Installation of Indeed CM Middleware

The Indeed CM Middleware components are installed at Indeed Certificate Manager operator workstations and user workstations. The Middleware components to install are selected depending on the smart card type used in the company. For example, you have to install the IndeedCM.Gemalto.Middleware component to work with Gemalto smart cards. Similarly, for Feitian smart cards you need IndeedCM.ePass.Middleware. 

Run the IndeedCM.Middleware.msi file from the Indeed CM installation package and perform installation, following the wizard directions.

Drivers and service utilities for the smart cards and readers to be used with the Indeed CM system should be installed onto all the user workstations. This software is not a part of Indeed CM delivery scope.

Installation of Indeed CM Client Tools

Indeed CM Client Tools is the component for unlocking the smart cards used for Windows authentication, both in online and offline mode and for unlocking the smart cards not used to login to the operating system.

Run the IndeedCM.ClientTools.msi file from the Indeed CM installation package and perform installation, following the wizard directions. This component is installed to user workstations only.

For 32-bit operating systems, use IndeedCM.ClientTools.x86.msi file
For 64-bit operating systems, use IndeedCM.ClientTools.x64.msi file

You must configure the settings for online and offline smart card unlock mode.

Installation of Indeed CM Agent

Indeed CM Agent is an additional component of the system, its installation and configuration are performed after the deployment and configuration of Indeed Certificate Manager. This component is intended for remote management, status monitoring and control over the use of personal user authentication cards (USB tokens, smart cards). In automatic mode, using an agent at user workstations, operations are performed to lock and unlock, clean and change the cards administrator’s PIN; monitoring the cards status with recording information in the system log about the presence of locked cards in the system, connecting unregistered cards, attempts to enter an invalid PIN. If defined card usage rules are violated (say, card is connected to another user workstation), then the card or user session might be locked. The component is installed onto the workstations where the cards issued with Indeed CM are connected to.

Run the IndeedCM.Agent.msi from Indeed CM installation package and complete the procedure, following the Wizard instructions. The Agent starts up automatically after installation.

Indeed CM Middleware, drivers and service utilities for the smart cards and readers to be used with the Indeed CM Agent should be installed onto all the user workstations.

The parameters required to connect to Indeed CM server are configured during installation via Group Policy or Windows registry.


  • No labels