9 PIN generation

You can set up MyID to generate PINs on the server when you issue smart cards. Currently, you can select one of the following PIN generation algorithms:

EdeficePinGenerator – creates a PIN using a known algorithm, a PIN generation key, and the card serial number as diversification data. You can regenerate the same PIN on another system as long as you have the algorithm, PIN generation key, and the card serial number. You can also set up MyID to issue a PIN notification email when the card is issued.

Produces numeric-only PINs.

See section 9.3, EdeficePinGenerator PIN generation algorithm for details of the algorithm.
EdeficePolicyPinGenerator – similar to the EdeficePinGenerator algorithm, but can be configured to produce PINs containing numbers, lower alpha, upper alpha, and symbol characters, based on the PIN Characters options in the credential profile.

See section 9.4, EdeficePolicyPinGenerator PIN generation algorithm for details of the algorithm.
RandomPINGenerator – uses a CNG random number generator to create a random numeric PIN that is guaranteed not to contain the user's logon name or security ID. This PIN is not stored and cannot be regenerated. The Issue Card workflow displays the PIN on screen, but other issuance workflows do not display the PIN – you must set up MyID to issue a PIN notification email or print a PIN mailing document when the card is issued.

By default, the RandomPINGenerator produces numeric-only PINs. If you set the Use PIN policy settings in random server PIN generation configuration option (on the PINs page of the Security Settings workflow) the random PIN generator takes into account the allowed and mandatory PIN characters determined by the credential profile.

Both EdeficePinGenerator and EdeficePolicyPinGenerator require a PIN generation key to ensure the security of the PIN generation algorithm. See:

section 9.1, Adding a PIN generation key.

You must set up your credential profile to configure the PIN generation options. See: