ActivID Applet v2-based Profiles
Generic 72-80K PIN SC Java Card – AI 1024-2048 (4)
Standard Profile with ActivID Applet v2.6.2b, 7 PKI SC, 2 PKI PIN
-
Unique Identifier (stored in the card): 201100000000000000000123
-
7 PKI download done on the server
-
2 PKI download done on the client
-
GC standard configuration
-
SKI download by the server
-
Unlock done via XAUTH
-
Multiple CA Trust Chain certificates downloadable from the ActivID CMS server(*)
(*) A specific container is created in the profile to store the certificate trust chain(s). A new ActivID CMS static credential collection plug-in, CaCerts, is used to load all the CA certificates (.p7b or .cer files) onto the smart card.
The certificate chains are imported from all p7b and cer files present in a specific folder, specified in the device profile as “cacert_path”:
<p:staticcredentialplugin name="CaCerts" type="CaCertsV2Plugin">
<p:params>
<p:param name="CA cert" type="String" key="cacert_path" visible="false">
<p:value>../cacerts</p:value>
</p:param>
</p:params>
</p:staticcredentialplugin>The cacert_path can be an absolute path (for example, /cms_conf/CA_certificates_for_profile_1) or a relative path. Relative paths are relative to the HID CMS installation folder (for example, Program Files\HID Global\Credential Management System\wildfly). Therefore, for example, ../cacerts would lead to C:\Program Files\HID Global\Credential Management System\cacerts.
For multiple trust chains, different trust chains can be specified for different device policies by duplicating the section <p:staticcredentialplugin name="CaCerts" type="CaCertsV2Plugin"> found in the profile and by editing each cacert_path.
In this case, the staticcredentialplugin name must be unique whereas the value of the staticcredentialplugin name must be changed.
For example, the second name could be CaCerts2 – this name will be reused when defining a new device policy, corresponding to the new CA cert source folder.
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
 HID_CRESC_C1100_GEN_TEST_OPSC_1
HID_CRESC_C1100_GEN_PROD_OPSC_1
|
Generic 128K PIN SC Java Card – AI 1024-2048
Standard Profile with ActivID Applet v2.6.2b
-
Unique Identifier (stored in the card): 2011000000000000000000EE
-
8 PKI (1024/2048-bit keys) download done on the server
-
4 PKI (1024/2048-bit keys) download done on the client
-
Support BOOTDISKCRYPT credentials
-
SKI synchronous & asynchronous, download by the server
-
CA root certificate downloadable by the server
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
GND_144K_GDA_GENERIC_TEST_OPSC_1
GND_144K_GDA_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Oberthur ID-One Cosmo v7.0-n 128K |
OCS70_128K_OCS_GENERIC_TEST_OPSC_1
OCS70_128K_OCS_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GEM_GCX4_144K_V1_GENERIC_TEST_OPSC_1
GEM_GCX4_144K_V1_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
HID_CRESC_JCOP_242R0_GEN_TEST_OPSC_1
HID_CRESC_JCOP_242R0_GEN_PROD_OPSC_1
HID_CRESC_JCOP_242_PIV_TEST_OPSC_1_APP271
HID_CRESC_JCOP_242_PIV_PROD_OPSC_1_APP271
|
Generic 128K SC Java Card – AI 1024-2048 (FIPS)
Standard Profile with ActivID Applet v2.6.2b
-
Unique Identifier (stored in the card): 2011000000000000000000FD
-
12 PKI (1024/2048-bit keys) download done on the server
-
GC standard configuration
-
SKI download by the server
-
Multiple CA Trust Chain(s) Certificate downloadable from the ActivID CMS server (see details in Generic 72-80K PIN SC Java Card – AI 1024-2048 (4))
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Oberthur ID-One Cosmo v7.0-n 128K |
OCS70_128K_OCS_GENERIC_TEST_OPSC_1
OCS70_128K_OCS_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GND_144K_GDA_GENERIC_TEST_OPSC_1
GND_144K_GDA_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GND_144K_SCE50_GDA_GENERIC_TEST_OPSC_1
GND_144K_SCE50_GDA_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GEM_GCX4_144K_V1_GENERIC_TEST_OPSC_1
GEM_GCX4_144K_V1_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
HID_CRESC_JCOP_242R0_GEN_TEST_OPSC_1
HID_CRESC_JCOP_242R0_GEN_PROD_OPSC_1
HID_CRESC_JCOP_242_PIV_TEST_OPSC_1_APP271
HID_CRESC_JCOP_242_PIV_PROD_OPSC_1_APP271
|
Generic 128K PIN SC Java Card – AI 2048
Standard Profile with ActivID Applet v2.6.2b
-
Unique Identifier (stored in the card): 20110000000000000000012B
-
8 PKI (2048-bit keys) download done on the server
-
4 PKI (2048-bit keys) download done on the client
-
GC standard configuration
-
SKI download by the server
-
Multiple CA Trust Chain(s) Certificate downloadable from the ActivID CMS server (see details in Generic 72-80K PIN SC Java Card – AI 1024-2048 (4))
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Oberthur ID-One Cosmo v7.0-n 128K |
OCS70_128K_OCS_GENERIC_TEST_OPSC_1
OCS70_128K_OCS_GENERIC_PROD_OPSC_1
|
