PIN and PUK of the T-CAT card with the new software (Issued from 04/13/2023)

GETTING IT: When your service manager completes the delivery of your T-CAT, you will receive an email with the PIN and PUK codes. We recommend changing the initial PIN to one of your choice. Remember that it must be a code that you can easily remember and that you do not indicate it to anyone.

RECOVERY: In case of forgetting or loss, in order to recover the original PIN and PUK codes associated with your certificate, follow the steps in the FAQ "How can I recover the PIN / PUK of the T-CAT?" which you will find in this same section.

BLOCKING: If you have blocked the PIN code of the certificate (after entering three wrong attempts), it will be necessary to unblock it, with the PUK following the steps in the FAQ "How to unblock the PIN of the T-CAT?" which you will find in this same section. In case you don't remember or can't find the PUK of the current certificate, you can do the recovery by following the steps in the FAQ "How can I recover the PIN / PUK of the T-CAT?" which you will find in this same section.

If the PUK is blocked (after entering three incorrect attempts) you must contact the service manager of the entity to process the revocation and reissuance of the digital certificate.

When your service manager completes the delivery of your T-CAT, you will receive an email with the PIN and PUK codes.

Once you have them, we recommend changing the initial PIN and PUK codes to ones of your choice. It is best to use a code that is secure enough but that you already use in other applications or devices (for example your credit card) in order to avoid forgetting it. These codes do not leave the T-CAT and are not communicated to anyone, not even to us.

Related Content:

• FAQ "Change the PIN and PUK of the T-CAT?" which you will find in this same section.

In order to change the PIN and PUK codes, follow the steps below.

1. Enter the T-CAT in the reader.
2. Go to Windows Start - All Programs - Bit4id PKI Manager. (For other operating systems consult the Bit4id User Manual ).

CHANGE PIN

By clicking the Change PIN option

the box appears to inform the current PIN and the new one. The new PIN must be between 4 and 16 alphanumeric digits.

CHANGE THE PUK

Bit4id PKI Manager comes by default with the user version. To be able to have all its functionalities, including changing the PUK, it is necessary to switch to the administrator version using the command: Ctrl+A . Once this is done, the option to change the PUK will appear:

Enter the card's old PUK and the new PUK. The new PUK must be between 4 and 16 alphanumeric digits.

To unlock the PIN code, follow the steps below.

1. Enter the T-CAT in the reader.

2. Access Windows Start - All Programs - Bit4id PKI Manager. (For other operating systems consult the Bit4id User Manual ).

3. Click the Unlock PIN option

4. Enter the PUK of the card and the new PIN. The new PIN must be between 4 and 16 alphanumeric digits.

Access the link provided for the recovery of the PIN and the PUK and you will be able to indicate the data requested by the system.

If you have more than one card, the following screen will appear, so you can choose which one you want to retrieve the PIN and PUK from.

Once done, you will receive an email with the original PIN and PUK codes.

IMPORTANT : Keep in mind that if you change the PIN, the one sent will no longer be useful. Therefore, to be able to use the certificate you can explicitly block it (after entering three wrong attempts). To do this, if you have the current PUK, follow the steps in the section How to unlock the PIN of the T-CAT? of this FAQ.

Once done, you can set a new PIN.

However, if you change the PUK and do not remember the current one, you will have to request the revocation of the certificate from the service manager of the national authority.

NOTE: The PIN and PUK of the ER idCAT operator certificates can be retrieved through the following link: I can't remember the PIN/PUK of my operator certificate idCAT