Introduction to ICardInitialization

[thiruvasagamani]

Introduction to ICardInitialization

This topic explains the Microsoft® Certificate Lifecycle Manager 2007 (CLM 2007) ICardInitialization Customization Interface, including usage scenarios and guidance on where to find sample code and documentation on related technologies.
Issuing New Smart Cards

When first purchased, smart cards arrive in a default state. In this state, such critical parameters as the card's identification code and master administrative key are normally set to a vendor-specified default value. Obviously, cards in such a state cannot be relied upon to serve as secure identifiers.

As part of being issued to users, new smart cards must go through a process of initialization.
NoteNote:

Cards can also be re-initialized when they are "retired," or reset to this default state to prepare them to be reissued.

For smart cards managed by the Microsoft Base Cryptographic Service Provider (Base CSP), this process involves:

   1.

      The creation and assignment of unique identifiers, or CardIDs, for each card. This CardID is then stored in a file on the smart card.
      NoteNote:

      Some smart cards are assigned a unique serial number by the vendor. This serial number is distinct from the CardID. Additionally, the vendor may have already assigned a CardID file to the card. In this case, CLM will not replace the CardID that already exists.
   2.
      The creation of a number of files and directories on the smart card