2.4 Card

The Card method enables you to authenticate using the contactless smart card (with the card serial number) and Near-Field Communication (NFC) cards in the following ways:

  • While using contactless cards, when you try to authenticate on any device, the recorded serial number of the card is compared with the actual serial number. If the card serial numbers are identical, you are authenticated successfully.

  • In the case of NFC cards, when you place your NFC tag near the NFC reader (smartphone), the NFC reader (smartphone) identifies your NFC tag, and you are authenticated successfully.

HINT:Ensure to install the Advanced Authentication Device Service before you enroll a card. For more information about the Device Service, see the Advanced Authentication - Device Service guide.

Some card readers are supported only for Microsoft Windows. For more information about the list of supported card readers, see Supported Card Readers and Cards.

2.4.1 Enrolling the Card Authenticator

Before enrolling the Card authenticator, ensure that the card reader is connected to the computer.

  1. Click the Card icon in Add Authenticator.

    A message Click "Save" to begin is displayed.

  2. (Optional) Specify a comment related to the Card authenticator in Comment.

  3. (Optional) Select the preferred category from the Category.

  4. Click Save.

    A message Waiting for the card is displayed.

  5. Tap a card on the reader.

    A message Authenticator "Card" has been added is displayed.

2.4.2 Testing the Card Authenticator

  1. Click the Card icon in Enrolled Authenticators.

  2. Click Test.

    A message Waiting for the card is displayed.

  3. Tap a card on the reader.

    A message Card has been detected is displayed for a moment. If the provided card passes the test, a message Authenticator "Card" passed the test is displayed. If the card is invalid, a message Incorrect Card is displayed.

2.4.3 Enrolling NFC Card Authenticator

You must have a smartphone with NFC support and Google Chrome browser to enroll this method.

  1. In your smartphone Google Chrome browser, open the URL <https://<hostname>/account.

  2. (Optional) if you are using webNFC for the first time, tap Allow in the smartphone.

  3. Specify the credentials and log in.

  4. Tap the Card icon in Add Authenticator.

    A message Click "Save" to begin is displayed.

  5. (Optional) Specify a comment related to the Card authenticator in Comment.

  6. Click Save.

    A message Waiting for the card is displayed.

  7. Place the NFC tag near your NFC reader (smartphone).

    A message Authenticator "Card" has been added is displayed

2.4.4 Testing NFC Card Authenticator

  1. Click the Card icon in Enrolled Authenticators.

  2. Click Test.

    A message Waiting for the card is displayed.

  3. Place the NFC tag near your smartphone.

    A message Card has been detected is displayed for a moment. If the provided card passes the test, a message Authenticator "Card" passed the test is displayed. If the card is invalid, a message Incorrect Card is displayed.

The following table describes the possible error messages along with the workarounds for the Card authentication.

Table 2-1 Card authenticator - error messages

Error

Possible Cause and Workaround

Card Service unavailable

The Advanced Authentication Device Service is not installed on the system. Install the Device Service and try authenticating again.

Card reader has not been detected

The card reader is not connected properly or reader is not available in the Device Manager. Check the card reader connection settings and then try authenticating again.

Card reader detected

Due to an improper functioning of a system service pcscd in the Mac OS X. To fix this issue, open Terminal application and run the following commands:

kill pcscd

kill pcscdlite

Then reconnect the reader and try to enroll again.