Security functions
SmartCard user groups
SmartCard
User groups can be set up using SystemLock. This enables several systems to be starte d with one
SmartCard. A user group consists of at least two systems. Each user that is allowed to start the
systems is provided with one SmartCard. The user can start any of the systems using this SmartCard.
Basic information on setting u p user groups
When installing SystemLock,thefirst PC in the user group is set up as a "Single PC". The
Admin SmartCard generated during this process is used to set up the user group. SystemLock
sets up each additional device as a "Group PC" during installation. The existing Admin
SmartCard is inserted, information is read in and the device is added to the user group.
The Admin SmartCard determines which user group the device belongs to.
If you use FSC-CardOS SmartCards, SystemLock ca n be administered via the Windows
program "Syst emLock Admin". "SystemLock Admin" allows you to conveniently manage
SystemLock at the operating system level, create SystemLock Organisation Units and Groups,
generate SmartCards for the se Org anisation Units or Groups, assign access rights for user
cards at various levels and restore access rights using remote access. You can also chang e
the S martCard ’s PIN or PUK for yourself and other users and reactivate blocked cards.
For a detailed description, see the "SystemLock Admin" Help manual.
User S
martCards or SuperUser SmartCards must still be generated using SystemLock so that
users
can acce ss the systems w ithin the user group. Using a User S ma rtCard or SuperUser
Smar
tCard a user can log on to each system within the user group.
Fujitsu Technology Solutions 85