Short answer: The operator verifies the cardholder's identity, signs in to the station with their operator card, and supervises the enrolment. The cardholder enrols two different fingerprints, and the card should then be verified for real use.
Enrolling a cardholder
- The security officer checks the cardholder's identity against the details listed on the card.
- The security officer signs in to the enrolment tablet with their operator card.
- The cardholder enrols two different fingerprints on the card, supervised at the desk.
Verifying the card in the access control system
If using a physical access system, the cardholder attempts access with a biometric match, and with a biometric no-match. If the card is correctly set up, only one instance of the correct credential ID should appear on the access control system. That credential ID can now be granted permissions under the physical access system.
If an enrolment goes wrong
Re-attempt the enrolment – this deletes the fingerprints on the card so you can try again. For problems with the reader or the card, the station states the recovery action on screen: typically reconnecting the reader, reinserting the card, or trying a different card.
End of session
When you have finished issuing, sign out on the station. If it is left alone, the screen switches off after a few minutes of inactivity and returns to the operator sign-in, so it does not sit open – press the power button on the side of the tablet to wake it. When the session is over, store the station in its lockable location. See: Enrolment station trust model.
See: Setting up the enrolment station, Encoding DESFire credentials on IDEX cards, Integrating with your access management system and Re-enrol or delete a fingerprint.