Self Service Remote Enrollment

Overview

This document lists the steps for the officer and applicant to perform remote identity proofing and YubiKey encoding.

Participants

There are two individuals in this process:

1. Officer: The officer is the security official that reviews the request, approves information, and manages the YubiKey.
2. Applicant: The applicant is the individual that will perform the remote proofing and YubiKey encoding.

What is Required

1. Workstation (preferably Windows 10 machine)
2. Email account (the applicant will need to open an email to retrieve the login credential)
3. The Credential Type Configuration specifies the certificate authority
   
   

Phases

The overall process is composed of 4 different phases.

Invite the Applicant

In this phase, the officer will send an invitation to the applicant by requesting their data to be processed. The invitation will include the credential and code for secure registration.

Log in as the operator   Press Request Enter last name of user Press Search Press Request Credential

Select the Credential Type Press Proceed

Prepare workstation and enroll data

In this phase, the applicant will prepare their workstation. Next, they will enroll their data and register their YubiKey.

Before getting started:

1. Ensure web cam is operational
2. Ensure factory set YubiKey is inserted and operational

Copy the temporary PIN into memory   Download and double click the registration.pfx file
Install the PFX   Press Next Press Next Enter the Temporary PIN Press Next Press Next Press Next

Log into the IDMS with the PFX that was just installed, press I Understand, Continue button
Click Capture
Press Capture Information

Press Start Camera
Click in the viewfinder to take a photo of the what is currently in the viewfinder Press the next button
3. Press Next
4. Press Submit

Officer Approval 

In this sequence, the officer will log in and review the documentation. They will then review and verify the credential.

Click Manage Enter User ID (or last name) Click Manage

Click capture tab Click Submit for approval
Click Credentials Locate the YubiKey, select Verify Device Press Verify Device *Note: the Certificate Authority that will be used is defined in the credential type policy.