User Console

These policies are available if the User Console is installed.

Some policies are only available if the associated ActivClient components are installed (for example, the policy to access the Advanced Diagnostics Wizard).

The tasks below detail the User Console policy settings.

Important: Restart User Console

For the User Console policy changes to be applied, you must restart the User Console.

Disable check of CRL when displaying a certificate

Description:

Defines if the CRL must be checked when displaying a certificate with the User Console.

If this setting is not configured or disabled, then the CRL is checked when displaying a certificate.

Note: This Policy improves the performance based on your environment.

Disable deletion of user certificates

Description: Defines if users can delete their certificates. If this setting is not configured or disabled, then the certificate deletion option is available.

If the smart card is issued by a card/credential management system (such as ActivID CMS) that prevents cards from being updated by users, then this policy is not applicable.

ActivClient does not allows updating a card if it is prohibited at the card/applet level. For example, CAC and PIV cards can be considered read-only at the workstation level – users cannot delete current certificates, nor import new certificates on their card. Card update operations are then driven by the card management used to issue the cards, such as ActivID CMS.

Disable One-Time Password generation

Description:

Defines if users can generate a smart card-based One-Time Password in the User Console.

If this setting is not configured or disabled, then the One-Time Password generation option is available.

Disable One-Time Password synchronization

Description:

Defines if users can resynchronize the smart card-based One-Time Password in the User Console.

If this setting is not configured or disabled, then the One-Time Password resynchronization option is available.

Hide Advanced Diagnostics icon

Description:

Defines if the Advanced Diagnostics icon is displayed in the User Console standard toolbar, allowing users to access and use the Advanced Diagnostics tool.

This menu is not displayed if the Troubleshooting feature is not installed.

If this setting is not configured or disabled, then the Advanced Diagnostics icon is displayed in the User Console.

Hide CA Certificates folder

Description:

Defines if the CA Certificates folder is displayed in the User Console, allowing users to view CA Certificates stored on their smart card.

If this setting is not configured or disabled, then the CA certificates folder is displayed in the User Console.

Hide Check for Card Update menu

Description:

Defines if the Check for Card Update menu is displayed in the User Consoled, allowing users to check with ActivID CMS if an update is available for the inserted smart card.

This menu is not displayed if the Card auto-update service with ActivID CMS feature is not installed.

If this setting is not configured or disabled, then the Check for Card Update menu is displayed in the User Console.

Note: If the Smart Card Update feature is installed, the User Console menu is unavailable until the feature is configured with the ActivID CMS URL.

Hide Export Certificate menu

Description:

Defines if the Export Certificate menu is displayed in the User Console, allowing users to export certificates from their smart card to a file.

If this setting is not configured or disabled, then the Export Certificate menu is displayed in the User Console.

Hide Help menu

Description:

Defines if the Help standard tool bar button and the ActivClient Help command in the Help menu are displayed in the User Console.

If this setting is not configured or disabled, the Help menu and button are displayed in the User Console.

Hide Import Certificate menu

Description:

Defines if the Import Certificate menu is displayed in the User Console, allowing users to import a certificate onto their smart card.

If this setting is not configured or disabled, then the Import Certificate menu is displayed in the User Console.

Hide My Certificates folder

Description:

Defines if the My Certificates folder is displayed in the User console, allowing users to view their smart card certificates.

If this setting is not configured or disabled, then the My Certificates folder is displayed in the User Console.

Hide My Personal Info option

Description:

Defines if My Personal Info icon is displayed in the User Console, allowing users to view the personal information (demographic data) available on their smart card.

If this setting is not configured or disabled, then the My Personal Info icon is displayed in the User Console.

Note: Applicable to CAC and PIV cards issued by the US Government.

Hide New Card menu

Description:

Defines if New Card menu is displayed in the User Console, allowing users to access and use the PIN Initialization Tool.

This menu is not displayed if the PIN Initialization Tool feature is not installed.

If this setting is not configured or disabled, then the New Card menu is displayed in the User Console.

Hide Publish to GAL menu

Description:

Defines if the Publish to GAL menu is displayed in the User Console, allowing users to set up email certificates in Microsoft Outlook and publish certificates to the Global Address List.

This menu is not displayed if the Microsoft Outlook Usability Enhancements feature is not installed.

If this setting is not configured or disabled, then the Publish to GAL menu is displayed in the User Console.

Hide Register All Certificates

Description:

Defines if the Make Certificates Available to Windows menu is displayed in the User Console, allowing users to register certificates into Windows certificate store from User Console.

If this setting is not configured or disabled, then the Make Certificates Available to Windows menu is displayed in the User Console.

Hide Reset Card menu

Description:

Defines if the Reset Card menu is displayed in the User Console, allowing users to reset their smart cards. This is only applicable to standalone smart cards.

If this setting is not configured or disabled, the Reset Card menu is displayed in the User Console.

Hide Tasks View from Explorer bar

Description:

Defines if the Tasks View is displayed in the Explorer toolbar in the User Console. If disabled, the Tree View is the only view available. If both the Tasks and Tree views are disabled, the Explorer toolbar is not displayed.

If this setting is not configured or disabled, then the Tasks View is displayed.

Hide the Smart Card Info icon

Description:

Defines if the Smart Card Info icon is displayed in the right pane of the User Console, allowing users to view information such as smart card user name, manufacturer, model and serial number.

If this setting is not configured or disabled, then the Smart card Info icon is displayed in the User Console.

Hide Tree View from Explorer bar

Description:

Defines if the Tree View is displayed in the Explorer toolbar in the User Console. If disabled, the Tasks View is the only view available. If both the Tasks and Tree views are disabled, the Explorer toolbar is not displayed.

If this setting is not configured or disabled, the Tree View is displayed.

Hide Unlock Card menu

Description:

Defines if the Unlock Card menu is displayed in the User Console, allowing users to access the Unlock Card tool in order to unlock their smart card.

If this setting is not configured or disabled, then the Unlock Card menu is displayed in the User Console.

Hide Use Reader menu and Reader list icon

Description:

Defines if the Use Reader menu and the Reader List toolbar icon are displayed in the User Console.

If this setting is not configured or disabled, then the Use Reader menu and the Reader List toolbar icon are displayed in the User Console and available for use.

Hide View Policy Settings menu

Description:

Defines if the View Policy Settings menu is displayed in the User Console, allowing users to view the policy settings applied to this computer

This menu is not displayed if the Configuration Management feature is not installed.

If this setting is not configured or disabled, then the View Policy Settings menu is displayed in the User Console.

Hide View Unlock Code menu

Description:

Defines if the View Unlock Code menu is displayed in the User Console, allowing users to view their unlock code. This is only applicable to standalone smart cards.

If this setting is not configured or disabled, the View Unlock Code menu is displayed in the User Console.

Image displayed on the lower right corner of List view

Description:

Defines the path to the customized background image (lower right corner) of the User Console. The image must be in the .bmp format.

If this setting is not configured or disabled, then the ActivClient background image is used (smartcard).

Possible Values:

  • Not Configured

  • Enabled – enter the path to the required image

  • Disabled

Prevent users from switching between icon and detail view

Description:

Defines if users can choose a view type from the Large Icons, Small Icons, List, and Details options.

If this setting is not configured or disabled, then users can choose the view type. If this setting is enabled, users cannot choose between the view type and the User Console uses Large Icons.