 | |||||||||||
Please select a product: Smarx API Developers Reference Network License Control System (LCS) Remote Update Management System (RUMS) CRYPTO-BOX USB for certificate storage; cryptographic middleware CRYPTO-BOX Parallel (560/Net & Versa) CRYPTO-BOX (all models)I already installed the CRYPTO-BOX device drivers on my PC. But my software cannot find the CRYPTO-BOX. We recommend you to use "MarxProbe" for troubleshooting (available in Download-Center). MarxProbe checks if all necessary CRYPTO-BOX DLLs and device drivers are installed on your system. If MarxProbe cannot provide you with a solution for your problem please send your MarxProbe report together with an error description to our support. We will contact you immediately. I want to use the CRYPTO-BOX under Linux or Mac OS. Are there libraries and drivers available for those systems? You can use the CRYPTO-BOX USB under Linux (32 and 64 Bit) and Mac OS. Under Linux a Kernel with implemented USB support (e.g. 2.4 or higher) is required. Mac OS X is also supported (PowerPC and Intel). Libraries are included in CRYPTO-BOX Professional Protection Kit, or can be requested from our support. Do you support 64 bit Operating Systems? For Windows Vista64, XP Professional x64 Edition and Windows Server 2003 Standard x64 (AMD64 processors and processors with EM64T) a driver for the CRYPTO-BOX USB is included in the CRYPTO-BOX driver Setup (CBUSetup) which can be obtained from the Download Center. 64 bit support under Linux (AMD64 processors and processors with EM64T) is also available. What is the difference between Protection Kit MPI and Smarx OS Protection Kit? Which one should I use? Both are libraries to access the CRYPTO-BOX. Besides automatic implementation via AutoCrypt (for Windows) both libraries support implementation into sourcecode via API calls in all common development environments. MPI is a Windows-library, which supports all CRYPTO-BOX types (CRYPTO-BOX USB, Parallel and Serial) over common API calls. SmarxOS supports the CRYPTO-BOX USB only, thereby utilizing the full capabilities of the CRYPTO-BOX USB (protecting different applications with only one CRYPTO-BOX, protect up to 10 applications in networks with only one CRYPTO-BOX, Multi-Platform-Support: Windows32/64, Linux32/64, Mac OS*). MPI is recommended if you want to implement the CRYPTO-BOX Parallel (either in conjunction with a USB or by itself). If you want to use the CRYPTO-BOX USB only, and/or you need support for Linux and Mac OS*, SmarxOS is the best choice. * SmarxOS support is available for Mac OS X (Power PC and Intel) Can I use MPI and SmarxOS together? In theory you can use both libraries in parallel. But please note that SmarxOS needs a different formatting for the CRYPTO-BOX USB than the MPI: a SmarxOS formatted CRYPTO-BOX USB cannot be accessed with MPI commands and vice versa. When accessing the memory of the CRYPTO-BOX, in the documentation it is frequently spoken about "RAM area". Are the data inside the CRYPTO-BOX memory lost after switching off the PC? To simplify matters, we refer to the memory as "RAM", but the internal memory of the CRYPTO-BOX is non-volatile and will be preserved after switching off the computer or unplugging the CRYPTO-BOX. There are up to 1 Million write cycles to the memory possible (100.000 guaranteed). CRYPTO-BOX USBWhich certificates does the CRYPTO-BOX USB hardware have? We need such certifications especially for large customers! The CRYPTO-BOX USB hardware is certified by USB Implementers Forum (www.usb.org), and complies with the FCC rules for digital devices. The CRYPTO-BOX USB device driver has the Microsoft Windows Hardware Quality Labs (WHQL) certification for Windows XP and 2000. I want to use the CRYPTO-BOX USB under Windows. But when plugging in the CRYPTO-BOX into the USB port Windows does not find the drivers. Before attaching the CRYPTO-BOX to the computer please install the device drivers with CBUSetup (available in Download-Center) and attach the CRYPTO-BOX after that. Please note that you need administrator rights to install the device drivers under Windows XP/2000/NT4. If you have Internet access you may also install the device drivers using Windows Update. What is the difference between CBSetup and CBUSetup? CBUSetup installs driver for the CRYPTO-BOX USB only and comes with the SmarxOS Protection Kit. If you work with Smarx OS please use CBUSetup. CBSetup contains not only the drivers for CRYPTO-BOX USB, it also allows to select installation of drivers for CRYPTO-BOX Parallel (560/Net and Versa). Furthermore, the recent MPI library (mpiwin32.dll) will be installed during setup. After installing the device driver under Windows XP and plugging in the CRYPTO-BOX into USB port Windows XP shows me a warning message that the driver is not digitally signed and recommends to cancel the installation. Please download the latest version of CBUSetup or CBSetup (available in Download-Center) which contains a digitally signed driver for the CRYPTO-BOX USB. I have installed the device driver for the CRYPTO-BOX USB using CBSetup/CBUSetup. But the CRYPTO-BOX is not found either by my application nor by MarxProbe. The small LED on the backside of the CRYPTO-BOX is not flashing. If you have plugged in the CRYPTO-BOX before installing the device driver Windows will not find the driver and deactivates the device. To activate the CRYPTO-BOX again, open Windows device manager (Under XP: Control Panel -> System -> Hardware -> Device Manager). Search for the entry "USB CrypToken" (usually it will have a yellow question mark). Right-click on it and choose "Update driver". Windows now will find the driver automatically. I have installed the device driver for the CRYPTO-BOX USB using CBSetup/CBUSetup correctly (before attaching the CRYPTO-BOX USB to the computer). Nevertheless the CRYPTO-BOX is not found either by my application nor by MarxProbe. The small LED on the backside of the CRYPTO-BOX is not flashing. Since middle of 2005 new CRYPTO-BOX USB are equipped with a new firmware version (2.0 or higher). Old driver versions (before December 2004) will not work with this firmware release. Please install the most recent driver using CBSetup or CBUSetup (available in Download-Center). The new driver is fully backward compatible to all existing CBU firmware versions! I have attached 2 or more CRYPTO-BOX USB Versa to my PC. But my application finds only one CRYPTO-BOX! The CRYPTO-BOX USB Versa does not have an individual serial number. That means that all serial numbers are the same for all CRYPTO-BOX of one batch. The Smarx OS resp. MPI library uses this serial number to identify the CRYPTO-BOX USB (BoxName under Smarx OS, Identifier under MPI). Nevertheless CRYPTO-BOX USB Versa of different MARX-customers can be identified, because they are from different batches and therefore have different serial numbers. If you plan to use more than one CRYPTO-BOX USB with your customer specific coding on one PC, we recommend you to use the CRYPTO-BOX USB XS which has an unique serial number for every device. Is the CRYPTO-BOX USB fully compatible with the CRYPTO-BOX Parallel (560/Net or Versa)? No. But with the MPI interface you can access both types with the same API commands. So an application which was already protected with MPI can be adapted easily to work also with a CRYPTO-BOX USB. If you want to use the CRYPTO-BOX USB only and need no backward compatibility we strongly recommend you to use the new Smarx OS interface, which utilizes the full capabilities of the CRYPTO-BOX USB. What is the difference between CRYPTO-BOX USB and CrypToken USB? The CRYPTO-BOX was developed mainly for software and data protection purposes, CrypToken is an ideal add-on for system integrators and VARs to use it as Smart Card replacement for secure user authentication, encryption and digital signatures (Email, VPN) or confidential eBusiness transactions such as banking and financial services. AutoCryptI have protected my software using AutoCrypt. But the protected application runs only on my PC where I protected it. In the folder where the protected application was copied to AutoCrypt also copies a second file named "fmteos.dll" for protection on local PC or "fmnet.dll" for network protection (for AutoCrypt Smarx OS, under AutoCrypt MPI the file is named "acwmpi32.dll"). This file always needs to be distributed together with your protected application. Furthermore you will need the CRYPTO-BOX device drivers, which can be installed using CBUSetup or CBSetup (you will find it in Download-Center). Is it possible to protect applications in networks with AutoCrypt (using only one CRYPTO-BOX per network)? Yes, its possible. Please choose the option "Network" when creating a new AutoCrypt project. I have protected my software using AutoCrypt. But the application does not find the CRYPTO-BOX, I always get an error "CRYPTO-BOX not found" (or something similar)! AutoCrypt as part of the SmarxOS Application Framework is a project-oriented concept. At first you create your project and protect the target application using AutoCrypt Manager. As second step you need to format the CRYPTO-BOX with the settings you defined in AutoCrypt Manager. Please use the "CRYPTO-BOX Format" for that. Here you can select your AutoCrypt project and format as much CRYPTO-BOXes as you need to work with yout protected application. I protected my application with AutoCrypt - now I have an updated version of my application and I would like to protect it with AutoCrypt so that it works with the old CRYPTO-BOX. Is it possible and if so, how do I do that? Yes, it is possible. I protected my application (Product A) with AutoCrypt. Now I have another program (Product B) I would like to protect with AutoCrypt so that it doesn't work with the old CRYPTO-BOX. Is it possible and if so, how do I do that? Yes, it is possible.To make sure that CRYPTO-BOXes programmed for Product A won't work with Product B: For Smarx OS: Start a new project, specify a different partition number, use <Compress/Encrypt> application checkbox. For MPI: Start a new project, select <Encryption> on "Analysis and Protection Options" dialog and create a random key (will be different for this project). NOTE: If you do not plan future updates for Product A and/or B, then consider "Application Checksum" DataObject, which has unique value for EVERY file. MPI to SmarxOS Conversion
What are the benefits of upgrading from MPI to SmarxOS? MPI was developed as the first USB based format for the CRYPTO-BOX devices from MARX. The MPI format was developed to preserve compatibility with our existing parallel and serial port CRYPTO-BOXes. In 2005 MARX developed Smarx OS so that MARX could better utilize the full internal power of the CRYPTO-BOX USB hardware. Listed below are just some of the benefits you will realize by upgrading to the SmarxOS formatted CRYPTO-BOX:
If you are currently using a MPI formatted CRYPTO-BOX in your environment, MARX strongly recommends that you upgrade for all future releases. We will continue to support the existing functionality for the MPI solution, however we will not be developing or improving this platform in the future. When you upgrade you will ensure that you are getting the most up to date support for the most widely used programming environments (including more extended static libraries), support for new operating systems as they are released and the ability to fully utilize all of the functionality that the CRYPTO-BOX has to offer. Is the migration from MPI to SmarxOS a difficult process and will it effect my customers? MARX has made the upgrade from MPI to SmarxOS a snap! Your existing MPI formatted CRYPTO-BOXes can be converted to SmarxOS using our MPI to SmarxOS conversion tool. This tool can remotely program all of your distributed CRYPTO-BOXes automatically. Since all of the new SmarxOS CRYPTO-BOXes that are shipped to you will still contain all of your previous customer specific programming values, you simply need to adjust your protection scheme so that you are referencing CBIOS calls instead of MPI calls. I'm ready to convert my MPI boxes to SmarxOS. What do I need to get started? Contact your MARX distributor and ask for the MPI to SmarxOS conversion kit. This kit contains all of the tools and software you need to complete the migration process. The MPI to SmarxOS conversion kit comes with one SmarxOS formatted CRYPTO-BOX USB programmed with your existing security codes, the SmarxOS Application Framework which contains the MPI to SmarxOS conversion software, your customer confidential files that are needed to complete the migration and step by step instructions to walk you through the process. I still have questions about this migration, who should I contact? MARX is here to help! Feel free to contact us at anytime with any questions you may have. We will be happy to walk you through the migration step by step. The most efficient way to get assistance with this issue is to send email to: support@cryptotech.com. Also, please have a look at our white paper "MPI vs. SmarxOS" describing this process. Smarx API Developers Reference
Which compilers and platforms are supported by Smarx OS? Smarx OS currently supports Windows, Linux and MacOS X operating systems. For an overview about supported compilers please click here (opens PDF document). You offer different Smarx OS libraries. What are they good for? The Smarx OS libraries for developers are separated into following groups:
A detailed API description can be found in CRYPTO-BOX SmarxOS Compendium. Network License Control System (LCS)Do I need LCS for network functionality of my CRYPTO-BOX? No, every CRYPTO-BOX USB is network-enabled without surcharge, and you can protect your application with only one CRYPTO-BOX per network. But you will need LCS in case you want to limit the number of the instances of your application running in the network (resp. how often your application can be run on all client computers in the network). This functionality is ensured by the CRYPTO-BOX network license counter which can be set if LCS functionality was enabled. LCS is supported by the CRYPTO-BOX USB XS and XL only. Please pay attention, that the CRYPTO-BOX USB Versa is network-enabled, but does not support LCS functionality (setting the network license counter). Can I start the CRYPTO-BOX network server as system service under Windows XP/2000? Yes, its possible. More information can be found in the server readme file which is available in the same folder as the server on the Professional Protection Kit CD-ROM, in the Server package in our Download-Center, or in the Smarx OS Compendium. What do I need to protect applications in networks? You need a CRYPTO-BOX USB and a PC in the network (TCP/IP) where the CRYPTO-BOX device driver is installed. Furthermore you need to run the CRYPTO-BOX network server on that PC. Can I protect multiple applications at the same time in a network with only one CRYPTO-BOX, and can I set the number of network licenses for every application individually? With Smarx OS you can protect up to 10 different applications with one CRYPTO-BOX in a network. With MPI you can protect one application per CRYPTO-BOX in a network. I have installed the CRYPTO-BOX device drivers, attached the CRYPTO-BOX and started the CRYPTO-BOX Network Server. Nevertheless I cannot find the Server, nor the CRYPTO-BOX in the network (even MarxProbe does not find the Server). Make sure that installed Firewall solutions do not block the access to the CRYPTO-BOX Server. By default TCP port 8765 is used for communication with the Server - this port needs to be opened. One of my End-Users has a Terminal Server environment. How can I prevent him from using multiple instances of my software? If the CRYPTO-BOX is attached to the Terminal Server and accessed locally by your protected application, theoretically your application can be used on all clients. You can prevent this by doing the following: Check in your application if it is run in a Terminal Server environment. If yes, you should not allow local access to the CRYPTO-BOX, and use only network access instead. The CRYPTO-BOX network server will recognize the Terminal Server Clients and allows to access only the number of clients which are allowed by the CRYPTO-BOX internal network license counter (which can be programmed to an arbitrary value for a CRYPTO-BOX USB XS/XL). Remote Update Management System (RUMS)What can be updated with RUMS? You can update DataObjects with licensing options stored in the CRYPTO-BOX memory. DataObjects are: Expiration date (or Expiration time), Usage counter, or Password to access the application. If one of my End-Users has more than one CRYPTO-BOX from me, can he use one Activation Code to update all his licenses (without surcharge!)? No, the Activation can be executed only on the CRYPTO-BOX where the update was initiated (where the Transaction Key was created). CRYPTO-BOX USB for certificate storage; cryptographic middlewareIt it possible to store certificates on the CRYPTO-BOX? Which cryptographic standards are supported? A Smarx OS formatted CRYPTO-BOX USB can support MS-CAPI and PKCS#11 standard interfaces for certificate storage and PKI support. (hint: CRYPTO-BOX Parallel and Serial do not support Smarx OS). But you need a CRYPTO-BOX USB with at least 32 kBytes of memory, and suitable PKCS#11 or CAPI libraries. Furthermore, the CRYPTO-BOX needs to be formatted with Partition Editor (included in Smarx OS Protection Kit) for PKCS#11 or MS-CAPI usage. We recommend to order CrypToken Kit instead, which includes all necessary libraries and documentation for MS-CAPI and PKCS#11 support. See www.cryptoken.com for more details. CRYPTO-BOX Parallel (560/Net & Versa)I have a CRYPTO-BOX Parallel (560/Net or Versa), but my new computer has no LPT Port. Can I use an USB-LPT adapter? USB-LPT adapters are not supported by the CRYPTO-BOX Parallel. For Desktop PCs MARX offers a PCI LPT card which allows to use the CRYPTO-BOX 560/Net and Versa under Windows Vista and XP (32Bit versions only). This card can be ordered from our Product Catalog. Please make sure to update your operating system with the latest patches from Windows Update and install the latest CRYPTO-BOX device drivers (you will find it in our Download-Center)! The drivers for the PCI card can be obtained here. You need administrator rights to install the device drivers. I want to use the CRYPTO-BOX Versa resp. 560/Net under Windows. But the CRYPTO-BOX is not found by my application. Please install the device drivers first using CBSetup (you will find it in our Download-Center). Please note that you need administrator rights to install the device drivers under Windows Vista/XP/2000/NT4. I have attached a printer behind the CRYPTO-BOX to the parallel port and have some problems (printer driver shows me an error message or the printer does not print). Please install the most recent CRYPTO-BOX device driver using CBSetup (you will find it in Download-Center). Some printer drivers cause problems because they are using the parallel port exclusively. If possible use the device drivers shipped with Windows, they work without any problems in most cases. I want to use the CRYPTO-BOX under Linux resp. Mac OS. Are there drivers and libraries for these systems available? The CRYPTO-BOX 560/Net and Versa are meant for using them under Windows only (DOS is also supported). For Linux and Mac OS please use the CRYPTO-BOX USB instead, you can order the CRYPTO-BOX USB Evaluation Kit directly in the Order section. I have daisy-chained 2 CRYPTO-BOX 560/Net or Versa to one LPT port. But my application only finds the first attached CRYPTO-BOX! If you have attached 2 CRYPTO-BOX Parallel with the same customer specific Codes to one LPT port, the CRYPTO-BOX library (MPI) will find the first device only. Because both CRYPTO-BOX have the same codes, so the first one always thinks that the request is meant for it. If both devices have different codes, it will work (e.g. with CRYPTO-BOX of different MARX-customers), but only when having the same types (e.g. 2 CRYPTO-BOX 560/Net or 2 CRYPTO-BOX Versa). If you need this feature you can order CRYPTO-BOX with 2 different customer codes without surcharge. CRYPTO-BOX SerialI want to use the CRYPTO-BOX Serial under Windows. Where can I get the device driver for it? The CRYPTO-BOX Serial does not need device drivers to be installed, it only needs the appropriate libraries for your developing environment (included on the Professional Protection Kit CD-ROM). I want to use the CRYPTO-BOX under Linux resp. Unix/Solaris. Are there any libraries available for it? The CRYPTO-BOX Serial can be used under Linux and Solaris, libraries are available on the CRYPTO-BOX Professional Protection Kit CDROM, or can be requested from MARX. For inquiries about other Unix versions please contact our Support. | |||||||||||
| |||||||||||
