Installing the iKey 1000 Authentication Solution for Administrators

Please read the following information before you install the iKey 1000 Authentication Solution on your administrator workstations.

iKey 1000 Authentication Solution System Requirements

Your administrative computer must be running one of the following operating systems:

Windows 2000 (service pack 2 or later)
Windows XP (Home or Professional)
Windows Vista

and it must contain one or more USB ports and USB support software.

To install the iKey 1000 Authentication Solution on Windows 2000, you must have administrator privileges.

Requirements for Viewing iKey Token Utility Online Help

In order to view the online Help included with the iKey Token Utility, you must meet one of the following requirements:

Windows 2000, XP or Vista.
Internet Explorer 5.5 or later

If you do not meet either of these requirements, online Help in the iKey Token Utility will be disabled.

If you do not want to install Internet Explorer, all the information included in the online Help can also be found in the iKey 1000 Authentication Solution Administrator's Guide, which is installed on your system as part of the iKey 1000 Authentication Solution.

Installing the iKey 1000 Authentication Solution

The iKey 1000 Authentication Solution installation program installs the following components on your administrative computer:

The iKey driver and all libraries, including administrative components.
The iKey Token Utility with administrator access and the system tray option enabled.
The cryptographic provider for PC/SC.
The iKey Automatic Certificate Registration Service.
If a compatible version of Netscape is installed, the iKey Netscape Plug-ins are installed, and the iKey PKCS#11 library registered with Netscape as a cryptographic provider.

Before You Install

If you have a previous version of the iKey 1000 Authentication Solution software installed on your administrative computer, please uninstall it before installing this version of the iKey 1000 Authentication Solution. You may be asked to reboot after uninstalling the previous version.

All previous versions of the iKey 1000 Authentication Solution software must be uninstalled prior to installing v4.0.0 of the iKey 1000 Authentication Solution. If the v4.0.0 installer prompts you to uninstall a previous version, you must select Yes. Selecting No will cancel the v4.0.0 installation.

You must close any iKey-dependent applications before running the iKey 1000 Authentication Solution installation program. Also, do not insert the iKey in your system until you are prompted to do so during installation.

Starting the Installation Program

To install the iKey software:

Insert the iKey 1000 Authentication Solution installation CD into your CD-ROM drive.
If CD Autorun is enabled on your computer, the iKey setup program will start automatically; otherwise, find the iKey1000AS.exe file on the CD and double-click it to start the installation.
When the Welcome screen appears, read the preliminary information, then click Next.
The iKey 1000 Authentication Solution readme.txt file appears.
Read the information in the readme file about possible installation issues, and then click Next to continue.
The license information appears.
To accept the license and continue, click Yes.
Choose the destination path for the software. The default path is Program Files\SafeNet\iKey 1000 Authentication Solution. Accept the default or click Browse to choose a different directory to install the software in.
Click Next.
The setup program begins to copy files to their destinations. This process can take a minute or two while iKey files are installed, system registry entries are updated, and the iKey driver is installed.

If your computer has a Netscape browser installed, you are asked if you want to register the iKey Cryptoki (PKCS#11) security module with Netscape.
Do one of the following:
- Click Yes to add the iKey Cryptoki security module to your Netscape browser, then go to step 11.
- Click No if you don’t want to add the iKey Cryptoki security module, then go to step 13. If you want to use the iKey with Netscape 7.x, you must register the iKey PKCS#11 (Cryptoki) library with the Netscape browser installed on your system.

Note: If the library is not registered during the original installation, and you later wish to use the iKey with Netscape, you must manually register the iKey PKCS#11 library with Netscape. See the iKey 1000 Authentication Solution readme.txt file for information about manual registration.

If you clicked Yes, the iKey software setup program opens Netscape and you are asked to confirm installation of the security module in Netscape. Click OK.
A message box confirming installation of the new security module in Netscape appears. Click OK.
Netscape is now configured to use the iKey PKCS#11 security module. You are returned to iKey 1000 Authentication Solution setup.
When prompted, insert an iKey to complete the iKey 1000 Authentication Solution installation.

Once installation has finished, the Wizard Complete dialog box appears.

If prompted to reboot your system, select Yes. In some cases, a reboot is required to successfully finish the iKey 1000 Authentication Solution installation.

Click Finish.
iKey 1000 Authentication Solution installation is complete.

What Was Installed?

Once the iKey 1000 Authentication Solution is installed, take a look at the iKey installation directory to see where things are. The following table describes a typical installation of the iKey 1000 Authentication Solution:

Location	Contents	Files
iKey 1000 Authentication Solution\Redist	The client software installer program.	iKeyAll.exe
\iKey Components	Last-minute information on the iKey software.	readme.txt, license.txt, Register_iKey_PKCS11_Netscape.html
\iKey Components\Documentation	Online HTML documentation.	iKey1000AuthSolUser.htm, iKey1000AuthSolAdmin.htm, Using the iKey 1000.htm
\iKey Components\Bin	Executable and DLL files that make up the iKey Token Utility and ACR Service.	iKeyACR.exe, iKeyHelper.dll, iKeyInfoPage.dll, iKeyTU.chm, iKeyTU.exe, iKeyUtilImportCert.dll, iKeyUtilUIHelper.dll,iKeyUtilAdminPage.dll, iKeyUtilUserPage.dll, iKeyCEW.dll
\iKey Driver	Text files containing information related to iKey Driver	License.txt, ReadMe.txt, ScbaseReadme.txt, Smart Card Component.txt
\iKey Driver\Drvr\	The iKey USB driver files.	ikeyenum.sys, ikeyifd.sys, rnbtoken.cat, rnbtoken.inf, rnbtoken.sys

To access the iKey 1000 Authentication Solution programs and documentation:

From the Windows Start menu, point to Programs > SafeNet > iKey 1000 Authentication Solution and select Client Installers, which is a folder containing the iKey Components redistributable installation program (iKeyAll.exe)
To access the iKey 1000 Authentication Solution documentation, from the Windows Start menu, point to Programs > SafeNet > iKey Components and select of the following:
- iKey 1000 Authentication Solution Administrator's Guide, which is in HTML format and can be viewed with any Web browser
- iKey 1000 Authentication Solution User's Guide, which is in HTML format and can be viewed with any Web browser
To access the iKey Token Utility, from the Windows Start menu, point to Programs > SafeNet > iKey Components > iKey Token Utility.

Where To Go Next

Now that you have installed the iKey 1000 Authentication Solution software on your administrative computer, you are ready to start planning your deployment of the Authentication Solution and iKeys to users. Read the iKey 1000 Authentication Solution Administrator's Guide for information on the following topics:

What Is the iKey 1000 Authentication Solution?
iKey and PKI Deployment Checklist
Configuring iKeys for Users
Obtaining Digital Certificates
Distributing the iKey 1000 Authentication Solution Software and iKeys to Users
Using the iKey Token Utility