Page History

...

If the Indeed CM server and user workstations are outside the Windows domain, then the path to credprovapi application must be explicitly defined in the system registry of each workstation. To do so, create a registry file (.reg) containing the following:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\IndeedCM\Client]

"CredProvAPIURL"=""
"AdminDetails"=""
"DisableServerCertificateChecking"=dword:00000000
"DisableSuspendCP"=dword:00000000
"DisableWrapperCP"=dword:00000000

The CredProvAPIURL parameter should indicate the path to credprovapi application at the Indeed CM server.

...

Here is an example of registry file for Indeed CM server with machine name of cardmanagementSRV, server certificate authentication enabled, "Disable the smart card" button not displayed and using a separate Credential Provider to unblock a smart card in the logon interface:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\IndeedCM\Client]

"CredProvAPIURL"="https://cardmanagementSRV/credprovapi"
"AdminDetails"="Please contact your administrator. Internal phone number is 1607"
"DisableServerCertificateChecking"=dword:00000000
"DisableSuspendCP"=dword:00000001
"DisableWrapperCP"=dword:00000001

...