool for the automatic registration of the certificates and PKCS#11 module
-	the CSP
-	the PKCS#11-module

The integration of other security tokens and further functionality is part of the product road map and is available on request.



1. Requirements
---------------
Microsoft Windows NT 4.0 with Service Pack 6a
or Windows 2000 with Service Pack 2, 3 or 4
or Windows XP without Service Pack or with Service Pack 1 or 1a
or Windows Server 2003
or Windows Vista


2. Features
-----------
supported the smart cards:
	CardOS M4.01
	CardOS M4.01a
	CardOS V4.2
	CardOS V4.2b
	CardOS V4.3
	CardOS V4.3b
	JCOP20
	JCOP30
	JCOP21
	JCOP31
	JCOP41
	GemXpresso Pro R3.2
	StarCOS 3.0
	Sm@rtCafe 2.0, 2.1, 3.0
	ACOS EMV A03
	NetKey 2000/E4
	ActivIdentity Card

supported profiles:
	Charismathics corporate profile
	PKCS#15 profile
	Carta Nazionale dei Servizi (CNS) profile

supported TPM chips:
	infineon TPM 1.1 & 1.2
	broadcom TPM 1.1 & 1.2

Tested smart card reader (PCSC required):
	SCM SCR241 PCMCIA
	SCM SCR331 USB
	SCM SCR333
	SCM SCR335 USB
	SCM SCR532 seriell/USB
	Omnikey Cardman 1010 seriell
	Omnikey Cardman 2011 seriell
	Omnikey Cardman 2020 USB
	Omnikey Cardman 3121 USB
	Omnikey Cardman 3620 USB
	ORGA Card Mouse USB
If RSA 2048 key shall be used, then the PCSC reader must support extended APDU.


Supported Applications (specific requirements see Manual)
	Smart card-Logon at Windows 2000 and 2003 Domains
	Smart card-Logon via RDP at Windows 2003-Terminal-Server
	Logon at Novell eDirectory (specific requirements see Manual)
	Logon at Lotus Notes (version 6.5 or higher)
	SSL-Authentication with Smart card (Internet Explorer and Netscape)
	Outlook Express with digital Signature and Encryption via smart card
	Windows VPN-Login with smart card
	Cisco VPN with smart card
	Auto enrollment of user certificate with Windows 2003
	PKCS#11 Interface in Netscape Navigator
	E-Mail-Security per smart cards with Netscape Messenger
	E-Mail-Security per smart cards with PGP (PKCS#11)
	E-Mail-Security per smart cards with Lotus Notes, Novell GroupWise and Microsoft Outlook
	Smart card administration of Baltimore- and Entrust-PKI (PKCS#11)

3. Known issues
-------------------
readers:
	- CTAPI card reader
	- Kobil Standart Plus USB
	- ACG SmartDrive 202
	- Towitoko seriell reader with driver 2.x
	- OMNIKEY Cardman 3121 reader with Windows CCID driver


4. What is New
--------------

CSSI 4.3:
---------
- sc Manager:
      - feature: ActivIdentity cards supported
      - feature: JCOP 41, Sm@rtCafe 2.0/30 corporate/PKCS#15 supported
      - feature: Secure PIN Entry with PINPAD reader Omnikey 3621/3821, Cherry keyboard G83-6644


- sc Utility:
      - feature: ActivIdentity cards supported
      - feature: JCOP 41, Sm@rtCafe 2.0/30 corporate/PKCS#15 supported


- sc Register Tool:
      - feature: ActivIdentity cards supported
      - feature: JCOP 41, Sm@rtCafe 2.0/30 corporate/PKCS#15 supported


- cmCSP.dll: 
      - feature: ActivIdentity cards supported
      - feature: JCOP 41, Sm@rtCafe 2.0/30 corporate/PKCS#15 supported
      - feature: Secure PIN Entry with PINPAD reader Omnikey 3621/3821, Cherry keyboard G83-6644
      - change: the function DeleteConatainer enabled
      - change: select default container function modified
      - bugfix: multi certificates problem fixed
      - bugfix: ImportKey problem fixed
 

- cmP11.dll: 
      - feature: ActivIdentity cards supported
      - feature: JCOP 41, Sm@rtCafe 2.0/30 corporate/PKCS#15 supported
      - feature: Secure PIN Entry with PINPAD reader Omnikey 3621/3821, Cherry keyboard G83-6644
      - bugfix: multi certificates problem fixed
      - bugfix: multi sessions problem fixed
      - bugfix: NetKey certificate problem fixed




CSSI 4.2:
---------
- sc Manager:
      - feature: StarCOS 3.0 corporate profile supported
      - feature: JCOP 21/31, Sm@rtCafe 2.1 corporate/PKCS#15 supported
      - feature: ungister certificate if a key is deleted
      - feature: TPM (cmTSS) integration for infineon & broadcom TPM chips
      - bugfix: error for certificate request saved as base64 format fixed 


- sc Utility:
      - feature: StarCOS 3.0 corporate profile supported
      - feature: JCOP 21/31, Sm@rtCafe 2.1 corporate/PKCS#15 supported 
      - feature: TPM (cmTSS) integration for infineon & broadcom TPM chips
      - bugfix: modified some message texts

- sc Register Tool:
      - feature: StarCOS 3.0 corporate profile supported
      - feature: JCOP 21/31, Sm@rtCafe 2.1 corporate/PKCS#15 supported
      - feature: TPM (cmTSS) integration for infineon & broadcom TPM chips
      - feature: register certitifcate to computer certificate store too
      - bugfix: problem with trayicon display fixed


- cmCSP.dll: 
      - feature: StarCOS 3.0 corporate profile supported
      - feature: JCOP 21/31, Sm@rtCafe 2.1 corporate/PKCS#15 supported
      - feature: TPM (cmTSS) integration for infineon & broadcom TPM chips
      - bugfix: problem with vista certificate request fixed
      - bugfix: AT_EXCHANGE/AT_SIGNATURE key problem for WinWord 2007
      - bugfix: problem with winlogon and screen lock/unlock fixed


- cmP11.dll: 
      - feature: StarCOS 3.0 corporate profile supported
      - feature: JCOP 21/31, Sm@rtCafe 2.1 corporate/PKCS#15 supported
      - feature: TPM (cmTSS) integration for infineon & broadcom TPM chips
      - feature: new (vendor) functions CreateProfile, EraseProfile added
      - bugfix: problem with public key label fixed
      - bugfix: problem in C_GetAttribute for public key 


CSSI 4.0:
---------
- sc Manager:
      - feature: Windows Vista supported
      - feature: CardOS V4.x HiPath PKCS#15 profile supported
      - feature: CardOS V4.x CNS profile integrated
      - feature: JCOP 20/30, GemXpresso corporate/PKCS#15 supported
      - feature: show profile type
      - feature: Show supported smartcard OS
      - change: Update Data Dialog modified
      - bugfix: import pfx with large subject name fixed

- sc Utility:
      - feature: Windows Vista supported
      - feature: CardOS V4.x HiPath PKCS#15 profile supported
      - feature: CardOS CNS profile integrated
      - feature: JCOP 20/30, GemXpresso corporate/PKCS#15 supported
      - feature: Unlock User PIN page added

- sc Register Tool:
       - feature: Windows Vista supported
     - feature: CardOS V4.x HiPath PKCS#15 profile supported
      - feature: CardOS CNS profile integrated
      - feature: JCOP 20/30, GemXpresso corporate/PKCS#15 supported
      - change:  default setting: unregister certificate if token removed

- cmCSP.dll: 
      - feature: Windows Vista supported
      - feature: CardOS V4.x HiPath PKCS#15 profile supported
      - feature: CardOS CNS profile integrated
      - feature: JCOP 20/30, GemXpresso corporate/PKCS#15 supported
      - bugfix: Bug with "Select reader Dialog" fixed
      - bugfix: Bug with double container fixed

- cmP11.dll: 
       - feature: Windows Vista supported
      - feature: CardOS V4.x HiPath PKCS#15 profile supported
      - feature: CardOS CNS profile integrated
      - feature: JCOP 20/30, GemXpresso corporate/PKCS#15 supported
      - feature: C_InitToken uses the register entries TOKEN_NAME, RETRY_COUNTER, PROFILE
      - bugfix: C_WaitForSlotEvent problem with Lotus Notes 7.0 fixed




-------------------------------------------------------------------------------------------------
Sincerely,

your Charismathics team.


(c) Charismathics GmbH 2004-2007