General

Use this parameter to get a warning message when a CA has expired. Specify common name from the issuer field, use ; to set multiple issuers. Default none, no warning message.

Use this parameter to get a warning message when a smart card is about to expire or has expired. Specify the number of days before the expiry that the message should be shown. It is also possible to specify a specific issuer name to only check certificates from a certain issuer and ignore all other certificates, separate with ,. May also specify a list of number of days and issuer names, separate with ;.

The card is about to expire when there is no certificate available with a validity that is longer than the specified number of days added to the current date.

Default value is 0; no warning message.

The warning message may be replaced with a custom action dialog, see Links Action for more information.

Use this parameter to get an event when a smart card without any or a specific certificate is inserted. The value may specify a token model name and token serial number followed by the CA which is wanted. All values may be empty, which means that any smart card without certificates will generate an enroll event. Token model name requires a complete string match and token number requires a start string match. May also specify a list of values, separate with ;.

There is no warning message dialog, but it is possible to specify a custom action dialog, see Links Action for more information.

Identical to CheckCardExpire, but will check soft tokens instead of smart cards.

Use this parameter to enable/disable register of supported smart cards in Registry.

Smart cards must be registered to handle CryptoAPI applications using smart card reader names when connecting towards the CSP. Typical applications are Microsoft smart card logon on all Windows platforms.

Default value is 1; smart cards are registered.

Use this parameter to listen to custom events. The value is a list of event names separated with ; and the action is specified in section Event <name>.

The event is generated by calling the main loader component.

There is also a special INTERNAL event, the name must still be specified in the list if used. The INTERNAL event will start the event by using the main loader.

This command will show the about box in the background service context.

Use this parameter to specify which applications that enables/disables extending of some menu entries for Windows Explorer.

[General]
ExplorerExtension=explorer.exe

Default value is none; No applications will be configured.

Use this parameter to enable/disable extending of some menu entries for Windows Explorer.

Default value is 1; Explorer menu is available.

Use this parameter to configure a list of services that will be started/stopped by CertMover. Services in the list are separated by semicolon.
Default value is none; No services will be configured.

Use this parameter to enable/disable installation of short cuts in the start menu.

Default value is 1; start menu entries are available.

Use this parameter to set access mode for the background service when moving certificates to CryptAPI store. The moving will be initiated by checking the smart card insert/remove event or via polling. The polling will occur each ten seconds, and the insert/remove event may be checked via PC/SC or PKCS#11.

There are also two different modes for reading certificates when a event is detected via mode above, either using PKCS#11 or CSP.

Those two values are added for the complete access value.

Default value is 0x13.

Use this parameter to show/hide the taskbar icon. The task bar icon will contain a menu with some short cuts for common tasks, see TaskbarMenuMode below for more information. The taskbar icon will also show progress when cards are inserted or removed.

Default value is 1; task bar icon is visible.

Use this parameter to limit the number of components that should be visible on the taskbar menu.

Combine the bitmasks with OR operation to select which components that should be visible. For example, to show all above:

TaskbarMenuMode=0x07DF

Default value is 0x07Df; all components are visible.

Use this parameter to install the certificate service as a Windows service or a background process. The certificate service is the process which may show a taskbar icon with menu.

Default value is 1; certificate service is installed as a Windows service.