1. Support
  2. Tutorials
  3. Scope Actions – How to Deploy the Goverlan Smart Card Driver and Certificate

Scope Actions – How to Deploy the Goverlan Smart Card Driver and Certificate

In this tutorial, we will be demonstrating how to push the Goverlan Smart Card Driver and Certificate to your client machines with Scope Actions for Smart Card redirection, along with a Windows hotfix to address a bug that will not detect a  SHA256 signed certificate within Windows 7 SP1/Server 2008.

If you have never created a Scope Action before, please refer to the below video and the Scope Action Creation Basics article for more information.

Disclaimer:

**These tutorials are for demonstration purposes. Please test all Scope Actions before deploying them into production.**

Information


You will need to download the hotfix if it is not already installed on your client machines(KB2921916), as well as the latest Goverlan Smart Card Driver and Goverlan Certificate.

This Scope Action will be split into 4 Action Modules:

  1. Transfer all files to Client PC and Install Hotfix(if needed).
  2. Reboot PC and Wait for Reboot(if needed, only for Hotfix install completion).
  3. Import Goverlan Certificate into Trusted Publishers store of Client PC.
  4. Deploy Goverlan SmartCard Driver to Client PC.

Step 1

Create a folder titled “Goverlan” on the Goverlan PC or a Network share and copy all of the files that were mentioned above(Hotfix, SmartCard Driver, Certificate). In this case we are creating the file locally using the directory C:\Goverlan.

Step 2

Create the first Scope Action module and title it “Transfer Files and Hotfix”. You may skip the Hotfix portion, if the windows PC already has the KB mentioned above installed. This Action Module will consist of two Actions:

1. Execute Computer Action > File and Directory Actions > Transfer a Directory

 Note: if you are using a network share, you would enter \\shareserver\sharename for Source Directory Local Path.



2.Execute Computer Action > Processes > Run a New Process

Note:

The Run As Type must be an account that has admin access to the C drive of the client machines, preferably use a Domain Administrator account.

After creating the two Actions, your first Action Module should look like the below:

Step 3

Create the second Scope Action module and title it “Reboot and Wait”. This Action module can be skipped if you do not need to install the Hotfix on the client machine. This Action module will consist of one action:

1. Execute Computer Action > Computer Power Actions > Restart (via Goverlan)

Step 4

Create the third Scope Action module and title it “Install Certificate”. This Action module will consist of one action:

1. Execute Computer Action > Processes > Run a New Process

This will be the Argument String: -addstore -enterprise -f TrustedPublisher C:\Goverlan\GovCert.cer

Note:

Note: The Run As Type user account must be a local administrator of the client machine, preferably a Domain Administrator account.


Step 5

Create the fourth Scope Action module and title it “Install SmartCard Driver”. This Action module will consist of one action:

1. Execute Computer Action > Software Products > Install Software Package
    If you have not created the Software Package for the Smart Card driver, you can create it in the Install Software Package argument area by clicking the ‘…’  icon, then Manage.

The EXE Software Package settings are as follows:

Make sure to add the silent argument strings: /s /v/qn

Step 6

That’s it, you’re all set! Your final Scope Action should look like the below:

Upon completion of the Scope Action, the remote systems should have the following Goverlan Virtual SmartCard Reader driver installed in the Device Manager.

Was this article helpful?

Related Articles