Exclude LANDesk Virtual Smartcard Reader from the default Agent installation package

Version 5

    Verified Product Versions

    LANDESK Management Suite 9.6LANDESK Management Suite 2016.x

    Issue:


    Landesk Virtual SMARTCARD Reader is known to cause compatiblity issues with some 3rd party digital signature software, for example Dike.
    If you are using such SW you have two choices:
    1. install the Landesk Agent with your standard configuration (which includes LANDesk Virtual Smartcard Reader by default) and then remove the LD SC Reader from the client devices (more details here: How To: Uninstall LANDesk Virtual Smart Card Reader )

    2. exclude the LD Virtual SC Reader from the default Agent Configuration and deploy the Agent

     

     

    How to exclude Landesk Virtual Smartcard Reader from your default Landesk Agent installation:

     

    Go to the C:\Program Files\LANDesk\ManagementSuite\ldlogon path on the core server and find the INI file with the same name as your default Agent configuration for Windows. For example: if your default Agent config is named "Windows Agent" in the Management Console the INI file will be named "Windows Agent.ini".

    Make a copy of this file (to have a backup "just in case") and open the file for editing. You need to find the section shown below:


    ;Smart card driver

    (X32)FILE39=lddevcon.exe, lddevcon.exe

    (X32)FILE40=LDRemoteSC.inf, LDRemoteSC.inf

    (X32)FILE41=LDRemoteSC.dll, LDRemoteSC.dll

    (X32)FILE42=wudf.cat, wudf.cat

    (X32)FILE43=WUDFUpdate_01009.dll, WUDFUpdate_01009.dll

    (X64)FILE44=lddevcon64.exe, lddevcon.exe

    (X64)FILE45=LDRemoteSC64.inf, LDRemoteSC.inf

    (X64)FILE46=LDRemoteSC64.dll, LDRemoteSC.dll

    (X64)FILE47=wudf64.cat, wudf.cat

    (X64)FILE48=WUDFUpdate_0100964.dll, WUDFUpdate_01009.dll

    FILE49=LDRemoteSC.cer, LDRemoteSC.cer

     

    There will be also an additional section also titled Smart card driver (located about 10 lines below the major section listed above) looking as:

     

    ;Smart Card Driver

    (VISTA)EXEC4=%SYSTEM%\certutil.exe, -addstore -f "TrustedPublisher" "%DEST%\LDRemoteSC.cer", NOWINDOW

    (VISTA)EXEC5=%DEST%\lddevcon.exe, ldinstall LDRemoteSC.inf root\LDRemoteSC, LAUNCHONLY + NOWINDOW

     

    2017-07-27_1540.png

     

     

    To disable both sections you'll have to add semicolon (;) in the beggining of every line in this section so it will look like this:

     

    ;Smart card driver

    ;(X32)FILE39=lddevcon.exe, lddevcon.exe

    ;(X32)FILE40=LDRemoteSC.inf, LDRemoteSC.inf

    ;(X32)FILE41=LDRemoteSC.dll, LDRemoteSC.dll

    ;(X32)FILE42=wudf.cat, wudf.cat

    ;(X32)FILE43=WUDFUpdate_01009.dll, WUDFUpdate_01009.dll

    ;(X64)FILE44=lddevcon64.exe, lddevcon.exe

    ;(X64)FILE45=LDRemoteSC64.inf, LDRemoteSC.inf

    ;(X64)FILE46=LDRemoteSC64.dll, LDRemoteSC.dll

    ;(X64)FILE47=wudf64.cat, wudf.cat

    ;(X64)FILE48=WUDFUpdate_0100964.dll, WUDFUpdate_01009.dll

    ;FILE49=LDRemoteSC.cer, LDRemoteSC.cer

     

    and:

    ;Smart Card Driver

    ;(VISTA)EXEC4=%SYSTEM%\certutil.exe, -addstore -f "TrustedPublisher" "%DEST%\LDRemoteSC.cer", NOWINDOW

    ;(VISTA)EXEC5=%DEST%\lddevcon.exe, ldinstall LDRemoteSC.inf root\LDRemoteSC, LAUNCHONLY + NOWINDOW

     

    Save the .ini file and deploy the agent to a test machine (via a scheduled task) - there should be no Landesk Virtual SC Reader installed on this device. Alternatively uou can create a self-contained Agent installation package to be used for client deployment.

     

    NOTE:

    if you will click the green "Rebuild all" button in the Agent Configuration tab of the Management Console it will enable the relevant lines in the .ini file making the Landesk Virtual Smartcard Reader part of the default Agent configuration again !