ActivID Card Management System

Complete, flexible solution

ActivID™ Card Management System (CMS) provides a complete and flexible solution to manage the issuance and administration required for successful smart card deployments. ActivID CMS manages the cards as well as data, applets and digital credentials including PKI certificates related to the cards throughout their entire lifecycle. ActivID CMS minimizes the time and costs associated with deploying and maintaining digital identity cards and is the ideal management platform for multifunction employee badges and other smart card-based IDs.

Key Features

Administration and configuration

• Policy-driven architecture provides complete issuance flexibility while maintaining separation of roles and group security.
• Customizable workflows and policies readily adapt to a variety of environments and deployment scenarios.
• Full tamper-evident audit features log all event activities for reporting.

Smart card issuance

• Supports fully distributed (supervised or self-assisted), batch, and service bureau issuance models.
• Supports secure distributed issuance and post-issuance life cycle card management without key distribution problems.
• Full featured PKI registration authority and credential manager for leading PKI products.
• Full badging capabilities for photo capture and card printing.

Post issuance and help desk

• Data and credential recovery to easily issue temporary and permanent replacement smart cards.
• Complete card content management; add/suspend/resume and revoke PKI certificates, add/update and remove demographic data and card applets as needed throughout life of card.
• Multiple card services: online, off-line and self-service PIN unlock, revoke and recycle smart cards.

End-user self-service

• Self-service ‘wizard’ guides cardholders through common support functions: PIN change/unlock, retrieve new applets and PKI credentials, request replacement smart card, and more.

Extensive software development kit

• Add support for any additional Certificate Authority with the Credential Provider Interface API.
• Integrate with any Identity Management and Provisioning as well as any Physical Access Control and Badging system with the Card and Credential Management API.
• Add support for any external data source and extend the data stored on the card with the CMS customizable workflow plugin interfaces.

View a Flash feature tour

Benefits

Security

Provides unparalleled security for trusted, distributed issuance and post-issuance management. Uses ActivIdentity technology adopted by U.S. Department of Defense to issue 4.3 million Common Access Cards to military personnel.

Interoperability

Eases deployment, leverages existing investments and minimizes obsolescence by supporting the widest range of smart cards, directories, databases, certificate authorities, identity provisioning systems, and physical access control systems.

Usability

Eases administration with an intuitive web interface and delegation capabilities. Self-service ‘wizard’ optimizes the end-user experience and minimizes help desk calls.

Deployability

Minimizes the time and cost to integrate and configure. Commercial product with complete setup utility and documentation, no requirement for ongoing professional services.

Technical Specifications

Server operating systems

• Microsoft® Windows® 2003 Server
• Sun® Solaris™

Administrator/end-user operating systems

• Microsoft Windows 2000/XP
• Apple® Mac OS® X**
• Red Hat® Linux**
• Sun Solaris**

Web server

• Microsoft Internet Information Services
• Sun® Java™ System Web Server

Database

• Microsoft SQL Server 2000
• Oracle®

Directory

• Critical Path Directory Server
• CA eTrust™ Directory
• IBM® Tivoli® Directory Server
• Microsoft Windows Server 2003 Active Directory
• Novell® eDirectory™
• Siemens HiPath Slcurity DirX
• Sun Java System Directory Server

Certificate authorities (PKI)

• Cybertrust UniCERT™
• Entrust® Authority™***
• Microsoft Windows Server 2003 Certificate Services***
• VeriSign® Managed PKI

Web browsers

• Microsoft Windows Internet Explorer®
• Netscape® Communicator
• Mozilla®/Firefox®

User provisioning integration

• CA eTrust Admin
• DaonEngine™
• IBM Tivoli Identity Manager
• Intellisoft FIPSICE™
• IWS™ PIV Management Application
• Lenel IdentityDefender®
• Novell Identity Manager
• Sun Java System Identity Manager
• Viisage PROOF™

Physical access integration

• AMAG® Homeland Edition
• GE® Picture Perfect™
• Hirsch Velocity®
• Honeywell Pro-Watch® and WIN-PAK®
• Lenel OnGuard®
• Software House C-Cure® 800

Authentication services

• 4TRESS™ AAA Server

Supported hardware

Smart cards and USB tokens

• ActivKey™
• Gemalto (Axalto) CyberFlex Access
• Gemalto (Gemplus) GemXpresso
• Giesecke & Devrient Sm@rtCafe®
• Oberthur Card Systems ID-One™ Cosmo
• Oberthur Card Systems PIV EP

Contact ActivIdentity for latest smart card support list.

Hardware security modules

• AEP™ Keyper
• nCipher™ nShield
• nCipher™ netHSM
• SafeNet Luna® PCM
• SafeNet Luna RA

Card printers

• Fargo® HDP800 series, DTC500 series (Imageware EPI Builder® license required)*
• Datacard® ImageCard IV, Magna, Select 2 (Datacard® IDWorks® license required)*

Smart card readers

• ActivIdentity Readers
• Gemalto® (Gemplus®) GemPC™
• OmniKey® CardMan™
• SCM Microsystems® SCR

Compliance with standards

• LDAP 3.0
• SSL
• GlobalPlatform/OpenPlatform
• Java Card™ 2.1 and 2.2
• FIPS 140-2 certified cards and applications support
• FIPS 201/PIV certified cards and applications support
• FIPS 140-2 certified HSM support
• Section 508 compliant
• PKCS#7, 10
• CRMF/CMMF/CRM
• ActivID CMS can be used to issue smart cards that are compliant with a variety of standards including GSCIS and FIPS 201 / PIV.

Please check with ActivIdentity for latest supported versions or devices and any known restrictions.

** Some administrative restrictions on these versions of the client.

*** Supported when CMS is deployed on Windows Server platform.

Device and Credential Management

• ActivID
• ActivID CMS
• ActivID CMS SDK
• ActivID BMS

See how your organization can successfully issue and manage smart cards
View the tour

An introduction to Smart Card Management Systems by independent Mike Hendry Free Download

Learn about the latest research on the adoption of smart card identification in the enterprise. Play Now

Datasheet (PDF)

• ActivID Card Management System

Related Products

• ActivClient
• 4TRESS AAA Server
• ActivKey USB Tokens

Related Solutions

• Smart Employee ID
• Secure Information and Transactions
• Strong Authentication
• Device and Credential Management
• Enterprise Single Sign On