certgate GmbH 2021, All rights reserved
Questions and Support
For more information about our products & services, please visit our website: https://airid.com/en/
For technical assistance & support, please visit https://airid.com/service-portal
Or create a support ticket here: create a support request
certgate GmbH
46045 Oberhausen
Germany
Tel.: +49 (0) 911 93523 0
Email: [email protected]
Website: https://airid.com/
AirID GmbH 2023, All rights reserved
About this User Manual
This guide provides step-by-step instructions to help customers using the AirID on different platforms and contains also information for application developers needed to use certgate's AirID Bluetooth reader with their apps.
Typographical Conventions
Warning
Warnings mark situations where loss of data or misconfiguration of the device is possible if the instructions are not obeyed
Note
Notes provide additional information on a topic and emphasize important facts and considerations
Tip
Tips provide best practices and recommendations
Code and or command line examples
Parameter and attribute names
Intended Use
Second, the AirID provides FIDO authentication via Bluetooth LE and USB for supported OS platforms.
AirID is powered by a rechargeable Li-Po battery. The battery is charged by plugging the AirID into either a computer or external USB wall adapter using the USB cable provided. The LCD display shows all setting information and status of the reader. The user-friendly control element helps you to navigate through the settings of the device.
Package Contents
- AirID smart card reader
- Bumper landscape
- Bumper portrait
- USB cable
- Strap
Before start-up, ensure that the two safety seals are undamaged.
If the safety seals are damaged, it is suspected that your device has been altered inadmissibly. In this case, please contact your distributor and do not use the device.
Device Features
- Low power display
- USB interface
- Smart card slot
6. Power switch (triggered by ID-1 Card) and smart card connector
Insert a smart card and power the AirID
Insert the card into the card slot with the chip first. The AirID reader has two integrated smart card connector can read the smart chip regardless of which side the chip is on. By inserting a card, the power switch is triggered and the AirID switches on.
To remove the card, simply slide it with the finger through the cut-out.
Remove the smart card and unpower the AirID
To remove the card, simply slide it with the finger through the cut-out. The AirID turns off.
Mounting the Bumper
Select the bumper according to the orientation of your card and attach it to your AirID.
Please make sure that the card slot of the bumper is correctly mounted
and that you pay attantion to the Jog Dial to avoid damage while mounting
Menu Layout
In the AirID device menu, you can get status information about your AirID and configure various settings. You can access the different menu entries by navigating with the control element.
Status indicators
card access blocked (Distance Sensor)Status Type Status Indicator Description Smart card status 
card inserted, card not supported or damaged 
card inserted and card supported 
Connection status 
Bluetooth and advertising activated 
Bluetooth activated and connected to host 
Connected to host via USB in USB card reader mode Battery status 
remaining battery capacity
Menu: AirID
| Item | Display | Description | |
|---|---|---|---|
Card initialize |
| AirID is initializing the inserted smart card. This message appears only very shortly. | |
| Card OK |
| The inserted smart card is recognized and supported. | |
| When AirID is connected to a host device via Bluetooth, the host name is displayed here. | ||
| Card unreadable |
| The inserted smart card cannot be read. Please make sure that:
|
Menu: Connection
| Item | Display | Description | |
|---|---|---|---|
Bluetooth Connection ON/waiting |
| AirID has activated Bluetooth and advertising mode and is waiting for the connection to be established. By pressing the control element, Bluetooth and advertising mode will be disabled. During advertising mode, the AirID sends a Bluetooth signal making it detectable by other devices. Requests must be checked and confirmed. | |
Bluetooth Connection Connected |
| AirID is connected to a host device via Bluetooth | |
Bluetooth Connection OFF |
| Bluetooth and advertising mode are disabled. Press the control element to activate Bluetooth and advertising. |
Menu: Pairing
Pairing defines the establishment of a connection between a Bluetooth device and the AirID in Bluetooth mode. Since the pairing information is retained even if the devices are turned off, it is not necessary to pair the same devices again. For secure pairing, compare the displayed code on AirID with the code displayed on the host system and confirm the pairing codes on both sides.
The pairing information with up to 10 different devices can be stored at the same time.
| Item | Display | Meaning | ||
|---|---|---|---|---|
| Pairing Code |
| This menu is only shown the first time a connection is established with a host device and is used to display the pairing key. To confirm the displayed code on your AirID select 'Yes' and confirm using the control element. | ||
| Pairing success |
| The pairing process have been successful | ||
| Pairing failed |
| The pairing failed. The reasons for a failed pairing can be:
|
Menu: Settings
| Setting | Display | Description | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Settings |
| Main window | ||||||||||
| Security |
| Select this category to configure security related settings | ||||||||||
| Distance Sensor |
| Use this setting to configure the distance sensor for the autolock. An active Bluetooth connection to the host device is required to set the distance sensor. The automatic lock depends on the host device and its operating system and must be activated separetely, if required. You can use pressetings or set the distance manually. Following pressetings are available:
If the manual setting is selected, the curent RSSI value is shown in the display. Slowly walk around in the area you want your device to remain unlocked. Press the control element at the preferred distance to confirm the coverage area and activate the Distance Sensor function. Please note that the measured distance may vary depending on the environment/line of sight. To reduce interference and avoid unintended disconnects, we recommend for manual setting a distance of min. three meters. Also see section: Setup: AirID Autolock Distance | ||||||||||
| Random MAC |
| Randomizes the Bluetooth Mac Address which is used for Bluetooth advertising. This is a security feature of AirID and focuses on device anonymization. | ||||||||||
| Advertising |
| Choose the bluetooth advertising mode between:
| ||||||||||
| FIDO User Signal |
| Activate or deactivate the acoustic feedback of the AirID. | ||||||||||
| Prefer Device |
| With this setting you can manage your AirID Bluetooth connections to your host systems: None: If no device is selected, a BLE connection to any of the surrounding devices is possible New: Select this option to connect AirID to a new device, if already connected devices are nearby. All other devices already paired with your AirID will be ignored. 'Device Name': If your AirID is already paired with one or more devices, you can choose the device name to select which device the AirID should preferably be connected to in the future. All other devices will be ignored. | ||||||||||
| Back |
| Select Back to return to the Setting menu. | ||||||||||
| Reset |
| Select this category to reset either specific or all settings of your AirID.
Be careful - deleted settings, pairings or keys cannot be restored!
| ||||||||||
| Factory Reset |
| This setting resets the AirID to factory settings. All saved pairing information and keys are also deleted. To make the factory reset, you have to confirm the query twice with 'yes'. | ||||||||||
| Reset Settings |
| With this reset, only the configured settings will be reset to default values | ||||||||||
| Reset BLE |
| This setting deletes the saved pairing information and the keys. This is recommended when passing AirID to third parties. You have the option to delete all keys or only the keys for a specific device. After the removal, a new pairing is necessary to re-established a connection. | ||||||||||
| Reset LTK Keys |
| This setting deletes the saved LTK keys. You have the option to delete all keys or only the keys for a specific device. | ||||||||||
| Reset FIDO |
| With this reset, all FIDO keys will be deleted | ||||||||||
| Back |
| Select Back to return to the Setting menu. | ||||||||||
| BLE Night Mode |
| Choose whether or not to enable Bluetooth LE night mode. The night mode deactivate Bluetooth advertising during the night to save power. | ||||||||||
| USB Mode |
| Select the default mode for your AirID when connected to the PC via USB: CARD: AirID automatically connects as USB Card Reader when it gets connected to the PC via USB. Also the battery will be charged. The FIDO functionality is still available via Bluetooth and can be used in parallel FIDO: In this USB mode, FIDO authentication is available via Bluetooth and USB when the AirID is connected to a PC via USB. Also the battery will be charged. The card reader functionality is still available via Bluetooth and can be used in parallel. Charge only: With this setting, only the battery will be charged. | ||||||||||
Update Firmware |
| Use this setting to update the AirID FIDO firmware manually. An USB connection to your Windows PC or Mac is required. For detailed information see section: Firmware Update We highly recommend you to activate the auto update service so that your AirID is always running the latest firmware. This enables you to benefit from the latest features and security-relevant updates. | ||||||||||
| Back |
| Select Back to return to the main menu. | ||||||||||
Menu: AirID Info
| Item | Dispaly | Description | |
|---|---|---|---|
| Serial Number |
| Serial number of the AirID | |
| IEEE Address |
| Bluetooth address of the AirID | |
| Connection PHY |
| Bluetooth transmitting and receiving information | |
| Received RSSI |
| The received signal strength | |
| Battery |
| Battery percentage indicator | |
| Time |
| Current day and time | |
| FIDO Keystore |
| Number of stored FIDO keys | |
| Board |
| Version of the AirID board | |
| Bootloader |
| Version of the AirID boot loader | |
| Firmware |
| Version of the AirID firmware version | |
| Back |
| Select Back to return to the main menu |
Menu: Prefered Device
| Item | Display | Description | |
|---|---|---|---|
Prefer Device None |
| None: If no device is selected, a BLE connection to any of the surrounding devices is possible | |
Prefer Device New |
| New: Select this option to connect AirID to a new device, if already connected devices are nearby. All other devices already paired with your AirID will be ignored. | |
Prefer Device 'Device Name' |
| 'Device Name': If your AirID is already paired with one or more devices, you can choose the device name to select which device the AirID should preferably be connected to in the future. All other devices will be ignored. |
Using AirID
Using Bluetooth Mode
AirID offers smart card and FIDO based-security via Bluetooth Low Energy (BLE), Version 5. The Bluetooth connection of AirID is protected by an additional AES256 encryption.
Using USB Mode
AirID can be used as a standard USB CCID reader on almost all PCs with a common operating system supporting the CCID standard (Windows, MacOS and Linux etc.) and as a standard USB FIDO security key on all PCs with a common operating system supporting the FIDO standard (Windows 10 20H2, MacOS Big Sur and Linux).
Setup: AirID Software
The AirID software consists of two components:
- AirID drivers, which ensures the Bluetooth communication between AirID and the operating system. The driver must be installed additionally depending on the platform or is already integrated in the apps and solutions of third party vendors.
- AirID Central App - a management software for your AirID forming the basis for usage of the device. The tool provides you with information and setting options for your AirID when your reader is connected to your device. The AirID Central App also always provides the latest firmware for your AirID and enables you to update your AirID via USB and Bluetooth ("Over-The-Air").
AirID can be used with different clients and platforms, but not in parallel operation.
Select your platform for detailed information on the AirID software available:
Windows 10
Download and install: AirID Installer for AirID Central and Driver
System requirement: Bluetooth Low Energy support v4.1 or later
For workstations without built in Bluetooth Low Energy v4.1 capabilities, a USB Bluetooth Donlge or the AirID BRIDGE - an USB Bluetooth connector - MUST be used to provide connectivity.
When AirID is successfully paired and the driver is installed, the inserted smart card is available system-wide to be used for cryptographical operations such as authentication or data encryption. This requires an applet on the smart card and the corresponding middleware for the operating system used.
AirID Central
- Connected AirID with serial number and smart card status
- Start tutorial
- Change AirID: switch between different connected devices
- Check for new firmware updates for the displayed AirID
- Current battery status. Click to define the battery capacity at which you would like to receive a battery warning
- AirID settings (further settings are available directly on your AirID)
- Click Advertising Mode to set working time ranges. This way, the AirID Bluetooth connection is only available within the defined period of time.
- Illustration of the AirID model. Click the arrow for more device information:
9. Shows a list of paired devices and allow to delete pairing information from your connected AirID
Right click on the systray icon of the AirID Central shows the following menu:
| Restore: Open the AirID Central window Log: Export log files for AirID Central and AirID driver Bridge: Connect the AirID Bridge Turorial: Start the tutorial Check for update: Check for new firmware updates About: Information about the AirID Central Quit: Close the AirID Central |
After the driver has been succesfully installed and paired, AirID is displayed as follows under Device Manager. AirID is detected as "Microsoft USBCCID Smartcard Reader" if it is connected via USB.
Silent Installation of the Driver
To perform a silent install using the ZIP format driver, extract the ZIP file, then run the AirID Installer .EXE program for the driver with the following comand line switch:
"<Filename>.exe" /install /quiet /log "<Filename for Logfile.txt>"
Any problem can be found in the log file.
The command to uninstall the software package is as follows:
"<Filename>.exe" /uninstall /quiet /log "<Filename for Logfile.txt>"
The optional parameter are:
| Optional Parameter | Description |
|---|---|
/help | Help and short overview of the parameters |
/install | /repair | /uninstall | /layout | Installs, repairs, uninstalls or creates a copy of the installation package |
/passive | /quiet | The user interface is displayed, but no user intervention is required. No user interface is displayed during installation. |
/norestart | If this option is specified, commands with --passive or --quiet will not automatically restart the computer. |
/log log.txt | The logs are written to a specific log.txt file. By default, a log file is created under %TEMP%. |
MacOS
Download and install: AirID BLE and CCID-USB Software for MacOS
System requirement: Bluetooth Low Energy support v4.1 or later
For workstations without built in Bluetooth Low Energy v4.1 capabilities, a USB Bluetooth Donlge MUST be used to provide connectivity.
When AirID is successfully paired and the driver is installed, the inserted smart card is available system-wide to be used for cryptographical operations such as authentication or data encryption. This requires an applet on the smart card and the corresponding middleware for the operating system used.
Please check our information page AirID & Smart Card @ MacOS to receive valuable information about MacOS & smart card integration!
AirID Central
| Selected AirID: Connected and selected AirID with its serial number Scan for new AirID: Scan to connect to new AirID Launch at Login: Select whether the AirID Central should be launched at login Help:
Check for Firmware Updates: Check for new firmware updates Quit AirID Central: Close the AirID Central |
iOS
Simply connect AirID in the desired app which is compatible with AirID. For details, please contact the manufacturer of the respective app.
System requirement: iOS version 10.3.3 upwards
Android
Simply connect AirID in the desired app which is compatible with AirID. For details, please contact the manufacturer of the respective app.
AirID Central
- Connected AirID with serial number and smart card status
- Forget AirID: Releases the Bluetooth connection to the saved AirID (pairing information will not be deleted)
- Change AirID: switch between different connected devices
- Check for new firmware updates for the displayed AirID
- Current battery status
- AirID settings (further settings are available directly on your AirID)
- Illustration of the AirID model. Click the arrow for more device information:
8. Shows a list of paired devices and allow to delete pairing information from your connected AirID
Linux
As there are many distributions of Linux available, please contact our support at https://airid.com/service-portal to get the suitable AirID driver for your Linux system.
When AirID is successfully paired and the driver is installed, the inserted smart card is available system-wide to be used for cryptographical operations such as authentication or data encryption. This requires an applet on the smart card and the corresponding middleware for the operating system used.
Windows 7
Download and install: AirID Installer for AirID Central and Driver, incl. Winusbcompat
System requirements: Since Windows 7 doesn't support the Bluetooth Low Energy standard, a AirID BRIDGE is required additionally
When AirID is successfully paired and the driver is installed, the inserted smart card is available system-wide to be used for cryptographical operations such as authentication or data encryption. This requires an applet on the smart card and the corresponding middleware for the operating system used.
Setup: AirID and Bluetooth Connection
- Connect AirID to the power supply and charge it.
- Start AirID by inserting the smart card into the card slot.
- Activate Bluetooth on AirID by pressing the jog dial in the menu item "Connection" and make sure that "ON/waiting" is displayed. Also make sure that Bluetooth is activated on your host device.
To initialize the Bluetooth pairing process, select AirID on the appropriate platform:
- iOS and Android: via the respective app
- Windows: Install the AirID software package and select your AirID via System settings » Devices » Bluetooth
- MacOS: Install the AirID software package and start pairing via the AirID Central program
- For secure pairing, compare the displayed code on AirID with the code displayed on the host system and confirm the pairing code on both sides, the AirID and your host.
>> Your AirID is now connected to your device and ready to use!
The pairing information will be saved on both sides, the AirID and your host system. Therefore this pairing process only needs to be done once per host device.
Setup: FIDO authentication with AirID
- Bluetooth Connection: To use the AirID for FIDO authentication via Bluetooth LE, follow the Setup: AirID and Bluetooth Connection first
- Register your AirID in your applications: Before you can log into your applications using the AirID FIDO functionality, you have to register your AirID once in the application.
- Set a security PIN: Some applications (e.g. Microsoft Azure) will ask you to set a PIN for your AirID FIDO security key, if you haven't done so already. This PIN will be stored in your AirID.
- Name your FIDO security key: For registration, most applications provide a text field to set a name for your AirID FIDO security key. This field is completely free of choice and is intended to help you identify the key used later on. In order to confirm and complete the registration, the AirID FIDO asks you to push a button on the AirID.
>> Now, your AirID is ready to be used for FIDO authentication!
Go to the application you previously registered in, select your AirID and log in. If set, you will be automatically prompted for your security key PIN. For your secure login, the authentication must be confirmed by pushing a button on your AirID.
Setup: AirID Autolock Distance
For configuration of this feature, an active BLE connection is required:
- Activate the „Distance Sensor“ on the AirID device (Settings > Security > Distance Sensor)
- You can select a preset value (near, mid, far) or a manual setting.
Please note that the measured distance may vary depending on the environment/line of sight. To reduce interference, we recommend for manual setting a distance of min. three meters.
AirID Firmware Update
To always benefit from the latest features and maximum security of your AirID, you should run the latest AirID firmware. Using the AirID management software AirID Central with its integrated updater always provides the latest firmware for your device when available. The AirID Central App enables you to update your AirID via USB and Bluetooth ("Over-The-Air").
It is also possible to update the AirID firmware manually via USB on Windows or MacOS PCs. Download the latest firmware from our website and unzip the file. Below, you will find the necessary steps for the update.
- Use the control element of the AirID to navigate to Settings → Update Firmware → Confirm: Yes
- The AirID should display: "Send update or unpower to exit"
With a Windows PC - Connect your AirID with the USB-cable to a Windows computer or Mac.
- Open the folder with the extracted firmware and run the "winusb-flash-device.exe" file
- once the AirID restarts, the update is finished
With a MacOS - Open the folder with the firmware and run the "flash-airid.command" file
- After a successful update the AirID will reboot automatically and can be used as usual
- once the AirID restarts, the update is finished
If the update fails, the update process is intrerrupted or the AirID doesn't start anymore, go to step 1 and repeat the process.
Technical Specifications
Item AirID2 First Release September 2018 Certification RoHS, CE, FCC Enclosure Shape rectangular plus Bumper Dimension 90 x 60 x 9 mm (plus Bumper) Bumper utilizable Weight in g 48 Orientation of hanger 4 (with bumper) Human interface Display type LCD, 132x32 Display size ca. 9 x 30 mm Control element Jog Dial (up/down/enter) USB port USB-2.0-Micro-B LED visible 3 LEDs red: on during battery charging blue: on during bluetooth communication activities green: on during smart card activities Acoustic feedback Buzzer Bluetooth Bluetooth Version 5 LE (Low Energy) Battery Battery type Built-in rechargeable lithium-polymer battery Battery size and weight 4.5 x 24.0 x 41.5 mm, 8g Capacity 340mAh Battery charging via USB Smart card interface smart card size ID1, contact interface (ISO7816) smart card type 3V Smart chip protocol T=0, T=1 Smart chip header number 2 Smart chip header type 8 pins (MUP-C736), 6 pins (2286237-1,TE Connectivity) ; 5 pins connected Using chip-backsided printed cards X Using chip-sided printed cards X NFC function of card usable X Update Firmware update via USB & Bluetooth ('Over-the-Air') Item AirID2 First Release September 2018 Certification RoHS, CE, FCC Enclosure Shape rectangular plus Bumper Dimension 90 x 60 x 9 mm (plus Bumper) Bumper utilizable Weight in g 48 Orientation of hanger 4 (with bumper) Human interface Display type LCD, 132x32 Display size ca. 9 x 30 mm Control element Jog Dial (up/down/enter) USB port USB-2.0-Micro-B LED visible 2 LEDs red: on during charging blue: on during smart card powered on Acoustic feedback Buzzer Bluetooth Bluetooth Version 5 LE (Low Energy) Battery Battery type Built-in rechargeable lithium-polymer battery Battery size and weight 4.5 x 24.0 x 41.5 mm, 8g Capacity 340mAh Battery charging via USB Smart card interface smart card size ID1, contact interface (ISO7816) smart card type 3V Smart chip protocol T=0, T=1 Smart chip header number 2 Smart chip header type 8 pins (MCD-7A6SC01-R), 6 pins (2286237-1,TE Connectivity) ; 5 pins connected Using chip-backsided printed cards X Using chip-sided printed cards X NFC function of card usable X Update Firmware update via USB & Bluetooth ('Over-the-Air') Item First Release Certification Enclosure Shape rectangular Dimension Bumper Weight in g Orientation of hanger Human interface Display type Display size ca. 9 x 30 mm Control element USB port LED visible 3 LEDs red battery low, please charge AirID Acoustic feedback Bluetooth Bluetooth Version 4.0 LE (Low Energy) Battery Battery type Built-in rechargeable lithium-polymer battery Battery size and weight Capacity 325 mAh Battery charging Smart card interface smart card size smart card type Smart chip protocol T=0, T=1 Smart chip header number Smart chip header type Using chip-backsided printed cards Using chip-sided printed cards NFC function of card usable Update Firmware updateAirID 1 November 2014 RoHS, CE 90 x 60 x 9 mm n/a 48 1 LCD, 132x32 Jog Dial (up/down/enter) USB-2.0-Micro-B
red and blue battery is charging
blue and green battery is fully chargedBuzzer 4.5 x 24.0 x 41.5 mm, 8g via USB ID1, contact interface (ISO7816) 5V, 3V, 1,8V 1 8 pins (MCD-7A6SC01-R) ; 5 pins connected X _ X via USB
Safety Precautions
- Protect the device from dirt, dust, moisture, chemicals and extreme temperatures and use it only in dry rooms.
- Use only original, approved accessories intended for this purpose for the device.
- Do not use the product in the immediate vicinity of heating, other heat sources or in direct sunlight.
- Do not expose the device directly to magnetic sources.
- Do not drop the product and do not expose it to violent shocks, drops, shocks or vibrations of any kind.
- Do not attempt to service or repair the product yourself or have it serviced or repaired by an unauthorized service or person.
- Do not make any unauthorized modifications to the software or hardware.
- Do not open or operate the product if damaged.
- Do not insert foreign objects into the card slot. The opening slot is intended exclusively for inserting a smart card.
- Improper use may damage the product or connected devices.
- To charge the battery, use only standardized charging cables and power sources (5V DC; min. 500mA) to avoid overcharging. This could damage the battery.
Environment Temperatures
| Status | Min. Temperature | Max. Temperature |
|---|---|---|
| While operating | -10°C | +60°C |
| While charging | 0°C | +45°C |
Maintenance & Care
Clean the device only with a soft, clean and dry cloth. Do not expose the device to harsh chemicals, cleaning solutions or strong cleaning agents. Do not allow liquid to penetrate the product.
Disposal & Recycling
B2B equipment must be returned to the manufacturer.
Warranty/ License/ Technical Support
Please note that only customer with a valid support and maintenance agreement are authorized to get free support services.