GO Workforce software installation guide

Go to Smart ID Desktop App requirements and interoperability for more information about prerequisites.

Set installation options. For more information about installation options, see Install and upgrade Smart ID Desktop App.

To roll out customized settings to your users (example: logging options to be enabled), you must run the Metadata tool for Smart ID Desktop App. For more information, see Smart ID Desktop App metadata tool.

With the tool you can gather information about Smart ID Desktop App metadata for backup or in order to investigate issues with Smart ID Desktop App. The tool also allows you to easily modify Smart ID Desktop App settings. This can be used to customize Smart ID Desktop App settings directly with the app installation, or to restore it.

1. Prepare a json file to be imported by the Metadata tool:

   Example: A json file which can be imported by the tool

   CODE

   {
       "AlwaysFlushLogFile": "true"
       "LogLevel": "Trace",
   }

2. When the Smart ID Desktop App has been installed, run this command:

   CODE

   metadatatool.exe -i loglevel.json

Go to Personal Desktop Client requirements and interoperability for more information about prerequisites.

Set installation options. For more information about installation options, see Install Personal Desktop Client.

All files (iD2ppa.cfg, personal.cfg and pin.cer) will be provided by the GO Services delivery team.

1. Place iD2ppa.cfg into C:\Program Files (x86)\Personal\config
2.  Also place iD2ppa.cfg into %appdata%\Personal\config
3. Place personal.cfg into C:\Program Files (x86)\Personal\config
4. Also place personal.cfg into %appdata%\Personal\config
5. Overwrite (if) any existing files.
6. Create a folder in C:\ called Nexus and then a sub-folder called Personal
7. Place pin.cer into C:\Nexus\Personal

The provided files include these changes:

Line 15 in iD2ppa.cfg is adapted to map the pin.cer directory (C:\Nexus\Personal)
Line 130 in iD2ppa.cfg is adapted to map trace logs to the directory C:\Nexus\Personal\logs
Line 14 and 15 in personal.cfg is adapted to include CacheValidity=0

Do not change these values without assistance of Nexus.

Go to Smart ID Mobile App requirements and interoperability for more information about prerequisites.

See https://supportportal.thalesgroup.com/csm.

If the Thales Smart Card minidrivers is not present in your OS catalogue for drivers, it can be downloaded on above mentioned website and manually distributed.

You can also download Thales SafeNet Authentication Client (SAC) software, but this is not required to use the smart cards in the Nexus solution.

Encoding instructions:

1. To encode MD830/930 and/or MD940 Smart Cards, the DLL 'IDPrimePKCS1164.dll', which is installed with SafeNet Authentication Client (SAC), must be present in C:\Windows\system32.
2. During installation of SAC, select Custom Installation during setup and select the following feature:
   1. Core > IDPrime PKCS#11 (Core (IDPrime PKCS#11))
3. When that is installed, you can find the DLL file in the installation directory, and you can move it to the System32 directory mentioned above.
4. Optional: You can uninstall SAC and distribute the DLL file as required. The file is not available outside the installation client.

For more information, see https://www.yubico.com/support/download/.

• To use YubiKey PIV, you must install the YubiKey Smart Card Minidriver.
• Encoding of YubiKey PIV is done with Nexus Smart ID Desktop App