Novell Enhanced Smart Card Method (NESCM)

You can run the Novell Enhanced Smart Card Method (NESCM) install silently by passing in parameters from the command line. Unlike the Novell Client, there is no parameter file to pass in like unattend.txt.

Before installing the NESCM silently from a command-line, you should become familiar with the graphical install and its options. Table 1 lists the parameters that can be passed to the method install (setup.exe). The method install is on the CD2 - NCL 2.0 Client CD in the \nmasmethods\novell\enhancedsmartcard\client directory. Parameters passed to setup.exe after the /s /v flags are wrapped in quotes with the /qn flag first. For example:

setup.exe /s /v"/qn BOOL_PASSWORD_FIELD_DESC=0 DISCONNECT=1 REBOOT=0 SMARTCARD_INTERFACE=1"

This example uses the standard password field descriptor, turns disconnected support on, suppresses the reboot, and specifies PC/SC as the smart card interface.

NOTE:  You cannot use spaces in the PASSWORD_FIELD_DESC parameter on the command line. If spaces are required in the password field descriptor, you need to set the following registry setting manually:

HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login\Tab Settings\Credentials\PasswordFieldDescription


Table 1. Parameters for Novell Enhanced Smart Card Method Installer

Parameter Required Description Value

BOOL_PASSWORD_FIELD_DESC

Yes

Set to 1 for a custom password field descriptor. If set to true then PASSWORD_FIELD_DESC must be set to a string.

1 or 0

DISCONNECT

Yes

Set to 1 for disconnected support otherwise set to 0.

1 or 0

PASSWORD_FIELD_DESC

No

Set to a string for a custom password field descriptor. BOOL_PASSWORD_FIELD_DESC must be set to 1 for the custom string to take effect. The password field descriptor's maximum length is approximately 10 characters. There cannot be spaces in the password field descriptor passed in through the command line. If you require spaces in your password field descriptor, then you will have to set a registry key.

String

PKCS11LIBRARY

No

Set to an integer 1 through 7 depending on which PKCS#11 library is desired (see Table 2). Must be set if SMARTCARD_INTERFACE is set to 2. Also USERSPECPATH must be set if PKCS11LIBRARY is set to 7.

1 through 7

REBOOT

Yes

Set to 1 for reboot or 0 to suppress reboot.

1 or 0

SMARTCARD_INTERFACE

Yes

For PC/SC support set to 1 and for PKCS#11 support set to 2

1 or 2

USERSPECPATH

No

Set to the PKCS#11 library name. SMARTCARD_INTERFACE must be set to 2 and PKCS11LIBRARY must be set to 7 for the USERSPECPATH to register a user-specified PKCS#11 library.

String


Table 2. PKCS#11 Library Integer Reference

Library Integer

ActivCard

1

NetSign

2

SmartTrust

3

iD2 Technologies

4

Gemplus (GEMSAFE)

5

Rainbow iKey USB

6

User Specified Library

7