USB Token Security and Care Guide
Simple controls for PIN safety, storage, drivers, loss response and safe handover practices.
The USB token is the physical control around a DSC private key. Treat it like an organizational credential, not an ordinary pen drive. Assign it to the named holder, record custody and keep it away from shared drawers or unattended computers.
Prepare the requirement
Change a default PIN according to the token instructions and keep it private. Do not send the PIN through chat or email, and never share an OTP during enrolment. Repeated incorrect PIN attempts can lock a token, so stop and seek official guidance rather than guessing.
Complete the controlled steps
Install token drivers only from the issuer or token manufacturer’s official source. Avoid remote-access sessions with unknown helpers. When support is required, remain present, close unrelated data and enter the PIN yourself.
Build in time for testing
If a token is lost, stolen or suspected of compromise, contact the issuer promptly about revocation. Remove or update the certificate mapping on dependent portals, document the incident and arrange replacement through the approved process.
A reusable five-point checklist
- Record the portal and transaction.
- Match certificate function and applicant category.
- Prepare consistent identity and organization details.
- Complete verification only in the official flow.
- Test token, utility and portal mapping before the deadline.
The goal is not merely to obtain a certificate; it is to have a secure, usable certificate recognized by the system where work must be completed. If a requirement remains uncertain, ask the receiving portal or an authorized partner to confirm it before payment.