Issuer Preferences

Issuer preferences are name-value pairs stored in an ArcotID PKI. These preferences are also referred to as ArcotID PKI attributes. The supported attributes in the ArcotID PKI Client include:
aa813test
Issuer preferences are name-value pairs stored in an ArcotID PKI. These preferences are also referred to as ArcotID PKI attributes. The supported attributes in the ArcotID PKI Client include:
  • url_main
    URL of the ArcotID PKI issuer (for informational purposes only.)
  • Banner
    Binary data of the logo image present on ArcotID PKI.
  • url_help
    URL where the user can look for help related to this ArcotID PKI.
  • input_method
    Determines the way how the ArcotID PKI password can be received by the ATM-style GUI. Possible values include:
    • mouse
      Input can only be entered by using the mouse. Pin-pad is visible but password edit box is disabled.
    • keyboard
      Input can only be entered by using the keyboard. Pin-pad is hidden and password edit box is enabled.
    • dual
      Both mouse and keyboard can be used for entering the input. Pin-pad is visible and password edit box is enabled.
    • not set
      Required to be set. If not set, an undefined error appears.
  • userID
    User ID of the ArcotID PKI. The User ID and the card name of the ArcotID PKI are stored in an extension in the Arcot certificate.
  • Org
    Organization name of ArcotID PKI.
  • Domain
    Domain name of DNS domain where the ArcotID PKI was downloaded. This attribute is set by the client software at the time when the ArcotID is downloaded, for example, arcot.com.
  • Key Store
    The binary value of the key bag. Additional application keys protected by using the Key Authority features of AuthMinder.
  • KeyFortURL
    The URL of the AuthMinder Key Authority (optional).
  • KeyFortUseWinInet
    Determines whether or not native WinInet or WinHTTP, or both the libraries should be used for HTTP communication for Key Authority.
  • KeyFortSecret
    It can be used to have an additional secret to protect the keybag, beyond the normal process.
  • scrstyle
    Determines how often the pin-pad should be scrambled in the ATM GUI. This is ignored if
    input_method is set to keyboard. Possible values include:
    • never
      Pin-pad is never scrambled.
    • once
      Scramble the pin-pad only once, when pin-pad is initially displayed.
    • always
      Scramble the pin-pad every time a pin-pad key is clicked or pressed.
    • not set
      The default value
      once
      will be set.
  • scrorder
    Determines the manner in which the pin-pad is scrambled. This attribute is ignored if input_method is set to keyboard or if scrstyle is set to never. Possible values include:
    • random
      Scrambling is done randomly. For example, "7253081496".
    • sequential
      Scrambling is sequential. For example, "4567890123". The sequences "9012345678", "0123456789" are not allowed because the values are not scrambled completely.
    • not set
      The default value random is set.
  • storage_type
    Configures allowable storage medium for the ArcotID. Possible values include hd_usb_memory, or any combination of hd, usb, and memory delimited by the an
    underscore
    character. The default behavior is any. See "ArcotID Storage" for more information.
  • devlock_required
    Configures whether the device locking feature is required for the ArcotID PKI. Possible values are yes and no. The default value for the devlock_required attribute (if it is not present or holds an invalid setting) is no.
    If the value is set to no, then the device locking can still be enabled by JavaScript using SetAttribute (DeviceLocking) because of the higher precedence.
  • devlock_type
    A sequence of parameters delimited by underscores. For example, moth_bios_hd. The value all means all parameters are included for device locking. If no valid attribute is provided, then the default value all is used (assuming device locking is required or enabled by Application preferences).
    A value of no does not rule out the use of device locking if the application JavaScript sets a preference using SetAttribute(DeviceLocking).