Specifying the PKCS #11 Module

Optionally, after enabling this policy, you can specify the PKCS #11 module to be used by smart card components. By default, smart card components use the Delinea Coolkey PKCS #11 module. However, Coolkey does not support all smart cards so you can specify a different module if necessary by specifying the absolute path to your PKCS #11 module in PKCS #11 Module. For example:

PKCS #11 Module /usr/\$LIB/pkcs11/opensc-pkcs11.so

This field supports the use of the $LIB environment variable in the path, which allows a single group policy to work for 32-bit and 64-bit systems. At run time on 32-bit systems $LIB resolves to lib, while on 64-bit systems it resolves to lib64. When you specify a PKCS #11 module, the group policy sets the following parameter in the Delinea configuration file to the specified path:

rhel.smartcard.pkcs11.module

After you enable this policy, it does not go into effect until you join the computer to the domain (if not already joined) and run the adgpupdate command.