Skip to main content

Edit smart credential settings

After you enroll a smart credential, review its settings to confirm they are configured correctly. Changes to smart credential settings are uploaded to the smart credential application during activation.

You can also modify settings for an active smart credential. After you modify an active smart credential in IDaaS, update the credential so the Entrust Mobile Smart Credential application reflects those changes. For instructions, see Manage assigned smart credentials.

Edit smart credential settings​

  1. Click > Members > Users. The Users List page appears.

  2. Click the user ID.

  3. Click the Authenticators tab. The Authenticators page appears.

  4. Click to the right of the smart credential that you want to edit, then click Details. The Smart Credential Details dialog box appears.

    note

    A smart credential in the Enrolling state is missing one or more required settings. Enter values for the missing attributes to move the smart credential to the Enrolled state.

  5. Under Settings, confirm a value is selected for each required digital ID. A smart credential cannot be activated until all required digital IDs have values. If the CA configuration changed after enrollment, replace the old Card Holder digital ID with the new one.

  6. Under Variable Values, update values as needed.

    1. Do not modify First Name in the Mobile Smart Credential details.
    2. Do not modify Last Name in the Mobile Smart Credential details.
    3. Set Email Address to the email address of the user receiving this Mobile Smart Credential. A valid email address is required.
    4. The default PIV smart credential definition includes a UPN variable that maps to the User Principal Name (UPN) user attribute. By default, UPN is empty. Enter a User Principal Name only if you are configuring IDaaS to accept smart card sign in. If the user will use the smart credential for Windows Smart Card sign in, set the UPN to match the user's Windows account. For more information, see Map a User Principal Name attribute for Smart Login.
    5. Do not modify UUID. This value is a unique string that identifies the smart credential.

  7. Click Save. The smart credential is now in an Enrolled state.

Validate your changes​

After you save your changes, validate the updated settings before activation.

  1. Confirm the smart credential remains in the Enrolled state.
  2. Confirm all required digital IDs under Settings have selected values.
  3. Confirm Email Address is valid and belongs to the assigned user.
  4. If smart card sign in is required, confirm UPN matches the user's Windows account.
  5. If you modified an active smart credential, confirm the credential update is completed so the application settings stay in sync.

If validation fails, review the missing required attributes, verify the Card Holder digital ID mapping, and confirm UPN formatting and account mapping. For more information, see Manage assigned smart credentials and Map a User Principal Name attribute for Smart Login.