9.2 Card

The Card method enables you to authenticate using the contactless smart card (with the card serial number). When you try to authenticate on any device, the recorded serial number of the card is compared with the actual serial number. If the card serial numbers are identical, you are authenticated successfully.

NOTE:To use the Card method for authentication, you must install the Advanced Authentication Device Service. For more information on Device Service, see the Advanced Authentication - Device Service guide.

To authenticate using the Card method, perform the following steps:

  1. Ensure that the card reader is connected to your system.

  2. Tap your card on the reader or insert a smart card in the reader.

    If the Card Serial Number in the card matches with enrolled card, the card authentication is successful.

IMPORTANT:The Card method supports the 1:N feature that Advanced Authentication to detect the user name automatically. You can press CTRL+ALT+DEL then place a card to the reader to authenticate.

The following table describes the possible error messages along with the workarounds for the Card authentication.

Table 9-1 Card authenticator - error messages

Error

Possible Cause and Workaround

Wrong card

The card you have placed on the reader is incorrect. Try again with another card or re-enroll the authenticator in the Self-Service portal or contact your helpdesk administrator.

Connect reader

The reader is not connected properly. Try to connect it to a different USB slot and try again.

<Your user name> has no authenticator for Card

You have not enrolled the card method. You must enroll the authenticator in the Self-Service portal or contact your helpdesk administrator.

No template for Card

The card is not enrolled or you are trying to log in with the non-cached authenticator in the offline mode.

IMPORTANT:An administrator has the privilege to configure an automatic session lock or log off for the events with Card authentication method. In such a scenario, you must:

  • When Tap&Go is disabled, you must place your card on the reader during login. After login you can remove the card from the reader to lock the operating system or log off automatically.

    Or

  • When Tap&Go is enabled, you must tap a card on the reader to log in and to lock, unlock, or log off.