3.0 Configuring NESCM on the eDirectory Server

After installing NetIQ Enhanced Smart Card Method (NESCM), you must configure it on the eDirectory server by using the NetIQ iManager Smart Card Login plug-in. If you have not already installed the plug-in, see Section 2.2.1, Installing NESCM on eDirectory Server. Administrators use this plug-in to configure settings for the whole tree, partitions, containers, or individual users.

The NetIQ iManager Smart Card Login plug‑in has the following settings:

  • Global: The global settings are used to specify policies for the whole tree. Options configured globally apply to all user objects in the tree.

  • Container: If the container object is a partition root, the settings are effective for all user objects in the partition. If the container is not a partition root, the settings are effective only for objects in the immediate container. The settings do not affect users in subcontainers below the container.

  • User: User settings apply to the individual User object.

Each setting is described in the following sections and identified as a global, container, or user level setting. To display these settings, launch iManager and click Smart Card Login in the Roles and Tasks view. Many settings can be configured on all levels. Settings configured at lower levels in the directory hierarchy override higher-level configurations.