To get started with virtual smart card usage, the first step is to create a virtual smart card (VSC) on the trusted platform module (TPM):
For users with admin rights
If the user has admin rights on the PC or laptop, a virtual smart card is created automatically when it is provisioned, that is when certificates are issued.
For users without admin rights
If the user does not have admin rights, a virtual smart card must be created some other way, normally by the IT department using available Windows tools.
To pre-create virtual smart cards, a Windows login script could for example be executed when the user logs in, to set a default admin key and transport PIN. The key and PIN can then be automatically changed during the provisioning process.