certgate GmbH AirID 2 Mini - CE, FCC User Manual Trademarks
(C) Copyright 2018-2019 by certgate The information contained in this document is subject to change without prior notice. FCC Referrence Contains Transmitter Module FCC ID: QOQ13 Content 1. About This Guide 1.1. Who Should Read This Guide 1.2. Typographical Conventions 2. Device Layout 2.1. Overview 2.2. Package Contents 2.3. Hardware Features 3. Menu Layout 3.1. AirID 3.2. Connection 3.3. Pairing Code 3.4. Settings 3.5. AirID Info 3.6. Card Info 3.7. Prefered Device 4. Firmware Update 5. Using AirID 5.1. Windows 5.1.1. Installation and Pairing 5.1.2. Deleting the Connection 5.1.3. AirID Central App on Windows 5.2. iOS 5.2.1. Pairing 5.2.2. Deleting the Connection 5.3. Android 5.3.1. Pairing 5.3.2. Deleting the Connection 6. Technical Specification 7. Safety Instructions 8. Disposal and Recycling 9. Maintenance and Care 10. Warranty/ License/ Technical Support Thank you for purchasing the AirID Smart Card Reader in the mini format. Befor using the AirID, please take the time to read this manual, to learn about all the features and capabilities of your new AirID. Package Content AirID Mini smart card reader USB cable ReadMe First Intended Use AirID is a wireless smart card reader that you can carry with you at all times. The AirID reader communicates via a secure Bluetooth Low Energy (BLE) connection with your device and makes the inserted smart card available for cryptographical operations such as data encryption or authentication. Support / Questions Information about AirID can be found online at https://certgate.com/en/
and on our service and support page AirID Support
. certgate GmbH Germany Tel.: +49 (0) 911 93523 0 Email: support@certgate.com 1 / 17 certgate GmbH Website: https://certgate.com/en/
certgate GmbH 2019, all rights reserved 1. About This Guide This guide provides step-by-step instructions to help customers using the AirID on Windows and iOS and contains also all the necessary information for application developers needed to use certgate's AirID Bluetooth reader with their apps. 1.1. Who Should Read This Guide The guide is intended for users of the AirID on Windows and for app developers who want to integrate AirID in their smart card aware environment or software. 1.2. Typographical Conventions The following kinds of text formatting and icons identify special information in the document:
Warning Warnings mark situations where loss of data or misconfiguration of the device is possible if the instructions are not obeyed Note Notes provide additional information on a topic and emphasize important facts and considerations Tip Tips provide best practices and recommendations Code Code and or command line examples Menu, Buttons Items you must select, such as menu options, command buttons, or items in a list. Example: Go to the System tab. Parameters Parameter and attribute names 2. Device Layout 2.1. Overview Device Description AirID is a wireless smart card reader that you can carry with you at all times. The AirID reader communicates via a secure Bluetooth Low Energy (BLE) connection with your device and makes the inserted smart card available for cryptographical operations such as data encryption or authentication. 2 / 17 certgate GmbH AirID is powered by a rechargeable Li-Po battery and can't be changed by the user. The battery is charged by plugging the AirID into either a computer or external USB wall adapter using the USB cable provided. The LCD display shows all setting information and status of the reader. The user-friendly 2-
button system helps you to navigate through the settings of the device. Bluetooth Connected Mode Usage With the AirID it is possible to protect Apps with smart card based-security via Bluetooth Low Energy (BLE). Note: Because of the sandbox architecture of iOS and Android
, the AirID driver needs to be integrated into an app to use AirID with this specific app. Examples of apps with AirID integration:
cgPhone for iOS SecurePIM for iOS your company specific apps*
*contact your company administrator!
If you would like to integrate AirID into your app, contact our support at support@certgate.com and get our AirID SDK for iOS
. USB Connected Mode Usage AirID can be used as a standard USB CCID reader on almost all PCs with an common operanting system (Windows, OS X and Linux). 2.2. Package Contents Check the product box for the following items
:
AirID Mini smart card reader USB cable ReadMe First 2.3. Hardware Features Device Features 1 Keychain 2 Low Power LCD Display 3 2-Button logic 4 LED indicator 5 USB interface Control Element AirID Mini is designed for easy menu navigation using a 2-button system. Button Function left button right button Long keypress:
switching the device On / Off Short keypress:
scrolling down Short keypress:
confirm / select Status Indicator Following status indicators exists on AirID 3 / 17 certgate GmbH Status Status Indicator Meaning card not inserted, c ard not supported or damaged card inserted and card supported card access blocked
(coverage) Bluetooth and advertising activated Bluetooth activated and connected to host remaining battery capacity Smart card status Connecti on status Battery status LED Indicator Color Meaning red blue green on while battery charging; off when battery charging is done on while bluetooth communication activities on while smart card activities 3. Menu Layout In the AirID device menu you can make various settings. You can access the different setting menus by navigating with the buttons. 3.1. AirID The AirID menu is displayed in the main window and shows the smart card status. Setting Display Meaning Initialize AirID initialized the smart card. This message appears only very shortly 4 / 17 certgate GmbH Card OK The smart card is inserted and it is recognized. When AirID is paired with a device, the device name is displayed here. Card unreadable The inserted smart card is not readable or not inserted. Please ensure that there is a properly inserted card and that the smart card is supported 3.2. Connection The Connection menu is the second setting when you scroll down. This is used to activate the Bluetooth connection or to terminate the connection. Setting Display Meaning Initializing ON/
waiting Bonding AirID initializes Bluetooth and activates the advertising mode. This message appears only very shortly. In the advertising mode, the AirID sends a Bluetooth signal making it detectable by devices. Requests must be checked and confirmed. AirID has activated Bluetooth and advertising mode and is waiting for the connection to be established. After pressing the right button, Bluetooth and the advertising mode will be disabled. AirID has successfully connected to a device. This message appears only very shortly. Connected AirID is connected to a device. Disconnec ting OFF When the right button is pressed, the connection is terminated. Bluetooth and the advertising mode are disabled. Pressing the right button activates Bluetooth and the advertising mode. 3.3. Pairing Code This item is only shown during the first connection setup with a device and is used to display the pairing code and connection status. Setting Display Meaning Pairing Code Pairing success This menu is only shown the first time a connection is established with a device and is used to display the connection key. Connection successful Pairing defines the establishment of a connection between an Bluetooth device and the AirID Bluetooth reader. Since the pairing information is retained even if the devices are turned off, it is not necessary to pair the same devices again. To pair, the device prompts you to read a code from the AirID and enter it into the connected device or compare it with the code displayed on the device. 5 / 17 Pairing failed 3.4. Settings Setting Display Settings Sig Strenght Advertising certgate GmbH Connection failed. The following errors may occur:
Pairing fail 1:
Pairing canceled Pairing fail 4:
Pairing code wrong Pairing fail 23: Time out Under the menu Settings
, you can configure settings for your AirID . Use the right button to select and confirm the settings. Meaning Main window Select the signal strenght of the AirID. Possible configurations are:
1-4 bars Use the right button to set the advertising mode (Connection via Bluetooth) to permanent or EcoMode If during the active advertising mode
(EcoMode) no connection to a device is established, the advertising mode switches off automatically to save battery power. Therefore, a manual reconnection is necessary afterwards. To save energy, a work schedule can be created via AirID Central APP. If the working hours are exceeded, the advertising mode remains deactivated. Display Indicates the lenght of time the display will remain on. Select whether the display is on permanently or turns off after a while. LEDs Select whether the LEDs are enabled or disabled. Buzzer Activate or deactivate the acoustic feedback of the AirID. Force 256bit Select if you want to force the AES 256-bit encryption of the connection between AirID and the work device 6 / 17 USB Card Reader Reset Keys Remove Pairing Factory Reset Distance Sensor oder Coverage AirID 2 certgate GmbH If the AirID is connected via USB to the working device, you can select whether the AirID should be used as a USB card reader
(CCID) or not. If the AirID is not used as USB reader, the AirID is only supplied with power via USB and thus charged. This setting deletes the saved keys (LTK and SK). You have the option to delete all keys or only the keys for a specific device. This setting deletes the saved pairing information and the keys. This is recommended when passing AirID to third parties. You have the option to delete all keys or only the keys for a specific device. After the removal, a new pairing is necessary to re-
established a connection. This setting reset the AirID to factory settings. All pairing keys are also deleted. The AirID reader can lock your WINDOWS or mobile (iOS or Android) apps (if configured) automatically, if a (preset) distance between your computer and your AirID has been exceeded. The
"Distance Log-Out" is managed in AirID settings using "Distance Sensor
". This setting is optional and can only be configured if there is an active Bluetooth connection to the a device. You can use pressetings or set the distance manually. Following pressetings are available:
Near (~ 65 dB) Mid (~ 75 dB) Far (~ 80 dB) In comparasion to the possible pressetings, the manual setting allows an individual fine adjustment. If the manual setting is selected, the curent RSSI value is shown in the display. Slowly walk around in the area you want your device to remain unlocked. Press the jog dial at the preferred distance to confirm the coverage area and activate the Distance Sensor function. 7 / 17 Settings can only be changed with an active Bluetooth connection between your computer and AirID reader. To avoid unintended disconnects, keep in mind that the minimum distance for the automated log-out is about three meters between your computer and AirID reader. The distance value for the "Distance Sensor" feature represents a relative value. It depends on the signal strength of the AirID, on the environment and on other interferencing signals. certgate GmbH Update Firmware Select this setting to enable the bootloader mode for flashing a new firmware. An USB connection to your Windows PC or Mac is required. Back Select Back to return to the main menu. 3.5. AirID Info Under AirID Info you will find further information about the AIrID. Setting Dispaly Meaning Serial Number Serial number of the AirID IEEE Adress Bluetooth address of the AirID Received The received signal strength (only with active Bluetooth connection) Battery Time Board Battery percentage indicator Current time and day Version of the AirID board Bootloader Version of the AirID bootloader Firmware Back Version of the AirID firmware version Select Back to return to the main menu 3.6. Card Info Setting Display Meaning 8 / 17 certgate GmbH Displays information about the inserted smart card. These information is only displayed if the smart card is correctly inserted and recognized/ supported. Card Info only on AirID 1 3.7. Prefered Device Under "Prefer Device" the pairing information of the AirID with the already connected devices are stored. From these information you can select to which device the AirID should preferably be connected in the future. All other devices will be ignored. Text Anzeige Bedeutung None New
"device name"
If no device is selected, a BLE connection to any of the surrounding devices is possible. Select the option New to connect AirID to a new, not yet paired device. All other devices paired with AirID will be ignored. If your AirID was already paired with several devices, you choose the device name to select which device the AirID should preferably be connected to in the future. All other devices will be ignored. The pairing information with up to 10 different devices can be stored at the same time. 4. Firmware Update certgate is constantly working to make AirID even more reliable and faster. Therefore we provide firmware updates for our wireless smartcard readers under from time to time. Please install a firmware update as soon as it is available as it improves the reliability of the reader. AirID Software, Driver & SDK The AirID firmware can be updated via USB on Windows or MacOS Pcs. Download the latest firmware from our website and unzip the file. Below you will find the necessary steps for the update. 1. 2. 3. 4. 5. 6.
, select Settings and navigate to Update Firmware Under Connect your AirID with USB-cable to a Windows computer or Mac. The AirID should display: "Send update or unpower to exit"
On a PC running WINDOWS operating system Open the folder with the firmware and click on "
On a MacOS Open the folder with the firmware and click on the "
After the update the AirID will reboot automatically. flash_gecko.bat
" file flash-gecko.command
" file Confirm: Yes and select it The AirID restarts and has been updated. You can use it with your smart card. If the update fails, the update process is intrerrupted or the AirID doesn't start anymore, go to Step 2 and repeat the process. 5. Using AirID AirID supports various operating systems like Windows, MacOS, Linux, iOS and Android. The basic requirement is the Bluetooth Low Energy functionality of the device. When AirID is successfully paired and the driver is installed, the inserted smart card is available to be used for cryptographical operations such as authentication or data encryption. This requires an applet on the smart card and the corresponding middleware for the operating system
. used The AirID software consists of two components:
1. 9 / 17 certgate GmbH 1. 2. AirID Central App - a management software for your AirID forming the basis for usage of the device. The tool provides you with information and setting options for your AirID when your reader is connected to your device. AirID drivers, which ensures the communication between the AirID and the operating system, must be installed additionally depending on the platform or is already integrated in the Apps and solutions of third party vendors. AirID can be used with different terminals and platforms, but not in parallel operation. 5.1. Windows The use of AirID under Windows is only possible as of Windows 8.1 due to the Bluetooth Low Energy functionality required. For use under Windows 7, an ONEKEY BRIDGE is additionally required. 5.1.1. Installation and Pairing 1. 2. 3. 4. 5. Download the latest installer (zipped .msi file) for Windows at Unzip and double click on the .msi installer file. Follow the instructions in the installation wizard. The AirID Windows driver and the AirID Central App are now installed. Insert your smart card to power on the AirID reader and activate Bluetooth at the AirID reader by navigating to the connection menu and pressing AirID - Software, Driver & SDK
. the right button The AirID should display:
. Open Windows "
Settings Devices Bluetooth 6.
". Your AirID should be listed with its serial number. Press "
Pair
"
7. 8. Compare the 6 digit pairing key shown on AirID display Connect matches press After succesful pairing, "
of the paired device will be displayed on the AirID. on the Windows 10 system and choose Your device is ready to go!
with the pairing key on the Windows 10 PC. If the PIN on the AirID by scrolling down in the menu and pressing the right button Yes
" and the AirID serial number will be displayed on the Windows system and the device name The AirID can now be used. If there are any problems with the pairing process, restart the process. If necessary, delete the stored pairing information (see 5.1.2 "Deleting the Connection") 10 / 17 certgate GmbH After the driver has been succesfully installed and paired, AirID is displayed as follows under USBCCID Smartcard Reader" if it is connected via USB. Device Manager. AirID is detected as "Microsoft 5.1.2. Deleting the Connection The pairing information are stored on both the Windows system and AirID. To terminate the connection deleted. completely
, the information on both sides must be On Windows 1. 2. 3. Open the Bluetooth settings on Windows (
Select the corresponding AirID using the displayed serial number and click on "
Click "
" to confirm the removal of the device. Settings- Devices - Bluetooth Yes
) Remove Device
"
On AirID Delete All Pairing Information 11 / 17 certgate GmbH To delete all stored pairing information from AirID a "
Remove Pairing
" can be performed in the Settings menu. Delete Specific Pairing Information To delete specific pairing information from AirID a
"Remove Pairing
" of the Windows workstation can be performed in the Settings menu. The pairing information can also be deleted via AirID Central App. To do this, go to the paired devices view, select the corresponding device from the list and click Delete. 5.1.3. AirID Central App on Windows AirID Central provides information and setting options for your AirID once your AirID is connected to your Windows device. If there is no connection, "No device
" is displayed in the AirID Central. AirID Central as an AirID management software, provides an overview of:
Function Description Serial Number Displays the serial number of the connected AirID Card Status Displays the status of the inserted smart card. This can be readable
, unreadable or no card inserted Distance Sensor or Coverage Feature Displays if the coverage feature is activated or not 12 / 17 certgate GmbH Encryption Refresh Displays if the AES encryption is set to 128 or 256-bit Checks if there is an older firmware and offers a firmware update if necessary. Change AirID Displays the list of the connected AirID readers from which you can select one. Battery Status Displays the battery level in percent. The green flash symbol indicates an active charging process. Signal Strenght Select the signal strength of the AirID Buzzer Display Advertising Select if an acustic feedback is required Select if the display should always be on or only for a certain time Select if the advertising mode for the connection to a device should always be on or only for a certain time.An individual work schedule to save energy can also be created with AirID Central. The advertising mode remains deactivated after the defined working hours. Serial Number Shows the serial number MAC Shows the MAC-address Hardware Shows the boardversion Bootloader Shows the bootloader version Firmware Card OS Connected devices Shows the firmware version Card OS of the inserted smart card Shows a list of devices for which AirID stores connection information. The connection information can be deleted by deleting the device from the list. If during the active advertising mode (EcoMode) no connection to a device is established, the advertising mode switches off automatically to save battery power. Therefore, a manual reconnection is necessary afterwards. The following information is displayed when clicking on the AirID device displayed in the AirID Central App:
Function Description Serial Number Serial number 13 / 17 certgate GmbH MAC MAC-Address Hardware Boardversion Bootloader Bootloader Version Firmware Firmware Version Connected devices Shows a list of devices for which AirID stores connection information. The connection information can be deleted by deleting the device from the list. A right click on the AirID Central icon in the Windows notification area opens a menu with the following application functions:
Menu Meaning Reestabli sh Opens the AirID Central App window in the foreground Settings If the AEM is used, enter the URL of the AEM server in the corresponding field. Select whether to lock your computer when the smart card is removed from the AirID. Note: Please note that the computer lock configuration has a higher priority in the Windows Policy and therefore this option cannot be selected via AirID Central. System Log Displays a log of the system log entries that you can use to track activities and processes Bridge Displays the ONEKEY Bridge and the settings you can do. PIN change function for the inserted smart card Shows the AirID Central version and the developer information Closes the AirID Central App Change PIN About Close 5.2. iOS Under iOS system-wide support of smart cards and card readers is not possible. Therefore, the AirID driver needs to be integrated into an app to use AirID with this specific app. These apps usually interact with the available AirID Central App via extension or keychain. The AirID Central App, as well as other AirID Sample Apps, is available in the App Store. The connection to the the iOS device is connection to the AirID is released again. only 5.2.1. Pairing active when the app in foreground is open. As soon as the app goes into the background, the Bluetooth 1. 2. 3. 4. Go to the App Store on your iOS device and search for AirID Central Install the AirID Central App on your iOS device Insert your smart card to power on the AirID reader Activate Bluetooth at the AirID reader by navigating to the connection menu and pressing the jog dial control element. The AirID should display:
5. 6. 7. Make sure that Bluetooth is activated on your iOS device (
Open the AirID Central App Select the AirID (serial number) in the shown device list Settings > Bluetooth > On
) 8. Compare the 6 digit pairing code shown on AirID display and confirm it to connect 9. After a successful pairing, the AirID shows:
14 / 17 certgate GmbH If you already paired AirID with another device that are switched on and close to you, please navigate to "
press the jog-dial and choose "
". Then press the jog-dial again to confirm. New Prefer Device
" in the AirID menu 5.2.2. Deleting the Connection The pairing information are stored on both the iOS device and AirID. To terminate the connection completely, the information on both sides must be deleted. On iOS 1. 2. 3. 4. To delete the device information from the AirID Central App, first select the function "
Settings Bluetooth Then open the iOS Bluetooth settings on the iOS device (
Select the AirID using the displayed serial number and tap the blue Info button Tap on "
" to delete the pairing information Ignore this device
) Forget AirID
" in the AirID Central On AirID Delete All Pairing Information To delete all stored pairing information from AirID a "
Remove Pairing
" can be performed in the Settings menu. Delete Specific Pairing Information To delete specific pairing information from AirID a
"Remove Pairing
" of the Windows workstation can be performed in the Settings menu. 5.3. Android Under Android system-wide support of smart cards and card readers is not possible. Therefore, the AirID driver needs to be integrated into an app to use AirID with this specific app. These apps usually interact with the available AirID Central App via keychain. The AirID Central App, as well as other AirID Sample Apps, is available in the Play Store. The connection to the the Android device is only active when the app in foreground is open. As soon as the app goes into the background, the Bluetooth connection to the AirID is released again. 5.3.1. Pairing 1. 2. 3. 4. Go to the Play Store on your Android device and search for AirID Central Install the AirID Central App on your Android device Insert your smart card to power on the AirID reader Activate Bluetooth at the AirID reader by navigating to the connection menu and pressing the jog dial control element. The AirID should display:
5. 6. 7. Make sure that Bluetooth is activated on your Android device (
Open the AirID Central App Select the AirID (serial number) in the shown device list Settings > Bluetooth > On
) 8. Compare the 6 digit pairing code shown on AirID display and confirm it to connect 9. After a successful pairing, the AirID shows:
If you already paired AirID with another device that are switched on and close to you, please navigate to "
press the jog-dial and choose "
". Then press the jog-dial again to confirm. New Prefer Device
" in the AirID menu 5.3.2. Deleting the Connection The pairing information are stored on both the Android device and AirID. To terminate the connection completely, the information on both sides must be deleted. 15 / 17 certgate GmbH On Android 1. 2. 3. 4. To delete the device information from the AirID Central App, first select the function "
Settings Bluetooth Then open the Android Bluetooth settings on the device (
Select the AirID using the displayed serial number and tap the blue Info button Tap on "
" to delete the pairing information Cancel pairing
) Forget AirID
" in the AirID Central On AirID Delete All Pairing Information To delete all stored pairing information from AirID a "
Remove Pairing
" can be performed in the Settings menu. Delete Specific Pairing Information To delete specific pairing information from AirID a
"Remove Pairing
" of the Windows workstation can be performed in the Settings menu. AirID2 Mini 6. Technical Specification Item Enclosure Shape Dimension Weight in g Human interface Display type Display size similar to a car key 72 x 38 x 15 mm 40 LCD, 128x128 ca. 25 x 25 mm Control element 2 button logic USB port LED visible USB-2.0-Micro-B 3 LEDs red: on while charging blue:on while active Bluetooth connection green: on while smart card powered on Acoustic feedback Buzzer Bluetooth Bluetooth Version 4.2 Battery Battery type Built-in rechargeable lithium-polymer battery Capacity ca. 500mAh Battery charging via USB Smart card interface smart card size ID000, contact interface (ISO7816) smart card type 3V Smart chip protocol T=0, T=1 NFC antenna NFC antenna for NFC enabled dual interface ID-000 card via C4 and C8 ISO7816 Update 16 / 17 certgate GmbH Firmware update via USB 7. Safety Instructions Protect the device from dirt, dust, moisture, chemicals and extreme temperatures and use it only in dry rooms. Use only original, approved accessories intended for this purpose for the device. Do not use the product in the immediate vicinity of heating, other heat sources or in direct sunlight. Do not expose the device directly to magnetic sources. Do not drop the product and do not expose it to violent shocks, drops, shocks or vibrations of any kind. Do not attempt to service or repair the product yourself or have it serviced or repaired by an unauthorized service or person. Do not make any unauthorized modifications to the software or hardware. Do not open or operate the product if damaged. Improper use may damage the product or connected devices. To charge the battery, use only standardized charging cables and power sources (5V DC) to avoid overcharging. This could damage the battery. 8. Disposal and Recycling The device must not be disposed of with household waste. B2B equipment must be returned to the manufacturer. 9. Maintenance and Care Clean the device only with a soft, clean and dry cloth. Do not expose the device to harsh chemicals, cleaning solutions or strong cleaning agents. Do not allow liquid to penetrate the product. 10. Warranty/ License/ Technical Support Please note our regulations at Terms and Conditions & Legal Documents Please note that only customer with a valid support and maintance agreement are authorized to get free support services. 1. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference.
(2) This device must accept any interference received, including interference that may cause undesired operation. 2. Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. NOTE:
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
-Reorient or relocate the receiving antenna.
-Increase the separation between the equipment and receiver.
-Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
-Consult the dealer or an experienced radio/TV technician for help. This device was tested typical body-worn operation, to comply with RF exposure rquirements, a minimum separation distance of 5mm must be maintained between the user's body and AirID including the antenna, third-part-belt-clips, holsters, and similar accessories used by this deivce ishould not contain any metallic components. 17 / 17