A card update is required if:
- One or several of the user certificates expired (or expiring shortly)
- The number of certificate template has changed in the smart card usage policy
- The smart card usage policy has added/removed common certificates
- The smart card usage policy has at least one optional certificate (to be written to the card/removed from the card)
- The smart card usage policy has connector to Indeed Access Manager activated/disabled
- The user has new policy defined (for instance, one with greater priority)
- External certificates were added to the issued card (if Certificate tracking is enabled in the smart card usage policy)
If the user has new policy assigned, the card contents update is performed as follows:
- The certificates present in the current policy that applies to the user, but missing in the new one, are removed.
- The certificates missing in the current policy that applies to the user, but present in the new one, are issued and written to the card.
- The certificates that are present in both policies, are not modified.
The administrator can update card contents without re-issuing it. Card contents update is by default also available to a user in the Self-Service application.
If the renewed certificate was revoked by the administrator at the CA, then, in this case, a new certificate is requested, and the old one, which cannot be renewed, is deleted from the smart card.
To update a card to a user, proceed as follows:
- Switch to Users tab and search for the user.
- Switch to the User card by clicking his or her username in the search results.
- Select the necessary card and open its data.
- Click Update.
- If the smart card is not available, then select the option to Update card on the agent.
- Connect the smart card to a computer, enter the User PIN and click Update.
