ActivID Applet v2-based Profiles
These profiles are deprecated and can no longer be used to create new device policies. They are included for legacy purposes.
64K SC v1.2 (FIPS Level 3)
64K 1024 SC FIPS 140 L3 Profile (ENTERPRISE) with Applet 2.5.1 BN4
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 20100000000000000000009F
-
PKI/SKI download done on the server
-
6 PKI’s 1024-bit keys with certificates from any CA
-
Support of PIN encryption with SMA (Secure Messaging Anonymous)
-
Support BOOTDISKCRYPT credentials
-
SKI synchronous and asynchronous
-
This profile is not supported on ActivKey Display
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Axalto Cyberflex Access 64K v2c |
 AXALTO_V2C_VOPISK
|
||||||||||||||||||||||||
| Gemplus 64K Standard Version |
GEM_GXP_PRO_64K_STD_OP202
|
||||||||||||||||||||||||
| Gemplus 64K FIPS v2 (fast ATR) |
GEM_GXP_PRO_64K_FIPSv2_GEMPLUS_OP202
|
||||||||||||||||||||||||
| G&D SmartCafe Expert 64K Tiger FIPS1024-bits |
GND_FIPS1024_VOP_ISK_3F
|
||||||||||||||||||||||||
| G&D SmartCafe Expert 64K Tiger FIPS2048-bits |
GND_2048_VOP_ISK_3F
|
||||||||||||||||||||||||
| Oberthur ID-One Cosmo v5.2 64K |
OBE_COSMO_V52D_VOPISK_FF
|
64K SC v1.2 (GSC-IS 2.1)
64K 1024 SC GSCS-IS v2.1 Profile (GOVERNMENT) with Applet 2.5.1 BN4
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 2010000000000000000000A0
-
PKI/SKI download done on the server
-
6 PKI’s 1024-bit keys (3 for the client and 3 for the server)
-
Support BOOTDISKCRYPT credentials
-
SKI synchronous and asynchronous
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Axalto Cyberflex Access 64K v1 SM 4.1 |
SLB_ACC_V4_64K_OP
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Axalto Cyberflex Access 64K v2c |
AXALTO_V2C_VOPISK
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Gemplus 64K Standard Version |
GEM_GXP_PRO_64K_STD_OP202
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Gemplus 64K FIPS v2 (fast ATR) |
GEM_GXP_PRO_64K_FIPSv2_GEMPLUS_OP202
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| G&D SmartCafe Expert 64K Tiger FIPS2048-bits |
GND_2048_VOP_ISK_3F
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| G&D SmartCafe Expert v3.2 80K |
GND_80K_GDA_GENERIC_TEST_OPSC_1
GND_80K_GDA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| G&D SmartCafe Expert v3.2 144K |
GND_144K_GDA_GENERIC_TEST_OPSC_1
GND_144K_GDA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Oberthur ID-One Cosmo v5.2 64K |
OBE_COSMO_V52D_VOPISK_FF
|
Generic 72-80K PIN SC Java Card – AI 1024-2048
Standard Profile with ActivID Applet v2.6.2b
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 2011000000000000000000F7
-
4 PKI (1024/2048-bit keys) download done on the server
-
4 PKI (1024/2048-bit keys) download done on the client
-
GC standard configuration
-
SKI download by the server
-
CA Root certificate downloadable by the server
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| G&D SmartCafe Expert v3.2 72K |
GND_72K_GDA_GENERIC_TEST_OPSC_1
GND_72K_GDA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| G&D SmartCafe Expert v3.2 80K |
GND_80K_GDA_GENERIC_TEST_OPSC_1
GND_80K_GDA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Gemalto TOP IM |
GEM_GX4_TOPIM_GEMA_GENERIC_TEST_OPSC_1
GEM_GX4_TOPIM_GEMA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Gemalto TOP DM GX4 FIPS |
GEM_GCX4_OP202
GEM_GX4_TOPDM_GEMA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| NXP JCOP31 v2.4.1 R0 |
NXP_JCOP_31_NXP_GENERIC_TEST_OPSC_1
NXP_JCOP_31_NXP_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Oberthur ID-One Cosmo v7.0-n 80K |
OCS70_80K_OCS_GENERIC_TEST_OPSC_1
OCS70_80K_OCS_GENERIC_PROD_OPSC_1
|
Generic 72-80K PIN SC Java Card – AI 1024-2048 (2)
Standard Profile with ActivID Applet v2.6.2b
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 2011000000000000000000FA
-
7 PKI download done on the server
-
1 PKI download done on the client
-
GC standard configuration
-
SKI download by the server
-
Multiple CA Trust Chain(s) certificate downloadable from the ActivID CMS server (see details in Generic 72-80K PIN SC Java Card – AI 1024-2048 (4))
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| G&D SmartCafe Expert v3.2 80K |
GND_80K_GDA_GENERIC_TEST_OPSC_1
GND_80K_GDA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Gemalto TOP DM GX4 FIPS |
GEM_GCX4_OP202
GEM_GX4_TOPDM_GEMA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Gemalto TOP IM |
GEM_GX4_TOPIM_GEMA_GENERIC_TEST_OPSC_1
GEM_GX4_TOPIM_GEMA_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| NXP JCOP31 v2.4.1 R0 |
NXP_JCOP_31_NXP_GENERIC_TEST_OPSC_1
NXP_JCOP_31_NXP_GENERIC_PROD_OPSC_1
|
Generic 72-80K PIN SC Java Card – AI 1024-2048 (3)
Standard Profile with ActivID Applet v2.6.2b, 3 PKI SC, 3 PKI PIN
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 201100000000000000000108
-
3 PKI download done on the server
-
3 PKI download done on the client
-
GC standard configuration
-
SKI download by the server
-
Unlock done via XAUTH
-
Multiple CA Trust Chain certificates downloadable from the ActivID CMS server (see details in Generic 72-80K PIN SC Java Card – AI 1024-2048 (4))
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
HID Crescendo JCOP v2.4.1 R2 |
HID_CRESC_JCOP_241R2_GEN_TEST_OPSC_1
HID_CRESC_JCOP_241R2_GEN_PROD_OPSC_1
|
Generic 72-80K PIN SC Java Card – AI 1024-2048 (4)
Standard Profile with ActivID Applet v2.6.2b, 7 PKI SC, 2 PKI PIN
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 201100000000000000000123
-
7 PKI download done on the server
-
2 PKI download done on the client
-
GC standard configuration
-
SKI download by the server
-
Unlock done via XAUTH
-
Multiple CA Trust Chain certificates downloadable from the ActivID CMS server(*)
(*) A specific container is created in the profile to store the certificate trust chain(s). A new ActivID CMS static credential collection plug-in, CaCerts, is used to load all the CA certificates (.p7b or .cer files) onto the smart card.
The certificate chains are imported from all p7b and cer files present in a specific folder, specified in the device profile as “cacert_path”:
<p:staticcredentialplugin name="CaCerts" type="CaCertsV2Plugin">
<p:params>
<p:param name="CA cert" type="String" key="cacert_path" visible="false">
<p:value>../cacerts</p:value>
</p:param>
</p:params>
</p:staticcredentialplugin>The cacert_path can be an absolute path (for example, /cms_conf/CA_certificates_for_profile_1) or a relative path. Relative paths are relative to the HID CMS installation folder (for example, Program Files\HID Global\Credential Management System\wildfly). Therefore, for example, ../cacerts would lead to C:\Program Files\HID Global\Credential Management System\cacerts.
For multiple trust chains, different trust chains can be specified for different device policies by duplicating the section <p:staticcredentialplugin name="CaCerts" type="CaCertsV2Plugin"> found in the profile and by editing each cacert_path.
In this case, the staticcredentialplugin name must be unique whereas the value of the staticcredentialplugin name must be changed.
For example, the second name could be CaCerts2 – this name will be reused when defining a new device policy, corresponding to the new CA cert source folder.
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
HID_CRESC_C1100_GEN_TEST_OPSC_1
HID_CRESC_C1100_GEN_PROD_OPSC_1
|
Generic 128K PIN SC Java Card – AI 1024-2048
Standard Profile with ActivID Applet v2.6.2b
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 2011000000000000000000EE
-
8 PKI (1024/2048-bit keys) download done on the server
-
4 PKI (1024/2048-bit keys) download done on the client
-
Support BOOTDISKCRYPT credentials
-
SKI synchronous & asynchronous, download by the server
-
CA root certificate downloadable by the server
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
GND_144K_GDA_GENERIC_TEST_OPSC_1
GND_144K_GDA_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Oberthur ID-One Cosmo v7.0-n 128K |
OCS70_128K_OCS_GENERIC_TEST_OPSC_1
OCS70_128K_OCS_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GEM_GCX4_144K_V1_GENERIC_TEST_OPSC_1
GEM_GCX4_144K_V1_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
HID_CRESC_JCOP_242R0_GEN_TEST_OPSC_1
HID_CRESC_JCOP_242R0_GEN_PROD_OPSC_1
HID_CRESC_JCOP_242_PIV_TEST_OPSC_1_APP271
HID_CRESC_JCOP_242_PIV_PROD_OPSC_1_APP271
|
Generic 128K SC Java Card – AI 1024-2048 (FIPS)
Standard Profile with ActivID Applet v2.6.2b
This profile is deprecated and can no longer be used to create new device policies. It is included for legacy purposes.
-
Unique Identifier (stored in the card): 2011000000000000000000FD
-
12 PKI (1024/2048-bit keys) download done on the server
-
GC standard configuration
-
SKI download by the server
-
Multiple CA Trust Chain(s) Certificate downloadable from the ActivID CMS server (see details in Generic 72-80K PIN SC Java Card – AI 1024-2048 (4))
|
Supported Devices |
Supported Pre-Issuance IDs |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Oberthur ID-One Cosmo v7.0-n 128K |
OCS70_128K_OCS_GENERIC_TEST_OPSC_1
OCS70_128K_OCS_GENERIC_PROD_OPSC_1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GND_144K_GDA_GENERIC_TEST_OPSC_1
GND_144K_GDA_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GND_144K_SCE50_GDA_GENERIC_TEST_OPSC_1
GND_144K_SCE50_GDA_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
GEM_GCX4_144K_V1_GENERIC_TEST_OPSC_1
GEM_GCX4_144K_V1_GENERIC_PROD_OPSC_1
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
HID_CRESC_JCOP_242R0_GEN_TEST_OPSC_1
HID_CRESC_JCOP_242R0_GEN_PROD_OPSC_1
HID_CRESC_JCOP_242_PIV_TEST_OPSC_1_APP271
HID_CRESC_JCOP_242_PIV_PROD_OPSC_1_APP271
|
