Short answer: An enrolment station lets a security team verify who a person is before their fingerprints go on the card. Every card enrolled there is locked to the station’s master key, and only an operator with their own IDEX card can use the station.
Centralised enrolment is valuable to build into a trust model, as it allows a security team to validate the identity of the cardholder, ensuring that the biometrics stored on the card are correctly associated with the ID of the card holder.
Recommended Security Setup
- Store the Enrolment Station in a secure room
- Lock the Enrolment Station to a card registered to a security officer
- Store the Secure Enrolment Key securely
Recommended Secure Enrolment Procedure
- The security officer checks the cardholder's identity against the details listed on the card
- The security officer unlocks the Enrolment Station
- The cardholder enrols 2 different fingerprints on the card.
- If using a physical access system, the cardholder attempts access with a biometric match, and a biometric no-match.
- If the card is correctly set up, only 1 instance of the correct credential ID should appear on the access control system
- This correct credential ID can now be granted permissions under the physical access system
See: Setting up the enrolment station, Operating the enrolment station and Enrolment options: which is right for you?.