Nexus' software components have new names:

Nexus PRIME -> Smart ID Identity Manager
Nexus Certificate Manager -> Smart ID Certificate Manager
Nexus Hybrid Access Gateway -> Smart ID Digital Access component
Nexus Personal -> Smart ID clients

Go to Nexus homepage for overviews of Nexus' solutions, customer cases, news and more.


This article describes the steps that have to be done with the Cards package in Smart ID before you can start to use the system. Read more here: Smart ID Workforce use cases

The steps are done by the Administrator in Identity Manager Admin. There are many options included in the Cards package. These options have default settings that can be changed. Read all about the options for the Cards package here: Cards - Options. The other packages also have options.

Expand/Collapse All

Prerequisites

  1. Upload the Users package in Identity Manager Admin. Follow all steps in Users - Start-up guide.
  2. The shared credentials package in Smart ID contains tasks that are common for the Cards, Temporary cards, Mobile ID and Virtual smart cards packages. Read more here Shared credentials.

    Upload the Shared-credentials.zip package in Identity Manager Admin:

    1. Log in to Identity Manager Admin with your administrator user. 
    2. In Identity Manager Admin, select the Configuration file tab.
    3. Click Upload configuration
    4. Click Select file and add the path to the Shared-credentials.zip file.
    5. Click Upload.

Step-by-step instruction for the administrator

Upload the Cards.zip package in the Identity Manager Admin:

  1. Log in to Identity Manager Admin with your administrator user. Default login credentials are username: admin, password: admin.

    It is recommended to change the password for the administrator user.

  2. In Identity Manager Admin, select the Configuration file tab.
  3. Click Upload configuration
  4. Click Select file and add the path to the Cards.zip file.
  5. Click Upload.

For information about how to change default use case settings, see Cards - Options.

You need to select the Certificate Authority (CA). Default CA is Smart ID Certificate Manager, but you have other options as well. The examples here are given with Certificate Manager as CA.

  1. To add information regarding the CA, open this article: Integrate Identity Manager with Smart ID Certificate Manager.

  2. In that article, do the following:

    1. Under heading "Create CM .zip file", do all steps.
    2. Under heading "Create a Certificate Authority in Identity Manager Admin", you do not need to create a CA since it is already set up. Just select and edit Smart ID Certificate Manager (the CA) and do the updates in the General tab as described in the article.
    3. Under headings "Import certificate types" and "Test connection", do all steps.
  3. For the included CA (in this case, Smart ID Certificate Manager), follow these steps:
    1. In Identity Manager Admin, go to Home > Certificates
    2. For each of the certificate templates, (Authentication certificate, Encryption certificate, and Signature certificate), double-click on them, one at a time, and edit them: 
      1. In the Certification Authority selection box, select the CA that shall issue this type of certificate. The available CAs are connected to the server via CA connectors and displayed here.
      2. In the Certificate Type selection box, select one of the templates supported by the CA.
        This template determines the cryptographic properties (signature algorithm) and intended purpose of the configured certificate type. The templates are determined by the Identity Manager CA connector.
  1. Open this article: Integrate Identity Manager with Smart ID Messaging.

  2. In that article, do the following:

    1. Under heading "Add Identity Manager as client in Smart ID Messaging":
      1. Go to the linked article Integrate Smart ID Messaging with other Smart ID components.
      2. In that article, go to heading "Generate a template for a client section".
      3. Do the steps under "Generate an Identity Manager (IDM) client"
  3. Go back to Integrate Identity Manager with Smart ID Messaging.
    1. Under heading "Add Messaging Server in Identity Manager Admin":
      1. You do not need to add a messaging server, just select and edit the listed messaging server, and do the updates as described in the article.
    2. Under heading "Create user for Smart ID Messaging":
      1. The user "hermod" is already added. Just update the password.
    3. Under heading "HTTPS connection set up":
      1. Do all steps.
  4. Add information regarding Smart ID Messaging, see Add API user and callback URL in Hermod.

There are options that can be set for many of the use cases. These are described here: Cards - Options.

  1. Set the options that need to be changed from the default values.

There are options that can be set for expiring cards. These are described here: Cards - Options for expiring cards.

  1. Set the options that need to be changed from the default values.