manualshive.com logo in svg

Novell Enhanced Smart Card Method 3.0.1, Руководство по установке

Продукт Novell Enhanced Smart Card Method 3.0.1 - это инновационное решение для безопасной аутентификации. Установочное руководство и другие руководства можно скачать бесплатно с manualshive.com. Обеспечьте защиту данных и повысьте безопасность с помощью этого продукта.

Поделиться
Скачать
background image

20

Novell Enhanced Smart Card Method Installation Guide

no

vd

ocx 

(e

n)

  

6 Ap
ril 20

07

Содержание Enhanced Smart Card Method 3.0.1

Страница 1: ...Novell w w w n o v e l l c o m novdocx en 6 April 2007 Novell Enhanced Smart Card Method Installation Guide Enhanced Smart Card Method 3 0 1 J u l y 1 7 2 0 0 7 I N S T A LL A T IO N G U I D E...

Страница 2: ...rt or re export to entities on the current U S export exclusion lists or to any embargoed or terrorist countries as specified in the U S export laws You agree to not use deliverables for prohibited nu...

Страница 3: ...Trademarks For Novell trademarks see the Novell Trademark and Service Mark list http www novell com company legal trademarks tmlist html Third Party Materials All third party trademarks are the prope...

Страница 4: ...novdocx en 6 April 2007...

Страница 5: ...Novell Client Passive Mode Login 22 4 Configuring the Server 25 4 1 Trusted Root Certificate Containers 25 4 2 Certificate Revocation Checking 25 4 2 1 OCSP Trusted Root Containers 26 4 2 2 CRL Trust...

Страница 6: ...onfiguration Issues 38 6 3 1 Method Activation 38 6 3 2 Certificate Validation Issues 39 7 Security Administrator s Guide 41 7 1 Trusted Root Containers 41 7 2 Certificate Validation Revocation Checki...

Страница 7: ...d items in a cross reference path A trademark symbol TM etc denotes a Novell trademark An asterisk denotes a third party trademark When a single pathname can be written with a backslash for some platf...

Страница 8: ...8 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 9: ...login certificate the server module generates a random challenge and sends it to the client module to confirm that the user possesses the private key associated with the certificate The client module...

Страница 10: ...10 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 11: ...y 8 8 SP1 on one of the following platforms NetWare 6 5 SP6 or later Windows 2003 Server SP1 or later Linux SUSE Linux Enterprise Server SLES 10 32 bit or 64 bit Red Hat AS 4 0 Server 32 bit or 64 bit...

Страница 12: ...AFE SDK GPK16000 CryptoVision CardOS M4 01a Aladdin eToken PRO 64K Oberthur CosmopolIC 64K V5 2 Fast ATR PIV Web Based Administration Using iManager iManager version 2 6 SP2 with the NMAS plugin versi...

Страница 13: ...Roles and Tasks select NMAS NMAS Login Methods then select New Figure 2 1 New Login Method 3 Click Browse and select the EnhancedSmartCard zip file that comes with the method This zip file contains t...

Страница 14: ...ead and accept the license agreement Figure 2 3 License Agreement 5 Review the method information and modify the values as needed If you don t change the name the default name Enhanced Smart Card is u...

Страница 15: ...Restart iManager to ensure that the plug in is enabled 2 2 2 Client Workstation Installation The method must be installed on each workstation 1 Log in to each workstation as an Administrator 2 Run Se...

Страница 16: ...l 2007 4 Accept the License Agreement then click Next Figure 2 7 License Agreement 5 Choose whether you need disconnected support then click Next Disconnected support allows you to log in to the works...

Страница 17: ...lugin Support Page 7 Conditional If you selected ID Plugin support you must also specify the container to search and the search timeout period then click Next The ID Plugin will do a sub tree search s...

Страница 18: ...connect to the smart card then click Next PC SC functionality is the preferred interface Select PKCS 11 if you know the smart card middleware does not integrate with the Windows PC SC functionality If...

Страница 19: ...Novell Enhanced Smart Card Method Installation 19 novdocx en 6 April 2007 Figure 2 13 Installation Screen...

Страница 20: ...20 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 21: ...To perform a disconnected login select the Novell ClientTM Workstation only check box then enter the local account name and smart card PIN The previously stored local account information will be decr...

Страница 22: ...tion credentials in eDirectory and using them for future logins When using Single Sign On Novell Client prompts for the workstation password the first time and stores it in eDirectory On subsequent lo...

Страница 23: ...oginRequired 0 1 default is 0 0 don t require Novell login 1 require Novell login The following is additional information regarding the Novell Clients Passive Mode and the method If PassiveModeNDSLogi...

Страница 24: ...24 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 25: ...wer levels in the directory hierarchy override higher level configurations Section 4 1 Trusted Root Certificate Containers on page 25 Section 4 2 Certificate Revocation Checking on page 25 Section 4 3...

Страница 26: ...days after a CRL has expired to continue to treat it as valid This allows revocation checking to continue if a new CRL cannot be retrieved from the CRL Distribution Point If a Grace Period is not spec...

Страница 27: ...obal Container User Card removal behavior defines the action taken when a user removes the smart card from the card reader There are three options No Action Nothing happens when the smart card is remo...

Страница 28: ...28 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 29: ...ial period a valid license key must be entered to activate the method A license key can be obtained from your Novell sales representative To enter a license key click Smart Card Login Global Setting C...

Страница 30: ...Create Trusted Root 2b Provide a name select the trusted root container created in Step 1 then select the certificate to import 2c Click OK Figure 5 3 Create Trusted Root Certificate Page 3 Add the t...

Страница 31: ...Figure 5 5 on page 32 both OCSP and CRL revocation checking are enabled OCSP revocation checking is performed for certificates chaining to the abc_TrustedRoots container CRL checking is performed for...

Страница 32: ...mart Card Login User Settings The information required depends on the type of certificate matching used Section 5 4 1 Subject Name Matching on page 32 Section 5 4 2 Certificate Matching on page 34 Sec...

Страница 33: ...n an attached card reader or read from a certificate file DER and PEM certificate files are supported Figure 5 6 Add Subject Name Page Figure 5 7 on page 33 is an example of a User object properly con...

Страница 34: ...red for the User object This is done by selecting Add and entering the certificate The certificate can be read from a smart card in an attached card reader or read from a certificate file DER and PEM...

Страница 35: ...uld be issued to the individual and configured for a short period of time A temporary certificate is valid until the the specified expiration date When configured the user is only able to log in using...

Страница 36: ...36 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007 Figure 5 10 Temporary Certificate Subject Name Page...

Страница 37: ...er the method reports information to the NMASTM trace functionality which is integrated with eDirectoryTM s tracing To turn on tracing use the eDirectory iMonitor tool and select the NMAS option in th...

Страница 38: ...the correct vendor library DLL The library must be in the system path so it can be loaded by the method You might need to contact the middleware vendor for the specific PKCS 11 library name 6 2 2 Iden...

Страница 39: ...nfiguring Trusted Root Certificates on page 29 for information about configuring the trusted root container Certificate revocation checking is properly configured See Section 5 3 Configuring Certifica...

Страница 40: ...40 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 41: ...mart card authentication should be restricted to administrators who are enrolling smart cards for users When matching by subject names the attributes are sasAllowableSubjectNames nclTmpCertSubject ncl...

Страница 42: ...when choosing whether to use the Identity Plug in functionality 7 7 Disconnected Login The disconnected login functionality encrypts the password used to log in to the Windows local account and store...

Страница 43: ...n Serial Number Subject Name Issuer Expiration Date In order to report audit events the audit system must be installed and properly configured for eDirectoryTM The method includes an audit configurati...

Страница 44: ...44 Novell Enhanced Smart Card Method Installation Guide novdocx en 6 April 2007...

Страница 45: ...s the standard password field descriptor turns disconnected support on suppresses the reboot and specifies PC SC as the smart card interface NOTE You cannot use spaces in the PASSWORD_FIELD_DESC param...

Страница 46: ...Yes Set to 1 for reboot or 0 to suppress reboot 1 or 0 SMARTCARD_INTERFACE Yes For PC SC support set to 1 and for PKCS 11 support set to 2 1 or 2 ID_PLUGIN_SUPPORT Yes Set to 1 for no support or set...

Отзывы:

Нет отзывов

Похожие инструкции для Enhanced Smart Card Method 3.0.1

Canon EOS-1D Mark II Digial Software Manual preview
EOS-1D Mark II Digial
Бренд: Canon Страницы: 2
McDATA OPENconnectors Command Line Interface Manual preview
OPENconnectors
Бренд: McDATA Страницы: 170
Adobe CAPTIVATE 2 Use Manual preview
CAPTIVATE 2
Бренд: Adobe Страницы: 306
Adobe 38000827 - Macromedia ColdFusion MX Standard Edition Administration Manual preview
38000827 - Macromedia ColdFusion MX Standard Edition
Бренд: Adobe Страницы: 68
NeatWorks TV708LL/A - NeatWorks For Mac Using Manual preview
TV708LL/A - NeatWorks For Mac
Бренд: NeatWorks Страницы: 33
Novell LOGIN SCRIPTS Manual preview
LOGIN SCRIPTS
Бренд: Novell Страницы: 64
MACROMEDIA FLEX - DEVELOPING COMPONENTS AND THEMES Manual preview
FLEX - DEVELOPING COMPONENTS AND THEMES
Бренд: MACROMEDIA Страницы: 82
Better Edge technology 5.2.7.0 User Manual preview
5.2.7.0
Бренд: Better Edge technology Страницы: 121
Fujitsu Saving and Recovering Your Factory and System Images Manual preview
Saving and Recovering Your Factory and System Images
Бренд: Fujitsu Страницы: 16
Fujitsu Solaris 10 Hardware Platform Manual preview
Solaris 10
Бренд: Fujitsu Страницы: 52
Fujitsu Restoring Microsoft Windows® 7 Edition Manual preview
Restoring Microsoft Windows® 7 Edition
Бренд: Fujitsu Страницы: 4
Fujitsu ServerView Event Manager User Manual preview
ServerView Event Manager
Бренд: Fujitsu Страницы: 172
Fujitsu ScandAll PRO How To Use Manual preview
ScandAll PRO
Бренд: Fujitsu Страницы: 45
Fujitsu SOFTUNE User Manual preview
SOFTUNE
Бренд: Fujitsu Страницы: 234
Fujitsu ServerView Operations Manager V6.12 User Manual preview
ServerView Operations Manager V6.12
Бренд: Fujitsu Страницы: 282
Fujitsu ServerView Virtual-IO Manager V3.1 User Manual preview
ServerView Virtual-IO Manager V3.1
Бренд: Fujitsu Страницы: 362
Fujitsu ServerView Resource Orchestrator Cloud Edition V3.1.1 Operation User Manual preview
ServerView Resource Orchestrator Cloud Edition V3.1.1 Operation
Бренд: Fujitsu Страницы: 414
Fujitsu Remote Management User Manual preview
Remote Management
Бренд: Fujitsu Страницы: 426

Бренды по названию

Популярные бренды

Загрузить еще бренды