Web Signer and eSigner for Windows

Installation Guide
All information herein is either public information or is the property of and owned solely by Thales and/or its subsidiaries and
affiliates who shall have and keep the sole right to file patent applications or any other kind of intellectual property protection in
connection with such information.
Nothing herein shall be construed as implying or granting to you any rights, by license, grant or otherwise, under any
intellectual and/or industrial property rights of or concerning any of Thales and any of its subsidiaries and affiliates (collectively
referred to herein after as “Thales”) information.
This document can be used for informational, non-commercial, internal and personal use only provided that:
• The copyright notice below, the confidentiality and proprietary legend and this full warning notice appear in all copies.
• This document shall not be posted on any publicly accessible network computer or broadcast in any media and no
modification of any part of this document shall be made.
Use for any other purpose is expressly prohibited and may result in severe civil and criminal liabilities.
The information contained in this document is provided “AS IS” without any warranty of any kind. Unless otherwise expressly
agreed in writing, Thales makes no warranty as to the value or accuracy of information contained herein.
The document could include technical inaccuracies or typographical errors. Changes are periodically added to the information
herein. Furthermore, Thales reserves the right to make any change or improvement in the specifications data, information,
and the like described herein, at any time.
Thales hereby disclaims all warranties and conditions with regard to the information contained herein, including all
implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. In no event shall
Thales be liable, whether in contract, tort or otherwise, for any indirect, special or consequential damages or any
damages whatsoever including but not limited to damages resulting from loss of use, data, profits, revenues, or
customers, arising out of or in connection with the use or performance of information contained in this document.
Thales does not and shall not warrant that this product will be resistant to all possible attacks and shall not incur,
and disclaims, any liability in this respect. Even if each product is compliant with current security standards in force
on the date of their design, security mechanisms' resistance necessarily evolves according to the state of the art in
security and notably under the emergence of new attacks. Under no circumstances, shall Thales be held liable for
any third party actions and in particular in case of any successful attack against systems or equipment
incorporating Thales products. Thales disclaims any liability with respect to security for direct, indirect, incidental or
consequential damages that result from any use of its products. It is further stressed that independent testing and
verification by the person using the product is particularly encouraged, especially in any application in which
defective, incorrect or insecure functioning could result in damage to persons or property, denial of service or loss
of privacy.
Copyright © 2008-2022 THALES. All rights reserved. Thales and the Thales logo are trademarks and service marks of Thales
and/or its subsidiaries and affiliates and are registered in certain countries. All other trademarks and service marks, whether
registered or not in specific countries, are the property of their respective owners.
Document Reference: D1576951B
October 5, 2022
 3

Contents

Preface 5
Document Purpose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Who Should Read This Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Support Contacts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Customer Support Portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Telephone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
If You Find an Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Chapter 1 Overview 8
About the installation package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Chapter 2 Installation and uninstallation 9

Pre-requisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Command Script Processing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Silent installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
GBDM installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Uninstallation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Silent Uninstallation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Appendix A Troubleshooting 21
MSIs missing on PC after installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Web Signer already present . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 4

List of Figures
Figure 1 - Welcome window and command window . . . . . . . . . . . . . . . . . . . . . . . . . 10
Figure 2 - Welcome window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Figure 3 - EULA window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Figure 4 - GBDM window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Figure 5 - Setup Type window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Figure 6 - Custom Setup window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Figure 7 - Files update message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Figure 8 - Firefox advice window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Figure 9 - Wizard Completed window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Figure 10 - Command, Cleaner and Remove windows . . . . . . . . . . . . . . . . . . . . . . . 17
Figure 11 - Uninstall Completed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Figure 12 - Apps & Features Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Figure 13 - Close Applications Message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Figure 14 - App and Browser Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Figure 15 - App & Browser Control window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Figure 16 - Reputation-based protection window . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Figure 17 - User Account Control window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 5

Preface

Document Purpose
Web Signer is a newer improved version of eSigner and both are multi-faceted
software solutions that address the needs of the business world and the stand-alone
end user in guaranteeing secure Internet transactions.
As Microsoft will no longer be supporting Internet Explorer, Thales recommends that
Windows customers using eSigner migrate to Web Signer.
Currently both products are supplied in a common .msi suite. This document shows
you how to install the product that you bought.

Who Should Read This Book

The Web Signer and eSigner for Windows Installation Guide document is intended for
end-users and administrators who wish to install the software for Web Signer or
eSigner or both on Windows. eSigner is no longer supported for macOS.

Documentation
In addition to this document, Web Signer documentation includes:
■ Web Signer Integration Guide
■ Web Signer Windows Release Notes
■ Web Signer Mac Release Notes
In addition to this document, eSigner documentation includes:
■ eSigner Integration Guide
■ eSigner Release Notes
The Classic Client Release Notes are also useful as they list the readers that are
supported.
The Web Signer and eSigner documentation are available as .pdf document files.
These .pdf files are provided alongside the Web Signer and eSigner packages. The
files can be printed out or read on screen using the Adobe Acrobat Reader.
To obtain the Adobe Acrobat Reader, you can download it from Adobe’s Web site at:
www.adobe.com.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 6

Typographical Conventions
This document uses the following typographical conventions to assist the reader of this
document.

Convention Example Description

Courier transaction Code examples.

Bold Enter myscript.dll Actual user input or screen output.

/ Select File/Open Indicates a menu selection. In this example you are

instructed to select the “Open” option from the “File” menu.

Additional Resources
For technical support, contact your Thales representative or consult the Thales
customer support Web site.

Support Contacts
If you received Web Signer or eSigner from a distributor or a bank, as is typically the
case, you should first contact the company who supplied the eSigner software to you. If
you purchased eSigner directly from Thales, the support procedures should be
described in your Support and Maintenance contract.
If you encounter a problem while installing, registering, or operating this product,
please refer to the documentation before contacting support. If you cannot resolve the
issue, contact your supplier or Thales Customer Support.
Thales Customer Support operates 24 hours a day, 7 days a week. Your level of
access to this service is governed by the support plan arrangements made between
Thales and your organization. Please consult this support plan for further information
about your entitlements, including the hours when telephone support is available to
you.

Customer Support Portal

The Customer Support Portal, at https://supportportal.thalesgroup.com, is where you
can find solutions for most common problems. The Customer Support Portal is a
comprehensive, fully searchable database of support resources, including software
and firmware downloads, release notes listing known problems and workarounds, a
knowledge base, FAQs, product documentation, technical notes, and more. You can
also use the portal to create and manage support cases.

Note: You require an account to access the Customer Support Portal. To create a new
account, go to the portal and click on the REGISTER link.

Telephone
The support portal also lists telephone numbers for voice contact (Contact Us).

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 7

If You Find an Error

Thales makes every effort to prevent errors in its documentation. However, if you
discover any errors or inaccuracies in this document, please inform your Thales
representative. Please quote the document reference number found at the bottom of
the legal notice on the inside front cover.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 1
Overview

About the installation package

eSigner is now included in the Web Signer package, so you will use the same package
regardless of whether you want to install eSigner or Web Signer or both. This package
is called Suite MSIs and also includes the following additional components:
■ Classic Client PKCS#11 library
■ USB Smart Card Device Driver (CCID)
■ Minidriver (MD)
■ Gemalto Bluetooth Device Manager (GBDM) (available in certain packages only)
You can either install all the components in a “complete” installation or choose the
components that you want to install in a “custom” installation.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 2
Installation and uninstallation

This chapter describes how to install and uninstall the Suite MSIs package that
includes Web Signer and eSigner and is organized in the following topics:

■ “Pre-requisites” on page 9
■ “Installation” on page 10
■ “Silent installation” on page 16
■ “Uninstallation” on page 17
■ “Silent Uninstallation” on page 20

Pre-requisites
For both standard and silent installations, the following pre-requisites are important.
■ The installation must be performed by an account that has administrator rights for
the machine on which the suite is to be installed.
■ The Suite MSIs package cannot be installed by roaming or read-only user profiles.
■ The Suite MSIs package cannot be installed by from a network path (one that
begins with \\...) you must copy the .exe file locally.
■ Make sure that your company’s general security policy allows command script
processing, otherwise Web Signer cannot run. See “Command Script Processing”
for more details.

Command Script Processing

The command prompt and script processing is allowed or disallowed via the following
registry key:
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\System]
"DisableCMD"=dword:00000002
The values for this key are as follows:
■ 0: enables the command prompt
■ 1: disables the command prompt and prevents scripts from running - and therefore
the Web Signer extension
■ 2: disables the command prompt only (as above)
Therefore if you want to prevent your users from running the command prompt but still
allow Web Signer to work, you should set this value to 2.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 10

Installation
This section shows you how to install the Suite MSIs package from the installation
wizard. You can choose whether to include Web Signer and eSigner or not.

To install the Suite MSIs package:

1 Copy the .exe file to a local directory such as c:\temp.
2 Double click the .exe file. A dialog displays telling you that “Gemalto Web Signer
will now be installed”.
3 Click Yes. Two things happen in parallel.
a) One is that the cleaner sequence launches. This sequence removes any
unwanted files, for example from previous installations. A command window
opens displaying information about the cleaning process as shown in “Figure
1”. The window closes when the cleaning sequence ends.

Figure 1 - Welcome window and command window

b) The other is that two windows open simultaneously. One is another command
window that tells you when the cleaner sequence has finished, and the other is
the Welcome window of the installation wizard. The following figure shows both
windows overlapping for clarity.

Figure 2 - Welcome window

4 Click Next. This displays the End User License Agreement as shown:

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 11

Figure 3 - EULA window

5 Accept the terms and click Next. Depending on your installation package, the
following window may appear. If it does not, the Setup Type window in “Figure 5”
on page 12 appears instead.

Figure 4 - GBDM window

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 12

6 If you want to connect the device via bluetooth, check the box to install the GBDM.
This includes the GBDM in the “Complete” setup (see “Figure 5”). Click Next to
display the Setup Type window.

Figure 5 - Setup Type window

7 If you want to install all the components in the installation package, click Complete.
If you want to choose which components to install, click Custom. The Custom
Setup window appears as shown:

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 13

Figure 6 - Custom Setup window

8 Most boxes are checked by default. Verify that the boxes that are selected are the
components that you want to install, and check or uncheck any that you want to
change. When you are happy with your selections, click Install. In most cases, an
“installing” window appears with a progress bar, and when finished the
InstallShield Wizard Completed window appears as shown in “Figure 9” on
page 15.
It is possible that during the installation, the wizard will find that one or more
applications use files that need to be updated. If this happens, you will see a
window that looks like the one in the following example:

Figure 7 - Files update message

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 14

If this happens, Thales recommends choosing the Automatically close and

attempt to restart applications option. Click OK.
9 If you have Firefox installed, depending on your installation package, you may see
the window in “Figure 8” and Firefox may open. (The window may look a little
different depending on your package).

Figure 8 - Firefox advice window

10 In Firefox click Add to Firefox and Add as indicated in the wizard window. You
may also see a dialog asking if you want to allow the extension in private windows.
11 In the wizard, click Next. This takes you to the Wizard Completed window.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 15

Figure 9 - Wizard Completed window

12 If you installed Classic Client, a message appears telling you that you will need to
reboot your machine, for the installation to be effective.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 16

Silent installation
An alternative way of installing the Suite MSIs is to perform a “silent” installation. This
can be particularly useful in corporate deployment scenarios.

Caution: Silent installation does not install GBDM. If you want to use silent installation
but need also to install GBDM, you must install GBDM separately after the Suite MSIs
installation, see “GBDM installation” on page 16.

Make sure you check “Pre-requisites” on page 9 before performing the silent
installation.

To install the Suite MSIs package:

1 Copy the .exe file to a temporary folder such as C:\Temp.
2 Open a command window as follows:
a) Click Start
b) Type run in the Search box at the bottom of the Start menu
c) Press Enter to open the Run utility.
3 Type the following line:
C:\Temp\filename.exe -y SILENT
where filename.exe is the name of the Suite MSI.exe.
4 If Firefox is installed on the computer, the installer may start Firefox and may ask
the user to add the WebSigner extension manually. If this happens, do so as
follows:
a) Click Add to Firefox.
b) Click Add.
See “Figure 8” on page 14 for an idea of what this looks like.

GBDM installation
To install GBDM separately:
1 Download the GBDM installation file to a local file such as c:\temp from the Thales
support web site at:
https://supportportal.thalesgroup.com/
csm?id=kb_article_view&sys_kb_id=b9ddcb604fd2afc8873b69d18110c7f3&syspa
rm_article=KB0018309
2 In the command window type: msiexec /i c:\Temp\
Gemalto_Bluetooth_Device_Manager_Win10_With_Native_BLE_4.0.3.6.msi /qn

Note: The .msi filename may have a slightly different name, for example if the version
of the GBDM has changed, but the URL in step 1 should still be correct.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 17

Uninstallation
This section shows you how to uninstall Web Signer, eSigner and the other
components that you installed with them. There is no “custom” uninstallation option,
you must uninstall the whole MSI suite. You can either uninstall using the .exe file if you
know where it is, or using the standard Windows Add/Remove Programs feature as
described in “To uninstall the MSI suite using Windows 8.1 and later:” on page 18.

To uninstall the MSI suite using the .exe:

1 Double click the .exe file. A dialog displays telling you that “Gemalto Web Signer
will now be installed”.
2 Click Yes. Two things happen in parallel.
a) One is that the uninstallation, or “cleaner sequence” launches. This sequence
removes any unwanted files, for example from previous installations. A
command window opens displaying information about the cleaning process.
The window closes when the cleaning sequence ends.
b) The other is that two other windows open simultaneously. One is another
command window that tells you when the cleaner sequence has finished, and
the other is the Remove window of the installation wizard. Typically all the
windows may appear at the same time. The following figure shows all three
windows overlapping for clarity.

Figure 10 - Command, Cleaner and Remove windows

3 Click Remove. (You do not have to wait for the cleaning sequence to finish first.)
The wizard completes the installation by removing the MSI suite files and displays
the InstallShield Wizard Completed message when it has finished.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 18

Figure 11 - Uninstall Completed

To uninstall the MSI suite using Windows 8.1 and later:

1 Right-click Start and choose Apps and Features.

Note: In older versions of Windows you would open the Control Panel (Start >
Control Panel), then click Add or Remove Programs.

2 Locate “Suite MSIs for xxx”. The exact name is unique for each package - “Figure
12” on page 19 shows a Demo version.
3 Click Uninstall (the Uninstall button appears when you select “Suite MSIs for
xxx”).

Note: In older versions of Windows the button is called Remove.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 19

Figure 12 - Apps & Features Window

4 If User Account Control is activated, the warning “An unidentified program wants
access to your computer” appears. Choose Allow.
5 Again, if User Account Control is activated, a message like the one shown in
“Figure 13” may appear to tell you to close certain applications, such as Classic
Client’s Registration Tool in this particular example.

Figure 13 - Close Applications Message

Choose the Automatically close applications option and click OK.

6 A progress bar appears during the removal.
At the end of the removal, the progress bar closes, and all the components of the
Suite MSIs are removed from your computer.
7 If prompted, restart your computer.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 20

Silent Uninstallation
An alternative way of uninstalling the Suite MSIs is to perform a “silent” uninstallation.
This can be particularly useful in corporate deployment scenarios.

To uninstall the Suite MSIs package:

1 Open a command window as follows:
a) Click Start
b) Type run in the Search box at the bottom of the Start menu
c) Press Enter to open the Run utility.
2 Type the following line:
“C:\Program Files (x86)\InstallShield Installation Information{783F36BC-63CA-
4E74-ABA6-81C222D2C3DD}\WebSigner_SuiteMSI_Demo.exe" -passive -
remove -runfromtemp
where:
783F36BC-63CA-4E74-ABA6-81C222D2C3DD is the registry key for Web Signer.
Demo is the shortname for your company.
This uninstalls all the MSI components in the Suite MSIs package.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 A
Troubleshooting

This appendix contains information in these topics:

■ “MSIs missing on PC after installation” on page 21

■ “Web Signer already present” on page 24

MSIs missing on PC after installation

Description
The Suite MSIs package appears to install successfully, that is, there are no error
messages. However, one or more MSIs are not present on the PC.
Solution
If the problem is caused by your PC’s anti-virus software blocking the installation, try
temporarily disabling the software, install the Suite MSIs package, then re-enable the
anti-virus software.

To disable the anti-virus software in Windows 10:

1 Click the Search icon in the Windows task bar, and search for “Windows security”.
and click the appropriate search result.
2 In the Security at a glance window, click App & Browser Control in the column
on the left.

Note: If this does not appear in Windows Security, then your company’s security
policy probably does not allow it. In this case contact your System Administrator.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 22

Figure 14 - App and Browser Control

3 In the App & Browser Control window, click Reputation-based protection

settings as shown:

Figure 15 - App & Browser Control window

4 In the Reputation-based protection window, find Check apps and files and set it
to Off.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 23

Figure 16 - Reputation-based protection window

5 If the User Account Control window appears, asking if you want to allow changes
to your device, click Yes.

Figure 17 - User Account Control window

You can now install the Suite MSIs package. To re-enable the anti-virus software,
follow the same procedure as above but in the Reputation-based protection window,
find Check apps and files and set it to On.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.
 24

Web Signer already present

Description
When trying to install the Suite MSIs package, a message appears saying that Web
Signer is already present.
Solution
Normally the Suite MSIs installation wizard begins by uninstalling any previous
versions of Web Signer and the other components. If this error message appears, then
uninstall the Suite MSIs using the Add or Remove Programs feature as described in
“To uninstall the MSI suite using Windows 8.1 and later:” on page 18.

Web Signer and eSigner for Windows Installation Guide

D1576951B October 5, 2022 Copyright © 2008-2022 THALES. All rights reserved.