This article describes how to use the DualShield Access Card Scanning Utility to generate import files for Tokens & User Assignment for DualShield.
DualShield Access Card Batch Enrollment Tool
The tool is available at our downloads page, in the "Tools" section.
User Interface
The Main interface is divided into three sections. The top left section deals with connecting to your Company's Active Directory (AD). The bottom left section provides a search function for finding a specific user in AD. The Right hand section details what card readers can be used for scanning on the computer and also displays results of scanned cards. At the bottom of this section is the assignment list, which shows all the cards that have been assigned to users in this session.
Active Directory
The Active Directory section lists four user input fields and two buttons, their purpose is listed below:
- DS Domain: The administrator should provide the name of the domain as listed in the "Domains" Section of DualShield that this session will generate tokens for.
- DC: The FQDN/DNS Name of the Domain Controller to connect to.
- User: The User account Username to connect to Active Directory with.
- Pass: The Password Associated with the account name entered in the User field.
- Save Config - Saves the current Active Directory section configuration so that the Active Directory Settings will be pre-configured on launch next time. The Password is Encrypted & Base64 encoded in the config for security purposes.
- Connect - Initiates an LDAP connection using the currently defined Active Directory Settings. Upon pressing this button you will see the Status text alongside change depending on if the connection was successful or not. This file can be located in the same directory as this program's executable, named DSCReader.cfg
Just below this section is the Search Users dialog. Here you can search users from the Active Directory to which you have connected to. When selecting users, their Username is displayed. Selecting an individual user shows you their full Name also for identifying purposes.
Card Readers
The Card readers dialog details the available reader connected to the computer that have been detected. If no readers are present, you can plug one in and hit refresh to try and find it.
Once you have a reader in the list, Select it and press the "Start Scanning" button. This will connect to the selected Card Reader and start a Scanning Session that will continously read cards that are scanned on it. The "Stop Scanning" button terminates scanning on the currently running card scanner device.
Card Details
While you have a Scanning Session running on your selected card reader, scanning cards will populate the "Card Details" section just below.
After a card is scanned, the ID, Serial No. and Description fields are automatically filled in. ID cannot be edited as this is the Unique Identifier of the Access Card. Serial No. is an automatically generated number based on epoch time (as to ensure uniqueness between card scans). This number is used as the Serial number for the token in DualShield later when imported. Serial No. can be edited safely to a number of your choosing, provided that no two tokens share the same serial number in DualShield once imported. Description is automatically generated but can also be edited freely is necessary.
Card Assignment
At the bottom right of the program is the card assignment list. This list will populate after each selected user is paired with the currently scanned card. To Assign a user to a scanned card, the user must first be selected in the Search Users section and a card must have been scanned, which can be indicated if the Card Details section has been automatically populated. After these two conditions have been met, pressing the Assign to Selected User button will create the card assignment and add it to the list.
The Delete Entry button can be used if a mistake is made, by selecting the user and pressing the button.
Generating Import Files for DualShield
After you have scanned all your users, you are ready to generate the files necessary to import into DualShield to make user of these tokens & user assignments. Press the Generate Import Files button, which will then prompt you to supply a filename and location to save two files (.CSV & .XML). These files can then be imported into DualShield via the Repository > Token Management. More details on how to do this can be found at the following links:
Import tokens into Token Repository
Important Notes
- Before you assign the users to the imported tokens in dualshield, you may want to modify the default Access Card Policy in DualShield to automatically activate Access Card tokens when created or assigned if you do not need this additional security feature. This will make rolling out large batches of cards faster as each card will not have to be manually activated by the administrator then.
- This utility has an autosave file located in the directory where the main executable is located, which will automatically save scanned progress every user assignment. If the DSCReader.autosave file is present, it will load all scanned user progress back into the application on launch. This file is destroyed everytime Import files are successfully generated.