Page tree
Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Nexus GO PKI Cards lets your organization get started with PKI cards for Windows login, access to digital resources, authenticated emails, and digital signing, without the need to train personnel or set up a public key infrastructure (PKI) or on-site printers.



Nexus GO PKI Cards

Use cases
Order PKI cards

Manage temporary PKI cards

Manage PKI card lifecycle


The Nexus GO PKI Card service is hosted as a private cloud solution, that is configured by Nexus and includes the following functionality:

Card production and distribution

Visual identification, RFID technology, and PKI chip

Card ordering tool

HSM-based and customer-named CA for issuing certificates

OCSP responder

Starter kit free of charge

Access to Nexus GO webshop and Nexus Support portal

Delivered software

The following additional software is included in the service, and must be installed by the customer:

Nexus Personal Desktop to be installed on each client computer for smart card login.

Nexus Card SDK fto be installed on card service desk computers for assigning temporary cards.

Expand/Collapse All

Card types and layouts

 Card types and layouts

The following card types are included in Nexus GO PKI Cards:

Card typeDescriptionValidity
Employee cardFor employees3 years
External card

Different card layout for persons that are not employed, for example consultants and contractors.

3 years
Temporary card

Replacement card for a limited period of time.

14 days

Nexus provides standard templates for the three standard card types. Nexus consultants or partners do the following customizations of the layouts:

  • insert customer's logotype
  • change colors
  • change text fields
  • select orientation (landscape or portrait)

The following standard card layout templates are used. Open the files to see all layout options per card type:

 PKI chip

The following PKI chip technology is provided on the Nexus GO PKI Cards:

  • ATOS CardOS 5.0
  • Nexus standard profile for PKCS#15 (ISO7816-15)

The PKI chip includes the following certificates:

  • one certificate for authentication
  • one certificate for non-repudiation
 RFID technology

The cards are equipped with the RFID technologies EM and MIFARE Classic. Chip readings are stored in the card management tool, and can be adapted to other encoding methods and used in the customer's physical access control system (PACS).

Card management roles


The following standard roles are used in the PKI card ordering and management tool: 



User administrator

Registers the first users and assigns roles to existing users.

Typically an IT role.

Registration officer

Registers users, orders cards, deactivates users and cards.

Typically an HR role.

Card service desk

Helps users with card issues, for example card activation, temporary cards, and forgotten PIN.

Typically a receptionist.

Starter kit

 Starter kit contents

New customers get a starter kit, with the following content:

Additional accessories, such as contact chip readers, lanyards, and card holders, are available from Nexus GO webshop.

  • No labels