Issuing Devices

This section provides details on how to self-issue devices using the ActivID CMS User Portal:

Self-Issuing a Device

Use this scenario if you have a blank, bound device to personalize. A bound device means the device is associated with a specific user. You can also use this scenario to self-issue a mobile smart card using an NFC or Bluetooth connection.

  1. In your browser, go to the Web page provided by your ActivID CMS administrator for connecting to the ActivID CMS User Portal.

  2. Click Launch User Portal. The Welcome page appears. The first time you connect to the ActivID CMS User Portal from the workstation, a security message might appear before the Welcome page. If this happens, then click Yes to continue.

    User portal Welcome page with two buttons available at the bottom of the screen: "Start" and "I don't have my smart card"

    3. Important:
    When you access the User Portal for the first time, a link is displayed so that you can download the ActivID CMS browser extension. Once this is completed, a new link is displayed so that you can also download the ActivID CMS Client. For details, see About Using Google Chrome or Microsoft Edge Browsers with the User Portal.

  3. Insert your smart card and click Start.

    User portal login page with a field to enter your Initial Password and a Continue button at the bottom of the screen

  4. Depending on the state of the device and how the ActivID CMS administrator configured the ActivID CMS User Portal, you might be prompted to enter the LDAP Lightweight Directory Access Protocol password instead of an Initial Password or to provide answers to security questions (see the following illustration).

    Set Your Security Questions page with fields for entering answers to example security questions and a Continue button at the bottom of the screen

    • Answers to the security questions are case insensitive. This means that you can type the answers using uppercase letters (TOTO), lowercase letters (toto), or a combination of both uppercase and lowercase letters (ToTo, Toto, or TotO).

    • Spaces between letters in the answers to security questions are ignored by the ActivID CMS User Portal.

    • The ActivID CMS User Portal saves the answers to the security questions, which are associated with the user profile in ActivID CMS. You should record the answers to the security questions and keep them in a secure location. If you log in to the ActivID CMS User Portal without the device, you must know these answers.

  5. Enter the Initial Password, the LDAP password, or answers to the security questions, and then click Continue. This starts the device personalization process. A progress bar is displayed. When the process has been completed, a page similar to the following message appears.

    User portal page for Personalizing Your Smart Card where you can set and confirm a new PIN, with a Continue button at the bottom of the screen

  6. Enter and confirm a new PIN for the device, and then click Continue.

    If the issuance is not successful, a warning is displayed:

    User portal page displaying warning the issuance has failed, with two buttons available at the bottom of the screen: Retry and Done

  7. (Optional) You can click Retry to attempt the issuance again.

    Note: In order for the Retry button to be available, the Enable issuance retry for user option must have been enabled using the Operator Portal.

  8. When a confirmation message appears, click Done.