User manual

Table Of Contents
Security functions
SmartCard user groups
SmartCard
User groups can be set up using SystemLock. This enables se veral systems to be started with one
SmartCard. A user group consists of at least two systems. Each user that is allowed to start the
systems is provided with one SmartCard. The user can start any of the systems using th is SmartCard.
Basic information on setti ng up user groups
When installing SystemLock,therst PC in the user group is set up as a "Single PC". The
Admin SmartCard generated during this process is used to set up the user group. SystemLock
sets up each additional device as a "Group PC" during installation. The existing Admin
SmartCard is inserted, informat ion is read in and the device is added to the user group.
The A dmin SmartCard determines which user group the device belongs to.
If you use FTS-CardOS SmartCards, SystemLock can be administered via the Windows program
"SystemLock Admin". "SystemLock Admin" allows you to conveniently manage SystemLock
at the operating system level, create SystemLock Organisation Units and Groups, generate
SmartCards for these Organisation Units or Groups, assign access authorisations for user
cards at various levels and restore access authorisations using remote access. You can also
change the SmartCard’s PIN or P UK for yourself and other users and reactivate blocke d cards.
For a detailed description, see the "SystemLock Admin" Help m an ual.
Admin Card
PC1
Select System-
mode: F3
PC4
3
PC 1
Select System -
mode: F1
Smart Card
PC1
Admin Card
PC1
1
2
PC2
Admin Card
PC1
Select System -
mode: F3
3
PC3
Admin Card
PC1
3
User S
martCards or SuperUser SmartCards must still b e generate d using Sy stemLock so that
users
can access the systems within the user gro up. Using a User SmartCard or SuperUser
Smar
tCard a use r can log on t o each system within the user group.
72 Fujitsu