abylon LOGON: Sicherere und komfortable Windowsanmeldung

• 
• 

• Homepage
•  » Software
•  » abylon LOGON Support

As a rule, the client card reader connected with the standard settings during the Remote Desktop connection can be directly recognized and used.

If the card reader does not recognize, he can when creating the Remote Desktop Connection "Options-> Local Resources-> Local devices" policy. Another Option can be found under "Terminal Services Configuration-> Connections-> Properties-> client settings-> connection settings, user settings or in accordance with the Policies.

The following card readers have been successfully tested: card reader by Cherry, Cardman 2020 and comparable, and the Aladdin eToken (USB token)!
To a USB stick, you must also be submitted during the Remote Desktop application known.

 

Depending on the configuration of your system, it may happen after the unlock the computer by the Task Manager. To prevent this can be found in the abylon Settings on the side 'logon> Advanced' under 'Anmeldeverhalten' option 'Should the Security Dialogue (VOR REGISTRATION CTRL + ALT + DEL PRESS) will automatically be skipped? " disable (no mark).

The software abylon login is in safe mode (without network) is NOT active. It is a protection from our side to help you in an emergency login abylon The software can turn off without your whole system up again.

Also in safe mode, you must application for the Windows password, so this was not an attack can be exploited. In normal operation you do not need your password for the Windows application, but it only stuck the media (chip card, CD, USB .Stick) and the Windows application is done automatically. For this reason, you can take a very long password (at least 12 characters, with numbers, special characters, large and small letters should happen). The longer the password, the more difficult it becomes for an attacker to crack the password. This will clear your system more secure than if you are not a short or password. Only with the appropriate medium (chip card, CD, USB .Stick) is the Windows application.

NOTE domain networks, the access via the safe mode!

 

This problem occurs because of problems of the CSP Aladdin when the certificate memory in the system user context.

This is the adjustment accounts for the Aladdin eToken only in the recruitment of dialogue abylon login. However, this does not affect the use of Aladdin USB tokens with our software.

 

For the monitoring of the drag-and plugging the smart card or USB token is to launch a service needed. After installation, the program in the settings and the computer booted once. To the system resources are not unnecessarily burden will also help the application of the normal Windowsanmeldemaske this service is not started.

NOTE The service can also manually command the following call: abylon ENTERPRISE: Program \ APMService / or cardcheck abylon login: Program \ SALService / cardcheck

 

The CT32 DLL is only needed if our software with a memory chip card (for example, health insurance card) to be used. In all other cases (for example, debit cards) is the existence of a CT32 DLL NOT required.

If available, the CT32 DLL in the driver installation of card readers installed. Each card reader manufacturer must provide its own DLL CT32, which also have different names. With our search functionality, we offer an aid to Ermittelung the CT32 DLL. Due to the large number of providers can be a proper determination but not guaranteed. In this case, is also a selection of the file manually. As a rule, the CT32 DLL in the Windows or Windows System directory. Here are some examples of providers:

• ReinerSCT cyber Jack: CTRSCT32.DLL
• SCM Microsystems Chipdrive: CTAPIW32.DLL
• Kobil KAAN: CT32.DLL
• Cherry card reader: no CT32 DLL

Should the CT32 DLL search functionality have brought no result and your card reader is not listed, please read the documentation of the card reader or ask the manufacturer if his product is a CT32 DLL (CT-API) offers.

A Operating systemsinstallation with standard-setting can be a password without signs (Blank password) and Auto Logon set. These values are for our logon not permitted and lead to the password dialogue does not appear!
To resolve this problem, assign the appropriate user with a password and turn the car Logon!

 

After uninstalling the correct login abylon all software made by The settings in the registry back on the value of the installation reset. In special cases, it may happen that the global settings by the local settings. In this case proceed as follows:

In the Policies:

1. Open 'Start-> Control Panel-> Administrative' Einstellungsdialogss' Local Security Policy '
2. Jump into the path 'Security Settings-> Local Policy> Security Options'
3. Double-click on the Directive 'CTRL + ALT + DELETE request to sign off'
4. Setting the value:
   Unchecked = CTRL + ALT + DEL dialog will be displayed
   Checked = CTRL + ALT + DEL dialog will not be displayed
   NOTE Verwirrend by double negation!
5. Reboot the computer

In the Registry:

1. Opening the Regitry editor 'Start-> Run-> Regedit'
2. Changes in the following paths:
   a) HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ System
   b) HKLM \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon
3. Setting the values:
   DisableCAD = 0 -> CTRL + ALT + DEL dialog will be displayed
   DisableCAD = 1 -> CTRL + ALT + DEL dialog will not be displayed
   NOTE Verwirrend by double negation!
4. Reboot the computer

NOTE Often the attitudes and policies after a certain time (comparison with the server) or reboot the computer effectively.

In the settings you specify what action the computer if the smart card or USB token is drawn.

In addition, abylon login from version 5.2 the possibility to change the settings without dragging the chip card is an appropriate action immediately. Press just one of the following keys (HotKeys) while dragging the chip card:

• Shift: lock the computer
• Ctrl key: Do not do
• Alt: Out of Computers
• Ctrl + Alt key: shutdown

After dragging the smart card must be the appropriate button (HotKey) so long hold until the computer beeps 2x. Depending on the card reader can take up to 3 seconds!

Windows uses to speed up the registration process a trick by the desktop display before all the drivers loaded and services. This speeds while the application, but can cause problems.

As we have no influence on the order of the loading process, our software must wait until all services and drivers are loaded. This is necessary to include in the smart card or USB token access.

NOTE About the slide in the settings, the logon process accelerated or delayed!

 

1. abylon login is not activated!
2. The Option 'accounts creation for new smart cards during the Windows application not allow' is! When you activate this option can also be used in settings not a new account!
3. The smart card is not an EC card, a health insurance card, a certificate chip card or a USB token!
4. The EC-card features a magnetic strip and not smart!
5. The EC card must mention the PC / SC driver installed!
6. In the case of health insurance cards must necessarily a CT32.DLL installed!
7. With a certificate smart card or USB tokens must necessarily the right CSP in the appropriate box!
8. They have a smart card reader with older drivers. This may only entries with a memory size of 40 bytes pick up. The new debit cards, however, entries with up to 255 bytes aufgelesen!

To fix this, make sure

1. abylon that login is enabled!
2. that the recruitment option during the creation of accounts is disabled!
3. that you have to support a smart card or USB tokens!
4. that you are in possession of an EC-card chip!
5. that an appropriate PC / SC driver! (NOTE Reiner SCT card reader is the default installation of these drivers are not installed - download on the homepage http://www.reiner-sct.de)
6. that a CT32.DLL installed. If you have problems, please contact the card reader manufacturer!
7. that the correct CSP in the relevant box. If you have problems check with the manufacturer of the smart card or USB token for a CSP!
8. that a current driver installed. If you have problems, please contact the card reader manufacturers related to an actual driver updates!

The single version can account only when activated Logon created or tested, because only then the required service has started!

To make our software with a Certificate chip card, you must verify the CSP (Crypto Service Provider = interface between the certificate on the smart card and software) in the appropriate field in the register settings. This is the CSP at logon process started and only in this way is an access to the certificate.

The CSP is usually with the smart card certificate and the certificate delivered.

A CSP is not part of our software!

Basically, our software works with all current card readers, who allgemeinübliche standards. If the card reader is installed correctly, you can use the functionality of our software with a normal cheque-book test. These are i.d.R. for each card reader.

If the functionality with a smart card certificate want to test, you'll have used CSP (Crypto Service Provider: Driver interface between the certificate on the smart card and software) in the appropriate settings enter the field. In addition, it is best to the card reader manufacturer or chip card issuer.

For specific questions please feel free to contact us.

 

For the use of abylon login should be included in the options (users must take place before the notification "CTRL + ALT + DEL 'press) disabled. In principle, this is also today from Windows to default. Under Windows NT 4.0, this option explicitly disabled. The corresponding Key 'DisabledCAD' can be found in the Registry (regedit.exe) 'HKLM / Software / Microsoft / Windows NT / CurrentVersion / Winlogon' and must be from 0 to 1.

NOTE If version 4.6 automatically!

 

In this case, for certificates in the smart card application (Logon) is not the right driver is loaded, so abylon login the smart card as a cheque-book deals. They must be easy to setup the CSP modules (drivers) in the corresponding list.

Example Smart Trust driver:
File 'SmartCertmover.exe' in the 'CSP'

To the files in order to obtain, read the instructions of your smart card and your smart card reader or refer to their manufacturers.

This occur only version 7.0. Please download the setup manually at our download site and install this. All settings of the previous version will be adopted. 

Ja, denn bei der Installation muss The software einige Einstellungen vornehmen, wozu nur der Administrator Rechte besitzt. Also melden Sie sich für die Installation als Administrator an oder wenden Sie sich an Ihren zuständigen Administrator.

To a removable storage medium (such as USB stick) as a "key" for the application and encryption or mobile applications (switch "modules on a USB stick") to use, the following conditions must be met:

1. The USB stick must be put
2. The USB stick, a new drive to create
3. The drive must be formatted
4. The drive must be described (for Rights)
5. The drive must have enough space
6. The driver must drive as a "Removable Device" (removable disk) Register

CHM files are so-called HTML help files, with a similar program. For Windows 2000 and Windows XP, the program already with the Operating systems supplied. For older operating systems may be the appropriate viewer (viewer) be installed separately (download from Microsoft>> hhupd.exe).

Other reasons for this error:

1. The help file (*. chm) is not in the program directory.
2. The program was gemappten on a network drive installed. This is the message in the viewer "action canceled". (This is a new security directive from Microsoft and occurs after the security update MS05-26 or MS04-23 on>> More info at Microsoft) 

Situation Case 1: reinstall the program!

Remedy Case 2: To ensure the security restrictions be relaxed so that help files in its own Intranet (network), proceed as follows:

1. Opening the Registydatei 'Start-> Run-> Regedit'
2. Create the following entry:

Key: HKEY_LOCAL_MACHINE
Trail (Subschlüssel): SOFTWARE \ Microsoft \ HTMLHelp \ 1.x \ itssRestrictions \
(if key itssRestrictions "not yet exsistiert, please rebuild!)
Value Name: MaxAllowedZone
Value: DWORD
Value: 1

3. Possibly reboot the computer!

Download the Registry patches without guarantee: show the help file

Note to potential values:

0 = Only local computer (standard for the security update)
1 = Local computer + Local Internet zone (network)
2 = Local computer + Local Internet zone (network) + Trusted pages
3 = Local computer + Local Internet zone (network) + Trusted pages + Internet
4 = Local computer + Local Internet zone (network) + Trusted pages + Internet + Restricted Pages

Possible reason:

1. You have the registration data incorrectly! It is safest if the name and registration key per copy and paste from the email directly into the Registration dialogue copy of our software.
2. Each license key is for each program and each version individually. Check if your registration data for the version you are!

Updates in the same major version number are free. For updates on the next major version number is an update fee am Please join with us in this Contact.

Because of errors in operating systems or other software, and the diversity of use have seemingly coming hardware errors and / or irregularities in the software abylonsoft not necessarily in this software justified.
That is, the interaction between our software and software / hardware products are so complex that they are not in all cases we can be considered. Frequently are also errors and shortcomings in other software (such as the Operating systems), which only in combination with our software to take effect. These errors can be seen in the rule in a general protection fault or a system crash. For these reasons we subject our software before the publication of a very extensive test to the problems and errors to a minimum.

If you still geared for errors in our software carefully, so we will as soon as possible. In order for us to the error / understand the problem, you should us all details:

• Operating System
• Service packs
• Other software
• Where is the error occurred
• If the error reproducible
• Etc...

Please use our support form!

Further see Conditions