5.3. Enrolling a Smart Card Automatically

Ensure that the Enterprise Security Client is running.

Insert an uninitialized smart card, pre-formatted with the Phone Home information for the TPS and the enrollment interface URL for the user's organization.

The smart card can be added either by placing a USB form factor smart card into a free USB slot, or by inserting a standard, full-sized smart card into a smart card reader.

When the system recognizes the smart card, it displays a message indicating it has detected an uninitialized smart card.

Click Enroll My Smart Card Now to display the smart card enrollment form.

The enrollment files are accessed remotely; they reside on the TPS instance. If the network connection is bad or broken, then an error may come up saying Check the Network Connection and Try Again. It is also possible that the enrollment window appears to open but the enrollment process does not proceed. The enrollment pages can be cached if the Enterprise Security Client previously connect to them successfully, so the enrollment UI opens even if the network is offline. Try restarting Enterprise Security Client and check the network connection.

Because the Smart Card Manager now knows where the enrollment UI is located (it is included in the Phone Home information), the enrollment form is displayed for the user to enter the required information.

This illustration shows the default enrollment UI included with the TPS server. This UI is a standard HTML form, which you can customize to suit your own deployment requirements. This could include adding a company logo or adding and changing field text.

See Section 4.7, “Customizing the Smart Card Enrollment User Interface” for information on customizing the UI.

The sample enrollment UI requires the following information for the TPS server to process the smart card enrollment operation:

After you have entered all required information, click Enroll My Smart Card to submit the information and enroll the card.

When the enrollment process is complete, a message page opens which shows that the card was successfully enrolled and can offer custom instructions on using the newly-enrolled smart card.