Supporting Machine Attributes

CA ArcotID OTP Client Installation Guide › Using Advanced Features › Device Locking With Extended Attributes › Supporting Machine Attributes

Supporting Machine Attributes

For OTP Desktop Client, the following machine attributes can be used for device locking:

More Information: For descriptions on attributes, see Client Reference Guide 7.1(Chapter 4: Machine PIN for Native Client).

Attribute	Description
mem	Displays physical memory size.
vol	Displays boot partition volume ID.
bios	Displays BIOS information such as, serial number and manufacturer name. This information is not always present.
mac	Displays the MAC address of the primary network interface card.
moth	Displays the motherboard information such as, the serial number and manufacturer name. This information is not always present.
hd	Displays Hard Disk (HD) information such as, model # and manufacturer name. The removable HDs such as external USB, memory cards, are not included. Only the fixed HDs are included.
proc	Displays Main Central Processing Unit (CPU) information such as, model and clock speed. For, a multiprocessor machine the information from all CPUs is included.
encl	Displays for some computers, such as those manufactured by Dell, have their service tag that is encoded in the enclosure information.

Important! All attributes that are listed under machine attributes are not supported on all platforms. Here is the attribute list for each platform:

Platform	Supporting Attribute
Windows	mem_vol_mac_moth_bios_hd_proc_encl
Mac	mem_vol_mac_moth_hd_pro
Linux	mem_vol_mac_moth_bios_proc

Note: We recommend that you do NOT specify devlock attributes; instead allow the following defaults:

Platform	Default Attribute
Windows	vol_mac_moth_bios_encl
Mac	vol_mac_moth_proc
Linux	vol_mac_moth_bios_proc

We have selected the default that is set on each platform based on the performance and likelihood of the attribute, to remain constant.

Note: The Windows gathering information on hd and proc can be slow. Therefore we do not recommend this process.

DLAT Attribute

Define your own custom attribute settings via the DLAT and DLRQ card string attributes for OTP credentials, if you do not want to use the default attributes.

For example, this attribute is used in the following format:

				DLAT=vol_mac_moth

To make use of all the supported attributes, set DLAT to “ALL”.

Note: By default the device locking is enabled. To turn off the device locking, set DLRQ=false in the OTP card string.