In this tutorial, we will be demonstrating how to push the Goverlan Smart Card Driver and Certificate to your client machines with Scope Actions for Smart Card redirection, along with a Windows hotfix to address a bug that will not detect a SHA256 signed certificate within Windows 7 SP1/Server 2008.
If you have never created a Scope Action before, please refer to the below video and the Scope Action Creation Basics article for more information.
This Scope Action will be split into 4 Action Modules:
- Transfer all files to Client PC and Install Hotfix(if needed).
- Reboot PC and Wait for Reboot(if needed, only for Hotfix install completion).
- Import Goverlan Certificate into Trusted Publishers store of Client PC.
- Deploy Goverlan SmartCard Driver to Client PC.
Create a folder titled “Goverlan” on the Goverlan PC or a Network share and copy all of the files that were mentioned above(Hotfix, SmartCard Driver, Certificate). In this case we are creating the file locally using the directory C:\Goverlan.
Create the first Scope Action module and title it “Transfer Files and Hotfix”. You may skip the Hotfix portion, if the windows PC already has the KB mentioned above installed. This Action Module will consist of two Actions:
1. Execute Computer Action > File and Directory Actions > Transfer a Directory
Note: if you are using a network share, you would enter \\shareserver\sharename for Source Directory Local Path.
2.Execute Computer Action > Processes > Run a New Process
Create the second Scope Action module and title it “Reboot and Wait”. This Action module can be skipped if you do not need to install the Hotfix on the client machine. This Action module will consist of one action:
1. Execute Computer Action > Computer Power Actions > Restart (via Goverlan)
Create the third Scope Action module and title it “Install Certificate”. This Action module will consist of one action:
1. Execute Computer Action > Processes > Run a New Process
This will be the Argument String: -addstore -enterprise -f TrustedPublisher C:\Goverlan\GovCert.cer
Create the fourth Scope Action module and title it “Install SmartCard Driver”. This Action module will consist of one action:
1. Execute Computer Action > Software Products > Install Software Package
If you have not created the Software Package for the Smart Card driver, you can create it in the Install Software Package argument area by clicking the ‘…’ icon, then Manage.
The EXE Software Package settings are as follows:
Make sure to add the silent argument strings: /s /v/qn
That’s it, you’re all set! Your final Scope Action should look like the below:
Upon completion of the Scope Action, the remote systems should have the following Goverlan Virtual SmartCard Reader driver installed in the Device Manager.