To be able to manage (unblock or modify) the PIN and PUK codes of a T-CAT of a Registry Entity operator, it is necessary to do it from the compatible software . Depending on the date of issuance of the operator's T-CAT, the software to be used will be Safesign or Bit4id - PKI Manager:
- Cards issued before April 13, 2023--> Safesign Program
- Cards issued after April 13, 2023--> Bit4id Program - PKI Manager
Safesign Program (Cards issued before April 13, 2023)
If an incorrect PIN code has been entered three times when using the TCAT, it is blocked and if it is used again, a message appears indicating that the Token is blocked.
In these cases, if you have the PUK code, follow these steps:
– Enter the TCAT in the reader.
– Access “Windows Start” by searching for “token” or “witness” (in Windows 10) or by searching in “All programs” folder “Catcert” or “Safesign Standard” (in Windows7)”
– Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the installed software version).
– From the TOKEN or Testimony option of the application, you must press the Unlock NIP menu entry:
· Enter the PUK code
· Enter a new PIN
· Confirm the new PIN
· Click on the "OK" button
If the PIN is successfully unlocked, a message appears indicating this and the T-CAT can be used again.
Important: If an incorrect PUK code is entered three times in a row, this will also be blocked and it will be necessary to manage the revocation and reissuance of the certificate included in the T-CAT.
It is recommended to change only the initial PIN to one of your choice. Remember that it must be a code that you can easily remember and that you do not indicate it to anyone.
In order to change the PIN and PUK codes, follow the steps below.
- - Enter the T-CAT in the reader.
- - Access Windows Start - All programs - Safesign Standard
- - Within the folder, access the Token Manager, or Token Administration or Token Manager (depending on the installed software version).
CHANGE PIN
From the TOKEN or Testimony option of the application, you must press the change PIN menu entry
The following screen will appear
If the PIN is changed successfully, a message appears indicating this.
CHANGE THE PUK
The following screen will appear
If the PUK is changed successfully, a message appears indicating this.
Bit4id Program - PKI Manager (Cards issued from April 13, 2023)
See the FAQ on how to manage codes with the Bit4id - PKI Manager
PIN and PUK codes of the idCAT operator's T-CAT
OBTAINING: When your organization's service manager completes the delivery of your T-CAT, you will receive an email with the PIN and PUK codes. We recommend changing the initial PIN to one of your choice. It must be a code that you can easily remember and that you have not indicated to anyone.
RECOVERY: in case of forgetting or loss, in order to recover the original PIN and PUK codes associated with your certificate, follow the steps in the section "I don't remember the PIN/PUK of my idCAT operator certificate" which you will find at the end of this FAQ.
BLOCKING: in case you have blocked the PIN code of the certificate (after entering three wrong attempts), it will be necessary to unblock it with the PUK, following the steps indicated at the beginning of this FAQ (depending on the date of issuance of your operator T-CAT). In case you don't remember or can't find the PUK of the current certificate, you can recover it by following the steps in the section "I don't remember the PIN/PUK of my idCAT operator certificate" which you will find at the end of this FAQ.
If the PUK is blocked (after entering three incorrect attempts) you will have to contact the service manager of your organization to process the revocation and reissuance of the digital certificate.
I can't remember the PIN/PUK of my idCAT operator T-CAT
In the case of operator certificates generated before January 24, 2022 , the idCAT operator certificate PIN and PUK codes cannot be recovered. However, if the operator did not modify the initial PIN or PUK, you can contact us through the contact form so that we can send you the originals or search for the email that was sent at the time of receipt
For operator certificates generated after January 24, 2022 , the idCAT operator certificate PIN and PUK codes can be retrieved via the following link:
It will be necessary to indicate the data requested by the application.
Once done, the operator will receive the original PIN and PUK codes by email.
In the event that the initial PIN of the idCAT operator certificate has been modified by the operator through the Token Manager, it will be necessary to request the revocation of the certificate and the new issue.
To do this, the manager of the idCAT service:
• Must have the following permit "AOC- Digital certification service"
• You will have to access the EACAT in the "Request Services AOC" section of the lender Consortium AOC, following the route Procedures>Digital certification service. In this section, you must make the revocation and then request the issuance of a new OER idCAT digital certificate.
Once managed, the new digital certificate will be sent to the Service Manager