Examples
- Delivery & Storage Examples
| PROCESS A | User enrolls at the web application form and in submitting the form creates the Private Key on the device (PC Digi-Card™ or Digi-Token™). The Private Key is not exportable and requires a password every time it’s used. Application is validated and approved and the user receives a second email to activate the certificate. This is an example of a Fused Process Method with High User Protection. | |
| PROCESS B | User enrolls at the web application form. Application is validated and approved and the user receives an email with a certificate container package (containing both the public and Private Key). A second activation email containing a password is sent and used in opening the package to install the certificate on the device (PC Registry, Smartcard, USB Token or other suitable certificate storage media device). This is an example of an Export Package Method. | |
| PROCESS C | User receives a Smartcard, USB Token or any other certificate storage media device with the certificate pre-installed. The user completes the web application form. The Private Key is not exportable. Application is validated and approved and the user receives an email with a password to activate the device. This is an example of a Fused Package Method. | |
| PROCESS D | User receives a pre-printed Smartcard with their photograph and other details and follows METHOD A to complete the process. This is an example of a Fused Process Method with High User Protection. | |
| PROCESS E | A security printed P.I.N. number is delivered via registered courier or postal service. This is the same procedure as in METHOD B except that the user must enter the P.I.N. number when enrolling at the web application form stage. This is an example of an Export Package Method. | |
| PROCESS F | Parts of METHOD A and Method E combined except that the P.I.N. number is also required when installing the certificate. This is an example of a Fused Process Method with High User Protection. |
-
As stated, these are just some issuing processes and parts of one process can be combined with parts of another to meet the CP requirements.