Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
Installation of Indeed CM Middleware
The Indeed CM Middleware components are installed at Indeed Certificate Manager operator workstations and user workstations. The Middleware components to install are selected depending on the smart card type used in the company. For example, you have to install the IndeedCM.Gemalto.Middleware component to work with Thales (Gemalto) smart cards. Similarly, for Feitian smart cards you need IndeedCM.ePass.Middleware.
Run the IndeedCM.Middleware.msi file from the Indeed CM installation package and perform installation, following the wizard directions.
| Warning |
|---|
Drivers and service utilities for the smart cards and readers to be used with the Indeed CM system should be installed onto all the user workstations. This software is not a part of Indeed CM delivery scope. |
| Warning |
|---|
To be able to issue Registry cards through Self-Service with writing certificates to the certificates storage of the computer and/or user, configure the appropriate group policy. |
Installation of Indeed CM Client Tools
Indeed CM Client Tools is the component for unlocking the smart cards used for Windows authentication, both in online and offline mode and for unlocking the smart cards not used to login to the operating system.
Run the IndeedCM.ClientTools.msi file from the Indeed CM installation package and perform installation, following the wizard directions. This component is installed to user workstations only.
| Warning |
|---|
You must configure the settings for online and offline smart card unlock mode. |
| Scroll Pagebreak |
|---|
Indeed CM Agent is an additional component of the system, its installation and configuration are performed after the deployment and configuration of Indeed Certificate Manager. This component is intended for remote management, status monitoring and control over the use of personal user authentication cards (USB tokens, smart cards). In automatic mode, using an agent at user workstations, operations are performed to lock and unlock, clean and change the cards administrator’s PIN; monitoring the cards status with recording information in the system log about the presence of locked cards in the system, connecting unregistered cards, attempts to enter an invalid PIN. If defined card usage rules are violated (say, card is connected to another user workstation), then the card or user session might be locked. The component is installed onto the workstations where the cards issued with Indeed CM are connected to.
Run the IndeedCM.Agent.msi from Indeed CM installation package and complete the procedure, following the Wizard instructions. The Agent starts up automatically after installation.
| Warning |
|---|
Indeed CM Middleware, drivers and service utilities for the smart cards and readers to be used with the Indeed CM Agent should be installed onto all the user workstations. The parameters required to connect to Indeed CM server are configured during installation via Group Policy or Windows registry. |