5.7 Updating cards

You can update cards to the latest version of the credential profile, or update them to different credential profiles.

Note: When you update a card, it does not change the expiry date for the card, even if you have changed the lifetime in the credential profile. This also means that if you add a certificate to the card that is constrained to the card's lifetime, the certificate is constrained to the card's original lifetime, not the lifetime specified in the updated credential profile.

5.7.2 Requesting a card update

The Request Card Update workflow allows you to create a job that updates or reprovisions a card. Users can then use the Self-Service App to collect the updates, or an operator can collect the update using the Collect Updates workflow. You can request the update whether you have the card present or not.

Alternatively, you can use the Request Update feature on the View Device screen in the MyID Operator Client to request updates for a device. See the Requesting an update for a device section in the MyID Operator Client guide for details.

To request a card update:

1. From the Cards category, click Request Card Update.

   

2. If you have the card present, insert it and click Edit.

   If you do not have the card present:

   1. Click Search then use the Find Person screen to find the user.

   2. If the user has more than one card, select the card you want to update.

      

3. Select one of the following options:

   • Request a resync of the card to the same version of the current profile – MyID will resynchronize the card to match the credential profile at issuance; for example, if a certificate has been revoked on the card, an update job is created to issue a new certificate and remove the old one. This option is available only if the credential profile has not changed.
   • Request an upgrade of the card to the latest version of the current profile – MyID will create an update job to upgrade the card to the latest version of its current profile. This option is available only if the credential profile has changed.

   • Request an upgrade of the card to the latest version of the following profile – select a credential profile from the drop-down list, and MyID will create an update job to update the card to use the latest version of the specified credential profile.

     Note: If the new credential profile has the Validate Issuance option set, an operator must validate the request before the cardholder can collect the update or reprovision job; see section 5.1.3, Validating a card request. Updating to a newer version of the same credential profile does not require validation.

4. Select the reason for the card update from the drop-down list.

   • User details have changed – carries out a full reprovision of the card.
   • There is a problem with the device – carries out a full reprovision of the card.
   • New credential profile needs to be applied – carries out a full reprovision of the card.
   • New certificates need to be added to the device – carries out an update of the card. This option is intended to add new certificates to an existing card.

   If the reason you selected requires a full reprovision, the cardholder must collect the update using the Self-Service App, or an operator must use the Collect Updates workflow on their behalf.

   Note: Reprovisioning erases and rewrites the card content. If you interrupt the reprovisioning process after the initial card authentication has taken place (for example, by pulling your card from the reader, canceling the workflow, or shutting down the Self-Service App) your smart card may be left in an unusable state. To remedy this, carry out the reprovisioning process again, or cancel and reissue the smart card.

   If the reason you selected carries out a simple update, the cardholder can collect the update using the Self-Service App, or using the Collect My Updates workflow in MyID Desktop. An operator can collect the update on their behalf using the Collect Updates workflow.

   Note: If you have an upgraded system, you may see additional options in this list, all of which carry out updates, not reprovisions; you are recommended to use the options listed above, but you may continue to use the options provided in previous versions of MyID. See section 6.5, Certificate reasons for details of the behavior of these options.

5. Click Continue.

   MyID creates a job that will update or reprovision the card.

   If the Cancel Outstanding Updates configuration option (on the Bureau & Job page of the Operation Settings workflow) is set to Yes, any outstanding card update, certificate renewal, or reprovision card jobs that exist for the selected credential are automatically canceled.

   You can use the Job Management workflow to view and manage card update and reprovision jobs. See the Job management section in the Administration Guide for details.

Note: Depending on your configuration, an email notification may be issued to the cardholder on completion of this workflow. For example:

"Your Card is ready for issue. Please follow the instructions for issuance of a new card".

5.7.3 Collect Updates workflow

The Collect Updates workflow allows you to collect an update that has been requested for another cardholder. You can collect both simple updates (including certificate renewals) and reprovisions using this workflow.

To collect an update:

1. From the Cards category, select Collect Updates.

   

2. Insert the card you want to update, select it from the list, then click Next.

   If the card has no updates available, the screen displays a message that there are no update jobs pending. Click Cancel to end the workflow.

   

3. Follow the on-screen prompts.

   If the Verify fingerprints during card update configuration option (on the Biometrics page of the Operation Settings workflow) is set, you may be asked to provide the cardholder's fingerprints, depending on the current setting of the Verify Fingerprints During Card Update option in the Issuance Settings section of the credential profile used to issue the device:

   • If Verify Fingerprints During Card Update is Always, you must provide fingerprint verification. If the cardholder does not have fingerprints enrolled, you cannot collect the update.

   • If Verify Fingerprints During Card Update is Preferred, you must provide fingerprint verification if the cardholder has fingerprints enrolled. If the cardholder does not have fingerprints enrolled, you can collect the update without fingerprint verification.

   • If Verify Fingerprints During Card Update is None, you can collect the update without fingerprint verification

   Depending on the type of update, you may need to enter the card's current PIN (for a simple update or certificate renewal) or to provide a new PIN (for a reprovision).

4. Click Collect.

   MyID updates the card.

5.7.4 Collect My Updates workflow

The Collect My Updates workflow allows you to apply updates (for example, certificate renewals) to your card.

Note: You cannot use the Collect My Updates workflow to carry out updates that require a full reprovision. You must use the Self-Service App to collect reprovision jobs.

1. Log on to MyID using your card.
2. Click the Cards category.

3. Click the Collect My Updates workflow.

   The system checks to see if any updates are available. If there are updates available, the workflow continues.

4. Enter your PIN when prompted.

   The system applies the updates to your card one by one. If you have more than one update, you may be prompted to enter your PIN for each update.