18 Key recovery

MyID allows you to set up a credential profile for smart cards that are used to collect recovered keys.

The smart cards are not fully-featured MyID cards; they are used only to collect recovered keys. You can issue, cancel, erase, and manage the PIN of these cards, but you cannot carry out other operations (for example, device renewal or device update, except to change recovered certificates on the card).

Note: You can also request key recovery through the MyID Operator Client or the MyID Core API. This feature works differently from requesting and collecting key recovery through MyID Desktop, in particular, using the MyID Operator Client or MyID Core API you can recover certificates to an already-issued device; see the Recovering keys section in the MyID Operator Client guide and the Requesting key recovery section in the MyID Core API guide for details. The details of setting up the key recovery credential profile, as detailed in section 18.1, Setting up the credential profile for key recovery, remain the same for all methods of key recovery.