Q-See Remote Client Software V 4.0.1 Specifikace Strana 113

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 232
  • Tabulka s obsahem
  • ŘEŠENÍ PROBLÉMŮ
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 112
VMware, Inc. 113
Chapter 5 Client Management
ThesmartcardremovalpolicydoesnotapplytouserswhoconnecttotheView
ConnectionServerinstancewiththeLoginascurrentusercheckboxselected,
eveniftheylogintotheirclientsystemwithasmartcard.
5ClickOK.
6RestarttheViewConnectionServerservice.
Configuring User Profiles
Auserprincipalname(UPN)isanaccountnameandadomainnameidentifyingthe
domaininwhichtheuseraccountislocated.TheusualformofUPNisuser@domain.
Forausertoconnectusingsmartcardauthentication,theiraccountinActiveDirectory
musthaveavalidUPNassociated
withtheiruserPrincipalNameproperty.
TheUPNforeachuserwhorequiressmartcardauthenticationmustbesettothe
subjectalternativename(SAN)containedwithintherootcertificateofthetrustedCA.
Youcanlocatethisinformationbyviewingthecertificateproperties,asdescribedin
“ExportingaRootCertificatefroma
UserCertificate”onpage 107.
ThemoststraightforwardwayofaddingthisinformationtoActiveDirectoryistouse
theADSIEditutilityprovidedwiththeWindowsSupportToolssoftwarecollection.If
itisnotalreadypresentonyourActiveDirectoryserver,youcandownloadandinstall
WindowsSupportToolsfromthe
followinglocation:
http://www.microsoft.com/downloads/details.aspx?FamilyID=96a35011fd83419d93
9b9a772ea2df90
To set the UPN to the SAN on Active Directory
1OntheActiveDirectoryserverclickStart>AllPrograms>WindowsSupport
ToolstoopenacommandpromptattheSupportToolsdirectorylocation.
2Enteradsiedit.msctostarttheADSIEditapplication.
3Intheleftpane,expandthedomaininwhichtheuser
youwanttoeditislocated
andexpandCN=Users.
NOTESmartcardauthenticationreplacesWindowspasswordauthenticationonly.
If SecurIDisenabled,usersarerequiredtoauthenticateusingthismechanismalso.
NOTEYouneedtoprovidethisinformationonlyifthecertificatewasissuedfroma
domainotherthantheoneinwhichtheuserpresentlyresides.Acharacteristicof
exportingacertificatefromaserverintheuserscurrentdomainisthattheusersUPN
androotcertificateSANwillcorrelate.
Zobrazit stránku 112
1 2 ... 108 109 110 111 112 113 114 115 116 117 118 ... 231 232

Komentáře k této Příručce

Žádné komentáře