Thales IDPrime 940B, ID-000 Format (2FF)

The Gemalto IDPrime 940 B CC is a Javacard with a PKI applet for internal CA for enterprise usage as well as for certification service providers as QSCD (qualified signature creation device) for legal binding digital signature and seal.

73 KB flash memory available, 20 key container, 500KB Chip.
Java Card 3.0.4
Global Platform 2.2.1
Onboard PIN Policy, support for Multi PIN,
 

certification of the chip: CC EAL6+
certification of the java plattform: CC EAL 5+ / PP Java Card
certification of the applet+java plattform: CC EAL5+/PP QSCD (eSignature, eSeal, qualified by french ANSSI)
supported algorithms:

RSA: up to 4096
up to SHA 512
ECDSA, ECDH P-256 (ECDSA, ECDH P-384, P521 possible mit custom configuration)
3DES, AES

For the IDPrime 940 a minidriver is loaded via Windows Update on to the computer for immediat use with the Microsoft Base Smart Card Cryptographic Service Provider (MS Base SC CSP).
The Gemalto .IDPrime is best supported Microsoft infrastructures because of the Microsoft Base Smard Card CSP, Alternatively the Safenet Authenticatoin client with current full Middleware-Suite from Gemalto can be used.
The necessary MiniDriver for the MS Base SC CSP, which holds the minimum card specific informations, is already on the system, or loaded via Windows Update on first usage of the chipcard.

The IDPrime card is supported by Card Management Solutions like vSEC:CMS from Versasec and others supporting Minidriver cards. For large enterprises we suggest the Intercede MyID Card and Credential Management System. CRYPTAS is offering all these solutions!
PIN-administration in Vista, W7, W8, W10 it is done like a password change. An unblock of the pin can be done via challenge response according to Microsoft Specification. The response can be calculated with some free tools tool or the management solutions named above.

Don't use the unpersonlized .IDPrime cards - like .NET cards - (with default keys for unblock) in a productive environment !!