To be able to manage (unblock or modify) the PIN and PUK codes of a Registration Entity operator T-CAT, it is necessary to do so from the compatible software . Depending on the date of issue of the operator T-CAT, the software to use will be Safesign or Bit4id - PKI Manager:
- Cards issued before April 13, 2023 --> Safesign Program
- Cards issued after April 13, 2023--> Bit4id Program - PKI Manager
Safesign Program (Cards issued before April 13, 2023)
If an incorrect PIN code is entered three times when using the TCAT, it is blocked and if it is used again, a message appears indicating that the Token is blocked.
In these cases, if you have the PUK code, you must follow the following steps:
– Enter the TCAT in the reader.
– Access “Windows Start” by searching for “token” or “testimony” (in Windows 10) or by searching for “All Programs” folder “Catcert” or “Safesign Standard” (in Windows7)”
– Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the software version installed).
– From the TOKEN or Witness option of the application, you must press on the Unlock PIN menu entry:
· Enter the PUK code
· Enter a new PIN
· Confirm the new PIN
· Click on the “AGREE” button
If the PIN is successfully unlocked, a message appears indicating this and the T-CAT can be used again.
Important: If an incorrect PUK code is entered three times in a row, it will also be blocked and it will be necessary to manage the revocation and reissuance of the certificate included in the T-CAT.
It is recommended to change only the initial PIN to one of your choice. Remember that it should be a code that you can easily remember and that you do not tell anyone.
To change the PIN and PUK codes, you must follow the following steps.
- - Insert the T-CAT into the reader.
- - Access Windows Start - All Programs -Safesign Standard
- - Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the software version installed).
CHANGE PIN
From the TOKEN or Token option of the application, you must press on the menu entry to change the PIN.
The following screen will appear.
If the PIN is changed successfully, a message appears indicating this.
CHANGE PUK
The following screen will appear.
If the PUK is changed successfully, a message appears indicating this.
Bit4id Program - PKI Manager (Cards issued from April 13, 2023)
Check out the FAQ on how to manage codes with Bit4id - PKI Manager
PIN and PUK codes of the T-CAT operator idCAT
OBTAINING: When the certificate is generated, you will receive the PIN and PUK codes in the email included in the certificate. We recommend changing the initial PIN to one of your choice. It must be a code that you can easily remember and that you have not indicated to anyone.
RECOVERY: in case of forgetting or losing them, to recover the initial PIN and PUK codes associated with your certificate, follow the steps in the section "I don't remember the PIN/PUK of my idCAT operator certificate" which you will find at the end of this FAQ.
BLOCKING: If you have blocked the PIN code of the certificate (after entering three incorrect attempts), you will need to unblock it with the PUK, following the steps indicated at the beginning of this FAQ (depending on the date of issue of your T-CAT operator). If you do not remember or cannot find the PUK of the current certificate, you can recover it by following the steps in the section "I do not remember the PIN/PUK of my idCAT operator certificate" that you will find at the end of this FAQ.
If the PUK is blocked (after entering three incorrect attempts), you will have to contact the service manager at your organization to process the revocation and reissuance of the digital certificate.
I don't remember the PIN/PUK of my T-CAT from the idCAT operator
In the case of operator certificates generated before January 24, 2022 , the PIN and PUK codes of the idCAT operator certificate cannot be recovered. However, if the operator did not modify the initial PIN or PUK, you can contact us through the contact form so that we can resend the originals or search for the email that was sent at the time of receipt.
For operator certificates generated from January 24, 2022 , the PIN and PUK codes of the idCAT operator certificate can be retrieved through the following link:
You will need to indicate the data requested by the application.
Once done, the operator will receive the original PIN and PUK codes in their email.
If the initial PIN of the idCAT operator certificate has been modified by the operator through the Token Manager, it will be necessary to request the revocation of the certificate and a new issuance.
To do this, the idCAT service manager:
• Must have the following permission ”AOC- Digital certification service“
• You will need to access EACAT in the “Request for Services AOC” section of the AOC Consortium provider, following the route Procedures>Digital certification service. In this section, you will need to make the revocation and then the request for the issuance of a new OER idCAT digital certificate.
Once managed, the new digital certificate will be sent to the Service Manager.