2.2 Installing the Method

Installation consists of installing the method on the eDirectory server and on the client workstations.

2.2.1 eDirectory Server - Method Installation

The method is installed using iManager.

  1. Log in to iManager as an Administrator.

  2. From Roles and Tasks, select NMAS > NMAS Login Methods, then select New.

    Figure 2-1 New Login Method

  3. Click Browse and select the EnhancedSmartCard.zip file that comes with the method.

    This zip file contains the server components and the iManager components.

    Figure 2-2 Specify Method File

  4. Read and accept the license agreement.

    Figure 2-3 License Agreement

  5. Review the method information and modify the values as needed.

    If you don’t change the name, the default name (Enhanced Smart Card) is used for the method and login sequence name.

    Figure 2-4 Review Screen

  6. Click Finish.

  7. Review the installation summary page, then click Close.

    Figure 2-5 Summary Screen

  8. Restart iManager to ensure that the plug‑in is enabled.

2.2.2 Client Workstation Installation

The method must be installed on each workstation.

  1. Log in to each workstation as an Administrator.

  2. Run Setup.exe.

    This installation program is located in the ...\enhancedsmartcard\client directory.

  3. Review the Welcome Screen, then click Next.

    Figure 2-6 Welcome Screen

  4. Accept the License Agreement, then click Next.

    Figure 2-7 License Agreement

  5. Choose whether you need disconnected support, then click Next.

    Disconnected support allows you to log in to the workstation locally using the smart card.

    Figure 2-8 Disconnected Support Page

  6. If you want ID Plugin support, select Yes and specify the LDAP server’s DNS name or IP address, then click Next.

    Figure 2-9 ID Plugin Support Page

  7. (Conditional) If you selected ID Plugin support, you must also specify the container to search and the search timeout period, then click Next.

    The ID Plugin will do a sub-tree search starting at the specified base.

    Figure 2-10 ID Plugin Options Page

  8. To use a custom password field description, select Customize password field description and type the custom description, then click Next.

    Use an ampersand (&) in the description to enable Windows’ Alt+letter functionality. In the example below, Alt+P would place focus on the field labeled with the “PIN:” description.

    Figure 2-11 Customized Password Field Description

  9. Select the communication interface the method will use to connect to the smart card, then click Next.

    PC/SC functionality is the preferred interface. Select PKCS#11 if you know the smart card middleware does not integrate with the Windows PC/SC functionality. If you select PKCS#11, you must also specify a name of the module that is to be used.

    Figure 2-12 Smart Card Interfaces Page

  10. Click Install.

You can distribute the method to each workstation automatically using tools such as Zenworks®. See Section A.0, Silent Method Installation on Workstations for detailed information about scripting the method install.

Figure 2-13 Installation Screen