Indeed Certificate Manager supports USB tokens, smart cards and combined devices. The number of supported authentication devices and types increases constantly. If new devices appear in your organization, or, on the contrary, some type of devices is not used any more, you have to make changes to the Indeed CM parameters accordingly.
Adding device types
To add a card type, click Add card type, specify the card type file and click Add. If it is necessary to replace an existing card type file, then activate the Replace existing option. Files for various card types are supplied along with installation package of Indeed CM Server.
| Tip |
|---|
Files for devices of various types are supplied with the distribution package of Indeed CM Server and are located in the directory \Misc\CardTypes. |
| Manufacturer | Device model | Device file type |
|---|---|---|
Indeed Identity | AirKey | AirKey.xml |
ACS | ACOS5-64 | Acos5-64.xml |
| Avest | Avest Key 256A | AvestKey-256-A.xml |
| Bit4id | ID-One Cosmo | Bit4Id.xml |
| CRYPTAS | TicTok V2 | TicTok_v2.xml |
| TicTok V3 | TicTok_v3.xml | |
| Cryptovision | ePasslet Suite v3.0, JCOP V3.0 | cv-ePassletSuite3.0-JCOP3.0.xml |
| Feitian | ePass2003 (A1+, A2) BioPass2003 | ePass2003.xml |
| HID | Crescendo C1150 Series | CrescendoC1150.xml |
| Crescendo C1300 Series | CrescendoC1300.xml | |
| Crescendo C2300 Series | CrescendoC2300.xml | |
| Microsoft | Local computer Registry | Registry.xml |
| User Registry | ||
TPM Virtual Smart Card (Microsoft VSC) - based on Trusted Platform Module v.2.0 | Tpm.xml | |
| Windows Hello for Business (WHfB) | Whfb.xml | |
| RSA | RSA SecurID 800 | RSASecurID.xml |
| Thales Group | SafeNet eToken PRO 32k | eTokenPro32K.xml |
| SafeNet eToken PRO 64k | eTokenPro4.2B.xml | |
eToken PRO Java 72K OS755 SafeNet eToken 5105 SafeNet eToken 5110 IDCore30B eToken 1.7.7 | eTokenProJava72K.xml | |
IDPrime MD 830 IDPrime MD 840 IDPrime MD 3810 IDPrime MD 3811 | IDPrimeMD.xml | |
| Yubico | YubiKey 5 Series | YubiKey5.xml |
After card type has been added, its name appears in the system.
Editing Device Types
A card type file contains default predefined values of administrator and user PIN. These values can be changed after the card type file is added to Indeed CM. To edit a card type, select the required one in the list and click 
. To view PIN click 
.
The following options are available for editing:
- Initialize card at adding – the Indeed CM allows for smart card initialization during the adding process. At that:
– All data on the added smart cared will be erased.
– The smart card name will be set to ’Empty’.
– Administrator PIN will be changed to a random one or to one defined in the Set not random administrator PIN.
– The number of administrator PIN input attempts will be equal to 3.
– User PIN, its minimum length and number of input attempts will be set to the values defined in the card type file.
- Set not random administrator PIN – if the option is disabled, then a random PIN will be set for the smart card upon adding. If the option is enabled, then the specified PIN will be set for the smart card on adding.
To save the changes made, click Save. To remove a smart card type, select the required one in the list and click
. Then confirm the action.
| Warning |
|---|
A Сard type can only be deleted if there is not a single issued card of this type in Indeed CM. |