Linux

1. install packages :
   • opensc pcscd-tools and pcscd
   • Attention: Bug in opensc Ubuntu 11.10, pls compile opensc from source


2. install ePass3000 driver
   • http://entersafe.com/download/ifd-eps3k-linux-x86-080917.tar.gz
   • http://entersafe.com/download/ifd-eps3k-linux-x86-64-080917.tar.gz


3. check if epass3000 available?
   • opensc-tool -l


4. erase epass3000
   • pkcs15-init -E


5. format epass3000
   • pkcs15-init --create-pkcs15 --profile pkcs15+onepin --use-default-transport-key --pin 0000 --puk 111111



Optional:

6. import openvpn keys
   1. create pkcs12:
      • openssl pkcs12 -export -in x.x.x.x.user.crt -inkey x.x.x.x.user.key -out x.x.x.x.user.p12 -name "something"
   2. import pkcs12 to epass3000:
      • pkcs15-init --store-private-key x.x.x.x.user.p12 --format pkcs12 --auth-id 01


7. epass3000 with openvpn
   1. get pkcs11-id
      • openvpn --show-pkcs11-ids /usr/lib/opensc-pkcs11.so
   2. import pkcs12 to epass3000:
      • pkcs11-providers /usr/lib/opensc-pkcs11.so
      • pkcs11-id 'EnterSafe/PKCS\x2315/0254323916250909/OpenSC\x20Card\x20\x28User\x20PIN\x29/1145AC82027466CA8C16B3BE0270C79C9D3B8A94'

Windows

1. install epass3000 driver
   • [optional] deactivate "ePassNG Middle-ware" and "ngSlotDaemon" in msconfig


2. install opensc 32bit
   • Attention: Use opensc32bit on win7-64bit because win7-64bit can't execute unsigned dll's
   • http://www.opensc-project.org/


3. install openvpn (with pkcs11 support)
   • http://swupdate.openvpn.org/community/releases/openvpn-2.2.2-install.exe



Optional:

4. epass3000 and openvpn
   1. get pkcs11-id
      • openvpn --openvpn --show-pkcs11-ids c:\windows\system32\opensc-pkcs11.dll
   2. change openvpn client conf
      • pkcs11-providers "C:\\Windows\\System32\\opensc-pkcs11.dll"
      • pkcs11-id 'EnterSafe/PKCS\x2315/0254323916250909/OpenSC\x20Card\x20\x28User\x20PIN\x29/1145AC82027466CA8C16B3BE0270C79C9D3B8A94'


5. truecrypt pkcs11 library path
   • C:\Windows\System32\opensc-pkcs11.dll