If a person's laptop is lost, stolen, broken or replaced, then the virtual smart card needs to be replaced.
Standard workflow
| Actor | Action | Option | |
|---|---|---|---|
| 1 | Virtual smart card user | In PRIME Self-Service: Clicks on the active virtual smart card. Clicks Possible actions and selects Replace Virtual Smart Card. | - |
| 2 | PRIME | Revokes all valid certificates and sets the virtual smart card to the status Replaced. | - |
| 3 | CA | Recovers encryption certificates and issues new certificates for the virtual smart card. | - |
| 4 | Personal Desktop App | Starts and activates a new smart card profile. | - |
| 5 | Virtual smart card user | In Personal Desktop App: Enters a PIN. Confirms PIN entry. | - |
| 6 | Personal Desktop App | Creates key pairs on the trusted platform module (TPM). | - |
| 7 | CA | Issues certificates. The certificates are stored in PRIME and on the TPM. | - |
| 8 | Virtual smart card user | In Personal Desktop App: Confirms the new certificates. | - |
| 9 | PRIME | In PRIME Self-Service: Displays the new virtual smart card in the Cards tab and the new certificates in the Certificates tab. | - |
Technical reference
- PcmProcReplaceVSC
Sub-processes
- PcmSubProcCreationOfVSC
- PcmProcLockCertificates