Workflow
In the Workflow section, you can define the available operations for administrators and operators in the Management Console and for users in the Self-Service.
General
| Add cards automatically when they are issued or assigned | Cards are automatically registered in Axidian CertiFlow at the moment of issuance or assignment. If this option is disabled, you cannot issue or assign unregistered cards. |
| Allow user to add cards when they are issued | Users can issue unregistered cards. Cards are registered automatically during the issuance process. |
| Search for certificates when card is issued or updated to track validity period | When a card is issued or updated, Axidian CertiFlow checks for third-party certificates and private keys and registers the certificates to manage the validity period. For more information, see Tracked certificates. |
| Record tracked certificates in custom logs | Tracked certificates information is recorded in custom logs. This option is available if the Custom logs option is enabled in the Common features section of the Axidian CertiFlow Configuration Wizard. |
| Allow user to select tracked certificates | When a card is issued or updated in the Self-Service, users can select third-party certificates and record them in Axidian CertiFlow. |
Administrator permissions
| Reset user PIN | If a user forgets or locks their card PIN, you can reset it. |
| Unblock card offline | You can unlock a card in offline mode, even if there is no connection between the user's workstation and the Axidian CertiFlow server. |
| Validate answers to security questions | To unlock a card in offline mode, you must receive correct answers to the security questions from the user. |
| Cancel card update operation | If a user starts updating a card by mistake, you can cancel the update. |
Make sure the role members have the privileges to cancel card updates, reset PINs, and unlock card. Configure these privileges in the Configuration → Roles section.
User permissions
General
| Require to set answers to security questions when logging in to self-service | When users log in to the Self-Service, they must select security questions and set their answers. To authenticate in the Remote Self-Service, users must enter answers to security questions. |
| Change answers to security questions | Users can edit answers to security questions. |
| Issue AirCard | Users can issue AirCard virtual smart cards. |
Card issuing operations
| Assign | When users issues cards in a Clean status, cards are automatically assigned. |
| Select optional certificates when card is issued | When users issue cards, a list of templates for optional certificates is displayed. Users can select which certificates to write to the card. |
Issued card operations
| View contents | Users can view the Contents tab in the card menu, displaying all certificates stored on the card. |
| Update | Users can update certificates stored on the card if their validity has expired or is about to expire. |
| Select optional certificates when card is updated | When users update cards, a list of templates for optional certificates is displayed. Users can select which certificates to add or remove. |
| Reset user PINs | If users forget or lock their card PINs, they can reset PINs. |
| Enable | Users can enable cards, if cards were disabled. |
| Disable | Users can disable cards to temporarily block access to them. |
| Revoke | Users can revoke cards if they are damaged, lost or compromised. |
| Clear | After a card is revoked, the Clear card option is in the card menu. |
Document operations
| Delete | Users can delete documents in the Your documents section in the Self-Service. |