
7. If you want the system to automatically launch the HP SAM client when a users inserts a smart
card, see steps a and b. (NOTE: Step a is the default setting.)
a. For the Windows-based client (default setting), edit the ‘scwatch.cfg’ file with the following:
[scwatch]
Action=c:\Program Files\Hewlett-Packard\HP Session
Allocation Client\hprdcw32.exe
ActionDir=c:\Program Files\Hewlett-Packard\HP Session
Allocation Client\
— or —
b. For the Internet Explorer-based client, edit the ‘scwatch.cfg’ file with the following:
Action=c:\Program Files\internet explorer\iexplore.exe http://HP SAMServername
8. Start the service by:
a. Clicking Start > Control Panel > Administrative Tools > Services.
b. Right-clicking HP Smart Card Monitor Service.
c. Selecting Start.
For more information about HP SAM smart card settings, see
Smart Card Settings on page 41.
You can configure smart card-related settings on the web client after you complete this procedure. From
the HP SAM administrative console, go to System Settings > Web Client.
NOTE: The CAC is a high-security type of smart card used by the military. Its behavior in HP SAM
matches that of typical smart cards. HP SAM does not access extended data in the CAC card beyond
the certificate needed to determine the user's credentials.
Configuring Session Time Limits for Remote Sessions
HP CCI Session Timers allow administrators to control automatic disconnection or logoff of remote
sessions after specified periods of time. The integrated session timers have the ability to control RGS
sessions as well as RDP sessions. You can configure time periods for Active Sessions, Active But
Idle Sessions, and Disconnected Sessions and you can further configure CPU monitoring for
Active But Idle and Disconnected Sessions. This will prevent the disconnect or logoff action if the
CPU usage remains above a configurable threshold. This is useful for ensuring that connections are not
logged off while important calculations, for example, are occurring.
The session timers consist of two main pieces:
●
A utility (HPCCIST.EXE and its support files) that is installed onto the resource along with the HP
SAM Registration Service. HPCCIST.EXE is set to start when Windows starts but will only continue
running when a policy is set that requires it to run.
●
An Active Directory group policy administrative template allowing you to enable the HP CCI
Session Timers. The administrative template (HPCCIST.ADM) can be found in the c:\windows\inf
folder (assuming you installed Windows into the c:\windows folder.)
80 Chapter 4 Administration
Kommentare zu diesen Handbüchern