Parameter Description

Allows a connection to SDS Enterprise in smart card or USB token mode:

  • 0: not allowed (default),

  • 1: allowed.


Displays the SDS Enterprise connection window after inserting a smart card or token and entering the PIN:

  • 0: not displayed (by default),
  • 1: displayed.

The window does not appear when there is already an SDS Enterprise account logged in (password or smart card/token).


Displays the card unlocking window when a smart card or token is inserted and the user’s SDS Enterprise session is locked.

  • 0: No,
  • 1: Yes (default).

The window is enabled only if the connected user has an SDS Enterprise account in smart card or token mode.

RepairCardAccount Makes it possible to repair a smart card if only the certificate is available, by renewing the key based on the known CKA_ID in the account.
Automatically adds a signature key to a smart card or USB token account with a single encryption key.


Keeps the path from displaying when the RootPath2 parameter is used:

  • 0: displays the full account access path (default),
  • 1: does not display the full account access path.

Displaying the full path makes it easier to identify the SDS Enterprise account used for the connection, but it has no real meaning for a standard user. This makes it very easy to distinguish between connections made with RootPath1 from those made with RootPath2.

AllowLocal Unblock

Authorizes a local unlock if the user's SDS Enterprise session is blocked:

  • 0: not allowed,
  • 1: allowed (by default)
AllowDistant Unblock

Authorizes a distant unlock if the user's SDS Enterprise session is blocked:

  • 0: not allowed,
  • 1: allowed (by default)

Keeps the license key value from displaying in the About SDS Enterprise window:

  • 0: The license key is displayed normally (default),
  • 1: The license key is not displayed.

For a deployment, we recommend not displaying the license key, which is specific to the user’s company.


If several card or token drives are connected to the workstation (e.g., a standard drive and a 3G network card), this makes it possible to use a specific drive by defining a filter to identify it.

  • 0: Any drive is recognized (default),
  • 1: Only the drive indicated in the [SlotFilter] section is recognized by SDS Enterprise. For more information, see the section [SlotFilter]).

Value of the "mailto:" link used at the end of a certificate request to send the request by e-mail. Basic syntax (on a single line): <Subject of the message> [&body=<accompanying message>] <Authority email address>?subject=

More detailed information on the syntax can be found in the documentation for "mailto" links

This is an optional parameter. If it is blank, the user must enter the information manually.

ExternalCard Authent

Enables the SDS Enterprise connection window in order to use an external PIN-PAD to enter a PIN (smart card or token mode).

  • 0: No authentication by external PIN-PAD (default value),
  • 1: Authentication by external PIN-PAD.

Allows choosing the LDAP version to be used when connecting to the address book:

  • 2: version 2 used,
  • 3: version 3 used (default),

Prohibits entering a password in command line during connection, and prevents the SBCMD.exe tool from unlocking the user in command line.

  • 0: Password entry allowed,
  • 1: Password entry not allowed.