Watch

Argument -w is used to wait with the execution of the command until a smart card is loaded, meaning all certificates are read. This value only has meaning for insert commands.

Argument -match is used to select a specific certificate which should be used when generating an event. The match criteria consist of an issuer field and an optional key usage.

Argument -wait is used to specify the number of seconds to wait for a command to finish, may use separate values for insert and remove.

Argument -message is used to specify a message to be shown when command is executed, may use different messages for insert and remove.

Argument -hide is used to specify that the command should be executed hidden, may separate with different messages for insert and remove.

Argument -sync is used by remove event. When specified remove events will not be generated until after a smart card is inserted.

Argument -logon is used only to generate a remove event for the currently logged on user.

Argument -term is used by remove event. Will require the process started at insert event to be terminated, currently only a single process may be terminated.

Argument -recognized is used to require that the smart card is recognized, unknown cards will not generate any events.

Command "application" is used to start any application <binary> with any argument <argument>.

application c:\windows\notepad.exe c:\iid.txt

Successful execution will always require the process to start, but may also depend on "-wait" argument if present.

Command "close" is used to close a Microsoft Windows application. Specify the <windows name> that should be closed.

Example:

close "iid - Notepad"

The execution will always be considered as successful.

Command "extern" may be used for insert command to read user information from an external library. The smart card is not supported internally, but instead the reader name is sent with the specified command arguments. The library must export a function with the following syntax:

int CALLBACK

ReadCommand(

const char* pszReader,

const char* pszCmd,

char* pszData,

unsigned long nData)

Return non-zero for success and the data buffer should return username and domain information, separated with ‘;’.

extern c:\iid.dll,-iclassid –config c:\iid.txt

After a successful command execution the set command below will be executed with the collected user information.

This execution will be considered as successful if the user information is collected successfully.

Command "kill" is used to terminate or kill an application. Will search for a process with the specified binary and try to kill that process.

kill c:\windows\notepad.exe

This execution will always be considered as successful.

Command "load" will load a library and call the specified function. The function syntax must follow the parameter syntax used by rundll32.exe:

load c:\iid.dll,EntryAdmin -argument

This execution will be considered to be successful if the function is found in the specified library, but will have no requirements for the function to return value.

Command "open" may be used on Windows platform to open a file type defined in Registry.

open c:\temp\iid.txt

This execution will always be considered as successful.

Command "set" either specifies a configuration file or a Registry key which will be updated with user information found on the inserted smart card. Argument "-match" may be used to specify search criteria for the user information.

set –config c:\temp\iid.txt

set –registry HKLM\Software\SecMaker\Info

This execution will be considered to be successful if user information found.

A command "script" may be used on Windows platforms in the same manner as "open", the difference is that it will be executed hidden.

script c:\temp\iid.vb

This execution will be considered to always be successful.