BIIM Support     Overview Installation Using the BIIM MFA Authentication - TPM - Biometrics - SmartCards / Tokens Windows Client Logon Single Sign On Secure eWallet Document Manager Managing My Identity BioCert BIIM Settings AD & LDAP Integration

BioCert® Intelligent Identity Manager Support

Managing My Identity

A user can consolidate all credentials, application passwords, and network accounts into a single data unit called User Identity. User identity is always encrypted and protected with multifactor authentication. BioCert® Identity supports a variety of authentication and encryption devices including fingerprint readers, smart cards, and Trusted Platform Modules (TPM). BioCert® Identity enables a user to perform complete life-cycle management of User Identity within security-policy guidelines. User can back up User Identity for migration to another system or for protection against system failure. The User Identity can be also stored in a secure encrypted file, smart card, and USB or virtual token.

A user has complete control over User Identity through User Identity operations. The My Identity panel allows the user to perform all self-management actions over the user identity from one place, in BioCert® Identity.

The supported functionality in My Identity includes all of the following options:

• Log on to and log off from BioCert® Identity
• Register and manage multifactor credentials
• Register and manage the user data for the configured services and applications
• Maintain the user profile
• Back up and restore the User Identity

Note - The ability to perform the options in the previous list is based on permissions given by the administrator for each option.

The following topics describe the user operations in details:

Changing the Windows Password

To change the Windows password:

1. In BioCert® Identity, select My Identity.
2. Select Change Windows Password. The BioCert® Registration Wizard is displayed.
3. Type your old Windows password, then type and confirm the desired new password.
4. Click Finish to complete the operation.

 Registering Fingerprints

To register your fingerprints:

1. In BioCert® Identity, select My Identity.
2. Select Register Fingerprints. The BioCert® Registration Wizard is displayed.
3. Using the mouse, select the finger for the registration. By default, the right index finger is selected.
4. Follow the instructions shown on the wizard page. Depending on the type of fingerprint reader, you are prompted either to place or swipe your finger over the fingerprint sensor to complete enrollment.
5. When the system collects a few finger impressions, you are prompted to submit one or more fingerprints (using the same finger) to complete verification.
6. When verification is complete, click Finish to complete the registration operation, or select another finger for registration.

Note
It is recommended to register at least two fingers per user account. Index fingers are preferable.

Registering Smart Cards or Tokens

To register a smart card or USB token:

1. In BioCert® Identity, select My Identity.
2. Select Register Smart Card or Token. The Token Registration Wizard is displayed.
3. On the Device Type dialog box, select the desired type of device, and then click Next. Select Token dialog box is displayed.
4. If a smart card or USB token was selected as the device type, make sure that smart card is inserted or the token is connected to a USB port.

   Note
   If the smart card is not inserted or the USB token is not connected, the Next button is disabled in Select Token dialog box.

   On the Device Type dialog box, click Next. Token Properties dialog box is displayed.

5. Type the User PIN, and then click Finish to complete the operation.

To register a virtual token:

1. In BioCert® Identity, select My Identity.
2. Select Register Smart Card or Token. The Token Registration Wizard is displayed.
3. On the Device Type dialog box, select Virtual Token as device type, and then click Next. Virtual Token Name and Location dialog box is displayed.
4. Specify the token name and location. A new virtual token can be stored either in a file or in the Windows registry database. Click Next to continue.
5. On the Token Properties dialog box, specify the Master PIN and User PIN for the newly created virtual token, and then click Finish to complete the operation.

Note
The system allows to register several different tokens for every supported device type.

Registering Credentials

To register credentials:

1. In BioCert® Identity, select My Identity.
2. Select Register Credentials. The BioCert® Registration Wizard is displayed.
3. On Authentication Methods page, select the desired authentication method for which you wish to register credentials and click Next.
4. Follow on-screen instructions and submit the required credentials.
5. Click Finish to complete the registration.

You will be able to log on to the system with any of the registered credentials permitted to your account.

You can also register credentials from the following places in the system:

• From My Identity, select Register Fingerprints (fingerprint registration only)
• From My Identity, select Register Smart Card or Token (smart card, USB token, or virtual token registration only)
• From Authentication and Credentials, select Credentials tab
• From BioCert® Identity icon menu in the taskbar notification area
• From user desktop by submitting fingerprint if the user does not have yet From BioCert® Identity icon menu in the taskbar notification area

Some user activity may also start the credential registration process:

• If the user, who is currently logged to BioCert® Identity but does not have a registered fingerprint, submits a fingerprint, a fingerprint registration process will be started.
• If the user, who is currently logged to BioCert® Identity but does not have a registered smart card, inserts a smart card into the smart card reader, a smart card registration process will be started.

Changing the Token PIN

A personal identification number (PIN) is any personal number required to secure your data on a smart card or token against unauthorized use. It is a good practice to change the PIN from time to time to ensure maximum confidentiality.

To change the Token PIN, perform the following steps:

1. In BioCert® Identity, select My Identity.
2. Select Change Token PIN. The Change PIN Wizard is displayed.
3. On the Device Type dialog box, select the desired type of device, and then click Next.
4. On the Select Token dialog box, select the token for which you want to change the PIN, and then click Next.
5. On the User PIN dialog box, type the old PIN and the new PIN twice to confirm, and then click Finish to complete the operation.

Note
If you enter the incorrect PIN for the token several times in sequence, the token gets locked out. You will be unable to use this token until you unlock it.

Editing the User Profile

To modify the user profile:

1. In BioCert® Identity, select My Identity.
2. Select Edit Profile. My Identity dialog box is displayed.
3. Modify the desired user data, and then click OK to save the changes.

Removing My Identity from the System

To remove a user identity from the system:

1. In BioCert® Identity, select My Identity.
2. Select Clear Identity for this Account.
3. In the message box, click OK to confirm the identity removal.

Note
After the identity removal operation is complete, you will be forced to log off from the BioCert® Identity. The next time you log on, you can use the Windows password only.

Back Up an Identity

BioCert® Identity provides the ability to back up identity details. The User Identity can be restored in case of data loss or corruption. You can take a backup of the identity with which you have logged on.

To back up an Identity:

1. In BioCert® Identity, select My Identity.
2. Select Backup Identity. Backup Identity Wizard is displayed.
3. On the Identity Elements screen, check the identity elements that you wish to back up, and then click Next.
4. On the Device Type screen, select a device type you would like to use.
5. Follow the directions on the screen to specify the required information, and then click Next until you reach the last step.
6. Click Finish to complete the last step of the wizard.

Note
Keep the backup file in a safe place. The backup will be needed in case identity information is lost.

Restore an Identity

BioCert® Identity provides the ability to restore an identity detail that was backed up earlier. In order to restore an identity, you need to log off from the current identity.

To restore a backed-up identity:

1. In BioCert® Identity, select My Identity.
2. Select Restore Identity. Restore Identity Wizard is displayed. Note
   You may restore the user identity when you are logged off the BioCert® Identity. In this case the restore identity operation is available from BioCert® Identity icon menu in the taskbar notification area.
3. On the Device Type screen, the type of device on which the user identity was backed up, and then click Next.
4. If the user identity was stored in secure file, specify the file location and pass phrase, and then click Next.

   If the user identity was stored on a smart card or token, connect the smart card or token, specify the User PIN, and click Next.

5. On the Identity Elements screen, check the identity elements that you wish to restore, and then click Next.
6. To complete the operation, provide your confirmation in the popup message box.

Locking the Computer

To secure a computer when the user is away from the desk, the Lock Workstation feature may be employed. This prevents an unauthorized user from gaining access to the computer. Only the authorized user and members of the administrator's group on the computer can unlock it.

To lock your computer:

1. In BioCert® Identity, select My Identity.
2. Select Lock Workstation to lock your computer immediately.