Fujitsu Lifebook T580 - Smartcard User Groups

Security functions
SmartCard user groups
SmartCard
User groups can be set up using SystemLock. This enables several systems to be started with one
SmartCard. A user group consists of at least two systems. Each user that is allowed to start the
systems is provided w ith one SmartCa rd. The user can start any of the systems using this SmartCard.
Basic information on setting up user groups
When installing SystemLock,thefirst PC in the user group is set u p as a "Single P C". The
Admin SmartCard generated during this process is used to set up the user group. SystemLock
sets up each additional device as a "G roup PC" during installation. The existing Admin
SmartCard is inserted, information is read in and the device is added to the user g roup.
The Admin SmartCard determ ines which user group the d evice belongs to.
If you use FSC-CardOS SmartCards, SystemLock can be administered via the Windows
program "Syst emLock Admin". "SystemLock Admin" allows you to conveniently manage
SystemLock at the operating system level, create SystemLock Organisation Units and Groups,
generate SmartCards for the se Org anisation Units or Groups, assign access rights for user
cards at various levels and restore access rights using remote access. You can also c hang e
the S martCard ’s PIN or PUK for yourself a nd other users and reactivate blocked cards.
For a detailed description, see the "SystemLock Admin" Help manual.
Admin Card
PC1
Select System -
mode: F3
PC4
3
PC 1
Select System -
mode: F1
Smart Card
PC1
Admin Card
PC1
1
2
PC2
Admin Card
PC1
Select System -
mode: F3
3
PC3
Admin Card
PC1
3
User S
martCards or SuperUser SmartCards must still be generated using SystemLock so that
users
can acce ss the systems w ithin the user group. Using a User Sma rtCard or SuperUser
Smar
tCard a user can log on to each system within the user group.
Fujitsu Technology Solutions 73