1. CardReader_Broadcom_1.0.0.243_W7x64W7x86_A.zip Driver
2. AD Instructions.txt File Contents

AD Instructions.txt Driver File Contents (CardReader_Broadcom_1.0.0.243_W7x64W7x86_A.zip)

Setting up for Active Directory testing:
----------------------------------------
1) Set up an ActiveDirectory server where you have administrator control.
	a) Ensure the support tools are installed... refer to
		http://technet.microsoft.com/en-us/library/cc755948.aspx
2) Create an account for the firmware to use.  This account is NOT for use in authenticating to the firmware.
	a) Click Start->All Programs->Administrative Tools->Active Directory Users and Computers
	b) Click Action->New->User
		Fill out the details of the account.  The User Logon Name is the important value here.
		The example will use the user logon name DASHManagementUser
		Click Next
	c) The example will use the password "T0psecret" (no quotes, second character is a zero)
		Important: At this time, there is no way to use non US-ASCII characters in a password.
		Enter the password
		Important: Ensure "User must change password at next logon." is *not* checked
		Important: Ensure "Password never expires." *is* checked.
		Click Next
	d) Click Finish

3) Use the setspn command to map the account to the service principal name, HTTP/<host name or IP address>, to a
	Microsoft user account. We will assume the hostname (which must be resolvable on both systems) is "soledad"
		setspn -A HTTP/soledad:623 DASHManagementUser
	You can also set up an SPN by IP address in addition to a hostname based one.  Assuming an IP address of
	192.168.0.2:
		setspn -A HTTP/192.168.0.2:623 DASHManagementUser

	For use with Internet Explorer, the management service MUST be the only HTTP service supporting Negotiate
	at the specified host, and the port number must be left off.
		setspn -A HTTP/soledad DASHManagementUser
		setspn -A HTTP/192.168.0.2 DASHManagementUser

4) Map an Active Directory group SID to a TruManage Role
	a) Find the SID for the "Domain Admins" group
		- Install adfind utility (http://www.joeware.net/freetools/tools/adfind/index.htm)
		- Run the command ``adfind -default -f "anr=Domain Admins" objectSID''
		- Copy the objectSID value (ie: S-1-5-21-653784745-370644826-2676878800-512)
	b) run "bmcc edit"
	c) U (User Account Management) -> 1 (User Roles) -> 1 (Administrator Role)
	d) Set the SID to the value copied in the step 4-a
		5=S-1-5-21-653784745-370644826-2676878800-512
	e) <Enter> three times to return to main menu
	f) W (Web-Based Management)
	g) Ensure that Active Directory Authentication is enabled (option 10)
	h) Set the Active Directory Password to the one from step 2-c
		11=T0psecret
	i) <Enter> to return to main menu
	j) Q (Save and Quit)


5) For use with Internet Explorer, the system will need to be added to the local intranet zone.
	a) Tools->Internet Options
	b) Select the "Security" tab
	c) Select the "Local intranet" zone and click "Sites"
	d) Add the URL for the service (ie: http://192.168.0.2:623)

Captures:
Web-based Management Settings:
 
0.  Return to previous menu [Enter]
1.  HTTP Settings......................: Disabled
2.  HTTP over TLS (HTTPS) Settings.....: Enabled (Port 664)
3.  HTTP Session Timeout...............: 30 seconds
4.  HTTP GET (HTML User Interface).....: Enabled
5.  HTTP Digest Authentication Only....: Disabled
6.  Anonymous WS-Identify on /wsman URI: Enabled
7.  WS-Management "OperationTimeout"...: Ignore
8.  WS-Management "ProductVendor"......: "Broadcom Corporation"
9.  CIM Instance ID OrgID..............: "BRCM"
10. Active Directory Authentication....: Enabled
11. Active Directory Password..........: <not displayed>
12. CIM_ComputerSystem Properties...
 
User Role #1 Settings:
 
0.  Return to previous menu [Enter]
1.  Administrator.................: True
2.  Element Name..................: "Administrator Role"
3.  Common Name...................: "BRCM:Administrator"
4.  Privileges....................:
5.  Active Directory SID..........: S-1-5-21-653784745-370644826-2676878800-512