Endpoint Security Suite Pro Advanced Installation Guide v1.8

If you do not want the Advanced Authentication client to change the services associated with smart cards and biometric devices to a startup type of "automatic", disable the service startup feature. Disabling this feature also suppresses warnings associated with the required services not running.

When disabled, Advanced Authentication will not attempt to start these services:

• SCardSvr - Manages access to smart cards read by the computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.
• SCPolicySvc - Allows the system to be configured to lock the user desktop upon smart card removal.

• WbioSrvc - The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric data without gaining direct access to any biometric hardware or samples. The service is hosted in a privileged SVCHOST process.

  By default, if the registry key does not exist or the value is set to 0, this feature is enabled.

  [HKLM\SOFTWARE\DELL\Dell Data Protection]

  SmartCardServiceCheck=REG_DWORD:0

  0 = Enabled

  1 = Disabled

To use smart cards with Windows Authentication, the following registry value must be set on the client computer.

[HKLM\SOFTWARE\DigitalPersona\Policies\Default\SmartCards]

"MSSmartcardSupport"=DWORD:1

To use smart cards with SED Preboot Authentication, the following registry value must be set on the client computer that is equipped with an SED.

[HKLM\SOFTWARE\DigitalPersona\Policies\Default\SmartCards]

"MSSmartcardSupport"=DWORD:1

Set the Authentication Method policy to Smart Card in the Remote Management Console, and commit the change.