Unlocking a credential with PCA
Required Permissions: CredentialManager + CMS Issuer role
If a card holder locks out their card or needs to change their PIN they can follow these steps to update their card.
Required CMS Configurations
In the Configuration\User Portal configurations, the Online unlock method must be set to Both Self and Assisted The automatic update operations must unable PIN Unlock and Card Lock/Unlock
In the security settings, the PIN / Initial Password Display must be set to Disguised
In the security settings section, the User Portal must be set to LDAP Password
Steps
Procedure | Example | |
|---|---|---|
| 1 | Authenticate to PCA with an operator possessing the CredentialManager permissions. | |
| 2 | Click the "Unlock/Update Credential" Button. |  |
| 3 | When asked, insert the locked credential into a reader. |  |
| 4 | The credential will be read and analyzed. |  |
| 5 | If the card is active the prompt for changing the PIN will appear. |  |
| 6 | Verify the user information and press "Confirm". |  |
| 7 | Confirm the identity verification. |  |
| 8 | Instruct the user to create a new PIN. |  |
| 9 | Instruct the user to confirm the new PIN. |  |
| 10 | The credential will be unlocked. |  |
| 11 | The system will indicate when the unlock process is complete. Remove the credential. |  |
Viewing the user's credential unlock history
To view the history of the user follow these steps:
Step Number | Procedure | Example |
|---|---|---|
1 | Access the IDMS portal and click "manage" under "PIV". Search for the user. Identify the user and click "manage". |  |
2 | Once the user is accessed, click the "history" tab. Here you can view the user history. Note the "unlock" is recorded and shown in the history of the user. |  |
3 | Alternative way is to go to the IDMS portal and under "Reports" and click "User History". Search for the desired user and click "Retrieve History". |  |
4 | Here is the full history of the user. Note the "unlock" is recorded and shown in the history of the user. |  |