Advanced Authentication supports the Microsoft policy Interactive logon: Smart card removal behavior, which allows to select an action on a card event. You can configure it to perform a force log off or lock a user session when a user presents card to the reader.
To use LEGIC LM3000 or LEGIC LE-762-1N readers, you must disable the other card plug-ins to avoid conflicts. To do this, perform the following steps:
Open the configuration file depending on the platform:
Microsoft Windows: C:\ProgramData\NetIQ\Device Service\config.properties.
Linux: LEGIC readers are not supported.
Apple Mac OS X: LEGIC readers are not supported.
Change the existing parameters based on the following scheme:
card.omnikeyEnabled: false
card.rfideasEnabled: false
card.smarfidEnabled: true
card.desfireEnabled: false
card.isCardIdGenerated=true to generate a new card identifier during enrollment. The default value is false and during each enrollment, the card identifier is not changed. The feature can be used only for LEGIC readers.
card.smarfidManualMode=true Without the card.smarfidManualMode in the config file or when card.smarfidManualMode=false, the reader’s LED is blue (read mode) by default and it always starts to blink when you put a card on it. When card.smarfidManualMode=true the reader’s LED is green (ready mode) by default and does not blink when you put a card on the reader. It will blink only if you are on Logon/Unlock screen and Windows Client requests to put a card. 1:N has to be disabled to disable auto-waiting for a card for Logon/Unlock screen. For more information on disabling 1;N, refer to Disabling 1:N. Also Interactive logon: Smart card removal behavior policy must be disabled to disable auto-waiting for a card when a user is logged in. For more information on disabling Smart card removal behavior policy, refer to the link. You can use the feature only for LEGIC readers
Save the changes.
Restart the workstation.