Fujitsu Lifebook T936 - Access Rights of Smartcards

Security functions
Access rights of SmartCards
SmartCardSmartCardSmartCard
A new SmartCard initially only has a preset PIN and PUK. Access rights and the customised
PIN and PUK are not assigned until the SmartCard is initialised. The SmartC ard type
depends on the access rights assigned to the card, as described below:
• User SmartCard: starting the system, c hanging the PIN
• SuperUser SmartCard: starting the system, changes in BIOS Setup, changing the PIN
• Service SmartCard: changes in BIOS-Setup, operating system boot-up not possible
• Admin SmartCard: starting the system, changes in BIOS Setup, changing the PIN,
uninstalling SystemLock, initialising SmartCards, blocking SmartCards
The following table shows an overview of the rights granted with each type of
SmartCard when a PIN or PUK is entered:
User
SmartCard
SuperUser
SmartCard
Service
SmartCard
Admin
SmartCard
PIN PUK PIN PUK PIN PUK PIN PUK
Start-up system
xx x
Run BIOS Setup
xxx
Change own PIN
xx x xx
Unblocking own
blocked SmartCard
x* x* x*
x
Unblocking all blocked
SmartCards
x
Generating user cards
x
Uninstall SystemLock
x
* BIOS Setup setting ( Unblock own SmartCard)
Usually there is always one Admin SmartCard and at least one User or SuperUser
SmartCard that will allow a system to be operated.
Fujitsu 67