Centralised enrolment is valuable to build into a trust model, as it allows a security team to validate the identity of the cardholder, ensuring that the biometrics stored on the card are correctly associated with the ID of the card holder.
Recommended Security Setup
- Store the Enrolment Station in a secure room
- Lock the Enrolment Station to a card registered to a security officer
- Store the Secure Enrolment Key securely
Recommended Secure Enrolment Procedure
- The security officer checks the cardholder's identity against the details listed on the card
- The security officer unlocks the Enrolment Station
- The cardholder enrols 2 different fingerprints on the card.
- If using a physical access system, the cardholder attempts access with a biometric match, and a biometric no-match.
- If the card is correctly set up, only 1 instance of the correct credential ID should appear on the access control system
- This correct credential ID can now be granted permissions under the physical access system
See: Setting up the enrolment station, Operating the enrolment station and Enrolment options: which is right for you?.