Check Point Pointsec PC, Руководство по установке

Страница: 35 / 44

Administrators Using Smart Cards
Chapter 2 Installing Pointsec PC for Administrators 29
Administrators Using Smart Cards
To create an administrator account that uses a smart card:
1. In the Add user dialog box, select the Smart card option. The Settings
area displays a list of the certificates found, for example:
Note - It is good practice to always have one administrator account that
uses fixed password authentication. This administrator account is a
“back up” that can be used in case of problems with an administrator’s
smart card, for example, physical damage, loss, theft, or malfunction.
When performing recovery, you might also need administrator accounts
that do not authenticate using USB smart cards. On certain hardware,
legacy USB devices are not fully supported during recovery when using
USB smart card authentication. An example of a legacy USB device is
the USB reader you might want to use for your recovery media.
Therefore, you might not be able to perform recovery if recovery
authentication uses USB smart cards on this hardware because the
USB device that is supposed to read the recovery file will not work.
Note - The install wizard looks for certificates locally in Personal Store
and, if accessible, on smart cards, on USB tokens, and in Microsoft
Active Directory.
Note - If a certificate is stored in more than one place, it will be listed
as many times as the install wizard finds it. When selecting a
certificate that is listed multiple times, it does not matter which of the
listed instances of that certificate you choose. Review the location
column in the list to determine if the a certificate is listed more than
once.