As with any system, good security requires proper configuration. This section lists recommendations to ensure that the NetIQ Enhanced Smart Card Method (NESCM) functions securely.
Section 5.1, Trusted Root Containers
Section 5.2, Certificate Validation/Revocation Checking
Section 5.3, Smart Card Enrollment eDirectory Attributes
Section 5.4, Certificate Matching
Section 5.5, Restricting Authentication Methods
Section 5.6, User Account Lookup (Identity Plug-In)
Section 5.7, Workstation Only Login (Disconnected Login)