User manual HP BC1000 BLADE PC IMPLEMENTING GEMALTO SMART CARD FOR USE WITH COMPAQ T5720 AND CCI

[. . . ] Implementing Gemalto Smart Card for Use with HP Compaq t5720 and HP CCI Introduction . 4 Installing GemSafe Libraries 5. 0 SE to Server and Client PCs (Optional) . 5 Installing Microsoft Certificate Services . 9 Configuring a Certificate Authority (CA) service . [. . . ] Select advanced certificate request. 7. Select Create and submit request to this CA. 20 8. In the Certificate Templates box, select Enrollment Agent. 9. Verify Enrollment Agent Settings in the Key Options section as follows: · · · Create new key is selected Microsoft Enhanced Cryptographic Provider v1. 0 Click Submit. 21 10. Accept default settings under Additional Options. 11. If a warning message displays about a potential scripting violation, press Yes to continue with the certificate request. Install the Enrollment certificate requested. 22 13. Select Yes to Potential Scription Violation. You have successfully generated and installed required Enrollment Certificate, as shown below. 23 Manually issue Smart Card User Certificate 1. Launch Internet Explorer and browse to http://localhost/certsrv. Select advanced certificate request. 24 4. Select Request a certificate for a smart card on behalf of another user by using the smart card certificate enrollment station. 5. Select Smartcard User under Enrollment Options. 25 6. Define the user to enroll by clicking Select User. 7. Insert Smart Card into Reader, and then select Enroll. 26 Testing the Smart Card 1. Launch the GemSafe Toolbox by selecting Start > All Programs > Gemplus > GemSafe Toolbox. 2. This displays the certificates that you manually issued to the card in "Configuring Microsoft Certificate Authority to Issue Smart Card User Certificate" on page 18. 4. Select the Diagnostic/Help tab in the left frame. 28 5. Select the Smartcard and readers diagnose button. 6. From the Smartcard Diagnostic Utility, select Start. 29 You should receive the following PASSED response. Creating Customized User Install Packages for Clients PCs (Optional) The GemSafe user install package is not required for Domain logon smart card authentication with a preconfigured smart card that already contains a User certificate. Domain groups or user level policies for smart card login need to be managed and applied by the administrator. Administrators may wish to deploy a customized client GemSafe Toolbox to the client (as an example, for smart card properties or diagnostic capabilities). NOTE: You must commit (EWF) the data to the volume or the data will be lost on the next reboot. For thin client PC installation of the optional GemSafe ToolBox, modify the client's RAMDisk size from default settings up to 64-MB. To change RAMDisk size, click Start > Control Panel > HP RAMDisk Manager. 30 For thin client PC installation of the optional GemSafe ToolBox, modify the thin client TEMP and TMP environmental variables to a location that can support the . msi user installation package size. The environmental variables can be changed back to default settings after installation package has been installed and write filter changes committed. [. . . ] In the Control Panel on the client computer, open Network and Internet Connections. Select the Create a connection to the network at your workplace task. 3. In the New Connection Wizard, select Virtual Private Network connection. 40 4. In the Company Name box, type the name for the VPN connection (for example, Work), and then click Next. [. . . ]