Novell Enhanced Smart Card Method 3.0.1, Installation Manual, Page: 38 / 46

38 Novell Enhanced Smart Card Method Installation Guide
no
vd
ocx
(e
n)
6 Ap
ril 20
07
6.2.1 Smart Card Issues
If the login fails with an error message of No Certificates Found, the method failed to read the smart
card's certificates. Check the following items:
Š
The smart card reader is installed and functional.
Š
The smart card is configured with a valid certificate and associated private key.
Š
Ensure that the smart card is not locked. Smart cards require a valid PIN to access them. Most
smart cards lock after 3 invalid PIN attempts.
Š
The proper smart card middleware is installed and operational. Most middleware includes tools
for viewing the information on the smart card.
Š
The method is properly configured to communicate with the middleware. During installation, a
smart card communication interface is selected. The recommended setting is PC/SC. If PC/SC
communication is failing, you may want to try PKCS#11. When using PKCS#11, you must
also specify the correct vendor library (DLL). The library must be in the system path so it can
be loaded by the method. You might need to contact the middleware vendor for the specific
PKCS#11 library name.
6.2.2 Identity Plug-in Issues
Because the ID-Plugin searches the directory before the actual login, it requires anonymous browse
rights enabled in eDirectory. If the directory restricts anonymous browse, the Identity Plug-in does
not work.
6.2.3 Novell Client Single Sign-On Issues
The single sign-on functionality in Novell Client
TM
4.91 SP3 does not work correctly. The problem
has been identified and the Novell Client team is releasing a fix. Download and install the fix from
the
Novell Support Web site (http://www.novell.com/support/supportcentral/
supportcentral.do?id=m1) .
6.3 Method Configuration Issues
The following issues apply to method configuration:
Š
Section 6.3.1, “Method Activation,” on page 38
Š
Section 6.3.2, “Certificate Validation Issues,” on page 39
6.3.1 Method Activation
If a valid license key is not entered using iManager, the method stops functioning after the 90-day
trial period has expired. Enter a valid license key to enable the method.