Account for missing fingerprints

Yes

When this option is set, if you have skipped any fingerprints and not reached the minimum number of fingerprints as specified in the Enforce a minimum number of fingerprints during enrollment? configuration option, you must provide a reason for not capturing the minimum number of fingerprints in the Confirm Finger Capture dialog.

Note: The Account for missing fingerprints and Enforce a minimum number of fingerprints during enrollment? options are not enforced when capturing fingerprints using the MyID Operator Client.

See your biometric integration guide for details.

Allow Aware Preface control to capture non-compliant images

No

Allows the Preface control to capture non-compliant images.

For information on using Aware PreFace, contact customer support, quoting reference SUP-228.

Allow Biometric PIN Reset

Yes

Allows the user to log on with biometrics to complete a PIN reset.

See the Self-service PIN reset authentication section in the Operator's Guide.

Aware Fingerprint Component supported devices

CROSSMATCH_GUARDIAN

When the Fingerprint enrollment device option is set to Handprint capture, this option contains a comma-separated list of fingerprint devices that can be used by the Aware Fingerprint Capture component.

If the Fingerprint enrollment device option is set to anything other than Handprint capture, this option is ignored.

If you leave this option blank, the default behavior is to use Crossmatch Guardian devices.

See the Aware Fingerprint Capture guide provided with the Aware Fingerprint Capture module. For information on this module, contact your account manager.

Aware Preface Custom Profile (ISO Token)

Aware custom profile.

For information on using Aware PreFace, contact customer support, quoting reference SUP-228.

Aware Preface Custom Profile (PIV Authentication)

Aware custom profile.

For information on using Aware PreFace, contact customer support, quoting reference SUP-228.

Aware Preface Custom Profile (PIV Card)

Aware custom profile.

For information on using Aware PreFace, contact customer support, quoting reference SUP-228.

Biometric matching library

Precise

Select the biometric matching library to be used.

See the integration guide for your fingerprint readers.

Biometric matching threshold

50

Threshold of confidence of matching prints, 0-100.

See the integration guide for your fingerprint readers.

BioSensitivity for Precise Biometrics

10000

Setting for Precise biometric readers. Must be in the range 250 to 2,500,000.

Precise biometric readers are no longer supported in MyID

BioSensitivity for U.are.U Biometrics

10000

The BioSensitivity value refers to the failure rate of mismatches for U.are.U biometric readers. Must be in the range 250 to 2,500,000.

See the U.are.U Integration Guide for details.

Bypass fingerprint verification when no fingerprints enrolled

No

Whether the cardholder can bypass fingerprint verification if there are no fingerprints available for the cardholder in the MyID database.

See the integration guide for your fingerprint readers.

Capture EFT Biometric Samples

No

Determines whether MyID generates an EFT from the biometrics when capturing fingerprints.

This feature is used in conjunction with the optional OPM Adjudication or EFT Export modules. Without these modules installed, MyID generates and stores the EFT from the biometric data captured, but you must install the relevant module to send the EFT to OPM for adjudication or to export the EFT files.

Capture fingerprint rolls

No

Determines whether MyID captures fingerprint rolls in addition to individual fingerprints when capturing fingerprints.

Capture threshold for U.are.U Biometrics

60

Threshold of acceptable of a captured fingerprint image.

For PIV, a minimum of 60 is required, which maps to an NFIQ value of 3. Valid values are 20, 40, 60, 80, and 100, which map to NFIQ values 5, 4, 3, 2, and 1.

See the U.are.U Integration Guide for details.

EFT Requires Rolls

Yes

Determines whether MyID captures fingerprint rolls in addition to individual fingerprints when capturing fingerprints for EFT capture. You must also have the Capture EFT Biometric Samples configuration option set, or MyID will not capture fingerprint rolls.

This feature is used in conjunction with the optional OPM Adjudication or EFT Export modules.

Enable additional authentication options

Yes

Allows the configuration of additional options in the Credential Profiles workflow.

See section 11.3.2, Additional credential profile options for details.

Enable Facial Capture

No

Whether biometric facial capture is enabled for MyID. Also controls the import of facial biometrics through the MyID Core API.

For details of capturing facial biometrics in MyID, see the Capturing facial biometrics section in the MyID Operator Client guide.

For details of importing facial biometrics, see the API documentation provided with the MyID Core API.

Enforce a minimum number of fingerprints during enrollment?

2

When the Account for missing fingerprints option is set, if you have skipped any fingerprints and not reached the minimum number of fingerprints as specified in this option, you must provide a reason for not capturing the minimum number of fingerprints in the Confirm Finger Capture dialog.

Note: The Account for missing fingerprints and Enforce a minimum number of fingerprints during enrollment? options are not enforced when capturing fingerprints using the MyID Operator Client.

See your biometric integration guide for details.

Enforce biometrics at request

Yes

Enforces the Require Fingerprints at Issuance and Require Facial Biometrics options in the credential profile so that fingerprints and facial biometrics are always required when requesting a device.

The Require Fingerprints at Issuance and Require Facial Biometrics options are enforced at issuance, but this option makes sure that a request cannot be created, thereby catching the issue with the person's biometrics at an earlier stage.

Note: This affects requests made using the MyID Operator Client only.

See section 11.3, Working with credential profiles.

Fingerprint enrollment device

Precise 250 MC

Which fingerprint reader to use.

If you set this option to Handprint capture, you must also use the Aware Fingerprint Component supported devices option to specify which 10-slap scanners are to be used.

See the integration guide for your fingerprint readers.

For information on 10-slap scanners, see the Aware Fingerprint Capture guide provided with the Aware Fingerprint Capture module. For information on this module, contact your account manager.

Note: In versions of MyID earlier than MyID 12.10, this setting was named Crossmatch Guardian instead of Handprint capture.

Fingerprints identification check enabled

Yes

Determines whether fingerprints are stored as live or pending when captured. Pending fingerprints become live only after the person has successfully completed their identity verification checks. Set this value to Yes to flag captured fingerprints as pending until the identity check has verified that they are valid. Set this value to No to make fingerprints live and available for use as soon as they are captured.

Available only when the Adjudication module is installed. See the Adjudication Integration Guide provided with the Adjudication module for details.

Number of fingerprint validation attempts

Number of attempts the cardholder can make when attempting to validate fingerprints. If this value is blank, the default is 3.

See the Authenticating a person section in the MyID Operator Client guide.

Require fingerprints for derived credentials

Yes

If set to Yes, fingerprint authentication is required to collect derived credentials.

See the Derived Credentials Configuration Guide for details.

Restrict the list of available biometric devices

Yes

When set to Yes, removes any biometric readers that are flagged for enrollment only from the list of available readers when performing a match in the Unlock Card and Activate Card workflows.

Set this option to No only if you are experiencing problems with the detection of biometric readers.

This option is not relevant for biometric operations carried out using the MyID Operator Client.

SecuGen fingerprint reader brightness

0

This setting controls the brightness for SecuGen fingerprint readers. Set to a value between 0 (dark) and 100 (bright)

See the SecuGen Integration Guide for details.

SecuGen minimum capture quality

50

This setting controls the capture quality for SecuGen fingerprint readers. Set to a value between 0 (low quality) and 100 (high quality)

See the SecuGen Integration Guide for details.

Verify fingerprints during card creation

Yes

Controls when fingerprints are required. Setting this to Yes will enable biometric samples to be used to identify an individual when issuing a card.

Requires a data model that writes fingerprints to the card. For example, the PIV data models are suitable, but the CIV data models are not.

See your fingerprint reader integration guide for details.

Verify fingerprints during card unlock

Yes

Controls when fingerprints are required. Setting this to Yes will enable biometric samples to be used to identify an individual when unlocking a card.

See your fingerprint reader integration guide for details.

Verify fingerprints during card update

No

Controls when fingerprints are required. Setting this to Yes will enable biometric samples to be used to identify an individual when updating a card.

Also used in conjunction with the Verify Fingerprints During Card Update option in the Issuance Settings section of the credential profile to control whether fingerprints are requested in the Collect Updates workflow.

See the Collect Updates workflow section in the Operator's Guide.

See your fingerprint reader integration guide for details.