PIV IDMS: Supercharge Your HID CMS for Enhanced Credentialing Workflows and Efficiencies

PIV IDMS isn’t just an add-on; it’s a strategic upgrade that extends your HID CMS with critical identity assurance levels and advanced operational tools designed to simplify and scale the issuance and management of your vital hardware-based MFA devices.

PIV IDMS adds the following capabilities to your HID CMS

  • Meet Stringent Compliance with IAL3 Identity Assurance

    For highly regulated environments facing strict mandates, easily achieve Identity Assurance Level 3 through guided PIV workflows, secure biometric capture, and robust multi-person controls with comprehensive audit trails, reducing the risk of non-compliance and potential penalties.

  • Gain Actionable Insights with Comprehensive Reporting Dashboards

    Eliminate guesswork with intuitive, enterprise-wide credentialing dashboards and drill-down reports. Satisfy auditors effortlessly with detailed provisioning histories and clear records of all operator actions.

  • Optimize Stock and Reduce Waste with Real-time Inventory Management

    Say goodbye to inventory surprises. PIV IDMS provides continuous, real-time visibility into your security key distribution and utilization, enabling proactive stock management and minimizing unnecessary expenses.

  • Unlock Immediate Device Utility with Automated Relying Party Registration

    Streamline credential deployment by automatically registering security devices with PACS, cloud resources, and network systems. Empower users faster and reduce IT overhead.

  • Boost Operational Efficiency with Intelligent Automations

    Free up your team from repetitive tasks. Automate report distribution, ensure seamless relying party synchronization, and proactively manage certificate renewals with intelligent scheduled jobs, saving valuable time and resources.

  • Enhance Security and Branding with Fully Customized Printing and Programming

    Take control of your badge aesthetics and functionality. Our dynamic layout managers allow you to capture and print precise data, and fully customize chip programming to meet your exact security and branding requirements.

BioAdaptor

BioAdaptor™ provides an easy and cost effective way to add fingerprint authentication to virtually any software application, new or old. With BioAdaptor™, users simply use their finger to identify themselves to gain access to their computer or applications.

Enroll fingerprints using a mobile tablet

RealScan interfaces are engineered and calibrated to allow the advanced biometric hardware to deployed in numerous ways including; tablet, web and kiosk. This flexibility dramatically increases an organization’s enrollment options to allow for different scenarios without increasing costs or deployment complexity.

  • Match users, fast

    BioAdaptor utilizes the award winning, FIPS-201 certified Suprema algorithm and hardware to improve matching speeds while reducing the false rejection rate.

  • Dynamically adjust settings

    Different environments can create alter the biometric verification process. BioAdaptor allows you to fine tune numerous settings to allow for the optimization of biometric verification.

  • Future proof your investment

    BioAdaptor implements standard interfaces and NIST/GSA/FIPS-201 certified hardware and software to provide unparalleled interoperability amongst different vendors. Our interface enables organizations to switch hardware and software providers with the click of a mouse.

  • Expand PIV self service (Securely)

    BioAdaptor enables users to perform a greater set of PIV Card Management transactions from their desks. It is now easier than ever perform a card activation, renewal or unlock all from a user’s desktop.

  • Get the facts

    With BioAdaptor’s extensive logging capability, administrators can understand how fast people are matching, fail rates, sensitivity and even card activation duration reporting.

  • Provide the personal touch

    Users love software they are familiar with. The new skins feature allows you to make the BioAdaptor user interface look like your current software. Add customer branding and messages to provide the personal touch.

PCA

Our instant issuance platform (known as the Personal Credential Assistant or PCA) allows organizations to immediately issue PIV Cards in remote or branch offices.

Note: Our Instant Card Loading feature allows your customers to immediately load their card with personalized security keys and biometric data.

The Benefits of PCA

  • Improve Customer Satisfaction

    Traveling and waiting for a card is extremely frustrating. PCA allows your customers to receive their card within minutes instead of weeks. Additionally, they can even manage their card from home for the ultimate in convenience.

  • Stop Cyber Attacks

    Chip and PIN security credentials provides numerous security countermeasures that can stop future cyber attacks. From multi-factor authentication, message integrity and data encryption, your organization can implement the latest security standards to prevent a successful cyber attack.

  • Issue Credentials Anywhere

    Utilize remote branches or even the customer’s desktop to issue and manage cards. Our advanced application design combined with biometric security controls allows you to issue cards anywhere a network connection exists.

  • Automatic reader and certificate selection

    PCA automatically reads the certificate from inserted credentials so credentialing operators no longer have to waste time manually selecting certificates or specifying readers to encode credentials.

  • No Java

    PCA requires only the .Net runtime environment that is shipped with Windows eliminating the need to manage and maintain Java runtime versions.

  • Advanced credential maintenance

    When performing post issuance management of credentials, sometimes an employee may have multiple credential maintenance requests such as unlocking the card plus updating the card’s certificates. PCA is able to process multiple requests in one transaction to accelerate the credential maintenance process.

  • Optimized searching

    PCA can automatically retrieve user information when the credential is inserted. This allows user information to be gathered much faster and efficiently than manual searches of directories.

  • Automated error recovery

    During the card encoding process, sometimes errors happen. PCA will automatically attempt to recover the error and continue with the credential encoding transaction without having to waste time manually preparing the card for encoding operations.

  • Multi ActivID™ CMS Search

    Large organizations often have multiple ActivID™ CMS servers performing credentialing workloads. PCA is able to automatically determine the appropriate CMS the credential is linked to help operators and users encode their credentials.

  • Statistics

    PCA is able to provide workstation level details for credentialing operations to help organizations easily obtain statistics on station performance.

  • Streamlined Subscriber Agreement

    Users are able to easily sign subscriber agreements with their credentials with a simple push of a button.

  • Educational

    Given the average encoding can take upwards of 2-4 minutes, there is a period of time where the user is just waiting for their credential to be loaded. To maximize the user’s time, PCA can display educational material while the card is being encoded in order to help provide critical information while the user is waiting for their credential.

IdExchange

IdExchange provides a simple to use, REST based API to enable the synchronization of external identity repository changes. This functionality is useful for bridging different credentialing systems. The SSM will monitor external systems and upon a change, insert in the data into the IDMS credentialing flow. Next, the data is forwarded to the appropriate credentialing systems so a credential can be generated for the user.

IdExchange CA Gateway

The IdExchange CA Gateway is an HID CMS Credential Provider Plug-in that enables the CMS to route certificate requests across domains.  It is a secure service that will is installed on a different domain or network that relays certificate signing requests from the CMS to the Certificate Authority and then returns the resulting certificate to the CMS to be programmed into the device.

Benefits:

  • Enables multiple Microsoft Certificate Authorities to be used in the programming of devices
  • Enables secure communications for CAs that are installed on separate networks or cloud infrastructures

Reporting and Analytics

The IDMS reporting features provides insights into the ID proofing activities and credentialing performance occurring within the infrastructure. It allows managers to quickly understand how many credential activities have occurred, real time system performance and certificate lifecycle states.

Devices: Trace the entire history of a device from issuance to termination. Determine where the device was issued, which operator issued it and to what user the device was issued to.

Workstation and operator performance: Understand which workstations and operators are performing the most activities.

Real time encoding: Glean real time statistics and operations information to ensure the credentialing processes are performing at their highest potential. The reports allow you quickly determine how many credentials are currently being generated, proactively detect any system outage events, and improve the utilization of the system by understanding usage trends.

Certificate Management: Rapidly determine the number of certificates that have been issued. Automatically alert credential holders or supervisors of pending certificate expirations so that certificate updates can be performed efficiently and predictably.

Processing queues: Understand the current workload of the system by seeing the processing queues. This report allows operators to determine if there any users that are not being processed and stuck within a certain phase.