Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • To complete these steps, the end user will need to have their c- account already created by an IT admin and be in the correct initialization state.
  • The end user of the c- account and smart card should be the one performing these steps. (exception for non-IT users)
  • Yubikeys get 10 attempts at logging in before it bricks (becomes locked out). Afterwards it can be reset by contacting ITSCIS@syrADTT@syr.edu
  • Best practice is to log out of anything using your c- account before hand beforehand if you already have a smartcard.

...

If the smart card is still using the default PIN of 123456 then the PIN should be changed.  Follow the instructions at the link below to complete the change.

Reset Smartcard /YubiKey PIN or Lockout

Unique Cases:

Smartcard for a non-IT user:

  1. If the request is to setup a new card:

    1. The DSP should have the physical card with them
    2. Make contact with ADTT@syr.edu and ADTT will find a time to help the DSP setup the card in the name of the user
      1. (Optional) After the account is created and the card is setup, the DSP can add the c- account to whatever groups the user may need
    3. The DSP can deliver the card to the user, please verify the actual user receives the card, and explain how to change the PIN (Reset Smartcard /YubiKey PIN or Lockout)
      1. (Optional) ADTT can provide the expiration date of the smartcard certificate if the DSP would like to suggest to the user that they place a calendar appointment for it (we recommend 10 days prior to the actual expiration) 
  2. If the request is to reset a smartcard:
    1. The DSP can collect the card from the user, reset the card (Reset Smartcard /YubiKey PIN or Lockout), and contact ADTT@syr.edu 
    2. We will assist in resetting the card just like the steps above.

...