A.0 Silent Method Installation on Workstations

You can silently run the Novell® Enhanced Smart Card Method (NESCM) install by passing in parameters from the command line.

Before silently installing the NESCM from a command line, you should become familiar with the graphical install and its options.

Table A-1 lists the parameters that can be passed to the method install ( setup.exe). The method install is in the \nmasmethods\novell\enhancedsmartcard\client directory. Parameters passed to setup.exe after the /s /v flags are wrapped in quotes with the /qn flag first. For example:

setup.exe /s /v"/qn BOOL_PASSWORD_FIELD_DESC=0 DISCONNECT=1 REBOOT=0 SMARTCARD_INTERFACE=1"

This example uses the standard password field descriptor, turns disconnected support on, suppresses the reboot, and specifies PC/SC as the smart card interface.

NOTE:You cannot use spaces in the PASSWORD_FIELD_DESC parameter on the command line. If spaces are required in the password field descriptor, you need to set the following registry setting manually:

HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login\Tab Settings\Credentials\PasswordFieldDescription

Table A-1 Parameters for the Novell Enhanced Smart Card Method Installer

Parameter

Required

Description

Value

ALLUSERS

Yes

Determines who can install and uninstall this program.

NULL for current user only. 1 for Administrators. 2 for Administrators if rights exist; otherwise, for current user.

BOOL_PASSWORD_FIELD_DESC

Yes

Set to 1 for a custom password field descriptor. If set to true, then PASSWORD_FIELD_DESC must be set to a string.

1 or 0

DISCONNECT

Yes

Set to 1 for disconnected support; otherwise, set to 0.

1 or 0

PASSWORD_FIELD_DESC

No

Set to a string for a custom password field descriptor. BOOL_PASSWORD_FIELD_DESC must be set to 1 for the custom string to take effect. The password field descriptor should be less than 15 characters.

String

PKCS11LIBRARY

No

If SMARTCARD_INTERFACE is set to 2, this value must be specified.

PKCS#11 DLL name

REBOOT

Yes

Set to 1 for reboot or 0 to suppress reboot.

1 or 0

SMARTCARD_INTERFACE

Yes

For PC/SC support, set to 1 and for PKCS#11 support, set to 2.

1 or 2

ID_PLUGIN_SUPPORT

Yes

Set to 1 for no support or set to 2 for support.

1 or 2

ID_PLUGIN_LDAP_SEARCH_BASE

No

LDAP search base DN, specified if ID_PLUGIN_SUPPORT=2

Example: ou=users,o=novell

ID_PLUGIN_LDAP_SEARCH_TIMEOUT

No

LDAP search timeout integer specified if ID_PLUGIN_SUPPORT=2

Example: 10

ID_PLUGIN_LDAP_SERVERS

No

Space-separated list of LDAP servers, specified if ID_PLUGIN_SUPPORT=2

Example: “123.45.123.45:389 123.45.123.46:389”