Operation Manual

Security functions
SmartCard user grou ps
SmartCard
User groups can be set up using SystemLock. This enables several systems to be started with one
SmartCard. A user group consists of at least two systems. E a ch user that is allowed to start the
systems is provid ed with one SmartCard. The user can start any of the systems using this SmartCard.
Basic information on setting u p user groups
When installing SystemLock,therst PC in the user group is set up as a "Single PC". The
Admin SmartCard generated during this process is used to set up the user group. SystemLock
sets up each add itional device as a "Group PC" during installation. The existing Admin
SmartCard is inserted, information is read in and the de vice is added to the user g roup.
The Admin SmartCard determines which user group the device belongs to.
If you use FSC-CardOS SmartCards, SystemLock can be administered via the Windows
program "Syst emLock Admin". "SystemLock Admin" allows you to conveniently manage
SystemLock at the operating system level, create SystemLock Organisation Units and Group s,
generate SmartCards for these O rganisation Units or Groups, assign access rights for user
cards at various levels and restore access rights using remote access. You can also change
the S martCard’s PIN or PUK for yourself and other users and reactivate blocked cards.
For a detailed description, see the "SystemLock Admin" Help manual.
User SmartCa
rds or SuperUser SmartCards must still be generated using SystemLock so that
users can acc
ess the systems within the user group. Using a User SmartCard or SuperUser
SmartCard a
user can log on to each system within the user group.
Fujitsu Technology Solutions 85