A newer version of this documentation is available.

Create configuration

Click Administration in the top menu to open the Administration window.
Under Tasks, click Manage, and then select the function.

Available tasks

All new configurations are made from Manage and the specific configuration you wish to create. Available functionality are:

Function	Description
Acquis – Create	Create a new aquis for officers to be used with a certificate template.
Bootstrap	Use the bootstrap feature to start the configuration of a new installation to make initial configurations and to remove start-up tokens and configurations.
Certificate Authority - Create	Create a new Certificate Authority for logging only and/or for issuing of certificates
Certificate template - Create	Create a new certificate template with correlation to a certificate template in the CA with specific modifications
Configuration order - Create	Create an order of a configuration change that is sent to a central administrator for implementation.
Configurations - Export	Possible to export configuration in GZ format.
Directory service - Create	Create a new directory service connector to your Active Directory or other directory service for user synchronization
E-mail service - Create	Create a new e-mail service for information that will be sent to end users or administrators
License - Export	Under Development, not used in this version
License - Generate	Under Development, not used in this version
License – Generate client license	Under Development, not used in this version
License – Import	Under Development, not used in this version
License - Upload	Under Development, not used in this version
National register - Create	Create a new connector to a national service, for example the Navet service, with information regarding citizens
Office - Create	Create a new office for current organization
Office address - Create	Create a new office address for correlation with office name
Organization - Create	Create a new organization.
Report - Create	Create a new report that will be shown in the reports tab
Role - Create	Create a new user role for correlation with a user group
SMS service - Create	Create a new SMS service for information that will be sent to end users or administrators
Token manufacturer - Create	Create a new token manufacturer to be able to send and receive information for external card production
Token profile - Create	Create a new token profile, for example a new type of smart card or USB token
Token template - Create	Create a new token template such as smart card, USB token or soft token with specific modifications
User group - Create	Create a new user group for correlation with user role
Whitelist – Create rule	Create a new rule in a whitelist for a specific certificate template for function certificates.

Function

Description

Acquis – Create

Create a new aquis for officers to be used with a certificate template.

Bootstrap

Use the bootstrap feature to start the configuration of a new installation to make initial configurations and to remove start-up tokens and configurations.

Certificate Authority - Create

Create a new Certificate Authority for logging only and/or for issuing of certificates

Certificate template - Create

Create a new certificate template with correlation to a certificate template in the CA with specific modifications

Configuration order - Create

Create an order of a configuration change that is sent to a central administrator for implementation.

Configurations - Export

Possible to export configuration in GZ format.

Directory service - Create

Create a new directory service connector to your Active Directory or other directory service for user synchronization

E-mail service - Create

Create a new e-mail service for information that will be sent to end users or administrators

License - Export

Under Development, not used in this version

License - Generate

Under Development, not used in this version

License – Generate client license

Under Development, not used in this version

License – Import

Under Development, not used in this version

License - Upload

Under Development, not used in this version

National register - Create

Create a new connector to a national service, for example the Navet service, with information regarding citizens

Office - Create

Create a new office for current organization

Office address - Create

Create a new office address for correlation with office name

Organization - Create

Create a new organization.

Report - Create

Create a new report that will be shown in the reports tab

Role - Create

Create a new user role for correlation with a user group

SMS service - Create

Create a new SMS service for information that will be sent to end users or administrators

Token manufacturer - Create

Create a new token manufacturer to be able to send and receive information for external card production

Token profile - Create

Create a new token profile, for example a new type of smart card or USB token

Token template - Create

Create a new token template such as smart card, USB token or soft token with specific modifications

User group - Create

Create a new user group for correlation with user role

Whitelist – Create rule

Create a new rule in a whitelist for a specific certificate template for function certificates.

Acquis — Create

Acquis is used to force officer’s to accept the processes regarding the management of a specific certificate. The acquis has to be approved by the officer for him/her to be able to issue a certificate via the specific certificate template or a token using the certificate template.

Information	Description
Certificate template	Certificate template that acquis will be submitted for
Validity period	Validity Period of the Acquis
Acquis	Acquis text; PDF or text

Information

Description

Certificate template

Certificate template that acquis will be submitted for

Validity period

Validity Period of the Acquis

Acquis

Acquis text; PDF or text

Bootstrap

The bootstrap feature will only be used when installing a new NiP system and will be described under section 6 First time set-up in a future version of the document.

Certificate Authority — Create

Create a new Certificate Authority for logging only and/or for issuing of certificates.

The configuration fields available are listed in the table below, mandatory fields are marked with asterisk (*):

Information	Description
Name*	Name of the CA server service
Server*	DNS name or IP of the CA server
CA service*	Manufacturer of CA service
Enrollment type*	Type of the CA service
KeyID	KeyID from the CA certificate that will be used for logging on to the service. Only necessary if the certificates issued by this CA should be used for logging on to NiP.
SignatureCertificateHash	Certificate thumbprint used for CMC enrollment against MSCA.
OCSP	Static URL for revocation control via OCSP
CRL	Static URL for revocation control via CRL
Credential domain name	Domain for impersonated account when connecting to external CA.
Credential user name	User name for impersonated account when connecting to external CA.
Credential password	Password for impersonated account when connecting to external CA.
Certificate	Certificate for the CA service (Base64 encoded)
Additional info	Custom CA parameters for NiP, XML formatted. See document “Net iD Portal – XML configurations, examples” for more information.

Information

Description

Name*

Name of the CA server service

Server*

DNS name or IP of the CA server

CA service*

Manufacturer of CA service

Enrollment type*

Type of the CA service

KeyID

KeyID from the CA certificate that will be used for logging on to the service. Only necessary if the certificates issued by this CA should be used for logging on to NiP.

SignatureCertificateHash

Certificate thumbprint used for CMC enrollment against MSCA.

OCSP

Static URL for revocation control via OCSP

CRL

Static URL for revocation control via CRL

Credential domain name

Domain for impersonated account when connecting to external CA.

Credential user name

User name for impersonated account when connecting to external CA.

Credential password

Password for impersonated account when connecting to external CA.

Certificate

Certificate for the CA service (Base64 encoded)

Additional info

Custom CA parameters for NiP, XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information.

Certificate template — Create

Create new certificate template with correlation to certificate template in CA with your specific modifications

The configuration fields available are listed in the table below, mandatory fields are marked with asterisk (*):

Information	Description
Certificate Authority*	Name of the certificate authority the certificate template will use to issue certificates.
Name*	Name of the certificate template
Description	Detailed description of the certificate template
Type*	Type: Additional, Client, Server
Configuration visible	Possible to show or hide the certificate template in the Officer’s GUI
CA Service: Certificate template name*	Name of the certificate template in the Certificate Authority
CA Service: Certificate profile name	Certificate profile name (EJBCA CA Only)
CA Service: End entity name	End entity name (EJBCA CA Only)
Validity key*	Validity of certificate: Days, Hours, Minutes, Moths, Seconds, Weeks, Years
Validity value*	The value of the validity in relation to "Validity key" chosen
Asymmetric key algorithm*	Key algorithm: DSA, ECDH, ECDSA, RSA
Hash algorithm*	Hash algorithm: SHA1, SHA256, SHA348, SHA512
Key parameter*	Key parameter: Default ’0x800’
Key usage*	Key usage, should be inserted as hex code; example ‘0xA0’ for Identification
Extended key usage	Extended key usage
SubjectName: Common name (CN)*	SubjectName Common name
SubjectName: Given name (GN)	SubjectName Given name
SubjectName: Surname (SN)	SubjectName Surname
SubjectName: Organizational Unit name (OU)	SubjectName Organizational Unit
SubjectName: Organization name (O)	SubjectName Organization name
SubjectName: Serial number	SubjectName Serial number
SubjectName: Email address ( E)	SubjectName Email address
SubjectName: Title	SubjectName Title
SubjectName: Locality (L)	SubjectName Locality
SubjectName: State/Province (ST)	SubjectName State/Province
SubjectName: Initials	SubjectName Initials
SubjectName: Street address	SubjectName Street address
SubjectName: Country ©	SubjectName Country
SubjectName: Unstructured name	SubjectName Unstructured name
SubjectName: Unstructured address	SubjectName Unstructured address
SubjectAltName other name: msUPN (UserPrincipalName)	SubjectAltName other name user principal name (UPN)
SubjectAltName: Email address (rfc822Name)	SubjectAltName Email address according to RFC822
SubjectAltName: DNS (dNSName)	SubjectAltName DNS
SubjectAltName: Directory name	SubjectAltName Directory name
SubjectAltName: URI: URL (uniformResourceIdentifier: url)	SubjectAltName URI
SubjectAltName: IP address	SubjectAltName IP address
SubjectAltName other name: GUID	SubjectAltName other name GUID
SubjectAltName other Name: Object identifier (OID)	SubjectAltName other Name Object identifier (OID)
SEIS kortserienummer	SEIS smart card serial number
QC Statements: QcCompliance	QcCompliance Statements
QC Statements: QcEuLimitValue – Amount	QcEuLimitValue
QC Statements: QcEuLimitValue - Iso4217CurrencyCode	QcEuLimitValue ISO417 Currency code
QC Statements: QcSSCD	QcSSCD Statements Statements
Additional Info	Custom Certificate Template parameters for NiP, XML formatted See document “Net iD Portal – XML configurations, examples” for more information
Additional task info	Custom Certificate Template parameters for NiP, XML formatted (only used for web server certificates). See document “Net iD Portal – XML configurations, examples” for more information.

Information

Description

Certificate Authority*

Name of the certificate authority the certificate template will use to issue certificates.

Name*

Name of the certificate template

Description

Detailed description of the certificate template

Type*

Type: Additional, Client, Server

Configuration visible

Possible to show or hide the certificate template in the Officer’s GUI

CA Service: Certificate template name*

Name of the certificate template in the Certificate Authority

CA Service: Certificate profile name

Certificate profile name (EJBCA CA Only)

CA Service: End entity name

End entity name (EJBCA CA Only)

Validity key*

Validity of certificate: Days, Hours, Minutes, Moths, Seconds, Weeks, Years

Validity value*

The value of the validity in relation to "Validity key" chosen

Asymmetric key algorithm*

Key algorithm: DSA, ECDH, ECDSA, RSA

Hash algorithm*

Hash algorithm: SHA1, SHA256, SHA348, SHA512

Key parameter*

Key parameter: Default ’0x800’

Key usage*

Key usage, should be inserted as hex code; example ‘0xA0’ for Identification

Extended key usage

SubjectName: Common name (CN)*

SubjectName Common name

SubjectName: Given name (GN)

SubjectName Given name

SubjectName: Surname (SN)

SubjectName Surname

SubjectName: Organizational Unit name (OU)

SubjectName Organizational Unit

SubjectName: Organization name (O)

SubjectName Organization name

SubjectName: Serial number

SubjectName Serial number

SubjectName: Email address ( E)

SubjectName Email address

SubjectName: Title

SubjectName Title

SubjectName: Locality (L)

SubjectName Locality

SubjectName: State/Province (ST)

SubjectName State/Province

SubjectName: Initials

SubjectName Initials

SubjectName: Street address

SubjectName Street address

SubjectName: Country ©

SubjectName Country

SubjectName: Unstructured name

SubjectName Unstructured name

SubjectName: Unstructured address

SubjectName Unstructured address

SubjectAltName other name: msUPN (UserPrincipalName)

SubjectAltName other name user principal name (UPN)

SubjectAltName: Email address (rfc822Name)

SubjectAltName Email address according to RFC822

SubjectAltName: DNS (dNSName)

SubjectAltName DNS

SubjectAltName: Directory name

SubjectAltName Directory name

SubjectAltName: URI: URL (uniformResourceIdentifier: url)

SubjectAltName URI

SubjectAltName: IP address

SubjectAltName IP address

SubjectAltName other name: GUID

SubjectAltName other name GUID

SubjectAltName other Name: Object identifier (OID)

SubjectAltName other Name Object identifier (OID)

SEIS kortserienummer

SEIS smart card serial number

QC Statements: QcCompliance

QcCompliance Statements

QC Statements: QcEuLimitValue – Amount

QcEuLimitValue

QC Statements: QcEuLimitValue - Iso4217CurrencyCode

QcEuLimitValue ISO417 Currency code

QC Statements: QcSSCD

QcSSCD Statements Statements

Additional Info

Custom Certificate Template parameters for NiP, XML formatted

See document “Net iD Portal – XML configurations, examples” for more information

Additional task info

Custom Certificate Template parameters for NiP, XML formatted
(only used for web server certificates).

See document “Net iD Portal – XML configurations, examples” for more information.

Configuration order — Create*

Create a configuration order related to a whitelist rule or other configuration related to a certificate template.

Possible for a user with ConfigurationOrder privilege to make a configuration request and send it to a central administrator.

Choose the certificate template that the request concerns and write information regarding what configurations you would like to add or change.

Not included by default, needs to be configured to be used.

Configurations — Export

Creates a GZ file with exported configuration information.

This file contains no sensitive information and support staff at SecMaker may ask for a configuration export to be done during support cases.

Directory service — Create

Create new directory service connector to your Active Directory for user synchronization

The configuration fields available are listed in the table below:

Information	Description
Type	MSAD, MSADFS, MSADLDS
Server	Name or IP of the AD server or other directory server
Credential user name	Possibility to impersonate user account when connecting to directory services
Credential password	Password for impersonated user account against directory services.

Information

Description

Type

MSAD, MSADFS, MSADLDS

Server

Name or IP of the AD server or other directory server

Credential user name

Possibility to impersonate user account when connecting to directory services

Credential password

Password for impersonated user account against directory services.

E-mail service — Create

Create new e-mail service for information to be sent to end users or administrators.

The configurations fields available are listed in the table below, mandatory fields are marked with asterisk (*):

Information	Description
Name*	Name of the template
Server*	Name or IP of the e-mail server
Port	Port to be used
RequireSsl*	Should SSL be used, False or True
Address*	Sender address, example: ‘netidportal@company.com’
Display name*	Display name of the sender, example: ‘Net iD Portal Info’
Subject*	Subject in the e-mail
Credential user name	Username to the e-mail server
Credential password	Password to the e-mail server

Information

Description

Name*

Name of the template

Server*

Name or IP of the e-mail server

Port

Port to be used

RequireSsl*

Should SSL be used, False or True

Address*

Sender address, example: ‘netidportal@company.com’

Display name*

Display name of the sender, example: ‘Net iD Portal Info’

Subject*

Subject in the e-mail

Credential user name

Username to the e-mail server

Credential password

Password to the e-mail server

Generic text — Create

Create a generic text for a specific functionality. The text resource is shared across all organizations. It is either a notification (send through e-mail or SMS), Terms for a Token/End Entity or a Receipt (HTML formatted).

Information	Description
Text type	Specify the type of text resource (e.g. Notification, Receipt, Terms)
Notification service	If the text type is a Notification select “SMTP” or “SMS” as notification service, otherwise select “Application”.
Task type	If applicable, select the appropriate task type.
Text	The actual text to be displayed or sent.

Information

Description

Text type

Specify the type of text resource (e.g. Notification, Receipt, Terms)

Notification service

If the text type is a Notification select “SMTP” or “SMS” as notification service, otherwise select “Application”.

Task type

If applicable, select the appropriate task type.

Text

The actual text to be displayed or sent.

License — Export

Licensing functionality under development

License — Generate

Licensing functionality under development

License — Generate client license

Licensing functionality under development

License — Import

Licensing functionality under development

License — Upload

Licensing functionality under development

National register — Create

Create new connector to "Navet" database with information regarding citizens.

The configuration fields available are listed in the table below:

Information	Description
Type	Specify what type of National service (HSA, RIV, Navet)
Name	Name of the service
Service	URL to the service
Certificate Hash	Thumbprint of certificate that will be used to get access to the service
Customer ID	Customer ID
Order ID	Order ID
HSA-id	HSA-id
HSA Search Base Users	HSA Search Base for users
HSA Search Base EndEntity	HSA Search Base for functions
Priority	On/Off. Configuration to decide whether a connection to the HSA service is an “absolute connection” or not (only when a connection to IneraHSA service is used)

Information

Description

Type

Specify what type of National service (HSA, RIV, Navet)

Name

Name of the service

Service

URL to the service

Certificate Hash

Thumbprint of certificate that will be used to get access to the service

Customer ID

Order ID

HSA-id

HSA Search Base Users

HSA Search Base for users

HSA Search Base EndEntity

HSA Search Base for functions

Priority

On/Off. Configuration to decide whether a connection to the HSA service is an “absolute connection” or not (only when a connection to IneraHSA service is used)

Office — Create

Create new office for current organization.

The configuration fields available are listed in the table below:

Information	Description
Name	Name of the office
Additional Info	Custom Office settings for NiP, XML formatted. See document “Net iD Portal – XML configurations, examples” for more information.

Information

Description

Name

Name of the office

Additional Info

Custom Office settings for NiP, XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information.

Office address — Create

Create new office address for correlation with office name.

The configuration fields available are listed in the table below:

Information	Description
Office	Office
Address	Office address - street address
Zip code	Office address - zip code
City	Office address - city

Information

Description

Office

Address

Office address - street address

Zip code

Office address - zip code

City

Office address - city

Organization — Create

Create new organization for current portal installation.

The configurations fields available are listed in the table below, mandatory fields are marked with asterisk (*):

Information	Description
Name*	Organization name
Organizational number*	Organizational number
Domain Suffix*	Organization domain suffix
Domain Suffix white list	Organization domain suffix white list for server certificates
Permissions	Permissons to other organizations
Meditation task - Address	"Förmedlingsuppdrag" address - street address, used for persons with secret address
Meditation task - Zip code	"Förmedlingsuppdrag" address - zip code, used for persons with secret address
Meditation task - City	"Förmedlingsuppdrag" address - city, used for persons with secret address
Certificate Hash	Thumbprint of certificate for organization encryption of communication
Certificate	Certificate for organization, base64 encoded
Certificate identity source*	Matching of logon certificate for user unique name: SubjectDistinguishedName, SubjectSerialNumber, UserPrincipalName
Additional info	Additional info, custom settings for the Organization; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information
Additional data	Additional data, other information regarding the Organization; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information
Additional task info	Additional task info, dynamic task configurations; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information

Information

Description

Name*

Organization name

Organizational number*

Organizational number

Domain Suffix*

Organization domain suffix

Domain Suffix white list

Organization domain suffix white list for server certificates

Permissions

Permissons to other organizations

Meditation task - Address

"Förmedlingsuppdrag" address - street address, used for persons with secret address

Meditation task - Zip code

"Förmedlingsuppdrag" address - zip code, used for persons with secret address

Meditation task - City

"Förmedlingsuppdrag" address - city, used for persons with secret address

Certificate Hash

Thumbprint of certificate for organization encryption of communication

Certificate

Certificate for organization, base64 encoded

Certificate identity source*

Matching of logon certificate for user unique name: SubjectDistinguishedName, SubjectSerialNumber, UserPrincipalName

Additional info

Additional info, custom settings for the Organization; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

Additional data

Additional data, other information regarding the Organization; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

Additional task info

Additional task info, dynamic task configurations; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

Some configurations are not available until the Organization has been created and the configurations are edited.
These are:

Information	Description
Custom\|AdditionalInfo\|Theme\|Style	Configuration of theme colors for the menu bar.
Custom\|AdditionalInfo\|Image\|Id,Custom\|AdditionalData\|Image\|Id	GUID for logotype shown in menu bar. Configuration will automatically change the corresponding config in AdditionalInfo. The syntax is: base color scheme \| background color \| text color \| border color ; tab color ; underline color for current tab ; color for number of tasks
Custom\|AdditionalData\|Image\|Data	Logotype file for logotype shown in menu bar (jpg, png or tif).
Custom\|Test	Configuration to activate a preview of the customization done to the menu bar or not.

Information

Description

Custom|AdditionalInfo|Theme|Style

Configuration of theme colors for the menu bar.

GUID for logotype shown in menu bar. Configuration will automatically change the corresponding config in AdditionalInfo. The syntax is:
base color scheme | background color | text color | border color ; tab color ; underline color for current tab ; color for number of tasks

Custom|AdditionalData|Image|Data

Logotype file for logotype shown in menu bar (jpg, png or tif).

Custom|Test

Configuration to activate a preview of the customization done to the menu bar or not.

Additional configurations for menu bar:

Report — Create

Create new report query that will be shown in the reports tab.

The configuration fields available are listed in the table below:

Information	Description
Name	Name of report
Description	Detailed description of report
Query	SQL query that should be executed. Must begin with "Select" or “USE NiPDB_log;”

Information

Description

Name

Name of report

Description

Detailed description of report

Query

SQL query that should be executed. Must begin with "Select" or “USE NiPDB_log;”

Role — Create

Create new user role with certain privileges for correlation with a user group.

Available officer privileges are listed in the table below:

ID	Name	Description
1	UserView	View user post
2	UserAdd	Add user post
3	UserEdit	Edit existing user post
4	UserDelete	Delete existing user post
5	UserSearch	Search for users in NiP database
10	DirectoryUserSearch	Search for users in directory service
11	TokenView	View user token
12	TokenAdd	Add token
13	TokenEdit	Edit existing token
14	TokenDelete	Delete existing token
15	TokenSearch	Search for tokens in database
16	ActiveUserListView	View users currently logged on to the service
17	NationalRegisterNavetPersonSearch	"Navet" search for user
18	NationalRegisterNavetPersonListSearch	"Navet" search for user list
19	OrganizationDelegation	Change organization
20	CertificateSearch	Search for existing user certificates
21	CertificateRevoke	Revoke existing user certificates
22	CertificateView	View existing user certificates
23	UserSynchronize	Synchronize existing user information with directory service
24	LogSearch	Search for log events in audit log
25	LogView	View the audit log functionality
26	TokenReceipt	Create and view receipts for tokens
27	ReportView	View the report functionality
31	UserEnroll	Enroll token for existing user
32	TokenRevoke	Revoke token for existing user
33	TokenUnlock	Unlock token for existing user
34	OrderTokenPersonalized	Order personalized token from card manufacturer for existing user
35	OrderTokenPersonalizedBatch	Order batch of personalized tokens from card manufacturer
36	OrderTokenTemporary	Order temporary tokens from card manufacturer
37	OrderTokenTemporaryBatch	Order a batch of temporary tokens from a card manufacturer
38	OrderTokenCodeLetter	Order a codeletter with security codes for an existing token from a card manufacturer
39	OrderTokenCodeLetterBatch	Order a batch of security code letters for existing tokens from a card manufacturer
40	ServerEnroll	Enroll certificate for a server
41	ServerRevoke	Revoke an existing server certificate
50	SelfView	View selfservice functionality
51	GenerateOneTimePassword	Generate an OneTimePassword for a user
52	UserAddSequenceNumber	Create a user with a sequence number, starting with 15, as serial number instead of a personal number.
53	DistributeTokenOrder	Distribute/hand over a token to the end user before it get activated in NiP
54	UserGroupAssignment	Give the user a specific officer role in service
55	UserEnrollLtd	Enroll a temporary token for an existing user
56	UserEnrollSoft	Enroll a soft token for existing user
57	UserEnrollSoftLtd	Enroll a temporary soft token for existing user
58	UserEnrollAdditional	Enroll an additional token for existing user
59	TokenRenew	Renew an existing user token
60	UserAddExternal	Add user post with information taken from external source like ldap directory or national directory
61	TokenUnlockDisplay	View personal unblocking code on screen for existing token
62	TokenUnlockChallenge	Unblock token using challenge/response with delivery of key to mail or sms
63	TokenUnlockChallengeDisplay	Unblock token using challenge/response on screen
64	AdminView	View administrative area of service
66	TokenRevokeCertificate	Revoke certificate on existing token
67	UserImageUpload	Upload user image for existing user
68	UserSignatureImageUpload	Upload user signature image for existing user
69	CancelTask	Cancel ongoing task
70	ReleaseTask	Release ongoing task
71	UserEnrollAdditionalSelf	Enroll additional certificates for users existing token via selfservice
72	CreateUserAlias	Create alias user for existing user
73	CreateTokenInit	Initialize new token
74	ServerView	View server area of service
75	ServerAdd	Add server post for certificate enrollment
76	ServerEdit	Edit existing server post for certificate enrollment
77	ServerDelete	Delete existing server post
78	ServerSearch	Search for existing servers and certificates
79	BindUserAlias	Manual user synchronization via a ldap directory
80	CancelTaskExternal	Cancel ongoing external task, should be used with caution
81	AccessibleOrganizationSearch	Search in other configurations if configured
82	CreateTokenBatch	Create a batch of token to manufacturer
83	UserModeSecrecy	Manage users marked with “Secrecy” in National registers.
84	TokenTerms	View user terms for a specific token
85	UserRestriction	Override the user group restriction structure
86	ImportCertificate	Import certificates from 3^rd party Certificate Authority
87	AdditionalIdentities	View AdditionalIdentites on function (EndEntity) objects
88	AssignOffice	Assign an Office to a user
89	EndEntityView	View function (EndEntity) Posts
90	EndEntitySearch	Search for existing functions (EndEntities)
91	EndEntityAdd	Add function (EndEntity) posts for certificate enrollment
92	EndEntityEdit	Edit existing function (EndEntity) post
93	EndEntityDelete	Delete existing function (EndEntity) Post
94	EndEntityChangeStatus	Change status of function (EndEntity)
95	EndEntityEnrollInternal	Enroll internal function (EndEntity) certificate
96	EndEntityEnrollExternal	Enroll external function (EndEntity) certificate
97	EndEntityRevoke	Revoke function (EndEntity)
98	EndEntityRevokeCertificate	Revoke function (EndEntity) certificate
99	UserDisable	Disable a user
100	EndEntitySynchronize	Synchronize functions (EndEntity) to a web service, for example HSA service.
101	OrderUserImage	Order user image from SCS
102	UserEnrollPhone	Enroll a token to a mobile phone
103	UserEnrollPhoneLtd	Enroll a temporary token to a mobile phone
104	UserEnrollTablet	Enroll a token to a tablet
105	UserEnrollTabletLtd	Enroll a temporary token to a tablet
106	RecoverCertificate	Imports certificate and token for a token already connected to a user.
107	RecoverCertificateToken	Personalizes a card and imports certificate and token on the card.
108	RecoverCertificateTokenSoft	Personalizes a soft token and imports certificate and token on the soft token.
109	CancelTaskPretermit	Possible to cancel task that is locked to another user.
110	PersonalInformation	Get a user’s personal information (given name, surname, serial number, phone, email, unit number(s), extract of card register, extract of logs).
111	AdditionalOrderInformation	Get information in Token.AdditionalInfo.
112	ServerAddExternal	Import external server certificates not issued by Net iD Portal.
113	DirectoryUserSearchPretermit	Use an alternative LDAP filter.

Name

Description

UserView

View user post

UserAdd

Add user post

UserEdit

Edit existing user post

UserDelete

Delete existing user post

UserSearch

Search for users in NiP database

DirectoryUserSearch

Search for users in directory service

TokenView

View user token

TokenAdd

Add token

TokenEdit

Edit existing token

TokenDelete

Delete existing token

TokenSearch

Search for tokens in database

ActiveUserListView

View users currently logged on to the service

NationalRegisterNavetPersonSearch

"Navet" search for user

NationalRegisterNavetPersonListSearch

"Navet" search for user list

OrganizationDelegation

Change organization

CertificateSearch

Search for existing user certificates

CertificateRevoke

Revoke existing user certificates

CertificateView

View existing user certificates

UserSynchronize

Synchronize existing user information with directory service

LogSearch

Search for log events in audit log

LogView

View the audit log functionality

TokenReceipt

Create and view receipts for tokens

ReportView

View the report functionality

UserEnroll

Enroll token for existing user

TokenRevoke

Revoke token for existing user

TokenUnlock

Unlock token for existing user

OrderTokenPersonalized

Order personalized token from card manufacturer for existing user

OrderTokenPersonalizedBatch

Order batch of personalized tokens from card manufacturer

OrderTokenTemporary

Order temporary tokens from card manufacturer

OrderTokenTemporaryBatch

Order a batch of temporary tokens from a card manufacturer

OrderTokenCodeLetter

Order a codeletter with security codes for an existing token from a card manufacturer

OrderTokenCodeLetterBatch

Order a batch of security code letters for existing tokens from a card manufacturer

ServerEnroll

Enroll certificate for a server

ServerRevoke

Revoke an existing server certificate

SelfView

View selfservice functionality

GenerateOneTimePassword

Generate an OneTimePassword for a user

UserAddSequenceNumber

Create a user with a sequence number, starting with 15, as serial number instead of a personal number.

DistributeTokenOrder

Distribute/hand over a token to the end user before it get activated in NiP

UserGroupAssignment

Give the user a specific officer role in service

UserEnrollLtd

Enroll a temporary token for an existing user

UserEnrollSoft

Enroll a soft token for existing user

UserEnrollSoftLtd

Enroll a temporary soft token for existing user

UserEnrollAdditional

Enroll an additional token for existing user

TokenRenew

Renew an existing user token

UserAddExternal

Add user post with information taken from external source like ldap directory or national directory

TokenUnlockDisplay

View personal unblocking code on screen for existing token

TokenUnlockChallenge

Unblock token using challenge/response with delivery of key to mail or sms

TokenUnlockChallengeDisplay

Unblock token using challenge/response on screen

AdminView

View administrative area of service

TokenRevokeCertificate

Revoke certificate on existing token

UserImageUpload

Upload user image for existing user

UserSignatureImageUpload

Upload user signature image for existing user

CancelTask

Cancel ongoing task

ReleaseTask

Release ongoing task

UserEnrollAdditionalSelf

Enroll additional certificates for users existing token via selfservice

CreateUserAlias

Create alias user for existing user

CreateTokenInit

Initialize new token

ServerView

View server area of service

ServerAdd

Add server post for certificate enrollment

ServerEdit

Edit existing server post for certificate enrollment

ServerDelete

Delete existing server post

ServerSearch

Search for existing servers and certificates

BindUserAlias

Manual user synchronization via a ldap directory

CancelTaskExternal

Cancel ongoing external task, should be used with caution

AccessibleOrganizationSearch

Search in other configurations if configured

CreateTokenBatch

Create a batch of token to manufacturer

UserModeSecrecy

Manage users marked with “Secrecy” in National registers.

TokenTerms

View user terms for a specific token

UserRestriction

Override the user group restriction structure

ImportCertificate

Import certificates from 3^rd party Certificate Authority

AdditionalIdentities

View AdditionalIdentites on function (EndEntity) objects

AssignOffice

Assign an Office to a user

EndEntityView

View function (EndEntity) Posts

EndEntitySearch

Search for existing functions (EndEntities)

EndEntityAdd

Add function (EndEntity) posts for certificate enrollment

EndEntityEdit

Edit existing function (EndEntity) post

EndEntityDelete

Delete existing function (EndEntity) Post

EndEntityChangeStatus

Change status of function (EndEntity)

EndEntityEnrollInternal

Enroll internal function (EndEntity) certificate

EndEntityEnrollExternal

Enroll external function (EndEntity) certificate

EndEntityRevoke

Revoke function (EndEntity)

EndEntityRevokeCertificate

Revoke function (EndEntity) certificate

UserDisable

Disable a user

100

EndEntitySynchronize

Synchronize functions (EndEntity) to a web service, for example HSA service.

101

OrderUserImage

Order user image from SCS

102

UserEnrollPhone

Enroll a token to a mobile phone

103

UserEnrollPhoneLtd

Enroll a temporary token to a mobile phone

104

UserEnrollTablet

Enroll a token to a tablet

105

UserEnrollTabletLtd

Enroll a temporary token to a tablet

106

RecoverCertificate

Imports certificate and token for a token already connected to a user.

107

RecoverCertificateToken

Personalizes a card and imports certificate and token on the card.

108

RecoverCertificateTokenSoft

Personalizes a soft token and imports certificate and token on the soft token.

109

CancelTaskPretermit

Possible to cancel task that is locked to another user.

110

PersonalInformation

Get a user’s personal information (given name, surname, serial number, phone, email, unit number(s), extract of card register, extract of logs).

111

AdditionalOrderInformation

Get information in Token.AdditionalInfo.

112

ServerAddExternal

Import external server certificates not issued by Net iD Portal.

113

DirectoryUserSearchPretermit

Use an alternative LDAP filter.

Available administrator privileges are listed in the table below:

ID	Admin privilegie Name	Description
50001	TraceServerManager	Trace server manager (not in use)
100000	OrganizationView	View existing organization
100001	OrganizationAdd	Add organization
100002	OrganizationEdit	Edit existing organization
100003	OrganizationDelete	Delete existing organization
100004	OfficeView	View existing organization office
100005	OfficeAdd	Add new organization office
100006	OfficeEdit	Edit existing organization office
100007	OfficeDelete	Delete existing organization office
100008	OfficeAddressView	View existing organization office address
100009	OfficeAddressAdd	Add new organization office address
100010	OfficeAddressEdit	Edit existing organization office address
100011	OfficeAddressDelete	Delete existing organization office address
100012	TokenTemplateView	View existing token templates (e.g. smart card configuration)
100013	TokenTemplateAdd	Add new token template
100014	TokenTemplateEdit	Edit existing token template
100015	TokenTemplateDelete	Delete existing token template
100016	UserGroupView	View existing user group
100017	UserGroupAdd	Add new user group
100018	UserGroupEdit	Edit existing user group
100019	UserGroupDelete	Delete existing user group
100020	RoleView	View existing user role
100021	RoleAdd	Add new user role
100022	RoleEdit	Edit existing user role
100023	RoleDelete	Delete existing user role
100024	TokenProfileView	View existing token profile (e.g. smart card profile)
100025	TokenProfileAdd	Add new token profile
100026	TokenProfileEdit	Edit existing token profile
100027	TokenProfileDelete	Delete existing token profile
100028	ReportAdd	Add new report template (e.g. SQL query for reports)
100029	ReportEdit	Edit existing report template
100030	ReportDelete	Delete existing report template
100031	TokenManufacturerView	View existing token manufacturer (e.g. configuration for 3rd party token manufacturer)
100032	TokenManufacturerAdd	Add token manufacturer
100033	TokenManufacturerEdit	Edit existing token manufacturer
100034	TokenManufacturerDelete	Delete existing token manufacturer
100035	SmtpTemplateView	View existing SMTP server template
100036	SmtpTemplateAdd	Add SMTP server template
100037	SmtpTemplateEdit	Edit existing SMTP server template
100038	SmtpTemplateDelete	Delete existing SMTP server template
100039	SmsTemplateView	View existing SMS server template
100040	SmsTemplateAdd	Add SMS server template
100041	SmsTemplateEdit	Edit existing SMS server template
100042	SmsTemplateDelete	Delete existing SMS server template
100043	NationalRegisterView	View existing "NAVET" configuratioin
100044	NationalRegisterAdd	Add "NAVET" configuratioin
100045	NationalRegisterEdit	Edit existing "NAVET" configuratioin
100046	NationalRegisterDelete	Delete existing "NAVET" configuratioin
100047	DirectoryServiceView	View existing directory service (ActiveDirectory)
100048	DirectoryServiceAdd	Add new directory service
100049	DirectoryServiceEdit	Edit existing directory service
100050	DirectoryServiceDelete	Delete existing directory service
100051	CertificateAuthorityView	View existing certificate authority
100052	CertificateAuthorityAdd	Add certificate authority
100053	CertificateAuthorityEdit	Edit existing certificate authority
100054	CertificateAuthorityDelete	Delete existing certificate authority
100055	CertificateTemplateView	View existing certificate template
100056	CertificateTemplateAdd	Add certificate template
100057	CertificateTemplateEdit	Edit existing certificate template
100058	CertificateTemplateDelete	Delete existing certificate template
100059	SettingsView	View settings
100060	SettingsEdit	Edit settings
100061	GenerateLicense	Generate license (Under development)
100062	UploadLicense	Upload license (Under development)
100063	ExportLicense	Export license (Under development)
100064	ImportLicense	Import license (Under development)
100065	GenerateClientLicense	Generate Client license (Under development)
100066	ExportConfiguration	Export configuration settings of the product.
100067	ManageAdminPrivileges	Manage admin privileges
100068	FinalizeSetup	Finalize bootstrap process
100069	AcquisView	View existing Acquis
100070	AcquisAdd	Add Acquis
100071	AcquisDelete	Delete existing Acquis
100072	CertificateWhitelistView	View existing certificate template whitelists
100073	CertificateWhitelistAdd	Add certificate template whitelist rules
100074	CertificateWhitelistEdit	Edit existing certificate template whitelist rules
100075	CertificateWhitelistDelete	Delete existing certificate whitelist rules
100076	CertificateWhitelistApprovalView	View certificate template whitelist approvals
100077	GenericTextView	View existing generic texts for notifications and other texts
100078	GenericTextAdd	Add generic texts for notifications and other texts
100079	GenericTextEdit	Edit existing generic texts for notifications and other texts
100080	GenericTextDelete	Delete existing generic texts for notifications and other texts
100081	UserGroupRestrictionView	View existing user group restrictions
100082	UserGroupRestrictionAdd	Add user group restrictions
100083	UserGroupRestrictionEdit	Edit existing user group restrictions
100084	UserGroupRestrictionDelete	Delete existing user group restrictions
1000004	CreateWhiteListOrder	Create whitelist order

Admin privilegie Name

Description

50001

TraceServerManager

Trace server manager (not in use)

100000

OrganizationView

View existing organization

100001

OrganizationAdd

Add organization

100002

OrganizationEdit

Edit existing organization

100003

OrganizationDelete

Delete existing organization

100004

OfficeView

View existing organization office

100005

OfficeAdd

Add new organization office

100006

OfficeEdit

Edit existing organization office

100007

OfficeDelete

Delete existing organization office

100008

OfficeAddressView

View existing organization office address

100009

OfficeAddressAdd

Add new organization office address

100010

OfficeAddressEdit

Edit existing organization office address

100011

OfficeAddressDelete

Delete existing organization office address

100012

TokenTemplateView

View existing token templates (e.g. smart card configuration)

100013

TokenTemplateAdd

Add new token template

100014

TokenTemplateEdit

Edit existing token template

100015

TokenTemplateDelete

Delete existing token template

100016

UserGroupView

View existing user group

100017

UserGroupAdd

Add new user group

100018

UserGroupEdit

Edit existing user group

100019

UserGroupDelete

Delete existing user group

100020

RoleView

View existing user role

100021

RoleAdd

Add new user role

100022

RoleEdit

Edit existing user role

100023

RoleDelete

Delete existing user role

100024

TokenProfileView

View existing token profile (e.g. smart card profile)

100025

TokenProfileAdd

Add new token profile

100026

TokenProfileEdit

Edit existing token profile

100027

TokenProfileDelete

Delete existing token profile

100028

ReportAdd

Add new report template (e.g. SQL query for reports)

100029

ReportEdit

Edit existing report template

100030

ReportDelete

Delete existing report template

100031

TokenManufacturerView

View existing token manufacturer (e.g. configuration for 3rd party token manufacturer)

100032

TokenManufacturerAdd

Add token manufacturer

100033

TokenManufacturerEdit

Edit existing token manufacturer

100034

TokenManufacturerDelete

Delete existing token manufacturer

100035

SmtpTemplateView

View existing SMTP server template

100036

SmtpTemplateAdd

Add SMTP server template

100037

SmtpTemplateEdit

Edit existing SMTP server template

100038

SmtpTemplateDelete

Delete existing SMTP server template

100039

SmsTemplateView

View existing SMS server template

100040

SmsTemplateAdd

Add SMS server template

100041

SmsTemplateEdit

Edit existing SMS server template

100042

SmsTemplateDelete

Delete existing SMS server template

100043

NationalRegisterView

View existing "NAVET" configuratioin

100044

NationalRegisterAdd

Add "NAVET" configuratioin

100045

NationalRegisterEdit

Edit existing "NAVET" configuratioin

100046

NationalRegisterDelete

Delete existing "NAVET" configuratioin

100047

DirectoryServiceView

View existing directory service (ActiveDirectory)

100048

DirectoryServiceAdd

Add new directory service

100049

DirectoryServiceEdit

Edit existing directory service

100050

DirectoryServiceDelete

Delete existing directory service

100051

CertificateAuthorityView

View existing certificate authority

100052

CertificateAuthorityAdd

Add certificate authority

100053

CertificateAuthorityEdit

Edit existing certificate authority

100054

CertificateAuthorityDelete

Delete existing certificate authority

100055

CertificateTemplateView

View existing certificate template

100056

CertificateTemplateAdd

Add certificate template

100057

CertificateTemplateEdit

Edit existing certificate template

100058

CertificateTemplateDelete

Delete existing certificate template

100059

SettingsView

View settings

100060

SettingsEdit

Edit settings

100061

GenerateLicense

Generate license (Under development)

100062

UploadLicense

Upload license (Under development)

100063

ExportLicense

Export license (Under development)

100064

ImportLicense

Import license (Under development)

100065

GenerateClientLicense

Generate Client license (Under development)

100066

ExportConfiguration

Export configuration settings of the product.

100067

ManageAdminPrivileges

Manage admin privileges

100068

FinalizeSetup

Finalize bootstrap process

100069

AcquisView

View existing Acquis

100070

AcquisAdd

Add Acquis

100071

AcquisDelete

Delete existing Acquis

100072

CertificateWhitelistView

View existing certificate template whitelists

100073

CertificateWhitelistAdd

Add certificate template whitelist rules

100074

CertificateWhitelistEdit

Edit existing certificate template whitelist rules

100075

CertificateWhitelistDelete

Delete existing certificate whitelist rules

100076

CertificateWhitelistApprovalView

View certificate template whitelist approvals

100077

GenericTextView

View existing generic texts for notifications and other texts

100078

GenericTextAdd

Add generic texts for notifications and other texts

100079

GenericTextEdit

Edit existing generic texts for notifications and other texts

100080

GenericTextDelete

Delete existing generic texts for notifications and other texts

100081

UserGroupRestrictionView

View existing user group restrictions

100082

UserGroupRestrictionAdd

Add user group restrictions

100083

UserGroupRestrictionEdit

Edit existing user group restrictions

100084

UserGroupRestrictionDelete

Delete existing user group restrictions

1000004

CreateWhiteListOrder

Create whitelist order

SMS template — Create

Create new SMS template for correspondence with information to the end user or administrator.

The configuration fields available are listed in the table below:

Information	Description
Name	Name of SMS service
Server	Name or IP of the SMS service
Credential user name	Username for the SMS service
Credential password	Password for the SMS service

Information

Description

Name

Name of SMS service

Server

Name or IP of the SMS service

Credential user name

Username for the SMS service

Credential password

Password for the SMS service

Token manufacturer — Create

Create new token manufacturer to be able to communicate with external card vendor.

The configuration fields available are listed in the table below:

Information	Description
Name	Name of manufacturer (predefined)
Customer reference	Customer reference number at card manufacturer
Additional Info	Additional Info (predefined)

Information

Description

Name

Name of manufacturer (predefined)

Customer reference

Customer reference number at card manufacturer

Additional Info

Additional Info (predefined)

Token profile — Create

Create a new token profile to add a new token, for example a smart card or USB token.

The configuration fields available are listed in the table below:

Information	Description
Token label	Token label
Model	Model
Data	Additional Data for the Token Profile; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information
Additional task info	Additional task info, dynamic task configurations; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information

Information

Description

Token label

Model

Data

Additional Data for the Token Profile; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

Additional task info

Additional task info, dynamic task configurations; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

Token template — Create

Create new token template such as smart card, USB token or soft token with your specific modifications.

The configurations fields available are listed in the table below, mandatory fields are marked with asterisk (*):

Information	Description
Name*	Name of token template
Type*	Type of token template: SmartCardLtd, SmartCardLtdExt, SmartCardStd, SmartCardStdExt, SoftTokenLtd, SoftTokenStd, PhoneLtd, PhoneStd, TabletLtd, TabletStd
Description	Possible to describe the purpose of the token template
Configuration visible	On/Off, possible to show or hide token templates for officers. If it is hidden it will not show up as an option in the enrollment flow.
Certifcate template*	List of available certificate templates
Validity - Min value, key*	Validity Minimum value: Days, Hours, Minutes, Months, Seconds, Weeks, Years
Validity - Min value*	In relation to above, value of validity
Validity - Default value, key*	Validity default value: Days, Hours, Minutes, Months, Seconds, Weeks, Years
Validity - Default value*	In relation to above, value of validity
Validity - Max value, key*	Validity maximum value: Days, Hours, Minutes, Months, Seconds, Weeks, Years
Validity - Max value*	In relation to above, value of validity
Token Manufacturer ID	Name/ID of existing token manufacturer created in "Token manufacturer"
Manufacturer’s Product ID	Name/Product ID at token manufacturer
Manufacturer’s Product description	Detailed description of token
Additional info	Additional information for the Token Template; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information
Additional task info	Additional task info, dynamic task configurations; XML formatted. See document “Net iD Portal – XML configurations, examples” for more information

Information

Description

Name*

Name of token template

Type*

Type of token template: SmartCardLtd, SmartCardLtdExt, SmartCardStd, SmartCardStdExt, SoftTokenLtd, SoftTokenStd, PhoneLtd, PhoneStd, TabletLtd, TabletStd

Description

Possible to describe the purpose of the token template

Configuration visible

On/Off, possible to show or hide token templates for officers. If it is hidden it will not show up as an option in the enrollment flow.

Certifcate template*

List of available certificate templates

Validity - Min value, key*

Validity Minimum value: Days, Hours, Minutes, Months, Seconds, Weeks, Years

Validity - Min value*

In relation to above, value of validity

Validity - Default value, key*

Validity default value: Days, Hours, Minutes, Months, Seconds, Weeks, Years

Validity - Default value*

In relation to above, value of validity

Validity - Max value, key*

Validity maximum value: Days, Hours, Minutes, Months, Seconds, Weeks, Years

Validity - Max value*

In relation to above, value of validity

Token Manufacturer ID

Name/ID of existing token manufacturer created in "Token manufacturer"

Manufacturer’s Product ID

Name/Product ID at token manufacturer

Manufacturer’s Product description

Detailed description of token

Additional info

Additional information for the Token Template; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

Additional task info

Additional task info, dynamic task configurations; XML formatted.

See document “Net iD Portal – XML configurations, examples” for more information

User group — Create

Create a new user group for correlation with a user role.

The configuration fields available are listed in the table below:

Information	Description
Name	Name of user group
Roles	Relation to existing role created under "Roles"

Information

Description

Name

Name of user group

Roles

Relation to existing role created under "Roles"

User group restriction — Create

Possible to restrict user group delegation for each user group.

Configure which user groups that can be assigned for the specific group.

Information	Description
User group	Available user groups
User group restrictions	Available user groups

Information

Description

User group

Available user groups

User group restrictions

Available user groups

Whitelist — Create rule

Create a new rule for a certificate template whitelist used with functions (EndEntities) and function certificates.

The configuration fields available for a whitelist rule are listed in the table below:

Information	Description
Certificate template	Certificate template that the rule will apply for
Common name	Allowed common name of certificates. May include wildcard “*”, please be careful when using wildcards in rules.
Organization name	Organization name of rule (Will be added to O attribute in certificate)
Organizational number	Organizational number of organization in rule (Will be added to SERIALNUMBER attribute in certificate)
Locality	Locality of organization in rule (Will be added to L attribute in certificate)
Country	Country of organization in rule (Will be added to C attribute in certificate)
Validity period	Validity period of rule, when validity period is exceeded, the whitelist will be inactive
Evidence	Optional evidence regarding controls that may be necessary for all or parts of the information in rules, for example that the organization is owner of the domainname (common name).
Comments	Optional comments to the evidence and other actions related to a rule.

Information

Description

Certificate template

Certificate template that the rule will apply for

Common name

Allowed common name of certificates. May include wildcard “*”, please be careful when using wildcards in rules.

Organization name

Organization name of rule (Will be added to O attribute in certificate)

Organizational number

Organizational number of organization in rule (Will be added to SERIALNUMBER attribute in certificate)

Locality

Locality of organization in rule (Will be added to L attribute in certificate)

Country

Country of organization in rule (Will be added to C attribute in certificate)

Validity period

Validity period of rule, when validity period is exceeded, the whitelist will be inactive

Evidence

Optional evidence regarding controls that may be necessary for all or parts of the information in rules, for example that the organization is owner of the domainname (common name).

Comments

Optional comments to the evidence and other actions related to a rule.