5.7 Updating cards

You can update cards to the latest version of the credential profile, or update them to different credential profiles.

Note: When you update a card, it does not change the expiry date for the card, even if you have changed the lifetime in the credential profile. This also means that if you add a certificate to the card that is constrained to the card's lifetime, the certificate is constrained to the card's original lifetime, not the lifetime specified in the updated credential profile.

5.7.1 Updating a card

The Update Card workflow allows you to update a card that is present.

Note: You cannot carry out card updates in the following situations:

• When upgrading to a new credential profile or updated credential profile that has a different data model to the original card.
• When adding applets to an existing card.
• When changing which certificates are used for signing or encryption without replacing the certificates.

In these situations, you are recommended to reprovision the card (see section 5.17, Reprovisioning cards) or request a card update with a reprovisioning reason, and let the cardholder update their card using the Self-Service App.

To update a card:

1. From the Cards category, click Update Card.

   

2. Insert the card you want to update, then click Edit.

   

3. Select one of the following options:

   • Request a resync of the card to the same version of the current profile – MyID will resynchronize the card to match the credential profile at issuance; for example, if a certificate has been revoked on the card, an update job is created to issue a new certificate and remove the old one. This option is available only if the credential profile has not changed.
   • Request an upgrade of the card to the latest version of the current profile – MyID will create an update job to upgrade the card to the latest version of its current profile. This option is available only if the credential profile has changed.
   • Request an upgrade of the card to the latest version of the following profile – select a credential profile from the drop-down list, and MyID will update the card to use the latest version of the specified credential profile.

4. Select the reason for the card update from the drop-down list.

   See section 6.5, Certificate reasons for details.

5. Click Continue.

6. Enter the card's PIN, then click Next.

   MyID updates the card.

5.7.2 Requesting a card update

The Request Card Update workflow allows you to create a job that updates or reprovisions a card. Users can then use the Self-Service App to collect the updates. You can request the update whether you have the card present or not.

To request a card update:

1. From the Cards category, click Request Card Update.

   

2. If you have the card present, insert it and click Edit.

   If you do not have the card present:

   1. Click Search then use the Find Person screen to find the user.

   2. If the user has more than one card, select the card you want to update.

      

3. Select one of the following options:

   • Request a resync of the card to the same version of the current profile – MyID will resynchronize the card to match the credential profile at issuance; for example, if a certificate has been revoked on the card, an update job is created to issue a new certificate and remove the old one. This option is available only if the credential profile has not changed.
   • Request an upgrade of the card to the latest version of the current profile – MyID will create an update job to upgrade the card to the latest version of its current profile. This option is available only if the credential profile has changed.

   • Request an upgrade of the card to the latest version of the following profile – select a credential profile from the drop-down list, and MyID will create an update job to update the card to use the latest version of the specified credential profile.

     Note: If the new credential profile has the Validate Issuance option set, an operator must validate the request before the cardholder can collect the update or reprovision job; see section 5.1.3, Validating a card request. Updating to a newer version of the same credential profile does not require validation.

4. Select the reason for the card update from the drop-down list.

   • User details have changed – carries out a full reprovision of the card.
   • There is a problem with the device – carries out a full reprovision of the card.
   • New credential profile needs to be applied – carries out a full reprovision of the card.
   • New certificates need to be added to the device – carries out an update of the card. This option is intended to add new certificates to an existing card.

   If the reason you selected requires a full reprovision, the cardholder must collect the update using the Self-Service App.

   Note: Reprovisioning erases and rewrites the card content. If you interrupt the reprovisioning process after the initial card authentication has taken place (for example, by pulling your card from the reader, canceling the workflow, or shutting down the Self-Service App) your smart card may be left in an unusable state. To remedy this, carry out the reprovisioning process again, or cancel and reissue the smart card.

   If the reason you selected carries out a simple update, the cardholder can collect the update using the Self-Service App, or using the Collect My Updates workflow in MyID Desktop.

   Note: If you have an upgraded system, you may see additional options in this list, all of which carry out updates, not reprovisions; you are recommended to use the options listed above, but you may continue to use the options provided in previous versions of MyID. See section 6.5, Certificate reasons for details of the behavior of these options.

5. Click Continue.

   MyID creates a job that will update or reprovision the card.

   If the Cancel Outstanding Updates configuration option (on the Bureau & Jobs page of the Operation Settings workflow) is set to Yes, any outstanding card update, certificate renewal, or reprovision card jobs that exist for the selected credential are automatically canceled.

   You can use the Job Management workflow to view and manage card update and reprovision jobs. See the Job management section in the Administration Guide for details.

Note: Depending on your configuration, an email notification may be issued to the cardholder on completion of this workflow. For example:

"Your Card is ready for issue. Please follow the instructions for issuance of a new card".

5.7.3 Collect My Updates workflow

The Collect My Updates workflow allows you to apply updates (for example, certificate renewals) to your card.

Note: You cannot use the Collect My Updates workflow to carry out updates that require a full reprovision. You must use the Self-Service App to collect reprovision jobs.

1. Log on to MyID using your card.
2. Click the Cards category.

3. Click the Collect My Updates workflow.

   The system checks to see if any updates are available. If there are updates available, the workflow continues.

4. Enter your PIN when prompted.

   The system applies the updates to your card one by one. If you have more than one update, you may be prompted to enter your PIN for each update.