• Installed Identity Manager, see Install Identity Manager.

1. Log in to Identity Manager Admin as a bootstrap administrator, with username admin and password admin.
2. In Language, select your preferred language.

If a license file has not yet been uploaded, you get a message asking you to do so:

1. Click Choose file.
2. Browse for the Identity Manager Admin license file in <delivery folder>\Server\3-licences\. Click Open to view the license details.
3. Click Save.

If you have a ready, customer-specific configuration file in .zip format, you can now upload it.

1. In Identity Manager Admin, go to the Configuration File tab.
2. Click Upload configuration and then Select file.
3. Browse for the provided configuration .zip file and then click Open. The configuration is read and checked for syntax. The contents of the configuration are displayed in the popup.
4. Start the import by clicking Upload. When the upload is completed, close the window with Close.
   
   The configuration file has now been uploaded.

To create users with administrative rights, follow the instruction below. Several people can be registered as administrators. It is of course important that passwords are kept secret.

For each user:

1. Go to Home > User Administration.
   If you have uploaded a configuration, all the users defined in that configuration are now displayed.
2. Click +New. Enter a User Name, Password, and Full user name.
3. Click Save + Edit. A view is displayed, that shows the available roles on the left.
4. Select Administrator on the left. Click the right arrow button to add the Administrator role to the new user.
5. Select the Permissions tab and then the General tab.
6. Check Configuration File. This is necessary to allow the created administrators to upload configurations.
7. Click Save, and close the form.
   
   The new users will now appear in the User Administration panel.

Before you can delete the bootstrap administrator, you must do this update in system.properties.

1. Edit system.properties and update these rows:

   Edit system.properties

   cronUsername.encrypted=NEW_ADMIN_USER 
   cronPassword.encrypted=NEW_ADMIN_PW

2. Restart Tomcat, so the new admin user is used for the scheduler.

1. Go to Home > User Administration.
2. Select the bootstrap administrator, admin.
3. Click Delete and confirm the deletion with Yes.
   The bootstrap administrator is now deleted, and only the administrators you have created can log in to Identity Manager Admin. When the configuration has also been uploaded to the Identity Manager Operator, the same is also valid there.
   
   The customization of the application is now complete and Identity Manager is ready for operation.

If you use client authentication to log in to Identity Manager or Smart ID Self-Service, such as browser-based smart card or soft token login, do the following to avoid failure of CA connector calls during card production with Identity Manager and CardSDK:

1. Open the file system.properties for editing.

2. Specify https ports without client authentication for CA connector calls and JPKIEncoder downloads by CardSDK:

   Configure overrides

   # if you use client-auth to log into Identity Manager or Smart ID Self-Service you need to configure overrides to non-client-auth HTTPS ports here,
   # otherwise the CardSDK trying to download the JPKIEncoder or the JPKIEncoder calling an integrated CA connector will not be able to connect
   
   # for JPKIEncoder download:
   webappUrlInfo.httpsOverridePort=18443
   
   # for CA connector calls:
   webServer.httpsOverridePort=18443