Installing an AE
A version of this page is also available for
4/8/2010
The predefined AEs for LASS are shown in the following table. You can use these or create and install custom AEs using appropriate registry settings.
| Predefined AE | Description |
|---|---|
AE_EVERYTIME |
Force authentication when passed in an application call to VerifyUser. |
AE_DEFAULT_POLICY |
Use the default LASS policy. The value may be low or high, depending on the environment and user settings. For more information, see Setting an AE Policy. |
To install an AE, you must first generate a GUID for the AE, and then add a new key with the generated GUID to the HKEY_LOCAL_MACHINE\Comm\Security\LASSD\AE registry key. For registry details, see LASS Registry Settings.
Note
Remember that registry settings can only take effect when your application calls LASSReloadConfig or when you reboot your device.
The following registry example shows how to install an AE policy. In this example, {1B38A686-7CDC-4017-A5E9-4C6A9DD7E5BA} is the GUID of the AE to install.
;AE_GUID_STARTUI {1B38A686-7CDC-4017-A5E9-4C6A9DD7E5BA}
[HKEY_LOCAL_MACHINE\Comm\Security\LASSD\AE\{1B38A686-7CDC-4017-A5E9-4C6A9DD7E5BA}]
"FriendlyName"="Device Startup"
"DisplayText"="System Startup"
; Every Time
"AEFrequencyType"=dword:0
"AEFrequencyValue"=dword:0