PIN and PUK of the T-CAT on the card (Bit4id - PKI Manager)

OBTAINING: When your service manager completes the delivery of your T-CAT, you will receive an email with the PIN and PUK codes. We recommend changing the initial PIN to one of your choice. Remember that it must be a code that you can easily remember and that no one else knows.

RECOVERY: In case of forgetting or losing them, to recover the original PIN and PUK codes associated with your certificate, follow the steps in the FAQ "How can I recover the PIN / PUK of the T-CAT?" which you will find in this same section.

BLOCKING: If you have blocked the PIN code of the certificate (after three incorrect attempts), you will need to unblock it with the PUK following the steps in the FAQ "How to unblock the PIN of the T-CAT?" that you will find in this same section. If you do not remember or cannot find the PUK of the current certificate, you can recover it following the steps in the FAQ "How can I recover the PIN / PUK of the T-CAT?" that you will find in this same section.

If the PUK is blocked (after three incorrect attempts), you will have to contact the service manager at your organization to process the revocation and reissuance of the digital certificate.

When your service manager completes the delivery of your T-CAT, you will receive an email with the PIN and PUK codes.

Once you have them, we recommend changing the initial PIN and PUK codes to ones of your choice. It is best to use a code that is sufficiently secure, but that you already use in other applications or devices (for example your credit card) to avoid forgetting it. These codes do not leave the T-CAT and are not communicated to anyone, not even the AOC.

Related content:

• FAQ "Change the PIN and PUK of the T-CAT?" which you will find in this same section.

To change the PIN and PUK codes, you must follow the following steps.

1. Insert the T-CAT into the reader.
2. Go to Windows Start - All Programs - Bit4id PKI Manager. (For other operating systems, see the Bit4id User Manual ).

CHANGE PIN

By clicking the Change PIN option

The box appears to enter the current and new PIN. The new PIN must be between 4 and 16 alphanumeric digits.

CHANGE PUK

Bit4id PKI Manager comes by default with the user version. To have all its features, including changing the PUK, you must switch to the administrator version using the command: Ctrl+A . Once this is done, the option to change the PUK will appear:

Enter the old PUK of the card and the new PUK. The new PUK must be between 4 and 16 alphanumeric digits.

To unlock the PIN code, you must follow the following steps.

1. Insert the T-CAT into the reader.

2. Access Windows Start - All Programs - Bit4id PKI Manager. (For other operating systems, see the Bit4id User Manual ).

3. Click the Unlock PIN option

4. Enter the card's PUK and the new PIN. The new PIN must be between 4 and 16 alphanumeric digits.

Access the link provided for recovering the PIN and PUK and you can indicate the data requested by the system.

If you have more than one card, the following screen will appear so you can choose which one you want to recover the PIN and PUK from.

Once done, you will receive an email with the original PIN and PUK codes.

Please note that if you have changed your original PIN and/or PUK codes at any time, the keys you will now have received by email will not be useful. In this case, there are two possibilities:

• If you have only changed the PIN code, you can change it again by following the instructions in I have blocked the PIN or PUK of the T-CAT. What do I do?
• If you have changed the PUK code and do not remember it, this is the personal unlock code and cannot be recovered. Therefore, the only possible option is to revoke your certificate and request a new one from the person responsible for the Digital Certification Service.