1. Bio3SP2_English.zip Driver
2. Readme_English.txt File Contents

Readme_English.txt Driver File Contents (Bio3SP2_English.zip)

===========================================================
                    BioLogon README file
                          May 2002
===========================================================

               BioLogon for Windows NT/2K/XP
                 Version 3, Service Pack 2

              Copyright (c) 1998-2002, Identix
                    All Rights Reserved


Identix BioLogon for Windows provides biometric authentication to the
network through fingerprint verification.  BioLogon is compatible
with all Identix approved hardware products.

This README file contains important, last minute information about
BioLogon 3 and its installation.

Please see the User Guide for more detailed information on items such
as minimum system requirements.  The User Guide is located in the
following location on the CD:

	BioLogon\WinNT2K\<Language>\Docs\UserGuide.pdf

For additional information on Identix products and solutions, please
visit our web site:

        http://www.identix.com


=================
TABLE OF CONTENTS
=================

1. Upgrading Previous versions of BioLogon
2. BioLogon utilities
3. Thin Client Support
4. Known issues
5. How to get help
6. Troubleshooting


======================================= 
UPGRADING PREVIOUS VERSIONS OF BIOLOGON
=======================================

It is strongly recommended that you update all existing installations
of BioLogon to the version included on this CD. This version contains
features and quality improvements not found in earlier versions of
BioLogon. Updating all installations of BioLogon on your network will
ensure that you will be able to fully utilize the latest features and
enhancements without having to worry about any compatibility issues.
This is especially important if you will be using newer fingerprint
readers, such as the BioTouch PC Card or the BioTouch USB.

To update an existing installation of BioLogon, begin by uninstalling
the previous version. This is done through the Add/Remove Programs
applet in the Control Panel. Once the previous version of BioLogon
has been removed, you can proceed with the standard installation
process, described in the BioLogon User Guide. All previously created
biometric User accounts will remain intact.  Please review the Known
Issues section of this document for more information on uninstalling
previous versions of BioLogon.

If you have an existing installation of the Client/Server edition
of BioLogon, it is recommended that you begin by updating all
copies of BioLogon Server on the Domain Controllers before updating
the Clients.


==================
BIOLOGON UTILITIES
==================

BioLogon installation CD includes useful utilities located in the
Utils folder. BioLogon Utilities may help you to identify and solve
possible problems. Refer to the file Utils.txt that contains the
description of BioLogon Utilities.


========================
WINDOWS 95/98/Me SUPPORT
========================

BioLogon 3 is optimized for Windows NT, Windows 2000, and Windows XP.
Users of Windows 95, Windows 98, and Windows Me can utililze 
biometric authentication by installing BioLogon 2.03. For convenience, 
we have included the complete BioLogon 2.03 release of on this CD.

The installation files for BioLogon 2.03 are contained in the 
"Previous Versions" folder. To install BioLogon 2.03 on a computer 
running Windows 95, Windows 98, or Windows Me, locate and run 
Setup.exe in the appropriate subfolder for the language and edition 
of BioLogon you would like to install. For more information on the 
Desktop and Client/Server editions, see the MoreInfo.txt file in 
the BioLogon.203 folder.


===================
THIN CLIENT SUPPORT
===================

To enable remote biometric authentication on a Windows 2000 Server
running Terminal Services or a Windows 2000 Server running Citrix
MetaFrame, simply install BioLogon 3 and a BioTouch USB reader.  Once
the system has been rebooted, it will support authenticating remote
users.

On the Client side, the Identix Fingerprint Reader Components must be
installed.  On a PC, this can be accomplished by installing them
directly from the BioLogon 3 CD.  Users of Thin Client terminals will
need to obtain a firmware update containing these components.
(Please check the Identix web site for the latest list of supported
Thin Client devices.)  In addition, a BioTouch USB reader must be
attached to the Client.

Note: At this point, BioLogon does not support Microsoft’s Terminal
Services Advanced Client.


====================================
KNOWN ISSUES - ALL OPERATING SYSTEMS
====================================

** READER MAY REQUIRE MANUAL TUNING IN CERTAIN LIGHT CONDITIONS:

Certain lighting conditions may cause the automatic tuning of the
fingerprint reader to not optimally identify a finger for
authentication. In addition, if the lighting conditions at the
fingerprint reader location vary over time, the User may need to
re-tune the reader to compensate for these lighting changes. Results
from these conditions may cause the User to get an unusually high
amount of fingerprint rejections or errors stating that a valid
fingerprint could not be detected. If these conditions occur, the
User should first attempt to automatically tune the fingerprint
reader again by using the Tune button on the Fingerprint Reader tab
of the BioLogon Security Control Panel applet. If there is no
improvement, the User should manually adjust the Brightness slider on
the Fingerprint Reader tab to make the fingerprint image slightly
darker. The Presence value is directly based upon the Brightness
setting. A User should verify that a Presence value of greater than
50% is obtained with a casual finger presentation.


** TWO FINGER LOGON & OLDER BIOLOGON CLIENTS:

Users whose account is configured to use the two-finger logon feature
cannot use older BioLogon clients for logging into a Windows Domain.
Upon attempting to log on, the User will see an error message that
begins, "Could not load message from module …".  To provide full
support for the latest features in BioLogon 3, please update all
clients to the latest version of the software.


** UPDATING A BIOMETRIC WORKSTATION POLICY:

When updating a Biometric Workstation Policy, it is important to
exercise care.  Make sure at least one User account with
Administrative privileges will be able to access the workstation
after the changes.  Failure to do so may prevent any further
administrative changes on the workstation.


** UNINSTALLING BIOLOGON:

Within BioLogon, it is possible to configure User accounts to use
random passwords.  Such accounts should be updated to use a non-random
password prior to uninstalling BioLogon.  Otherwise, the User will
not be able to log on once BioLogon has been uninstalled.


** CANCELLING UNINSTALLATION:

Do not cancel the uninstallation of BioLogon, once it has started. 
Doing so can prevent BioLogon from successfully being installed or 
uninstalled in the future. If uninstallation was started in error, 
allow the process to complete. Afterwards, BioLogon can be 
re-installed.


** CANCELLING SILENT INSTALLATION:

Do not cancel the silent installation of BioLogon, once it has 
started. Doing so can prevent BioLogon from successfully being 
installed or uninstalled in the future. If the installation was 
started in error, allow the process to complete. Afterwards, BioLogon 
can be uninstalled.


=========================
KNOWN ISSUES - WINDOWS XP
=========================

** BLANK PASSWORDS & BIOLOGON:

By default Windows XP has a policy that limits accounts with blank
passwords to console logon functionality only.  This policy
prevents the authentication procedure during fingerprint enrollment
for User accounts with blank password.

It is possible to disable this security policy.  However, we
recommend keeping this policy in place and simply requiring all
BioLogon Users to have a non-blank password.  If this approach
is adopted, it is important to note that all new User accounts
are created with blank passwords.  To avoid any conflicts with
BioLogon, it is necessary to explicitly set a password for all
newly created User accounts.


** BIOSHIELD & FAST USER SWITCHING:

At this time, BioShield does not support the Fast User Switching
feature in Windows XP.  When installed, the BioShield service will
start each time a User logs into the system.  However, if the system
is “switched” to another User, without the first User logging off,
BioShield will not be available to the second User.  Once the system
has been switched back to the first logged on User, BioShield will
resume its normal function.


** INSTALLING A USB FINGERPRINT READER WITH BIOLOGON SOFTWARE

To install BioLogon and a BioTouch USB fingerprint reader on Windows
XP, start by plugging the reader into an available USB port. Within a 
short period of time, the New Hardware Wizard should appear. Cancel 
the Wizard dialog. Once you have done this, insert the BioLogon CD and 
follow the on-screen instructions.


===========================
KNOWN ISSUES - WINDOWS 2000
===========================

** BIOLOGON & ACTIVE DIRECTORY:

When installing BioLogon on multiple Domain Controllers within the
same Domain, it is important to begin with the server that is
configured as the Active Directory Schema Master.  Installing the
software on the Domain Controllers in a different order may result in
a delay before fingerprints can be enrolled in BioLogon.


** CHANGES IN THE USER ACCOUNT DO NOT BECOME EFFECTIVE IMMEDIATELY:

This situation takes place if your domain has multiple domain
controllers. Due to design of Active Directory it may take several
minutes or more before Windows 2000 will replicate all the User
account modifications from one domain controller to the other domain
controllers. Consequently until the replication is completed the User
policy or fingerprints could be different on different domain
controllers. That may result that for the short period of time after
enrollment the User cannot logon with  fingerprint or smart card.


** BIOLOGON AND WINDOWS USER ACCOUNTS ARE NOT SYNCHRONIZED:

If the domain has multiple domain controllers and BioLogon Security
System is not installed on all of them, Windows and BioLogon User
accounts may become unsynchronized.  As a result, the User may see an
additional prompt requesting the entry of the new password.  To avoid
this, install BioLogon Security System on all the domain controllers
in the domain, or use the following practice:

	- Do not change User domain password from a workstation
          that does not have BioLogon installed.

	- Do not reset a User's domain password via the Set Password
          feature within Active Directory Users and Computers dialog.


** UNINSTALLING BIOLOGON SECURITY PACK:

The uninstallation program for BioLogon Security System does not
automatically remove the BioLogon Security Pack components under
Windows 2000.

Uninstalling BioLogon before uninstalling Security Pack will leave
Security Pack in an inoperable state.  This condition is
uncorrectable.

To avoid this problem, please be sure to uninstall Security Pack
before uninstalling BioLogon.


=========================
KNOWN ISSUES - WINDOWS NT
=========================

** REMOTE ACCESS & MULTIPLE WINDOWS DOMAIN CONTROLLERS:

BioLogon User credentials will not be automatically replicated
Between multiple Windows NT Domain Controllers.  This may result in a
User being prompted to enter his or her Remote Access password on
more than one occasion.


** RERUNNING SERVICE PACK 3 ON WINDOWS NT AFTER BIOLOGON SECURITY
SYSTEM INSTALLATION MAY CAUSE ERROR:

The User may receive a service startup error upon subsequent reboot
of the machine after rerunning the NT service pack 3 installation if
the BioLogon Security System has been previously installed. If this
occurs, restart the machine and the message should not appear.


** RERUNNING SERVICE PACK 3/4/5 ON WINDOWS NT AFTER BIOLOGON SECURITY
SYSTEM INSTALLATION MAY CAUSE MICROSOFT LOGON GINA TO BE SELECTED:

Rerunning the Windows NT service pack 3 installation may cause the
Microsoft Logon GINA to display. This is the initial logon screen
that prompts for User Name, Domain and Password. The Biometrics Logon
Interface adds support for fingerprint logon. To set the Biometrics
Logon Interface again, run the BioLogon Security Control Panel Applet
for Windows NT. Select the Components tab and verify that there is a
checkmark in the Biometrics Logon Interface box. Clear the check box
and recheck it, then click OK to reapply. When the system is
restarted, the User is able to log on using a registered fingerprint.


** RERUNNING SERVICE PACK 3/4/5 OR INSTALLING INTERNET EXPLORER ON
THE COMPUTER WITH THE BIOLOGON SECURITY SYSTEM CAN CHANGE LOGIN
CONFIGURATION:

The system can revert to Microsoft Logon Interface after the service
pack or Internet Explorer are installed on the machine configured for
biometrics logon. To try and resolve any such conditions, the User
should do the following:

  - Select the Start->Run... menu option.
  - Enter the following command and parameter and then click the OK
    button to execute:

	regsvr32 rsabase.dll

Reboot the system. This registers certain Internet Explorer
components and is a recommended action from Microsoft. After
rebooting, the BioLogon Security System should become active and
prompt the User for logon information.

For Windows 95/98/Me you may need to set the Biometric Client as your
Primary Network Logon via Control Panel | Network Properties.


** BIOLOGON SECURITY SYSTEM DOES NOT WORK WITH FRENCH (STANDARD)
REGIONAL SETTINGS:

If the BioLogon Security System is installed on the French release of
Microsoft Windows NT it will not work if the regional settings
(locale) are set to French (Standard). The BioLogon Security
System will run fine if the regional settings are set to French
(Belgian, Canadian, Luxembourg, or Swiss). This behavior is due to
the fact that Microsoft CSP (Crypto Provider) does not support
encrypt functionality in France because of the French import laws.
If you need to install the BioLogon Security System on French version
of Windows NT check that your regional settings are not French
(Standard).


** JAPANESE VERSION OF BIOLOGON SECURITY SYSTEM FOR WINDOWS NT CAN
NOT LOGON INTO DOMAIN:

Japanese version of BioLogon Security System (client) for Windows NT
cannot log the User into the domain running Japanese version of
Windows NT if the computer names for domain controllers are in
multi-byte characters. A system administrator can fix this problem
by changing the computer names of all domain controllers into single
byte character set. This change does not require any modifications in
the network settings for the domain members because the domain name
stays intact.


===============
HOW TO GET HELP
===============

If you have any problems with this product, first read this file and
the BioLogon Security System online help and printed manuals.

If you need assistance contact the technical support of the
applicable authorized reseller.

When calling technical support, please have the following information
available:

	- The specific steps necessary to reproduce the problem you
	  are experiencing

	- A daytime telephone number where you can be reached

	- The product name and version number

	- Your computer name and model and the name and model of any
	  additional hardware (video adapter, network cards, etc.)

	- Operating system and version number

	- Total amount of RAM on your computer

	- Be prepared to answer questions about your operating
	  system and system configuration

For additional help, access our World Wide Web site at
www.identix.com.


===============
TROUBLESHOOTING
===============

** TROUBLESHOOTING SMARTCARD SUPPORT

The BioLogon installation program does not install smart card reader
drivers. It is the User's responsibility to install the proper driver
for the PC/SC compatible smart card reader and make sure that the
reader is properly configured.

After the smart card reader driver is installed the User must configure
BioLogon Security System to work with the smart card reader. The
smart card reader can be configured from Logon Dialog (More |
Configure Smart card Reader) or BioLogon Security Properties
(Smartcard | Select Reader). After the dialog Select Smart card Reader 
is shown on the screen, insert BioLogon compatible smart card into the 
desired reader, select it and press OK.

If there are no drivers for PC/SC compatible smart card readers
installed, nothing will happen when the User tries to configure the
smart card reader. Please consult Chapter "Operations: Smart Cards" 
in the User Guide for more information.

If BioLogon Security System will be used with Gemplus GPK-4000 or
8000 smart cards, be sure to install the GemSAFE software product
from Gemplus and the latest PKCS#11 libraries prior to using the
GPK-4000 or 8000 smart card.

IMPORTANT:
---------
The PKCS#11 libraries in the GemSAFE ver. 1.00 product will not work
reliably with the GKP-4000 or 8000 smart cards and BioCard. Users may
need to contact Gemplus to obtain the latest version of the PKCS#11
libraries so that these smart cards work reliably with BioCard.