5.6 Canceling cards

You can cancel cards that are present, cancel cards that are not present, and enable or disable cards temporarily.

5.6.1 Enabling or disabling cards

You can enable or disable a card temporarily using the Enable / Disable Card workflow. You can enable or disable the card whether the card is present or not.

Note: As an alternative, you can use the Enable Device and Disable Device options in the MyID Operator Client. See the Enabling and disabling devices section in the MyID Operator Client guide for details.

To enable or disable a card:

  1. From the Cards category, click Enable / Disable Card.

  2. If the card is present, insert it into an available card reader.

    If the card is not present, click Search then use the Find Person screen to find the cardholder, then (if the cardholder has more than one card) select the card you want to enable or disable.

  3. Select a reason and type the details for canceling the card, then click Continue.

    See section 6.3, Certificate reasons for details.

Note: If a card with existing suspended certificates is disabled, all active certificates on the card are suspended. If that card is then re-enabled, all certificates on the card (including those which were originally suspended) are enabled.

For example, a card has two certificates: one issued and the other suspended. If that card is disabled, the issued certificate is suspended. When the card is re enabled, both certificates are unsuspended.

5.6.2 Erasing a card

When you erase a card, MyID removes its details from the database, revokes and removes any certificates stored on it and – as much as possible – returns the card to its original state. You can erase smart cards that are physically present.

Note: If your card is contactless only, or it is not present, you cannot use the Erase Card workflow to cancel it. Instead, use the Cancel Credential workflow. See section 5.6.3, Canceling a credential.

Note: You cannot erase your own cards.

To erase a card:

  1. From the Cards category, select Erase Card.

  2. Insert the card you want to cancel and select it from the list.

  3. Click Next.

  4. Provide the following information:

    • Reason for erasing the device – select the reason you are canceling the card from the drop-down list. This reason affects how MyID treats the certificates on the card.

      See section 6.3, Certificate reasons for details.

    • Details – type further information on your reasons for erasing the card. This information is stored in the audit record.

    • Device Disposal Status – select what you want to happen to the physical card after cancellation. For example, you may want to prevent the card from being used again within MyID.

  5. Click Next.

  6. On the confirmation screen, click Erase.

    MyID erases the card. The confirmation screen details what will happen to the credential and its certificates.

    Note: Do not remove the card until the process has completed.

5.6.3 Canceling a credential

If a card is not present, you can cancel it remotely using the Cancel Credential workflow. This process does not change the contents of the credential itself, but cancels the holder's access to MyID and revokes any certificates.

You can use this workflow even if the card is present; however, the contents of the card are not altered.

To cancel a credential:

  1. From the Cards menu, select Cancel Credential.

  2. Enter the search criteria for the person who owns the credential you want to cancel, then click Search.

    See section 2.2.2, Entering search criteria for details of entering search criteria.

  3. From the list of matching records, select the person to search for any credentials belonging to them.

  4. If the person has more than one credential, select the credential you want to cancel from the list.

  5. Provide the following information:

    • Reason for cancellation – select the reason you are canceling the credential from the drop-down list. This reason affects how MyID treats the certificates on the credential.

      See section 6.3, Certificate reasons for details.

    • Details – type further information on your reasons for canceling the credential. This information is stored in the audit record.

    • Device Disposal Status – select what you want to happen to the physical credential after cancellation. For example, you may want to prevent the credential from being used again within MyID.

      Note: The Device Disposal Status option is not shown for credentials that cannot be disposed; for example, VSCs.

  6. Click Next.

  7. On the confirmation screen, click Confirm.

    MyID cancels the credential in the MyID database, unassigns it from the user, and revokes any certificates as appropriate. The confirmation screen details what will happen to the credential and its certificates.