This section defines the settings of actions using a smart card within the frame of smart card usage policy.

OptionDescriptionDefault value
Add card automaticallyAdd the smart card to the system (if it wasn’t added earlier) when issued or assigned to user. If the option is disabled, then it is prohibited to issue or assign the card that is connected to a computer but not added to the system.Disabled
Enable PIN resetEnables the administrator to reset PIN of user smart cards.Enabled
Enable offline unlock

Makes it possible to unlock a user smart card with system administrator assistance when there is no connection between the user workstation and Indeed CM server.

An additional condition for unlocking the smart card is checking the answers to security questions (Validate answers to security questions option) set by the user in the self-service.

Enabled
Enable cancel of card updatingAllows the Indeed CM administrator or operator to cancel updating of the user smart card contents.Enabled
User can add cardThis option allows to issue a card, not yet added to the system. The card will be added to the system automatically while issuing. The option is available only if the Add card automatically option is enabled.Disabled
User can assign cardThis option allows to issue a smart card, not assigned to the user by the administrator.Disabled
User can revoke cardThis option allows the user to revoke their smart card.Enabled
User can enable cardThis option allows user to enable their smart card (if it was disabled earlier).Enabled
User can disable cardThis option allows the user to disable their smart card (if it was enabled earlier).Enabled
User can clear cardThis option allows the user to clear up the contents of their smart card when it is revoked by an operator with Card removal and Card update reasons. The smart card remains assigned to the user after clearing.Disabled
User can reset PINThe user is allowed to reset PIN of their smart card.Disabled
User can update cardThis option allows the user to update certificates on their smart card if they expired or expire shortly.Enabled
User can select optional certificates

If enabled, the user can select the certificates (from the optional ones) to be written to the smart card, while issuing it in the Self-Service application.

If disabled, then the certificates marked as optional in the smart card issuing policy, would not be written to the card.

Disabled
User can issue AirKey card

If enabled, the users can issue AirKey cards in Self-Service application on their own.

AirKey card issuance is only possible if integration with с Indeed AirKey Enterprise is set up.

Disabled
User must answer the security questions on first logon to self-service

If enabled, the user must define security questions and answers to those after logging into Self-Service application for the first time. These questions will be used for user authentication later.

If disabled, then the form for security question setup is not displayed upon logging into Self-Service. A user can define the security questions later at any time.

Enabled
User can change the answers to security questions

If enabled, the users can change the answers to security questions after they define into Self-Service application.

If disabled, users will not be able to change answers to security questions after they are installed into Self-Service application. Administrators and operators can reset answers to secret questions for later installation by users.

Disabled
Enable certificate tracingIf enabled, the Indeed CM will search for certificates and corresponding private keys on the smart card. The Indeed CM can send corresponding email notifications when such certificates are about to expire. In the Management Console and in the Self-Service applications, it is possible to print traced certificates using the standard certificate print template in the system.Disabled


  • No labels