# Hideez Enterprise Server setup for passwordless login

Once you have created the appropriate template in the certification authority, you need to get the following settings:

1. Cryptographic Service Provider Name
2. Certificate Config
3. Certificate Template ID

### 1. The first parameter (Cryptographic Service Provider Name) must be set to:

```
Microsoft Base Smart Card Crypto Provider
```

### 2. The second parameter (Certificate Config) is the name of the domain controller and the name of the certification authority:

The following command will help define these names. Run it from the **command line:**

```
certutil -config - -ping
```

Then you should get such window:

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2F78CkbM3JtsNTaieiSjDe%2FScreenshot_2.jpg?alt=media&#x26;token=0bbe46b1-6613-427e-9c76-dba66916d8a2" alt=""><figcaption></figcaption></figure>

Separated "**CA**" and **"Computer"** by an "\\" in the settings on the Hideez Server.

### 3. To define the third parameter (Certificate Template ID), go to the domain controller, and do the following:

* Open MMC and add the **Certificate Templates snap-in** (File > Add/Remove Snap-ins > Certificate Templates)
* Right-click the created certificate template
* Open **Properties**
* Open **Extensions** tab
* Select “**Certificate Template Information**”

The ID will be visible in the description below after "**Object identifier**":

<figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/H4711k71HirG6sCgJHkc/11.png" alt="" width="563"><figcaption></figcaption></figure>

The received parameters need to be entered to the HES settings. To do this, go to&#x20;

* **Settings → Parameters → Active Directory→ Workstation passwordless logon settings**

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FPFo9tJxa2sXU5wYTdrTd%2Fimage.png?alt=media&#x26;token=54ba73b8-4e8f-46fd-87e7-2d78d2650bc0" alt=""><figcaption></figcaption></figure>

Add the "[On-premises Active Directory domain](https://enterprise.hideez.com/hideez-enterprise-server/administration/setting-hes-server-parameters#domain)", and then edit the **Workstation passwordless logon settings:**

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FiRCRw0lxHMrXoctIpMeL%2Fimage.png?alt=media&#x26;token=cc0844ca-7416-4ec0-91d9-d2257375edce" alt="" width="384"><figcaption></figcaption></figure>

Enter and save the settings you received before.