Installing a LAP
A version of this page is also available for
4/8/2010
LAPs are installed by using the registry. To make a LAP available to the OS, you must add a subkey to the HKEY_LOCAL_MACHINE\Comm\Security\LASSD\LAP registry key and specify the name of the LAP DLL. For registry details, see LASS Registry Settings.
Note
Remember that registry settings can only take effect when your application calls LASSReloadConfig or when you reboot your device.
The following code example shows examples of installed LAPs.
; Install a password LAP
[HKEY_LOCAL_MACHINE\Comm\Security\LASSD\LAP\lap_pw]
"Dll"="lap_pw.dll"
; Install a smart card LAP
[HKEY_LOCAL_MACHINE\Comm\Security\LASSD\LAP\lap_scard]
"Dll"="lap_smartcard.dll"
In these two examples, lap_pw and lap_scard are the LAP identifiers used to set the active LAP.
Remarks
During LAP installation, if a password has already been enrolled using the default Microsoft LAP, the installer needs to complete the following steps before switching to a new LAP.
- Remove policies that require a password
- Instruct the user to remove their existing password
- Call CreateEnrollmentConfigDialog to display the LAP enrollment screen so the user can disable their existing password
- Configure the a new active LAP
- Call VerifyUser with AE_EVERY_TIME set. This will prompt the user to authenticate, and allow your new LAP to be enrolled with the same password