9 PIN generation

You can set up MyID to generate PINs on the server when you issue smart cards. Currently, you can select one of the following PIN generation algorithms:

• EdeficePinGenerator – creates a PIN using a known algorithm, a PIN generation key, and the card serial number as diversification data. You can regenerate the same PIN on another system as long as you have the algorithm, PIN generation key, and the card serial number. You can also set up MyID to issue a PIN notification email when the card is issued.

  This option requires a PIN generation key to ensure the security of the PIN generation algorithm. See section 9.1, Adding a PIN generation key for details.

• RandomPINGenerator – uses a CNG random number generator to create a random numeric PIN that is guaranteed not to contain the user's logon name or security ID. This PIN is not stored and cannot be regenerated. The Issue Card workflow displays the PIN on screen, but other issuance workflows do not display the PIN – you must set up MyID to issue a PIN notification email or print a PIN mailing document when the card is issued.

You must set up your credential profile to configure the PIN generation options. See:

• section 9.2.1, PIN generation for issuance.

• section 9.2.2, PIN generation for reset.