Nexus GO PKI Cards lets your organization get started with PKI cards for Windows login, access to digital resources, authenticated emails, and digital signing, without the need to train personnel or set up a public key infrastructure (PKI) or on-site printers.
Nexus GO PKI Cards
Order PKI cards
Manage temporary PKI cards
Manage PKI card lifecycle
The Nexus GO PKI Card service is hosted as a private cloud solution, that is configured by Nexus and includes the following functionality:
Card production and distribution
Visual identification, RFID technology, and PKI chip
Card ordering tool
HSM-based and customer-named CA for issuing certificates
The following card types are included in Nexus GO PKI Cards:
Different card layout for persons that are not employed, for example consultants and contractors.
Replacement card for a limited period of time.
Nexus provides standard templates for the three standard card types. Nexus consultants or partners do the following customizations of the layouts:
insert customer's logotype
change text fields
select orientation (landscape or portrait)
The following standard card layout templates are used. Open the files to see all layout options per card type:
The following PKI chip technology is provided on the Nexus GO PKI Cards:
ATOS CardOS 5.0
Nexus standard profile for PKCS#15 (ISO7816-15)
The PKI chip includes the following certificates:
one certificate for authentication
one certificate for non-repudiation
The cards are equipped with the RFID technologies EM and MIFARE Classic. Chip readings are stored in the card management tool, and can be adapted to other encoding methods and used in the customer's physical access control system (PACS).
Card management roles
The following standard roles are used in the PKI card ordering and management tool:
Registers the first users and assigns roles to existing users.
Typically an IT role.
Registers users, orders cards, deactivates users and cards.
Typically an HR role.
Card service desk
Helps users with card issues, for example card activation, temporary cards, and forgotten PIN.
Typically a receptionist.
Starter kit contents
New customers get a starter kit, with the following content: