A person who has the role Mobile ID user can go into the User Smart ID Self-Service Portaland set up their own mobile ID.
Standard workflow
| Actor | Action | Option | |
|---|---|---|---|
| 1 | Mobile ID user | In the User Smart ID Self-Service Portal (USSP), clicks Request PM certificates and selects the certificate types which shall be enrolled on the mobile device. Optionally also selects to enroll recovered encryption certificates. If no certificates are selected, the Personal Mobile profile is activated without any certificate.. A predefined selection of certificates will be provisioned. These includes an authentication and a signature certificate. If encryption certificates are available for recovery, a form is displayed to select certificates to be restored. Clicks Next. | - |
| 2PRIME | Identity Manager | Generates and displays a QR code. | - |
| 3 | CA | Issues one or more certificates for each selected type. | - |
| 4 | Mobile ID user | Scans the displayed QR code with the Personal Smart ID Mobile app, and proceeds with the displayed tasks in the app. After successful activation, the certificates are displayed in the app and in the User Self-Service Portal Smart ID Self-Service under Certificates. | - |
Configuration options
Change the selection of certificates:
- In Identity Manager Admin, open the process Install certificates on mobile Id (PcmProcActivatePMProfile).
- Edit the form Info (PcmFormSelectCertificatesForPM).
- Enable or disable these certificates fields, who should be issued (Authentication, Signature or Encryption Certificate).
Technical references
- PcmProcActivatePMProfile