Allow Administrative Groups

No

When set to Yes, the scope available in workflows is extended to include any additionally specified administrative groups assigned to operators. The Add Person and Edit Person workflows are extended to allow management of administrative groups.

When set to No, the scope in workflows is limited to operators’ home groups, and it is not possible to manage operators’ administrative groups in Add Person or Edit Person.

See section 4.7, Administrative groups for details.

Approve Replacement Cards

No

Whether requests for replacement cards require secondary authorization.

Yes – All requests for replacement cards require secondary authentication.

No – No requests for replacement cards require secondary authentication.

Ask – Requests for replacement cards require secondary authentication only if the Validate Issuance setting is set in the credential profile.

Note: The Validate Issuance setting in the credential profile affects replacement cards only if this option is set to Ask.

Block VSC unlock in Remote Unlock workflow

No

Prevents an operator from using the Remote Unlock workflow to unlock VSCs.

Card Expiration Period (days)

365

Default period for which all issued devices are valid.

See section 11.3.1, Credential profile options.

Client Logon Keyset

Signing

Which keyset to use when signing data on the client during logon.

Cannot be edited.

Client Sign Keyset

Signing

Which keyset to use when signing data on the client.

Cannot be edited.

Constrain Credential Profile Collector

Yes (if on installation there were no existing credential profiles)

or:

No (if on installation there were existing credential profiles).

Whether you can select which roles can collect individual credential profiles on the Select Roles screen in the Credential Profiles workflow.

If this option is set to No, you can collect credentials using any role.

For credential profiles that were created when this option was not set to Yes (for example, before installing the current version of MyID) if you subsequently set this option to Yes, the credential profile will automatically be set to add any roles to the Can Collect column that were already selected in any of the other columns: Can Receive, Can Request, or Can Validate.

See section 11.3.8, Constrain credential profile collector for details.

Constrain Credential Profile Issuer

Yes (if on installation there were no existing credential profiles)

or:

No (if on installation there were existing credential profiles).

Whether you can select which roles can request individual credential profiles on the Select Roles screen in the Credential Profiles workflow.

See section 11.3.6, Constrain credential profile issuer for details.

Constrain Credential Profile Unlock Operator

No

Whether you can select which roles can unlock credentials using the Unlock Credential and Reset Card PIN workflows.

See section 11.3.9, Constrain credential profile unlock operator for details.

Constrain Credential Profile Validator

Yes

Whether you can select which roles can validate individual requests using the selected credential profile.

See section 11.3.7, Constrain credential profile validator for details.

Restrict Roles on Child Groups

No

If you set this to Yes, the roles available to a group are restricted to the roles available to the group's parent. The Inherit Roles option appears on the Select Roles dialog.

If you set this to No, the group may select from any roles in the system. The Inherit Roles option does not appear on the Select Roles dialog.

See section 4.2, Role inheritance.

Show Audit Summary

Ask

Whether a summary of the audit information is displayed on completion of a workflow.

Show Set Security Phrases Button

No

Displays a link to the Change Security Phrases workflow at the end of Add Person.

Sign Audit on Client

No

Whether audit data from client is signed on the client.

Cannot be edited.

Sign Audit on Server

Yes

Whether Audit Trail information is signed on the server.

Cannot be edited.

Task number timeout

30

The time in minutes before a task number will expire. Task numbers are allocated when you start a workflow; you must complete a workflow before the task number expires.

This setting was previously stored in the DatabaseVersion table in the MyID database.