To be able to manage (unblock or modify) the PIN and PUK codes of a Registration Entity operator T-CAT, it is necessary to do so from the compatible software . Depending on the date of issue of the operator T-CAT, the software to use will be Safesign or Bit4id - PKI Manager:

  • Cards issued before April 13, 2023 --> Safesign Program
  • Cards issued after April 13, 2023--> Bit4id Program - PKI Manager

Safesign Program (Cards issued before April 13, 2023)

Unlock the PIN of the T-CAT in Safesign

If an incorrect PIN code is entered three times when using the TCAT, it is blocked and if it is used again, a message appears indicating that the Token is blocked.

In these cases, if you have the PUK code, you must follow the following steps:

– Enter the TCAT in the reader.

– Access “Windows Start” by searching for “token” or “testimony” (in Windows 10) or by searching for “All Programs” folder “Catcert” or “Safesign Standard” (in Windows7)”

– Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the software version installed).

– From the TOKEN or Witness option of the application, you must press on the Unlock PIN menu entry:

· Enter the PUK code

· Enter a new PIN

· Confirm the new PIN

· Click on the “AGREE” button

If the PIN is successfully unlocked, a message appears indicating this and the T-CAT can be used again.

Important: If an incorrect PUK code is entered three times in a row, it will also be blocked and it will be necessary to manage the revocation and reissuance of the certificate included in the T-CAT.

Change the PIN and PUK of the T-CAT to Safesign

It is recommended to change only the initial PIN to one of your choice. Remember that it MUST be a code that you can easily remember and that you do not tell anyone.

To change the PIN and PUK codes, you must follow the following steps.

  1. - Insert the T-CAT into the reader.
  2. - Access Windows Start - All Programs -Safesign Standard
  3. - Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the software version installed).

CHANGE PIN

From the TOKEN or Witness option of the application, you must press on the menu entry to change the PIN.

TOKEN1.png

The following screen will appear.

TOKEN2.png

If the PIN is changed successfully, a message appears indicating this.

CHANGE PUK

TOKEN1-1.png

The following screen will appear.

TOKEN3-PUK.png

If the PUK is changed successfully, a message appears indicating this.

Related Content: T-CAT Installation Software

Bit4id Program - PKI Manager (Cards issued from April 13, 2023)

Check out the FAQ on how to manage codes with Bit4id - PKI Manager

PIN and PUK codes for the T-CAT certificate

OBTAINING : When the certificate is generated, you will receive the PIN and PUK codes in the email included in the certificate. You can change the initial PIN to one of your choice. It must be a code that you can easily remember and that you have not indicated to anyone.

RECOVERY : In case of forgetting or losing them, to recover the initial PIN and PUK codes associated with your certificate, follow the steps in the section "How can I recover the PIN / PUK of the T-CAT?" which you will find in this same FAQ.

BLOCKING : If you have blocked the PIN code of the certificate (after entering three incorrect attempts), you will need to unblock it with the PUK following the steps at the beginning of this FAQ on how to unblock the PIN of the T-CAT (depending on the software you use). If you do not remember or cannot find the PUK of the current certificate, you can recover it by following the steps in the following section "How can I recover the PIN / PUK of the T-CAT?".

If the PUK is blocked (after entering three incorrect attempts), you will have to contact the organization's service manager to process the revocation and reissue of the digital certificate.

How can I recover the PIN / PUK of the T-CAT?

Access the link provided for recovering the PIN and PUK and you can enter the data requested by the system.

recover-pin.png

If you have more than one card, the following screen will appear so you can choose which one you want to recover the PIN and PUK from.

t-cat.png

Once done, you will receive an email with the original PIN and PUK codes.

IMPORTANT: Please note that if you changed the PIN, the one you sent will no longer be useful. Therefore, to be able to use the certificate you can block it explicitly (after entering three incorrect attempts). To do this, if you have the valid PUK, follow the steps on how to unblock the T-CAT PIN that you will find at the beginning of this FAQ.

Once done, you can set a new PIN.

However, if you changed the PUK and do not remember the current one, you will have to request the revocation of the certificate from the entity's service manager.