Environment-Specific Registry Keys

Secure Messaging Access (SMA) Level

In some environments, the default Secure Messaging Access (SMA) level configured on the smart card may not meet the customer's security requirements. ActivClient provides the possibility to override the card's default SMA level by configuring a registry-based policy.

To enforce a higher SMA level, manually create the following registry key and set the desired value using a DWORD entry:

Registry path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\HID Global\SecurityModuleMW\CommunicationProvider

DWORD name:

SecurityLevelMask

This DWORD value acts as a bitmask specifying which SMA levels should be enabled. If the registry key and value are not present, ActivClient uses the default SMA level configured on the card.

Note: This registry key is not created automatically during installation and must be added manually by the administrator.