Card and PIN management
Overview
Every user in SafeQ can have any number (usually one) of assigned card numbers. Typically, these correspond to the ID badges of employees with RFID and/or similar contactless identification chips. There are many different standards of identification chips, most of which are, however, incompatible between themselves. SafeQ is able to work with virtually any of them provided that the terminals are equipped with the right card scanners.
Instead of and/or besides cards, users may also use numeric PIN codes for authentication at SafeQ terminals. This PIN code is treated as a virtual card number: it is stored in the same place and managed in the same way. However, for security reasons, a cryptographic hash of the PIN code is stored instead of the current PIN, so that it is not easy, even for an administrator, to find out the PIN of a user.
Required access rights for managing PIN and Card Activation Codes and cards
The administrator needs to have access rights for View list of users and for Add, edit, and delete users. For assigning a card from web interface, admin needs also rights for List of accesses to terminals.
PIN (Personal Identification Number)
Users may use numeric PIN codes for authentication at SafeQ terminals.
The PIN code is treated as a virtual card number: it is stored in the same place and managed in the same way.
Adding/removing PIN for user
Write down PIN to Card ID/PIN field and press save button or green + button.
You can remove currently PIN clicking to it and clicking to red - button.
Card Activation Code
YSoft SafeQ Card Activation Code is a module used for allocating unregistered cards to users.
Card Activation Code generation
AUTOMATICALLY -- Card Activation Code is generated after receiving first print job from the user. YSoft SafeQ generates subsequently the Card Activation Code for the user.
MANUALLY -- Card Activation Code is generated by the administrator by clicking to Generate Card Activation Code button.
You can see more information Configuring ID card self assignment
Card assignment methods
1. Card assignment on terminals
Register a new card at the KM printer
Register a new card at Ricoh printer
Register a new card at the Sharp printer
Registering a new card at Terminal Professional
Register a new card at the Xerox printer
2. Card assignment from web interface:
In case of status Unknown card, PIN, or password, administrator can create new user or assign PIN, card number to existing user.
Icon | Name | Description |
| Assign card/PIN to new user | Dialog for new user definition is opened and card/PIN is filled in card field. Administrator must fill rest of the required field and save user to complete action. See Adding and configuring users. |
| Assign card/PIN to exiting user | List of existing users is opened and administrator can choose one of them. Dialog with selected user definition is opened. Administrator must save changes to complete action. See Adding and configuring users. |
Advanced PIN management
This feature enables to add or generate PIN with time expiration to users. When the PIN expires, the user cannot login with this PIN and has to generate a new PIN. New PINs can also be generated by an administrator. The administrator can set PIN expiration or generate a PIN with the default expiration.
When a user or an administrator generates a new PIN a notification e-mail with PIN and its expiration date is sent to the user. Another notification email is sent before user's PIN is going to expire.
NOTE: When a user has some PIN(s) defined and a new PIN is generated, all previous PINs are deleted.
Set PIN expiration and press the Generate PIN button. An e-mail is sent to the user's mailbox, an example follows:
When PIN is going to expire an information e-mail is sent to user's mailbox:
Configuration
There are several properties related to PIN code generation.
Feature can be enabled by
PIN-generator = true
This property enables to set length of the variable part of PIN (without digits in login name) in digits.
PIN-size = 6
PIN expiration time in days.
PIN-default-expiration = 60
Time in days, when the notification e-mail is sent to user before his PIN expires.
PIN-expiration-notification = 7
This property enables overriding old PINs with new PINs.
PIN-override = true
The following two properties handle the archivation of old PINs. When enabled, the old PINs are written to a history table. When a PIN is stored in the history table, it cannot be used as an active PIN. After PIN archivation period expires, PINs are deleted and could be reused.
PIN-history-enabled = false
PIN-archivation-period = 365
The following properties set the notifications for the users.
PIN-enable-email-notifications = true
Specifies, whether e-mail notifications are sent to the user after a new PIN is generated.
PIN-enable-display-for-user = true
Specifies, whether a newly generated PIN is displayed to the user in a browser popup window.
PIN-enable-display-for-admin = false