Support, help and instructions for abylon BASIC

Unfortunately, it is very difficult to reproduce such an error in the laboratory. Here are a few attempts at explanation:

Why does it work with the old version and not with the new one?

It is possible that the error occurred later. We are checking the file and directory data more intensively to avoid possible data loss.

What else could be the reason?

1. Directories too long - file+directory must NOT exceed 255 characters.
2. Missing write access to individual folders or files - e.g. B. because they are in use (opened) or simply lack user rights (NTFS).
3. The hard disk has a logical or physical defect. For logical defects, please open a command window (cmd.exe) with admin rights and enter CHKDSK C: /F /R (optionally use a different drive letter). A restart may be necessary.
4. There may be hardware errors on the hard disk - please check with DiskInfo (can be downloaded from the Internet).
5. Illegal file or directory names/entries. Under Windows, files/directories may be created that, for example, use characters that are not permitted in the file name. We also check this in abylon BASIC.

Cause of the manager problem:

The reason for this is that Windows 10 starts the tray icon by itself. This results in a double start of the manager tray icon, as shown in the following picture.

(c) Self made screenshot of Win 10 settings -> Autostart

Aid for double start

To prevent the double start of the manager tray, the "Autostart page" must be opened in the settings. This can be reached via Settings -> Apps -> Autostart. There the program APMPMgrX64.exe, APMBMgrX64.exe or APMRMgrX64.exe is displayed twice. Here one of the programs must now be switched off via the slider. Now the abylon MANAGER should run smoothly again. Restart the computer once to test.

The key containers are managed by the system, on which our software has no influence. According to the error message, this can be a rights problem or a defect. A third-party software could also lock the key container.

You should check in the event display whether corresponding messages are available. It might also be useful to check the rights. As a further step, you can log on to the computer with admin rights and execute the action here once.

NOTE Unfortunately we cannot offer you a clear solution to this problem. An Internet search for the corresponding error number might also be helpful.

The files are not corrupt and can be decrypted after uninstalling the faulty update from Microsoft "Updaterollup 1 for Windows 2000 SP4". For Windows XP and Vista, a comparable update should be responsible for the error.

When saving files, the operating system often uses a temporary cache without writing directly to the storage medium. This has the advantage of increasing performance, which means that the data can be accessed more quickly. However, a disadvantage can occur when using external storage media (e.g. USB sticks) if these are pulled without logging off. If not all the data from the buffer is written to the storage medium, this can lead to data loss or incorrect files. Such corrupt files show the error message "The decryption failed! ASN1 Invalid flag value". In this case, the file was not stored correctly or completely on the external storage medium and is defective.

TIPP When removing an external storage medium (e.g. USB stick), this should ALWAYS be removed after the correct logout. This causes the operating system to write all buffered data to the storage medium.

Encryption uses the public key (PKSC#7) of a certificate. To decrypt a certificate, you need the corresponding private key (PKCS#12). Make sure that the certificate is identical for encryption and decryption and meets the following minimum requirements.

If your decryption fails, the following causes may be the reason:

1. You are using a pure signature certificate!
   Certificates can be created for various purposes, such as signature, encryption, Windows login or SSL. The purpose is defined in the certificate under "Details -> Key usage". For example, pure signature certificates can only be used for a digital signature so that no decryption operations are possible. Please contact the certificate issuer and request a certificate that also supports encryption.
2. The selected encryption algorithm (Encryption (RSA-OID)) is not supported.
   For decryption, the Crypto Service Provider (CSP) and the certificate (e.g. on the smart card) must support the selected encryption algorithm. This algorithm can be defined in the settings under Key management and should be tested thoroughly. Encryption with TrippleDES (OID_RSA_DES_EDE3_CBC: 1.2.840.113549.3.7) is the most widely used. (NOTE From version 5.30.XX.6 a switch for testing compatibility is offered!)
3. You have changed your certificate in the meantime or try to decrypt the file on another computer (with different certificate).
   In this case you will have to install and activate your original certificate again.
4. You are trying to unpack an SME file and the decryption fails.
   In this case, you do not have the corresponding private key (PKCS#12). Normally SME file (secure message envelope) is used for transmission over insecure lines. The creator selects the recipient's public keys and encrypts the file(s). Only persons with the appropriate private key (PKCS#12) can unpack the SME file. NOTE When creating SME files, the unencrypted original files are not deleted.
5. You have changed your login password in the meantime.
   In very rare cases (so far only with Windows XP) there are problems with software certificates, so that you can no longer access your private key (PKCS#12). This means that you are no longer able to decrypt your encrypted files. You should delete the defective certificate and reinstall your original certificate on your computer.
6. You have a Web.de certificate
   In rare cases, Web.de generates certificates that encrypt but can no longer decrypt. Normally such certificates are tested and sorted out (only not at Web.de). For this reason you should always test the encryption and decryption with unimportant data at the beginning. If the decryption should fail, get a new certificate or generate a certificate with abylon SELFCERT.

For apmSelf (WinCrypt) and the abylon protection manager (apm) up to and including version 4.00 (module 'apm - create self-signed certificates') the term of self-signed certificates was limited to one year (360 days). However, the certificate can be used beyond the period of time - it is now not the case that it no longer functions from this day. The user only gets a warning that it has expired - nothing else.

HINWEIS Starting with version 4.50 the runtime of self-signed certificates can be defined in the module abylon SELFCERT itself. Now the maximum runtime is 9999 days (approx. 27 years).

The abylonsoft modules work together with the Simple-MAPI (MAPI = Mail Applications Program Interface) as interface between the application and the email program. Under certain circumstances an error may occur when sending a file (e.g. *.SME) directly with your email program. There are three reasons for this error:

1. You do not have a MAPI-enabled email program
2. Your email program is not registered as default email program!
3. Your MAPI (mapi32.dll) was corrupted by installing a browser or replaced by an older version

MAPI-enabled email programs: Netscape, Outlook, Outlook Express, Thunderbird, AOL (from version 7.0), Eudora, Pegasus Mail, Lotus Notes (from version 4.5 ???) and others!

Necessary settings:

• Outlook or Outlook Express:
  In Internet Explorer, under Tools, select Internet Options (or Properties) and select the Programs tab. There you have to select your desired email program under Email and confirm with the button OK. Alternatively you can also do this in the Control Panel under Internet Options.
• Netscape:
  Under Edit, select Settings from the menu. Under the item Mail & Discussion forums or Mail & Newsgroups activate the item Use Netscape Messenger for MAPI-based applications or Use Netscape Messanger for MAPI-based applications. 
  The names and the location of the settings can vary from version to version! (use help)
• AOL:
  AOL supports Simple-MAPI from version 7.0 on. To activate it select the button keyword and enter in the field default settings. Then select America Online under Shortcuts for Web, E-Mail and Newsgroups.
• Eudora:
  For Eudora, you must set up the default MAPI client by selecting Extras->Options->MAPI and then Use Eudora as MAPI server by selecting Always. Then you have to select Eudora as default mail program in Internet Explorer (see Outlook above)
  . The names and the location of the settings can vary from version to version! (Use help)
• Notes:
  Lotus Notes seems to be a difficult business. So far we haven't found any clear information about it. Also the information about the MAPI support of the different versions is very vague. First, however, you should check in Internet Explorer (as with Outlook) whether Notes is set as the default e-mail program there (Extras->Internet Options->Programs->Email). If this does not help, the Notes MAPI Service Provider must be installed. In the help you will find the exact instructions. 
  In a Lotus Notes forum I read that the easiest way to set up the MAPI interface is: 1.Uninstall Notes 2. Install Microsoft Outlook or Microsoft Office 3. Install Notes! ;-))

Repair the damaged or old MAPI32.dll:
A note from Microsoft describes that running the fixmapi.exe file in the Windows system folder (for example, c:\Windows\System32\) can resolve the problems. If necessary search this file in Explorer. Unfortunately we do not have any experience in how far this works and in which Windows versions this file is available.

There are different security levels for certificate access (Low / Medium / High)!

• You have currently set "Low" and the files can be decrypted by you in the logged in state. Others who log on to your computer cannot decrypt your files.
• When you go to "Medium", only the following changes: The system notifies you that the private key has been accessed and you must confirm this in each case. However, this is not absolute security!
• Best security you get with the setting "High", where you can define a password. This is valid for all applications based on this certificate (so also for the software of abylonsoft). 

You can only set the corresponding security level at IMPORT of your certificate. We therefore recommend that you make a backup copy of your certificate (PFX - File) and delete it from your system database (abylon CERTMANAGER). Then reinstall the PFX file and select the security level "HOCH" in the import wizard - now you can assign a password after the installation.

This is because executable files (*.exe, *.com, *.bat) always contain a security risk. It is not easy to check whether the program has been infected with a virus or Trojan. In addition, this type could only be solved with a symmetrical encryption method. That would be another security risk. You would first have to send the recipient the key for this file.

The primary advantage of asymmetric encryption is that no individual key (password) has to be transmitted to the recipient through the use of certificates.

For comparison: You want to move an important document from point A to point B. So put the message in a vault and let a messenger take it to point B. The person at point B needs your key to open the vault. So you would have to send the key to point B first. The variant with only one key for locking and unlocking (or encrypting and decrypting) is called symmetric encryption. At asymmetric encryption, which is used by the software of abylonsoft (up to version 5.2), the safe is equipped with a slot (like a mailbox). You simply throw the message through the slot and send the safe to person B. Only person B has the key for the safe and can open it with it. So here two different keys are used. One to encrypt and one to decrypt.

NOTE From version 5.3 the software of abylonsoft also supports symmetric encryption, like Blowfish or AES.

Definitely No! Encryption does not prevent destruction or manipulation by viruses or the like. You should therefore always back up your encrypted files to an external medium (e.g. CD, floppy disk, tape drive, MO, etc.). Thanks to encryption, your data on the storage medium is protected from prying eyes.

In addition, you should always use a current Virus_Scanner to exclude a virus attack.

Yes! the software of abylonsoft is backward compatible, i.e. it reads without problems the old WinCrypt or abylon protection manager (apm) files, provided that also the correct certificate is set. Unfortunately we had to change the technical procedure when creating a SME, so that SME files created with the new software are not backwards compatible to WinCrypt. However, the new software is able to read SME files created by WinCrypt and offers automatic conversion.

Workaround via flag in the registry

Open the Windows registry (for instructions, see the glossar) and change under X the value REG_SZ Y from YES to NO!

This change launches the .NET framework via an alternate call.

In this case we can offer the following workarounds.

1. Check plugins

Open the settings dialog and switch to the "Explorer Plugins Settings" page. Check here whether the corresponding PlugIn is activated (check mark).

2. Disable / activate modules

Open the settings dialog and switch to the "Explorer Plugins" page. First deactivate the plugins via the traffic light icon. Then you can activate the plugins again.

3. Registration of the Plugin-DLL

Start the command line entry with administration rights (Start -> Run -> cmd.exe). Then change to the abylon program directory (with cd). Enter here the command "regsvr32 [Plugin-Dll].
". As a plugin dll, enter the following files:

- abylon BASIC: 32bit = APMBOle.DLL, 64bit = APMBOleX64.DLL
- abylon READER: 32bit = APMROle.DLL, 64bit = APMROleX64.DLL
- abylon ENTERPRISE: 32bit = APMPOle.DLL, 64bit = APMPOleX64.DLL
- abylon SHREDDER: 32bit = SAWOle.DLL, 64bit = SAWOleX64.DLL

4. Check if all registry entries are present

Open the registry editor (Start -> Run -> regedit.exe) and check if the following 10 entries exist. The menu is only displayed in the File Explorer if all values are present and there are no errors.

1. HKEY_CLASSES_ROOT\*\ShellEx\ContextMenuHandlers\apmcrypt -> REG_SZ: ID see below
2. HKEY_CLASSES_ROOT\CLSID\{ID see below} -> REG_SZ: apmcrypt
3rd HKEY_CLASSES_ROOT\Directory\background\shellex\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}
4. HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}
5. HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}
6th HKEY_LOCAL_MACHINE\Software\Classes\*\ShellEx\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}
7. HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ID see below} -> REG_SZ: apmcrypt
8. HKEY_LOCAL_MACHINE\Software\Classes\Directroy\background\shellex\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}
9. HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}
10th HKEY_LOCAL_MACHINE\Software\Classes\Ddrive\shellex\ContextMenuHandlers\apmcrypt -> REG_SZ: {ID see below}

The following IDs must be used for the individual programs:
- abylon READER = {5fbcd2e0-73dd-11ce-993c-43aa004adb6c}
- abylon BASIC = {5fbcd2e0-73dd-11ce-993c-42aa004adb6c}
- abylon ENTERPRISE = {5fbcd2e0-73dd-11ce-993c-41aa004adb6c}
- abylon SHREDDER = {5fbcd2e0-73dd-11ce-993c-00aa004adb6c}

For this purpose, a mouse click event was inserted programmatically from version 19.10.1 and 2020.1 on. If there are problems with this, it can be switched on or off via the registry. To do this, under HKEY_LOCAL_MACHINE\SOFTWARE\abylon\[PROGRAM NAME, e.g. ENTERPRISE]\FLAGS set the value FWACTIVATEWINDOW from YES to NO.

After the password entry the software displays the message "The entered password is wrong or the key file (certificate) does not belong to this object!". What is the reason for this?

Please check first whether the password was really entered correctly or the keyboard layout has changed.

Another possibility is that the password scrambler converts certain special characters into other characters. For this reason it is necessary in such cases to activate or deactivate the password scrambler according to the creation of the encrypted element. I.e., if the password scrambler was activated during encryption, it must also be activated during decryption.

The password scrambler must be deactivated in any case if a password or the SecureID are entered into the password field via Copy&Paste. Otherwise, the program will not recognize a keyboard entry and the password field will remain empty.

The SecureID is a so-called emergency password. If the chip card or USB stick is defective or lost, this can be entered as an alternative for decryption.
The SecureID is determined during the encryption process on the page 'Key management >SYMM-System'.
The SecureID is identical for each encrypted object (abylon KEYSAFE, abylon CRYPTDRIVE, abylon BASIC, abylon SHAREDDRIVE) and is built as follows:

# + 32 characters + . + 32 characters + # 
(characters only numbers 0-9 or letters A-F; e.g. #A54E1CB23F31464AC3B7D65F4557C1D1D. 50F4B4A9EC30705944EB12870284C419#

NOTE
- Starting with version 8.3, both upper and lower case letters can be entered. In older versions the input is Case-Sensitive.
- The password scrambler should be deactivated for input!
- The SecureID should be stored in a secure place!
- The SecureIDs are different for encryption and Windows logon.

A "brute force attack" means trying out all possible character combinations of passwords. For example, the process starts with 00000001 and then continues with 00000002, 00000003, 00000004.... A password that has only 4 digits and consists only of numbers can easily be "cracked" within a few seconds. A good password should consist of at least 12 characters with lower case letters, upper case letters, numbers and special characters. In addition, no words from dictionaries, names or relevant password databases should be used. If you follow these rules, you can be sure that it will not be possible to decrypt the protected data economically in the foreseeable future.

Unfortunately / fortunately it is not possible to open protected data without the corresponding password. I.e., the software of abylonsoft offers neither a back door nor a so-called "general key". If you have lost your password, you can no longer access your stored data. 

You should remember the used passwords well and possibly write them down in a secret place. However, this should not be on the hard disk or near the computer. Alternatively, so-called password managers (such as abylon KEYSAFE) offer the possibility to store the different passwords in a secure database. In this case you only have to remember a password

An insecure password is always a date of birth, a nickname, a name in principle or any other word that is frequently used or that is in the dictionary.

A secure password is a password consisting of several random characters, e.g. myz<_/k)),%06YLbcw3pU. It consists of special characters ( ! "§$%&/()==?´*?+#´\ß^.;:_@<>|{[]}), numbers (1234567890), uppercase letters (QWERTZUIOPÜÄÖLKJHGFDSAYXCVBNM) and lowercase letters (qwertzuiopüäölkjhgfdsayxcvbnm).

If you cannot remember such a password, you can use a trick. Although the password is not as secure as the previous one, it is still much more secure than "Otto" or "Müller". And this is how it works. Think of a long sentence that you can easily remember, such as : I live in the model city 134b. My phone number is 123456789.  Now simply take the first letters / characters from this sentence. In this case that would be? IwidM1.Mti1.?. However, you should make sure that at least some numbers and special characters are present in the sentence. In addition you must pay attention to upper and lower case.

To create a really secure password, you should use the integrated password generator. You can find it for example in abylon KEYSAFE.

Usually, with abylonsoft software, the new version can be installed over the old version. This is also the case if the setup asks in advance and offers the uninstall option. If an over-installation for any reason is not possible, so you will be pointed out during installation. In this case no other option is offered.

Yes, because during the installation the software has to make some settings for which only the administrator has rights. So log in for the installation as an administrator or contact your responsible administrator.

Possible cause of error:

1. You have entered the registration data incorrectly! The safest way is to copy and paste the name and the registration key from the email directly into the registration dialog of our software.
2. Each license key is created individually for each program and each version. Check whether your registration data are also intended for the version you have installed!

Updates in the same major version number are free. Updates to the next major version number are subject to an update fee. If you have any questions or problems with us you are welcome to contact us in Kontakt.

This is because when a new user is created, Windows first creates the registry and makes entries. Since our software also has to make registry entries, an operating system restart is required for proper operation.

If this error occurs, you should manually download and install the setup from the download page. All settings of the previous version will be adopted.

This error is caused by the rights management under Windows

• If you open a file, the error message The path is not available is displayed.
• If you open a folder, the error message Unhandled exception in the application - The root folder cannot be retrieved is displayed.