3.4 Interoperability for Athena smart cards
This section contains information about any considerations for using these smart card with other systems.
3.4.1 PIN policy settings
MyID allows you to set various policies for PINs using the settings in the credential profile. MyID enforces these settings for any operations carried out by MyID. For some smart cards, some or all of these settings are applied directly to the card, which means that the settings will also be enforced by third-party tools and utilities.
The following settings are supported for on-card PIN policy settings:
|
|
Smart card |
|---|---|
|
PIN Setting |
Athena IDProtect |
|
Maximum PIN Length |
Y |
|
Minimum PIN Length |
Y |
|
Repeated Characters Allowed |
|
|
Sequential Characters Allowed |
|
|
Logon Attempts |
Y |
|
PIN Inactivity Timer |
Y |
|
PIN History |
Y |
|
Lowercase PIN Characters |
Y (optional or mandatory) |
|
Uppercase PIN Characters |
Y (optional or mandatory) |
|
Numeric PIN Characters |
Y (optional or mandatory) |
|
Symbol PIN Characters |
Y (optional or mandatory) |
|
Lifetime |
Y |
- Y – Supported.
- blank – Not supported.
3.4.2 Known issues
-
Issues with smart card detection
Intercede has seen issues with the IDProtect Client software where MyID is not able to detect a new card. This is caused by the minidriver failing to return a serial number for the new card. This has been seen only with uninitialized cards, as they are delivered from the factory. NXP/Athena have provided Intercede with the following registry change to enable the serial number to be retrieved. You must apply this registry change to every client used to issue new cards:
[HKEY_LOCAL_MACHINE\SOFTWARE\Athena Smartcard Solutions\IDProtect Client]
"MDAllowWorkWithUnformattedCards"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Athena Smartcard Solutions\IDProtect Client]
"MDAllowWorkWithUnformattedCards"=dword:00000001