A person who has the role Mobile ID user can go into Smart ID Self-Service and set up their own mobile ID.
Standard workflow
| Actor | Action | Option | |
|---|---|---|---|
| 1 | Mobile ID user | In Smart ID Self-Service, clicks Request PM certificates and selects the certificate types which shall be enrolled on the mobile device. Optionally also selects to enroll recovered encryption certificates. If no certificates are selected, the Smart ID Mobile App profile is activated without any certificate.. A predefined selection of certificates will be provisioned. These includes an authentication and a signature certificate. If encryption certificates are available for recovery, a form is displayed to select certificates to be restored. Clicks Next. | - |
| 2 | Identity Manager | Generates and displays a QR code. | - |
| 3 | CA | Issues one or more certificates for each selected type. | - |
| 4 | Mobile ID user | Scans the displayed QR code with the Smart ID Mobile app, and proceeds with the displayed tasks in the app. After successful activation, the certificates are displayed in the app and in Smart ID Self-Service under Certificates. | - |
Configuration options
Change the selection of certificates:
- In Identity Manager Admin, open the process Install certificates on mobile Id (PcmProcActivatePMProfile).
- Edit the form Info (PcmFormSelectCertificatesForPM).
- Enable or disable these certificates fields, who should be issued (Authentication, Signature or Encryption Certificate).
Technical references
- PcmProcActivatePMProfile