SecureLogin DAS Fast User switching using Smart Card in Active Directory mode

Table of Contents:

1. Introduction
2. Prerequisite
3. Configure Novell SecureLogin to launch separately using smart card user credentials
4. Configure DAS actions.xml to hide and unhide the desktop using the smart card
5. Conclusion

Introduction

In the earlier version of Novell SecureLogin, Active Directory authentication of the workstation (either using password or smart card) were used to login to SecureLogin. The SecureLogin DAS Fast User Switching feature was not available in Active Directory mode.

With Novell SecureLogin 7.0 Sp1 Hot Fix 2 and later DAS Fast User Switching feature is available in Active Directory Mode.

To use this functionality, you must configure

1. Novell SecureLogin to launch separately using smart card user credentials (instead of workstation logged-in credentials).

• DAS actions.xml to hide and unhide the desktop using the smart card.

The procedures explained in the document apply to:

• Novell SecureLogin 7.0 Sp1 Hot Fix 2 or later.
• Windows XP SP3 or later.

Prerequisites

While installing Novell SecureLogin you must enable the following options:

• Select Active Directory as the platform where Novell SecureLogin stores its data.

Click to view.

• Select YES to use Smart Card.

Click to view.

• In the installation features dialog box, select Install Desktop Automation Services.

Click to view.

Configure Novell SecureLogin to launch separately using smart card user credentials

After SecureLogin with DAS is successfully installed, it initializes some registry keys. You must edit the registry keys to configure the system for your workstation.

To view and edit the registry keys:

1. Click Start > Run, type RegEdit, then click OK.
   
   The Registry Editor is displayed

• Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Protocom\SecureLogin\
• Create DWORD NSLADAuth and set the value of NSLADAuth to 1.
• Exit the Registry Editor.
• Log out from the workstation and log in again.
• Launch the Novell SecureLogin.

Now SecureLogin prompts for Smart card PIN instead of getting launched using workstation logged-in credentials

Configure DAS actions.xml to hide and unhide the desktop using the smart card

1. Log in to the workstation where you want to launch the Novell SecureLogin.

• Configure actions.xml to hide and unhide the desktop using the smart card fast user switch
  

  Sample XML script:

  
  

   <?xml version="1.0"?>
  
  <application-runner-script>
  
  
  
   <action name="Removal">
  
   <kill-app application="slproto.exe" />
  
   <kill-app application="slbroker.exe" />
  
   <pause interval="1000"/>
  
   <hide-desktop />
  
   </action>
  
  
  
   <action name="unHideMe">
  
   <unhide-desktop/>
  
   </action>
  
  
  
   <action name="Insertion">
  
   <kill-app application="slproto.exe" />
  
   <pause interval="1000"/>
  
   <hide-desktop />
  
   <run-application application="slproto.exe" parameters="" serial="true"  interval="500"/>
  
   </action>
  
  
  
   <action-triggers>
  
  <on-cardmon action-name="Removal" card-insert="Insertion" LoginAction = "unHideMe"/>
  
  </action-triggers>
  
  </application-runner-script>

• Run ARScontol.exe to start DAS and to hide the desktop.
• Insert the smart card in the card reader.
  
  The NSL PinPrompt dialog box is displayed prompting you to enter a valid PIN.
• Enter the valid PIN.

The Novell SecureLogin is launched successfully for the smart card user and the user’s desktop is displayed.

Note: To switch to another user remove the inserted Smart Card from the card reader and insert a new smart card.

Conclusion

With the help of the above configuration “SecureLogin DAS fast user switching” is achieved using Smart Card in Active Directory mode.