A person who has the role Mobile ID user can go into the User Smart ID Self-Service Portaland set up their own mobile ID.
Standard workflow
User
the
Portal (USSP)
and selects the certificate types which shall be enrolled on the mobile device. Optionally also selects to enroll recovered encryption certificates. If no certificates are selected, the Personal Mobile profile is activated without any certificate.
PRIME
Personal
the User Self-Service Portal
| Actor | Action | Option | |
|---|---|---|---|
| 1 | Mobile ID user | In |
Smart ID Self-Service |
, clicks Request PM certificates |
. A predefined selection of certificates will be provisioned. These includes an authentication and a signature certificate. If encryption certificates are available for recovery, a form is displayed to select certificates to be restored. Clicks Next. | - |
| 2 |
| Identity Manager | Generates and displays a QR code. | - | |
| 3 | CA | Issues one or more certificates for each selected type. | - |
| 4 | Mobile ID user | Scans the displayed QR code with the |
Smart ID Mobile app, and proceeds with the displayed tasks in the app. After successful activation, the certificates are displayed in the app and in |
Smart ID Self-Service under Certificates. | - |
Configuration options
Change the selection of certificates:
- In Identity Manager Admin, open the process Install certificates on mobile Id (PcmProcActivatePMProfile).
- Edit the form Info (PcmFormSelectCertificatesForPM).
- Enable or disable these certificates fields, who should be issued (Authentication, Signature or Encryption Certificate).
Technical references
- PcmProcActivatePMProfile