使用雷鸟的S/MIME电子邮件加密

先决条件

If you do not have a S/MIME key-certificate pair installed on your Nitrokey yet or if you did not installed OpenSC, please look at this page first.

You need to have OpenSC installed on your System. While GNU/Linux users usually can install OpenSC over the package manager (e.g. sudo apt update && sudo apt install opensc on Ubuntu), macOS and Windows users can download the installation files from OpenSC directly.

备注

使用64位系统(标准)的Windows用户需要同时安装32位和64位版本的OpenSC!

雷鸟中的设置

在雷鸟中使用Nitrokey之前,您必须在账户设置中激活S/MIME加密。你可以通过点击菜单,进入 "偏好"-> "账户设置",并在账户设置窗口中点击 "安全 "来实现。

img1

点击 "安全设备",导入正确的PCKS11模块。点击右侧的 "加载"。现在给模块起个名字(比如 "OpenSC模块"),并点击 "浏览 "选择模块的位置(见下文)。

img2

On Windows the right file lays under “C:WindowsSystem32opensc-pkcs11.dll”. On macOS and GNU/Linux the file should be in “/lib/pkcs11/opensc-pkcs11.so” or “/usr/lib/pkcs11/opensc-pkcs11.so” or alike. Press “OK” twice and you are back in security section of the account settings. Now you can actually choose a certificate on the upper part of the window. You should get asked for a PIN to unlock your Nitrokey. Please type in your User PIN.

img3

使用方法

在撰写电子邮件时,你现在可以选择对邮件进行加密和签名。

img4