How to Print a Smart Card using FIM Certificate Management and ID Works Software v6.5 or v5.1

How to Print a Smart Card using FIM Certificate Management and ID Works Software v6.5 or v5.1

The following article details the installation and configuration of the ID Works Software with Microsoft Forefront Identity Manager 2010 Certificate Management. Setting up ID Works with FIM 2010 Certificate Management consists of the following steps:

 

Step 1: Install Smart Card Middleware

On the machine that you will be printing from, install the appropriate smart card middleware. This middleware allows FIM CM and the ID Works software to interact with the smart card. The middleware is typically provided by the smart card vendor and can generally be downloaded from their website.

Step 2: Install Datacard Print Driver

On the machine that you will be printing from, install the appropriate Datacard Print Driver. This will depend on whether or not the operating system that is connected to the printer is 32-bit or 64-bit. Information on the Datacard driver can be found at http://www.datacard.com/support-and-drivers

Step 3: Install ID Works 64-bit Support

If the machine that you will be printing from has a 64- bit operating system such as Windows 7 Enterprise 64-bit, install the ID Works v6.5 Support for 64-bit Microsoft® Operating Systems. Do this prior to installing the ID Works Software Enterprise Edition v6.51. Information on this update can be found at http://www.datacard.com/id-software-support-and-upgrades/id-works-identification-software

Step 4: Install ID Works Software Enterprise Edition v6.51

On the machine that you will be printing from install the ID Works Software Enterprise Edition v6.51. For information on installing the ID Works Software Enterprise Edition v6.51, refer to the documentation that comes with the software.

Step 5: Install the FIM CM Client and FIM CM Bulk Issuance Client

On the machine that you will be printing from, install the FIM CM Client and the FIM CM Bulk Issuance Client. For information on installing the FIM CM Client see Installing and Configuring FIM CM Client (http://go.microsoft.com/fwlink/?LinkId=206074). For information on installing the FIM CM Bulk Issuance Client, see Installing and Configuring the Bulk Smart Card Issuance Client (http://go.microsoft.com/fwlink/?LinkId=206075).

Step 6: Configure the Bulk Client

Use the following steps to configure the Bulk Client:

  1. Open the CM Bulk Issuance Client. Do this by going to Start, select All Programs, select Microsoft Forefront Identity Manager, and click CM Bulk Issuance Client.
  2. At the top, select Edit and click Configuration.
  3. On the Application tab, in the box next to Smart card printer, enter Datacard Printer. If you are using a CD800 printer (support for which was added in FIM CM 2010 R2 Service Pack 1) enter XPS Card Printer. (Note: If you are using ID Works v5.1 enter Smart Driver).
  4. Click OK. Close the CM Bulk Issuance Client.

Step 7: Configure Printer Plug-ins

Use the following steps to configure the Printer Plug-ins:

  1. Plug in a USB Key. Note: Without the key the ID Works Software will run in evaluation mode.
  2. Open ID Works Enterprise Administrator. Do this by going to Start, select All Programs, select Datacard, select ID Works, and click ID Works Enterprise Administrator.
  3. On the ID Works User Login screen, for username enter admin and for password enter admin. Click Log in.
  4. At the top, select Printing and click Assign Printer Plug-ins
  5. From the drop-down, select Datacard Smart Driver Printer Plug-in. If you are using a CD800 printer (support for which was added in FIM CM 2010 R2 Service Pack 1) select XPS Card Printer plug-in. (Note: select Smart Driver Printer Plug-in if using v5.1)
  6. Place a check in the box next to Datacard Printer
  7. Click OK.
  8. Close ID Works Enterprise Administrator.

  

Step 8: Configure ID Works Project

Use the following steps to configure the ID Works Project:

  1. Open Datacard ID Works Enterprise Designer. Do this by going to Start, select All Programs, select Datacard, select ID Works, and click ID Works Enterprise Designer.
  2. On the ID Works User Login screen, for username enter admin and for password enter admin. Click Log in.
  3. On the Welcome screen, click Create a new project.
  4. Insert text fields as appropriate.
    1. On the menu bar, select Insert.
    2. Select Text Field.
    3. Right-click the added text field, and select Properties.
    4. Enter the desired text field name. This name will be used when configuring the FIM CM profile template.
  5. Insert smart card chip.
    1. On the menu bar, select Insert.
    2. Select Smart Card Field.
    3. Right-click the added smart card field and select Field Properties.
    4. On the Encoding tab, select Edit Configurations…
    5. Select Default, and click Edit.
    6. Add the first plug-in, called “Datacard IPC” on ID Works v5.1 and “Smart Card App IPC” on ID Works v6.5.
    7. Add the second plug-in, “Microsoft.Clm.DataCardPlugIns.MicrosoftClmSmartCardPrintPlugIn”. Note: The plug-in order is important. The IPC plug-in should be before the FIM CM plug-in.
    8. Ensure the IPC timeout value is 240 seconds.
    9. Save the project.

Step 9: Configure FIM CM Smart Card Profile Template

Now, configure the FIM CM Smart card Profile Template. Delimit the fields with semi-colons (;) only. Do not sue the newline character. For information on configuring the FIM SM Smart card Profile template, see Configuring Profile Templates (http://go.microsoft.com/fwlink/?LinkId=206086).

Step 10: Provision a Smart Card

Now, provision a smart card of the configured profile template. This can be executed either on the FIM CM Bulk Issuance Client, or on the FIM CM portal as part of the normal enrollment process.

Leave a Comment
  • Please add 8 and 4 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
Page 1 of 1 (1 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Great article.  This really helped.

    This contains the missing step that was killing us getting bulk printing for working using 5.1

    The one thing I would point out is that although the title says it's for ID Works 6.1, the document contains the the settings names for 5.1 as well. So it worked for getting our 5.1 software.  (we where missing the

    steps 7.2  to 7.8)

    I really like CLM, I think it really meets my needs, but the documentation has been a bit light, so I am delighted that you guys are posting this.

  • Thank you Script Kitty.  Based on your feedback I went ahead and changed the name to include version 5.1.  I debated adding this originially because the only version I had to take screenshots from was v6.5.  But thank you for the feedback.  I have just been put in charge of FIM CM documentation so hopefully you should see the documentation start to improve.

  • I have the 5.1 version,  and the screen shots are the same.  Thanks again.

  • Can the FIM CM product group advise which Datacard printers and couplers are supported on FIM CM?

  • Hi Bill, I work at Datacard UK (kevin_luff@datacard.com), and want to get in contact to discuss the ID Works Plug-In mentioned in this article.

    The Datacard SP55 Desktop (with Gemplus Smartcard coupler), printer is now end of live and been superseded by the SD360. The SD360 printer contains an SCM coupler, which I think may cause problems with the Plug-In.

    Need to discuss how we make Microsoft Forefront Identity Manager work with ID Works and the Datacard SD360 desktop printer.

  • I am trying to implement the same configuration as Kevin and it doesn't appear to be supported.  It would be helpful if Microsoft could confirm if/when this configuration will be supported.  If anyone has been successful with it please let us know.  

    - Datacard SD360

    - IDWorks v6.5

    - FIM CM Bulk Issuance Client

    - Gemplus Smart Cards

    Encoding of the smart card fails during the Run process

  • Can anyone point me to the middleware in step 1. Does this software come from the smart card vendor/provider. I have an understanding of DataCard Printers, ID Works and the smart card couplers/drivers. It's the middleware that's got me lost. Thanks very much.

    Jeff

  • One BIG problem with this configuration (Using Datacard SP75 Plus with internal card-reader/writer): FIM doesn't do the enrollment of the certificate to the card during the printing. First we have to insert the card to external reader (fim checks if the card is not in use or something), then we have to put the card to the printer and click Print Card from FIM, now the card gets nice printings. Last step is to remove the printed card from the printer and put it back to the external reader for the certificate enrollment. This is just stupid, can this thing be configured so that when the card is in the printer, the certificate itself would also be enrolled to the card?!

  • Peter Geelen - MSFT edited Revision 15. Comment: Cleaned HTML

Page 1 of 1 (9 items)