7.4 Card

The Card method enables you to authenticate using the contactless smart card (with the card serial number). When you try to authenticate on any device, the recorded serial number of the card is compared with the actual serial number. If the card serial numbers are identical, you are authenticated successfully.

NOTE:You must install the Advanced Authentication Device Service for the Card authentication.

To authenticate by using the Card method, perform the following steps:

  1. Ensure that the card reader is connected to your machine.

  2. Tap your card on the reader or insert a smart card to the reader.

    If the Card Serial Number in the card matches with enrolled card, the card authentication is successful.

IMPORTANT:The Card method supports the 1:N feature that indicates that Advanced Authentication automatically detects the user name. You can authenticate by pressing CTRL+ALT+DEL and then placing a card to the reader.

The following table describes the possible error messages along with the workaround for the Card authentication.

Table 7-1 Card authenticator - error messages

Error

Possible Cause and Workaround

Wrong card

The card you have placed on the reader is incorrect. Try again with another card or re-enroll the authenticator in the Self-Service portal or contact your helpdesk administrator.

Connect reader

The reader is not connected properly.

Try to connect it to a different USB slot and authenticate again.

<Your user name> has no authenticator for Card

You have not enrolled the card method.

You must enroll the authenticator in the Self-Service portal or contact your helpdesk administrator.

7.4.1 Observations of the 1:N Behavior on Mac

The behavior of 1:N login depends on the window that is displayed when a card is placed to the card reader:

When the Username and password login window is set:

  • Case 1: The Other user window is displayed (username of the user is not submitted). User is logged in through 1:N when the card is placed to a card reader.

  • Case 2: The list of chains is displayed (username of the user is submitted). User is logged in through 1:N when the card is placed to a card reader.

  • Case 3: Chain is selected (example, Password only). Enter password window is displayed. User is not logged in through the 1:N when the card is placed to a card reader.

When the List of users login window is set.

  • 1:N login is performed when the login window with the list of users is displayed (authentication window is not displayed) or after selecting the Other user.

  • 1-N login is not performed after selecting a user from the list when the list of chain for the user is displayed. When you select any user from the list:

    • Case 1: The list of chains is displayed: User is not logged in through 1:N, when placing the card to the card reader.

    • Case 2: Select a chain: User is not logged in through 1:N, when placing the card to the card reader.

  • When you select Other user item on login window: The behavior is the same as in the case of Username and password.

NOTE:

  • 1:N does not work in FUS. After selecting a user from the list in FUS, 1:N login cannot be performed.

  • For the screens that are in the sleep or screensaver mode, the authentication window must be opened to perform 1:N login.