> ## Default OCF Server Resources Folder

> Use this folder to define the properties that govern the default operation of the OCF server on the local host. The folder includes an Available Resources list and a Defaults list.

> #### Available Resource: Smart Cards

> Use the Smart Card category to define the ocf.server.default.validcards property. The ocf.server.default.validcards property specifies to the OCF server which smart cards are valid for use on the local host.

> ##### To Define the Default Valid Smart Cards

> 1. Select Smart Card from the Available Resources list.
> 2. Click the check box in the default Smart Card list that represents the card type you want as the default.

>    You can pick more than one default card type.

>    Note: | You must also activate the card services for the cards you selected as defaults. If you have not done this, see Configure Card Services Dialog Box.

> 3. Press Apply or OK to convey your choices to the OCF server.

> #### Available Resource: Authentication Mechanism

> Use the Authentication Mechanism property to define the ocf.server.authmechanism property. This property specifies the default authentication sequence to be used by the OCF server on the local host. Solaris Smart Cards offers four authentication mechanisms, which you can select from a pull-down list:

> - User - Individual's UNIX user name must be on the smart card or typed when accessing a client application.
> - Password - Password associated with the individual's UNIX user name must be on the smart card or typed when the user tries to access a client application.
> - PIN - Individual's Personal Identification Number (PIN) must be on the smart card or typed when the user tries to access a client application.
> - Challenge-Response - Challenge-response authentication sequence must occur between the host and the smart card before the individual can access the client application.

> For conceptual information about these authentication mechanisms, refer to the Solaris Smart Cards Administration Guide.

> #### To Define the Default Authentication Sequence for the OCF Server

> 1. Select Authentication from the Available Resources list.
> 2. Beginning editing the authentication sequence by:
> 3. Pressing Add to choose an additional authentication mechanism.
> 4. Pressing Modify to change the currently selected mechanism.
> 5. Pressing Delete to delete the currently selected mechanism

>    A combo box displays.

> 6. Pull down on the arrow to display the authentication mechanisms and choose additional mechanisms, as needed.

>    Note: | The order of mechanisms in the Default Authentication list is the actual order of the authentication sequence tried by the OCF server.

>    You can pick more than one default authentication mechanism. Press Apply or OK to convey your choices to the OCF server.

> Continue configuring the host by pressing the NEXT button.

> Go on to configure host authentication by going to Getting Started With Configuring Host Authentication.

Sun Microsystems, Inc. http://www.sun.com

Copyright © 1999 Sun Microsystems, Inc.