UniToken Integration Guide Windows XP Client Smart Card Configuration
Join the domain
Right-click on [My Computer] from the Start Menu and select [Properties]
In the tab [Computer Name], Click on [Change]
Under [Member of], select [Domain] and indicate the name of the domain.
Input the username and the password for the user account that we created on the server.
The message [Welcome to … domain] appears. You joined the domain successfully.
To apply the new settings, it is necessary to restart the computer. Click on “Yes” to restart the computer immediately.
Install PKI User package
This part explains how to install the PKI package that you can find inside the SDK. The End User package can be found inside the folder Redist/Enduser.
First, let’s log in as the user that we created on the server(Here UniTokenPRO).
Right-Click on the PKI package installation file and choose “Run as…”
Execute the file with an account that has administrator rights on this computer.
Click on [Next] in the welcome screen.
Input your username and Company Name and click on [Next]
Select [Complete] and click on [Next].
Click on [Install] to begin the installation of the PKI package.
When the warning message [Do you want to install UniToken Virtual Reader] is shown, click on [Continue anyway] to continue the installation.
Verify that the install wizard completed correctly and click on [Finish]
Request SmartCard Certificate from the CA
Launch Internet Explorer and input of your server)/certsrv in the address bar. When the log in screen appears, input username and password.
On the main page, click on [Request a certificate]
On the page [Request a certificate], click on [advanced certificate request]
On the page 「Advanced Certificate Request」, choose 「Create and submit a request to this CA」
Choose [SmartCard User] for the Certificate Template and [UniToken PRO CSP] for the CSP. Keep the default settings and click on [Submit] to apply for the certificate.
Click on [Yes] when the warning message [Do you want to allow the actions performed by this website] appears.
When the window asking for the token PIN appears, input the user PIN and press OK.
Click on [Install this certificate] to install the certificate inside the token.
Click on [Yes] when the warning message [Do you want to allow the actions performed by this website] appears.
When [Certificate installed] appears, the installation is complete.
Configure the computer to require SmartCard for logon
[ Start ] -> [Run…]
Input [gpedit.msc] and click on OK.
On the [Group Policy] page, in [Computer Configuration] [Windows Settings] [Security settings][Local policy][Security options], right-click on [Interactive Logon: requires Smartcard] and select [properties]
In the tab [Local Security Setting], select [enabled] and click on OK to apply.
In the same folder, right-click [Interactive logon: SmartCard removal behavior] and select [properties]
In the Local Security Setting, select the action that you want to set when the SmartCard is removed from the computer and click OK to apply.
