n
Scan all user certificates
n
Scan only user certificates containing the Smart Card Logon OID - The OIDs
are: 1.3.6.1.4.1.311.20.2.2.
7. Click OK.
If necessary, use the Pre-boot Reporting reports to troubleshoot issues with drivers or user
certificates.
Changing the User Pre-boot Authentication Settings
By default, users get the Pre-boot authentication method from the global Pre-boot
Authentication Settings. You can assign custom authentication settings to users on the User
Details page. You can also assign a user password and manually add user certificates on this
page.
You can assign Dynamic Token as a user's authentication method.
To change a user Pre-boot authentication method:
1. Double-click a user in the tree.
2. In the User Details window, select OneCheck User Settings.
3. Click Pre-boot Authentication Method.
4. Click Use specific Pre-boot Authentication Method for this user.
5. Select an authentication method:
n
Password - This user can only authenticate with a username and password.
n
Smart Card - This user can only authenticate with a Smart Card.
n
Either Smart Card or Password -This user can authenticate with user name and
password or a Smart Card.
n
Dynamic Token - This user can only authenticate with the password from a
dynamic token.
6. If you select Smart Card, we recommend that you select
Change authentication method only after user successfully authenticates with a
Smart Card
This lets users authenticate with a password until all of the requirements for Smart Card
authentication are set up correctly. After users successfully authenticate one time with a
Smart Card, they must use their Smart Card to authenticate. If you configure a user for
Smart Card only and do not select this, that user is not able to authenticate to Full Disk
Encryption with a password.
Select one or more Smart Card drivers.
Configuring OneCheck User Settings Policy Rules
R81 Harmony Endpoint Server Administration Guide | 230
Need help?
Do you have a question about the HARMONY R81 and is the answer not in the manual?