This section defines smart card issuance and initialization parameters. The description of section parameters is given in the Table 5.

Table 5 – Smart card issuance parameters.

OptionDescription

Maximum number of cards per user

The number that limits card quantity per user. Default value is 1.
Initialize card

If enabled, the card is initialized before issuance. Initialization deletes all the data stored on the card.

Set random user PIN

If enabled, a random user PIN code will be set while issuing a card.
If this option is enabled, the User PIN generation settings become available for editing:

  • Use only digits  
  • Length (4 - 31 symbols)
  • Show generated user PIN to administrator
  • Show generated user PIN to user  

The length of randomly generated PIN code depends on the PIN code minimum length parameter value at the Card initialization tab.

The randomly generated PIN code conforms to the following rules:

  • Contains Latin lowercase letters
  • Contains Latin capital letters
  • Contains digits
  • Any symbol can be used only once

The randomly generated PIN code can be communicated to the employee who performs card issuance.
The randomly generated PIN code can be communicated to the user or his/her manager via email notifications (see Notifications).

If the Issuance and Card initialization sections contain different values of user PIN code length, then the greater value is used while issuing the card.

User PIN must be changed on first logon  

If enabled, the user must change his/her card PIN code upon first login to a workstation. The option is supported by Gemalto (eToken) smart cards only.

This option and Set random user PIN and Lock card are mutually exclusive.

Lock card

If enabled, the card is blocked after issuance. Therefore, the user must first unlock it by any of available methods (online or offline) and define a new PIN code.

Generate card name automatically

If enabled, one of the following user property values can be used as card name:

  • Common name
  • Logon name
  • Last name
  • E-mail
  • Organizational unit
  • String

Selected value would be automatically placed to the card name field in the issuance window. If Allow editing card name option is enabled, the name of the card can be changed before issuance by the user or by employee who performs card issuance.


  • No labels