Make sure to read System Requirements prior to proceeding
Windows 7 needs special attention due to outdated cryptography employed in the system. If you are installing the Client on Windows 7, please make sure you follow instruction at the end of this article.
The Client can be installed with GPO or other software distribution mechanisms of your choice or manually. To use SystoLOCK with RDS, make sure to install it on both terminal servers and local computers. For RDS installation, consult Installing SystoLOCK on RDS Farms.
You can use SystoLOCK right away after the installation completes. In some cases you may want to tweak the Client by changing some of its options. You can do it manually by invoking SystoLOCK Tools:
These options can also be controlled via registry, see these instructions for guidance on how to set them via GPO.
Windows client relies (more often than not) on the local service called "Smart Card" (SCardSvr). Make sure the service is running and is set to start automatically. Consult this chapter to configure smart card redirection properly.
The client will connect to the authentication servers via TCP port 21572. Make sure any intermediate firewalls do not block this communication.
Due to outdated cryptographic modules in Windows 7 and if some optional updates are missing, installation of SystoLOCK Client may encounter following problems:
The problem can be mitigated by installing two Windows Update packages: KB3033929 and KB2921916 (in this order). The first package is still obtainable from Microsoft, while the second one is not.
You can obtain these packages from the following sources:
Systola cannot be made liable for any damage resulting from installing these packages