Baseline MyID
The baseline MyID smart card and identity management system supports most of the major smart card manufacturers' smart cards and chip-based devices out-of-the-box.

With baseline MyID you can:

Enrol cardholders, manually or automatically from a directory, database or HR system
Issue a chip-based device to an individual
Manage the cardholder's PIN
Unlock a chip-based device
Design, create and print badges

Badging
The MyID badging module comes as standard with baseline MyID and provides an integrated ID badge designer and card layout editor. The card layout editor comes with a complete set of tools for designing and printing graphical and textual data on to smart cards.

Key features of the badging module include:

Interactive drag and drop graphical ID badge designer/Card layout editor
Support for multiple manufacturers card printers
*Edge-to-edge capabilities
*Print front and back of the card (duplex printing)
*Bar code personalization
*Magnetic stripe encoding
Security protected to prevent fraudulent badge design

*Some features are card printer dependent and may require additional hardware modules to be added to the printer.

PKI
MyID simplifies the management of PKI certificates on smart cards and chip-based devices. The entire certificate management lifecycle is addressed: request, add, suspend, revoke and update. Certificates are transparently written to the correct device at the point of issuance. Certificates can be added to a previously issued device in either witnessed or self-service models.

The MyID PKI module provides a PKI independent registration authority, integrated with the widest range of PKI certificate authorities on the market today. The PKI module provides flexible business process control over key generation, certificate request, and certificate issuance processes.

Additionally, the PKI module supports certificate revocation, suspension, and key archive and recovery when combined with the MyID Key Manager module.

The following PKI certificate authorities can be supported simultaneously by MyID:

Cybertrust Unicert
Entrust
GlobalSign
Microsoft
Nexus*
RSA Certificate Manager (Keon)
Sun One CA
Verisign OnSite and MPKI

MyID Key Manager (Archive/Recovery*)
The MyID Key Manager controls the generation, storage, distribution, archival and recovery of cryptographic keys. The keys are used for encryption and decryption of data and for digital signature purposes.

The MyID Key Manager provides a CA independent key archive and recovery tool and supports a variety of leading Hardware Security Modules (HSMs). In addition, the MyID Key Manager can control card and token keysets, including both static and diversified schemes, providing strong ownership of devices by enabling you to replace the factory keys with your own.

Features:

CA independent key archive and recovery
High security, encrypted MyID keystore with HSM support
Secure data exchange with 3rd party applications
Encryption / Decryption service for MyID server components
Encryption / Decryption service for secure communications with MyID clients
Global Platform keyset management
Static and diversified keys
*Contact intercede for configuration details.

Biometrics*
The MyID biometric module provides a secure enrolment station for the enrolment and registration of biometric data. Fingerprint information is recorded and stored in the MyID database. The biometric information can then be encoded onto a chip-based device at the point of issuance.

Biometrics can be used for multiple applications including:
Authentication to MyID
PIN replacement on device
Additional authentication factor on a device
Verification
Key features
Simple, guided user interface for biometric enrolment
Direct write-to-card
Match-on-server/ Match-on-card / Match-in-reader technologies supported
Compatible with handheld ID verification devices
Support for Labcal, Precise Biometrics and *Bioscrypt

*Additional configuration may be require

Global Platform Applets
The MyID Global Platform module provides full lifecycle management of applets on chip-based devices. It includes an Application Manager to control the deployment of multiple versions of applets both during and post-issuance. This includes removing or updating applets on a live card or reissuing a replacement card containing applets if the original card is lost or damaged.

Key Features
Support for Global Platform 2.1.1 cards
Applet loading and deletion
Applet updates with version control
Applet push to previously issued cards
Change factory issued key sets to diversified customer key sets
Interoperable with Java smart cards from multiple manufacturers
JCOP30 / 31 support
Keyset management is provided, with the ability to support:
Factory keysets JCOP30 / 31 support
Customer static keysets
Diversified keysets
Cards may be controlled through their lifecycle, either from Global Platform Ready state or from a pre-initialized 'Secured' state.

Authentication/ One-Time Password (OTP) Servers
*MyID provides an independent Authentication Server and Single Sign-On server connector. MyID interacts with the authentication server database, storing and updating information on authentication tokens and users. Changes made through the MyID web front end will update the authentication server database.

Supported Authentication and OTP Servers include:
ActivIdentity
RSA SecurID Authentication Manager

*Contact Intercede for configuration details

Contactless Read Only
MyID incorporates a contactless read only module that captures the serial number of proximity cards at the point of card issuance. The captured serial number can then be passed to a Physical Access Control System (PACS) where it can be used to control access to buildings.

Key features
Quickly capture proximity serial numbers at the point of card issuance
Storage of the proximity serial
Push serial number to PACS

*Some customization and configuration may be required. Please contact Intercede for details.

Contactless Read/Write
MyID incorporates a contactless read/write module that manages the programming and issuance of contactless read/write cards. Contactless cards are typically used for building access, ticketing and vending applications
The MyID Contactless Read/Write module may be used to manage contactless cards on their own or when combined with other MyID modules it can manage hybrid and dual-interface cards that contain both contact and contactless interfaces. Contact and contactless interfaces combined on a single card provide a secure platform for consolidating all ID related credentials.

Key features
Easy to use, general purpose, web based interface for managing the programming and security sectors
Encoding of a MIFARE and *HID iClass sectors based on data from any field held in the person's database record
Post-issuance update of sector data
Delegated sector management through selective keyset control

* Contact Intercede for configuration options and limitation