Smart card usage control is carried out with Indeed Certificate Manager client Agent installed onto user workstations. The Control section defines the actions and message texts (optional) that are executed in case of violating the device usage rules. E.g. when a user connects his or her smart card to workstation of another user. The description of section parameters is given in Table 6.
Table 6 – Smart card usage settings.
Option
Description
Message to the user when the bound device and agent do not match
The message displayed to the user by Indeed CM Agent upon connecting a smart card to workstation disallowed by administrator.
If the value is not set, the message is not is displayed.
The action to be taken when the bound device and agent do not match
The action performed by Indeed CM Agent upon connection of a smart card to workstation disallowed by administrator. Possible values:
Write event
Lock user session, write event
Lock card, write event
Lock user session and card, write event
Enable user card binding
If enabled, Indeed CM Agent checks whether the smart card belongs to the logged on user.
Message to the user when the bound device and user do not match
The message displayed to the user by Indeed CM Agent upon connection of a smart card to workstation with another user session active.
If the value is not set, the message is not is displayed.
The action to be taken when the bound device and user do not match
The action performed by Indeed CM Agent upon connection of a smart card to workstation with another user session active. Possible values:
Write event
Lock user session, write event
Lock card, write event
Lock user session and card, write event
Timeout before locking the user session (sec.)
Period of time until user session is locked if this action is selected to be executed by Indeed CM Agent upon smart card usage rule violation. Possible interval is from 0 to 5 seconds.