4.6 Installing SecureLogin: Active Directory

After you have finished extending the Active Directory schema and assigning permissions to the required directory objects, install the SecureLogin application on the administration and user workstations.

  1. Log into the workstation as administrator.

  2. Insert the installation CD, then click Install/upgrade or run setup.exe, found in the securelogin\client directory.

  3. Select a language, click Next, then accept the license agreement.

  4. Click Next.

  5. Select Complete, then click Next.

    Setup type

    The Complete option uses default values and installs SecureLogin in c:\program files\novell\securelogin.

  6. Select Microsoft Active Directory as the platform where SecureLogin will store its data, then click Next.

    Choose a Platform for SecureLogin dialog box
  7. The Do you want to use smart card dialog box is displayed.

    Do You Want to Use Smartcard dialog box

    (Conditional) If you don’t want to use smart card, select No, click Next, then continue with Step 8.

  8. (Conditional) If you want to use smart card and if ActiveClient is detected in your system, select Yes,Click Next, then continue with Step 8.

  9. (Conditional) If you want to use smart card and if ActiveClient is not detected in your system:

    1. Select Yes, click Next.

    2. (Conditional) Select a cryptographic service provider from which SecureLogin will request PKI credentials via Microsoft Crypto API.

      Selecting Cryptographic Service Provider
    3. Click Browse and select a PKCS#11 compatible library required for accessing the smart card, then click Next.

      NOTE:This will specify the location of the Cryptographic Token Interface installed as part of the smart card vendor’s software. These API files will be used by SecureLogin to communicate with the smart card.

      Manually configuring the third party smart card PKCS library Assumes a high level of understanding the Cryptographic Service Provider’s product.

      For more information and instructions about smart card settings and cryptographic tokens, see the Novell SecureLogin 6.0.SP1 Administration Guide.

  10. Click Next > Install.

  11. By default, the Launch Readme option is selected. Click Next.

  12. By default, the Start SecureLogin at the Windows startup is selected. Deselect the option if you do not want SecureLogin to start at the Windows startup.

  13. Click Finish.

  14. Specify when you want to restart the computer, then click OK.

  15. After the workstation restarts, provide a passphrase question and passphrase answer, then click OK.

4.6.1 Using the Custom Option for Active Directory

The Custom option provides the same defaults as does the Complete option, but enables you to do the following:

  1. Specify a path for SecureLogin’s local cache.

    Choose a cache option dialog box
  2. The user profile directory is the default path.

  3. User profiles for Windows 2000 and Windows XP are stored in Documents and Settings\username.

  4. Select SecureLogin components.

    Selecting SecureLogin components
  5. The Description panel provides information about a component that you select.

    Select options for starting SecureLogin.

  6. Specify when you want to restart the computer, then click OK.