10.3 Card

The Card method enables you to authenticate using the contactless smart card (with Card Serial Number). When you try to authenticate on any device, the recorded serial number of the card is compared with the actual serial number. If the card serial numbers are identical, you are authenticated successfully.

NOTE:To use the Card method for authentication, you must install the Advanced Authentication Device Service. For more information on Device Service, see the Advanced Authentication - Device Service guide.

To authenticate with the Card method, perform the following steps:

  1. Ensure that the card reader is connected to your machine.

  2. Tap your card on the reader or insert a smart card in the reader.

    If the Card Serial Number in the card matches with enrolled card, the card authentication is successful.

IMPORTANT:The Card method supports the 1:N feature that indicates that Advanced Authentication automatically detects the user name. You can authenticate by pressing CTRL+ALT+DEL and then placing a card to the reader.

The following table describes the possible error messages along with the workaround for the Card authentication.

Table 10-1 Card authenticator - error messages

Error

Possible Cause and Workaround

Wrong card

The card placed on the reader is incorrect.

Try again with another card or re-enroll the authenticator in the Self-Service portal or contact your helpdesk administrator.

Connect reader

The reader is not connected properly.

Try to connect it to a different USB slot and try again.

<Your user name> has no authenticator for Card

You have not enrolled the card method.

You must enroll the authenticator in the Self-Service portal or contact your helpdesk administrator.

No template for Card

The card is not enrolled or you are trying to log in with the non-cached authenticator in the offline mode.

IMPORTANT:An administrator can configure an automatic session lock or log off on card events. In such a scenario, you must perform one of the following:

  • When Tap&Go is disabled, you must place your card on the reader during login. After login you can remove the card from the reader to lock the operating system or log off automatically.

  • When Tap&Go is enabled, you must tap a card on the reader to log in and to lock, unlock, or log off.