- Created by Mikhail Yakovlev, last modified on Nov 22, 2022
You are viewing an old version of this page. View the current version.
Compare with Current View Page History
« Previous Version 14 Next »
Run the IndeedCM.AirKey.Middleware.msi from IndeedCM.Client-v<version> folder installation package and complete the procedure, following the Wizard instructions.
Run the Indeed.AirKey.Runtime.msi from Indeed AirKey Enterprise installation package and complete the procedure, following the Wizard instructions.
To install AirKey Runtime using Windows group policies, it is necessary to place the following certificates to the Local Computer storage of each workstation:
- Indeed LLC – signature certificate of .msi package. This certificate is to be placed to Trusted Publishers section.
The certificate is included into the Indeed AirKey Enterprise installation package and can be found in IndeedID.AirKey.Runtime\Misc\Certificates folder.
Configuring AirKey Virtual Smart Card Reader
Modification of AirKey Virtual Smart Card Reader parameters is made via:
- Active Directory Group Policy mechanism (for workstations within the organization domain).
- Windows registry (for workstations that are beyond the bounds of Windows domain).
Configuring AirKey Virtual Smart Card Reader via Group Policies
It is necessary to add the Indeed AirKey Enterprise policy templates into the Active Directory administration template list before starting to configure group policies. Policy template files are included into the installation package of AirKey Runtime and can be found in the \Misc\GroupPolicyTemplates folder.
The AirKey Enterprise Server policy applies to user workstations and defines the settings of connection to Indeed AirKey Enterprise server.
Not Configured or Disabled value means that connection URL is not defined. In this case, AirKey cards cannot be used on this workstation. Default value is Not configured.
Enabled
The connection parameters defined by policy are used to connect to AirKey server when using AirKey cards. Specify the link and port to connect to server in the Server URL parameter.
For example:
https://airkey.demo.local:3002
Make sure that the port is open for incoming connections in the firewall of AirKey server.
The Virtual AirKey reader policy applies to user workstations and defines the number of AirKey card readers on the workstation.
Not Configured or Disabled
This means that the number of readers for AirKey card connection is equal to 1. Default value is Not configured.
Enabled
Parameters defined by policy are used when using AirKey cards. Specify the number of readers to connect AirKey cards to in the Reader number parameter. Default value is 3. Maximum number is 10.
Configuring AirKey Virtual Smart Card Reader via Registry
Create a registry file (.reg) file with the following contents:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\IndeedAirKey\Runtime] "AirKeyEnterpriseServerUrl"="" "ReaderInstanceCount"=dword:00000000
The AirKeyEnterpriseServerUrl parameter specifies a link and port to connect to AirKey server.
Specify the number of readers to connect AirKey cards to in the ReaderInstanceCount parameter.
The example below shows the contents of .reg file to connect to Indeed AirKey Enterprise server for airkey.demo.local computer via HTTPS protocol and 3002 port. The number of AirKey readers is 3:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\IndeedAirKey\Runtime] "AirKeyEnterpriseServerUrl"="https://airkey.demo.local:3002" "ReaderInstanceCount"=dword:00000003
- No labels