datacard trucredential software€¦ · in a single desktop environment, trucredential is installed...

Datacard® TruCredential™ Software

TruCredential Installation and Administration Guide

July 2015

Part No. 527666-001, Rev. A

NoticeThis publication and the accompanying software are proprietary to Entrust Datacard

Corporation and are protected by U.S. patent and copyright laws as well as various

international laws and treaties. This publication may not be copied, translated, sold, or

otherwise transferred to a third party, in whole or in part, without the express written

permission of Entrust Datacard Corporation.

Information in this publication is subject to change without notice. Entrust Datacard

Corporation assumes no responsibility for any errors that may appear in this publication.

Names and logos in sample screens are fictitious. Any similarity to actual names,

trademarks, or trade names is coincidental.

Trademark AcknowledgmentsTruCredential is a trademark and Datacard is a registered trademark and service mark of

Entrust Datacard Corporation in the United States and other countries.

All other product names are the property of their respective owners.

Proprietary NoticeThe design and information contained in these materials are protected by US and

international copyright laws.

All drawings and information herein are the property of Entrust Datacard Corporation. All

unauthorized use and reproduction is prohibited.

Entrust Datacard Corporation1187 Park PlaceShakopee, MN 55379Phone: 952‐933‐1223Fax: 952‐933‐7971www.entrustdatacard.com

Copyright © 2015 Entrust Datacard Corporation. All rights reserved.

ii

http://www.entrustdatacard.com

Revision LogTruCredential Installation and Administration Guide

Revision Date Description of Changes

1 July 17, 2015 The first release of this document, for TruCredential software version 7.1.

iii

Contents

Chapter 1: Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1About this Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Conventions Used in this Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Related Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Support and Service Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Operating Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3Browsers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Before You Begin Installing TruCredential . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Single Workstation Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Multiple-Workstation Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Server and Client Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5TruCredential Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Installation Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6User Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Obtain the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Chapter 2: Single-Workstation Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Installing the TruCredential Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Installing in a Single-Workstation Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Starting the Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Chapter 3: Multiple-Workstation Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Installing in a Multiple-Workstation Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Installing the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Server Firewall Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Installing the Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Starting the Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

TruCredential Software’s Location on Your Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Chapter 4: Server and Client Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21Installing in a Server and Client Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Installing the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22Server Firewall Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22Installing the Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22Starting the Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

TruCredential Software’s Location on Your Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

v

Chapter 5: Upgrading TruCredential Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Back Up Version 7.0 of TruCredential Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Install the New Version of TruCredential Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Differences Between Versions 7.0 and 7.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Chapter 6: Starting the Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29Starting TruCredential Software for the First Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29First-Time Sign-In Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Subsequent Sign-In Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30To Run the Software on a Workstation (Client) Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Sign-Out Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31Password Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31Automatic Sign Out Due to Inactivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Chapter 7: Licensing the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33About Product Activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Install and Activate a Product Key on the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Install Your Product Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Remotely Activate Your License Key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Import the Activated License Information Into the License Administrator . . . . . . . . . . . . 34Enter Your License in TruCredential . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Chapter 8: Uninstalling the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Chapter 9: Administration Reference. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41Connect a Printer via a USB Cable to a TruCredential Workstation . . . . . . . . . . . . . . . . . . . . . 41Database Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Connect to H2 (the Default) Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42Connect to Microsoft Access 2010 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43Connect to Microsoft Access 2013 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43Connect to Microsoft SQL Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Connect to Microsoft SQL Server 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Deploy and Connect to Oracle 11g R2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Printer Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46Advanced Printer and Card Functionality Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Password Security Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47Low Security Level Password Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47Medium Security Level Password Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47High Security Level Password Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48Change the Password Complexity Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49General Issues. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49Specific Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Contact Entrust Datacard Customer Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

vi

Chapter 10: Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Basic Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53Ports Used by TruCredential Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

TruCredential Software’s Windows Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56Entrust Datacard-Brand Printers Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56Card Stock Sizes Supported. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56Paper Sizes Supported by the Report Designer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57Supported Photograph Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58Supported Capture Devices or Sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58Data Sources Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58Bar Codes Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59Smart Card Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Smart Chips Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60Chip Readers Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Proximity Card Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60Proximity Cards Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60Card Readers/Couplers Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Chapter 11: Glossary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

vii

Chapter 1: Introduction

This section provides an overview of this manual, support and service

resources, system requirements, and what you require before you begin

installation of Datacard® TruCredential™ software.

BackgroundThis manual explains conceptually how to administer, supervise, and operate TruCredential

software, with the end result being the ability to issue personalized credentials. This manual is

written for the TruCredential system administrator.

This manual does not cover installation of credential printers, other peripherals, and drivers

needed to set up the hardware necessary to produce credentials: refer to the manuals that came

with your respective products for this information and ensure that all of your credential

production hardware is installed before attempting to use it with TruCredential™ software.

Product EditionsThere are several product editions in the Datacard® TruCredential™ suite.

Product edition capabilities do vary. Refer to the license agreement for details about what is and

is not supported by the edition that you have licensed.

Product versions also vary. If your license is for an earlier version of TruCredential software, you

need to upgrade your license to see the features in the current version of TruCredential software.

About this ManualThis document describes how to install, administer, and troubleshoot TruCredential™ software. It

is intended for system administrators who have experience with industry standards or who have

been trained by Entrust Datacard.

TruCredential Installation and Administration Guide 1

Conventions Used in this ManualPlaceholder text displays in italic font. You must replace the placeholder text with information

that is correct for your environment. Example: http://servername:portnumber/trucredential

User interface text displays in boldface font. Example: When work is complete, select userID >

Log Out.

Related ResourcesThe TruCredential Online Help system is the primary documentation for this product and

provides procedures for everything that you must do in TruCredential software. It is available by

clicking the help button on any page.

Support and Service ResourcesGo to entrustdatacard.com/support for information about getting support in your region of the

world. Be prepared to access shipping documents (before installation) or the TruCredential

software (after installation) to view software version and product key information.

System RequirementsBefore installing the software, make sure that your computer meets the following minimum

specifications. After installation, refer to “Specifications” on page 53 for more details.

Software

This is an example of a note. Notes contain special information that you must be sure to read carefully.

Warning: TruCredential must not be installed on a system running Syntera Customization Suite (SCS). TruCredential uses a custom version of SCS to provide smart card personalization, and its components overwrite anything currently installed. The existing SCS installation would not work properly as a result. Uninstall SCS prior to installing TruCredential software to avoid any issues.

Warning: TruCredential must not be installed on a system running IDWorks or IDCentre software. TruCredential components might interfere with the existing software, causing it to not work properly. To avoid any issues, install TruCredential on a computer that has no other Entrust Datacard software installed.

2 Introduction

http://www.entrustdatacard.com/support

Operating SystemsWindows 7 and 8.1, both 32‐ and 64‐bit, operating systems are supported; the latest service pack

is recommended.

Hardware A computer with a 32‐ or 64‐bit processor

Minimum screen resolution of 1360 × 768

Memory (RAM):

Initially, at least 1GB of available computer hard drive space if you are installing the client and

the server on the same machine; slightly less than that if you are installing only the client or

only the server.

An available software port to use for the web service—make a note of this port number; you

must have it for the software installation process. Note that the software installation process

defaults to port 80, which many systems can use without needing further understanding of

this step. If you have problems, however, verify that the default port 80 is not already being

used.

Browsers Google Chrome version 42.0.2311.90 m or newer.

Internet Explorer 10 or 11 software.

An HIF printer using a USB connection, rather than a network connection, can write to a smart chip but cannot read from it. Additionally, use Windows 8.1 to connect an HIF printer via USB and write to a smart chip.

Single‐Workstation Environment Multiple‐Workstation Environment

4GB RAM minimum,

8GB RAM recommended

For the server:

8GB RAM minimum,

16GB RAM recommended

For each workstation:

4GB RAM minimum,

8GB RAM recommended

The TruCredential software is optimized for use with Internet Explorer 11.0.17. If you are using a different version of Internet Explorer, we recommend that you change to Internet Explorer version 11.0.17. Refer to “The Internet Explorer Browser Crashes” on page 45 if you are using a newer version of Internet Explorer and are experiencing problems.


Before You Begin Installing TruCredentialThere are three main environments in which TruCredential can be used to issue credentials: a

single workstation; a distributed, multi‐workstation environment; or a server and client

environment. Keep this in mind when you are installing TruCredential to make sure that you

install the correct components on the correct computers.

Single Workstation EnvironmentIn a single desktop environment, TruCredential is installed on a single computer that is connected

to one or more printers via a network connection or via a USB cable (refer to “Connect a Printer

via a USB Cable to a TruCredential Workstation” on page 41), and it is also connected to data

capture devices such as a document scanner, camera, or other device. Only that one computer

can be used by anyone to access TruCredential features, regardless of whether they are the

TruCredential Administrator, a supervisor, or the operator.

Multiple-Workstation EnvironmentIn this environment, the TruCredential client and server are installed on one workstation that is

connected to one or more clients via a network connection. This configuration is very similar to

the server and client environment.

4 Introduction

Server and Client EnvironmentIn a server and client environment, the TruCredential software is installed on one central

computer that is connected to more than one other computer workstation, each of which is

connected to one or more printers via a network connection or USB cable (refer to page 41 for

USB details) and they are also connected to data capture devices. Each of those workstations can

be used to personalize credentials. The central computer contains the database of information

about the issued credentials and it is also capable of monitoring the entire network of

workstations and printers.

TruCredential ArchitectureRefer to the diagram for more information about the how TruCredential works with various

components.


Installation OptionsThere are three main installation options:

1. Single workstation environment: Select this option during installation if only one computer

must contain all functionality. Make sure that this computer is left running during all usage

hours and is backed‐up routinely, because it must be the sole keeper of all TruCredential

information, including the database if you use the TruCredential default database. This

computer must be connected to one or more printers via a network connection or USB cable

(refer to page 41 for USB details), and it must also connect to the Internet and data capture

devices such as a document scanner, camera, or other device.

2. Multiple workstation environment: During installation, install both the client and the server

on the first computer that functions as the server for the environment. This computer can

also be used as a client. On each client workstation, install only the client component of

TruCredential.

3. Server and client workstation environment: Select this option during installation if the first

computer that you install the software on must function as the server, or central computer,

typically containing the default TruCredential database, and other computers must connect

to that server as clients that exchange information with that server. As with a single

workstation installation, make sure that this server is a computer that is left running, and is

backed‐up routinely. During installation, you may choose to install only the server portion of

TruCredential on this machine or also the client portion. When you proceed to install

TruCredential on the other, client workstations, select only the client installation option to

install on those client workstations.

You can also upgrade your installation, regardless of which main option you chose. These options

are covered in this manual.

User ManagementYou must decide who is the system administrator for the TruCredential software because the

system administrator must perform the installation and set‐up of the system.

Obtain the SoftwareTo obtain a copy of the software, do one of the following:

Visit the Datacard TruCredential download site whose location was provided with your

purchase documentation. Download the software installation file to your TruCredential

server computer.

Obtain a disc with the software installation file on it from Entrust Datacard.

6 Introduction

Chapter 2: Single-Workstation Installation

This chapter covers the installation of Datacard TruCredential™ software

in a single‐workstation environment.

Installing the TruCredential Software

Installing the software takes just a few minutes, and it can be easily accomplished by most

computer users. However, it must only be done by the person who is the system administrator for

TruCredential software and the initial installation must be done on the computer that becomes

the primary (server) computer for it.

Installing in a Single-Workstation EnvironmentThese instructions are for you if the following apply:

You are the system administrator: You are the official system administrator for the

TruCredential software. If not, then you must get the administrator to perform this

installation and the subsequent setup steps.

One computer: Just one computer prints credentials directly to the printer. This computer

will contain the database, be backed up frequently, be reliable, be secure from physical or

electronic mischief, and meet all of the prerequisite criteria listed previously (“System

Requirements” on page 2).

Single‐workstation environment: This computer is going to be used by the TruCredential

system administrator, supervisor, and operator(s)—credentials can be printed from other

printers.

If the above conditions are true, then your installation process takes just a few minutes. You can

use the default installation settings presented by the application.

If you are using a printer connected to your computer by USB, rather than by network cable, refer to page 41 for instructions on how to set it up properly.

The person who is the system administrator for the TruCredential software must complete this installation.


1. Double‐click the *.exe program installation file. (Locate this file either on your computer

where it was saved when you downloaded it from www.entrustdatacard.com, or on the

TruCredential software installation disc.) After a pause of up to a minute, a page displays

showing that the application installer is extracting.

2. A welcome page displays. Click Next.

If the Extracting window goes away unexpectedly and you do not see the Welcome page in step 2 display, there may not be enough free space on your computer’s hard drive for this application to install and run.

8 Single-Workstation Installation

3. The software license agreement displays. After reading it, if you accept the terms click the

I accept the terms... button and then click Next.


4. A page displays asking you to choose the installation type. Choose Single workstation and

select or clear Launch TruCredential... then click Next.


5. A page displays asking you to enter the server’s port number. You can accept the default

value or change it to any other open port number. Remember to make note of this port

number—you require it later. Click Next.


6. The Installation Location page shows the default installation location. Enter or Browse to

select a different installation location if you would like to change this. Click Next.

7. A message indicates that the installation path will be created. Click OK.


8. A summary of the components that will be installed displays. Click Next.


9. Installation of the main components of your system begins. Once complete, click Next.


10. Installation of additional components of your system begins. When it is complete, click Next.


11. Installation is complete. Click Close to exit the installation program.

Starting the SoftwareFollow the instructions on “Starting the Software” on page 29.


Chapter 3: Multiple-Workstation Installation


in a multiple‐workstation environment.

Installing in a Multiple-Workstation EnvironmentThese instructions are for you if the following apply:

You are the official system administrator for TruCredential. If not, then you must get the

administrator to perform this installation and the subsequent setup steps on this computer.

One computer will be the dedicated server for the system, and one or more other computers

send and receive data from that server.

The dedicated server contains the database, it is backed up frequently, it is reliable, it is

secure from physical or electronic mischief, and it meets all of the prerequisite criteria listed

here.

The TruCredential system administrator and possibly also the designer and supervisor will use

this computer, but not the operators.

More than one computer might be used by the operator(s) to personalize credentials.

If all of the above are true, then your installation process takes just a few minutes per computer.

First, install the server.

If you are using a printer connected to your computer by USB, rather than by a network cable, refer to page 41 for instructions on how to set it up properly.


Installing the Server1. Double‐click the *.exe program installation file. (Locate this file either on your computer






I accept the terms… button and then click Next.

4. A page displays asking you to choose the installation type. Do not choose the default—

choose Multiple workstation environment and then click Next.

5. On the Select Installation Options page, select Install the server and the option Install the

server. Click Next.

6. Enter the TruCredential server’s port number and click Next.

Important: After installation, refer to “Server Firewall Settings” on page 19 if you chose a

port number other than 80.

7. Type or browse to enter the installation path and then click Next.

8. A message indicates that the location selected will be created. Click OK.

9. Click Next when you are ready to begin the installation of software.

10. The computer seems to stop for up to a minute or two during this process. This is normal.

When all components have been installed, click Next.

11. Additional software is installed. Click Next.

12. The final installation page displays. Click Close to exit the installation program.


18 Multiple-Workstation Installation

Server Firewall SettingsIf the server installation used a port other than 80, then either the firewall must be shut off or a

rule must be created to allow the client access to the machine.

To create a rule in Windows Firewall to allow the client(s) to access this server:

1. On the server computer, open the Control Panel.

2. Open Windows Firewall and click Advanced Settings.

3. On the Windows Firewall with Advanced Security window, click Inbound Rules.

4. On the Inbound Rules window, click New Rule.

5. Click Port for the type of rule you are creating and then click Next.

6. Click TCP for the protocol and enter the port number that you used in the Specific local ports

box.

7. Click Next. Click Allow the connection for the action.

8. Click Next. For the profile, select Domain, Private, and Public and click Next.

9. Enter TruCredential for the name of this rule and click Finish.


Installing the ClientsNow the server is installed, and you must install the clients on the workstations.

1. On a client workstation, double‐click the TruCredential program file.

2. Follow step 1 through step 5 of “Installing the Server” on page 18, then return to this

procedure.

3. Select Install the client and clear Install the server. Click Next.

4. Enter the client’s port number. Click Next.

5. Complete step 7 through step 12 of “Installing the Server” on page 18 to finish installing the

client on this workstation, then return to this procedure.

6. Configure the client’s firewall: In Windows Firewall, click Advanced Settings, click Inbound

Rules, click New Rule, and then follow the Windows instructions to create a new inbound

rule that allows traffic on port 8001. The suggested name for this rule is TruCredential.

7. Repeat this entire procedure for each client workstation.

Starting the SoftwareFollow the instructions on “Starting the Software” on page 29.

TruCredential Software’s Location on Your Computer

The TruCredential software is now located on your computer’s hard drive. The default location is:

C:\Program Files\Datacard\TruCredential\.

20 Multiple-Workstation Installation

Chapter 4: Server and Client Installation


in a server and client environment.

Installing in a Server and Client EnvironmentThese instructions are for you if the following apply:

You are the official system administrator for TruCredential. If not, then you must get the

administrator to perform this installation and the subsequent setup steps on this computer.

There is one computer that is the dedicated server for the system, and one or more other

computers connect to this server, exchanging data with it.

The server computer contains the database, it is backed up frequently, it is reliable, it is

secure from physical or electronic mischief, and it meets all of the prerequisite criteria listed

here.

The server computer is used by the TruCredential system administrator, and possibly also by

the designer and supervisor, but not by the operator(s).

More than one computer might be used by the operator(s) to personalize credentials.

If all of the above are true, then your installation process still takes just a few minutes per

computer. First, install the server.

If you are using a printer connected to your computer by USB, rather than by network cable, refer to page 41 for instructions on how to set it up properly.


Installing the Server1. Double‐click the *.exe program installation file. (Locate this file either on your computer






I accept the terms… button and then click Next.

4. A page displays asking you to choose the installation type. Do NOT choose the default—

choose Multiple workstation environment and then click Next.

5. On the Select Installation Options page, select Install the server and clear the option Install

the client. Click Next.

6. Enter the TruCredential server’s port number and click Next.

Important: After installation, see “Server Firewall Settings” on page 19 if you chose a port

number other than 80.

7. Type or browse to enter the installation path, and then click Next.

8. A message indicates that the location will be created. Click OK.

9. Click Next to begin installation of software.

10. The computer seems to stop for a minute or two during this process. This is normal. When all

components have been installed, click Next.

11. The chip interface software is quickly installed. Click Next.

12. The final installation page displays. Click Close to exit the installation program.

Server Firewall SettingsFollow the instructions “Server Firewall Settings” on page 19.

Installing the ClientsFollow the instructions “Installing the Clients” on page 20.

Starting the SoftwareFollow the instructions “Starting the Software” on page 29.

If the Extracting window goes away unexpectedly and you do not see the Welcome page in step 2, there may not be enough free space on your computer’s hard drive for this application to install and run.

22 Server and Client Installation

TruCredential Software’s Location on Your Computer

The TruCredential software is now located on your computer’s hard drive. The default location is:

C:\Program Files\Datacard\TruCredential\.


24 Server and Client Installation

Chapter 5: Upgrading TruCredential Software

This chapter covers the upgrade from Datacard TruCredential™ 7.0

software to TruCredential 7.1 software.

Back Up Version 7.0 of TruCredential SoftwareBefore you upgrade to a new or different version of TruCredential software, first back up your

existing files so that you don’t lose any data. The following directories must be backed up to a

safe location: the database, LDAP, and properties files. They are located at:

C:\Users\Public\Public Documents\Datacard\TruCredential\db

C:\Users\Public\Public Documents\Datacard\TruCredential\ldap

TruCredential_install_location\properties

The upgrade process also creates a backup of the above files at: TruCredential_install_location\UpgradeBackup\.

Caution: Before proceeding, make sure that all users are logged off of the system.

If you are using a printer connected to your computer by USB, rather than by network, cable refer to page 41 for instructions on how to set it up properly.


Install the New Version of TruCredential Software1. Double‐click the *.exe program installation file. (Locate this file either on your computer





3. A software license agreement displays. Read the agreement and select the “accept” option if

you accept the terms of the agreement. Click Next.

4. A message indicates that you will upgrade from version 7.0 to 7.1 of TruCredential software.

Click Next.

5. Click Next when the software is done upgrading.

6. Click Next when the additional software components finish installing.

7. A message displays indicating that the upgrade is complete and version 7.1 is installed. The

upgrade completes when you sign in to the application.

8. Turn to Chapter 7: "Licensing the Software” on page 33 to refresh your software license on

this computer, then return to finish this procedure.

9. If you have client workstations, repeat this entire procedure for each client.

10. Proceed to “Starting the Software” on page 29.


The URL used by version 7.1 of TruCredential software is:http(s)://host name:port number/trucredential login.html

where host name is the name of your server and port number is the port that it is listening on.

26 Upgrading TruCredential Software

Differences Between Versions 7.0 and 7.1

Several files and the database schema are updated to accommodate the additional functionality

in version 7.1, however no existing data is altered.

Workflows containing the Photograph field or the Document Scan field are upgraded by being

given default properties to accommodate new functionality available in version 7.1 of

TruCredential software.

The following are only the most basic changes that you need to know about immediately. Significant additional functionality is available in v7.1. This functionality is listed in your purchase documentation and in the release notes. Instructions for accessing and using this additional functionality is documented in the online Help.

If you entered a constant value containing the space “ ” character in the Composite field in version 7.0, the space is replaced by an underscore in version 7.1. Therefore, check all instances of the composite field after the upgrade to make sure that the constant values are correct.


28 Upgrading TruCredential Software

Chapter 6: Starting the Software

This chapter covers the startup of Datacard TruCredential software.

Starting TruCredential Software for the First TimeThe first time that you start TruCredential software, it must be done by the person who is the

system administrator for the software. The system administrator must configure the system and

create permissions for supervisors and operators on the server computer. Refer to “Subsequent

Sign‐In Procedure” on page 30 for information on signing in from a client computer.

To start TruCredential software for the first time, do one of the following:

If you selected to start the program after installation, then after installation is complete just

wait for the browser window to appear and the software service to come up to speed.

Single workstation installation: From the Windows Start menu, select:

Datacard > TruCredential > Sign In. Your browser opens to the sign‐in page for TruCredential.

Multiple workstation installation, working on the server computer: Open your browser.

Enter the following text (URL) into the address bar:

If you used the default port (80) when installing the software, enter:

http://localhost/trucredential

If you did not use port 80, enter:

http://localhost:XXXX/trucredentialwhere XXXX= the port number that you used.

Your browser opens to the sign‐in page for TruCredential.

Caution: The system administrator must log in for the first time on the server computer!

IMPORTANT: No matter which method you use to start TruCredential, it takes longer to start the software the first time than in subsequent times. Be patient as various services are triggered to start and begin to work for you.


First-Time Sign-In Information1. As the administrator of the TruCredential system, enter the User ID “admin” and Password

“admin”. Click Sign In.

2. The system prompts you to select and answer security questions in case you forget your

password.

3. The system then prompts you to choose a different password and re‐enter it to confirm it.

4. Sign in using “admin” and your new personal password from now on.

5. Refer to the TruCredential Online Help system for information about configuring the system

and getting it up‐and‐running for all users (operators, supervisors, designers, and other

administrators). There is a link on the home page of the Help system to “The System

Administrator's Initial Startup Tasks”. Print this page to track your progress through the tasks.

Subsequent Sign-In ProcedureTo start the TruCredential application on the server or single‐workstation installation setup, use

the shortcut in the Windows Start menu:

Start > All Programs > Datacard > TruCredential > Sign in. A sign in page displays.

To Run the Software on a Workstation (Client) Computer

After the initial time you have signed in to the system on the server computer, you can run

TruCredential software on a workstation (client) computer.

The URL that you must enter into the browser’s address bar must follow this pattern:

http://servername:portnumber/trucredential where servername and portnumber are unique to your system.

For example, if your server’s name is Ajax and TruCredential software is using port number 80,

then enter:

http://Ajax:80/trucredential in the address bar.

As the system administrator for TruCredential, make sure that you choose a strong password that meets the level of security that you plan on setting for the system. If in doubt, choose a very strong password to prevent someone from gaining access to the entire system through your account. Consider setting a high security level password even if you do not require all users to have that level of complexity in their passwords.

30 Starting the Software

Sign-Out InformationOnce you are signed in to the TruCredential system, signing out is very easy. Simply click your

user ID in the upper‐right corner of the page and select Sign Out from the menu. The Sign In page

displays.

Password InformationThe TruCredential administrator can set different levels of password security.

There are three levels of password security that the TruCredential administrator can set: low,

medium, and high. Refer to the instructions on the page where you change the password for

details about the requirements that the TruCredential administrator has set for your system.

Automatic Sign Out Due to InactivityFor security purposes, the administrator can set a time‐out to occur for all users signed in to the

system but who have not used it for a period of time. If this happens, a message displays that you

are about to be signed out. If you do not respond to the message in time, you are signed out

automatically and must sign back in to the system to resume work. Any work that you did not

save was lost. To configure this session time‐out period, refer to the online Help section for

administrators.

If you are the TruCredential system administrator and a user has forgotten the password AND their answer(s) to the security question(s), delete the user and recreate the account in the system to grant them access again.


32 Starting the Software

Chapter 7: Licensing the Software

This section provides the information you require to license Datacard

TruCredential software.

About Product ActivationThe Datacard TruCredential installation included a remote product activation utility that you can

use to activate your product license(s) via an Internet connection without assistance from Entrust

Datacard.

Install and Activate a Product Key on the ServerThis entire multi‐stage procedure is performed on the server or, in a single‐workstation

environment, on that workstation. Do not license any client workstations that connect to this

server; instead, leave the license field in TruCredential software blank.

Install Your Product Key1. Select Start > All Programs > Datacard > Software Licensing System > License Administrator.

2. Select Product Key > Install.

3. In the Install Product Key window, enter the product key that was provided with your

purchase documents. Click OK. Your product key is now listed in License Administrator with a

status of “Not activated”.

• Your TruCredential server or single‐workstation setup computer must have Internet connection to complete this process.

• This licensing process is only required to be completed once, on the TruCredential server or single‐workstation setup computer. Do not complete this procedure on any client workstations that connect to the server.


Remotely Activate Your License Key

1. In the License Administrator, click to select your product key.

2. Select Product Key > Request Activation Keys.

3. In the Request Activation Keys window, click the product key that you want to activate or

reactivate.

4. Click Export and save the information as a *.txt file with a descriptive name. Click Close.

5. Open the Remote Product Activation application. Select Start > All Programs > Datacard >

Software Licensing System > Remote Product Activation.

6. In the Remote Product Activation window, click Import Activation Request.

7. Search for the *.txt file created in step 4 and click Open. Your product key and license

server ID display in the Remote Product Activation window.

8. Click Activate Keys. After a few moments, the Export Activation Keys window displays.

9. Click Export and save the information as another *.txt file with a descriptive name. Select

File > Exit to exit the Remote Product Activation application.

Import the Activated License Information Into the License Administrator

1. In the License Administrator application, click the product key that you must activate.

2. Select Product Key > Activate.

3. In the Activate Product Key window, click Import, find the second *.txt file that was

created (step 9 of the above procedure), and click Open.

4. Click OK on the Activate Product Key window. Your product key now displays that it is

activated. Select File > Exit to exit the License Administrator.

An Internet connection is required for this procedure.

If activation was not successful, email the results file created in step 9 (of the above procedure) to [email protected], along with a description of what happened.

34 Licensing the Software

[email protected]

Enter Your License in TruCredential1. Select Start > All Programs > Datacard > TruCredential > Sign in.

2. Sign in to TruCredential software.

3. Click the settings button and select Settings.

4. On the Manage Your Settings page, click the License button.

5. Enter your product key on the Manage Your License page and click Save.

Your software is now running and licensed. If you are unable to install or activate your product

key, go to entrustdatacard.com/support for information about getting support in your region of

the world.

Your TruCredential license is only valid on the computer that you have licensed using this procedure; it is not transferable to another computer. If your licensed computer can no longer be used, and you must install and license TruCredential on another computer, refer to the re‐hosting policy included with your purchase documentation.


entrustdatacard.com/support


36 Licensing the Software

Chapter 8: Uninstalling the Software

This chapter provides information about uninstalling the TruCredential

software from your system(s).

To uninstall TruCredential software, do the following:

1. Click the Start menu.

2. In the Search programs and files box, enter “Add or remove programs”. Add or remove

programs displays at the top of the list of search results..


3. Click Add or remove programs. The Control Panel’s Uninstall or change a program window

displays with all of your installed programs listed in alphabetical order. Scroll down to the

letter “D” until you can see the Datacard product(s) that are installed.

4. Right‐click Datacard TruCredential and, from the menu, select Uninstall/Change. A window

displays briefly and uninstalls part of the TruCredential product from the computer.

5. The IzPack ‐ Uninstaller window displays. Select the Force the deletion... check box and then

click Uninstall.

6. A lot of text scrolls across the bar. When it is done, you see [Finished]. Click Quit.

7. Wait several seconds. Another IzPack ‐ Uninstaller window displays. Click Uninstall.

8. A lot of text scrolls across the bar. When it is done, you see [Finished]. Click Quit.

9. Close the Control Panel Uninstall or change a program window.

10. Open Windows Explorer.

11. (Conditional) If this is the only Datacard brand product that you have installed: Navigate to C:\INSTALL_PATH\Datacard\. In the left pane, right‐click the Datacard folder and select Delete. Click Yes to indicate that you want to delete the Datacard folder and all sub‐contents

of it.

38 Uninstalling the Software

12. (Conditional) To delete Datacard from your Start menu, click the Start menu, then All

Programs. Right‐click Datacard and select Delete. Click Yes on the verification window. The

Datacard entry and sub‐entries no longer display in your start menu.


40 Uninstalling the Software

Chapter 9: Administration Reference

This section covers the general administration of the TruCredential

software, including database support and more.

Connect a Printer via a USB Cable to a TruCredential Workstation

On a TruCredential workstation connected to a printer via a USB cable, do the following:

1. Install the printer driver and verify that the printer is working.

2. In the Windows Devices and Printers list, right‐click the printer’s icon and select Printer

Properties. The printer’s name is the value in the top‐most field. Make note of this.

3. Determine the IP address or computer name of your client workstation. Make note of this.

4. For the Windows Firewall, create an Inbound Rule to allow traffic on the client port. The

client port is the value (80, by default) that you entered during the installation of

TruCredential software on the workstation.

On any workstation, do the following:

5. Set up the TruCredential Windows log on service to use an Administrative level account other

than the default Local System account.

6. Select Start > All Programs > Datacard > TruCredential > then right‐click TruCredential and

select Run as administrator.

7. Sign in to TruCredential software and proceed to the next step.

If you do not make this change, printing will not turn out as expected.


8. Register this printer with TruCredential using the following values:

Database SupportConnect to various databases to exchange (import or export) data on‐demand. TruCredential

requires that data mapping from an external database to the TruCredential database matches

exactly one‐for‐one, and the data types must also be the same.

The following databases are supported:

H2 (this is, initially, the default data source)

Microsoft Access 2010

Microsoft Access 2013

Oracle 11g R2

Microsoft SQL Server 2008 R2

Microsoft SQL Server 2012

For instructions about how to add, change, or delete a data source, and how to change the

default data source, refer to the TruCredential Online Help system.

Connect to H2 (the Default) DatabaseThe H2 URL format for the file: jdbc:h2:file:[filePath]TRACE_LEVEL_FILE=0;TRACE_LEVEL_SYSTEM_OUT=0;

CIPHER=AES

(This requires a valid full filePath for the database).

Name Set this to a meaningful value, such as the name of the computer on which this printer is attached.

Description (Optional) Describe the printer.

Model menu Select the printer’s model or Generic

Device Name Set this to the value from step 2.

Client Address Set this to the value from step 3.

Client Port Set this to the value from step 4.

42 Administration Reference

Connect to Microsoft Access 2010Refer to “Connect to Microsoft Access 2013” on page 43.

Connect to Microsoft Access 2013Select the option to enter the URL or properties.

Enter the URL

Enter the full URL:

jdbc:odbc:DRIVER={Microsoft Access Driver (*.mdb, *.accdb)};DBQ=[filePath](This requires a valid filePath for the database)

Enter the Properties

Enter the full file path to the Microsoft Access database.

The Microsoft Access 32‐bit or 64‐bit drivers must match the version of TruCredential spftware that you have installed.

For TruCredential software to access Microsoft Access on a shared drive or network drive, you must create an AD service account with full control over the folder where the Microsoft Access database file is located.


Connect to Microsoft SQL Server 2008Refer to the information below.

Connect to Microsoft SQL Server 2012You can connect TruCredential software to an external Microsoft SQL Server 2012 database to

exchange data.

Read a data field from a Microsoft SQL Server database and write it into a corresponding data

field in the TruCredential database.

Write a value from a field in the TruCredential database into a data field in a

Microsoft SQL Server (external) database.

Enter the URL

If you enter the URL:

Enter the full URL:

jdbc:sqlserver://[server]:[port];databaseName=[databaseName](This requires a valid server, port, and databaseName for the database).

Enter the User ID, Password, and Verify password.


If you enter the properties:

Enter the server, port, and database name.


Up to 10,000 records can be read.


Deploy and Connect to Oracle 11g R2Select the option to enter the URL or Properties:

Enter the URL

Enter the full URL:

Oracle’s JDBC Thin driver uses Java sockets to connect directly to Oracle. There are two URL

syntaxes: an old syntax, which only works with SID, and a new one with the Oracle service

name.

Old syntax: jdbc:oracle:thin:@[HOST][:PORT]:SID

New syntax: jdbc:oracle:thin:@//[HOST][:PORT]/SERVICE



Enter the server, port, and database name.


On the new syntax, SERVICE can be an Oracle service name or an SID.

There are also some drivers that support a URL syntax that allow you to put an Oracle user ID and password in the URL:

jdbc:oracle:thin:[USER/PASSWORD]@[HOST][:PORT]:SID jdbc:oracle:thin:[USER/PASSWORD]@//[HOST][:PORT]/SERVICE

A sample connect string with the service name orcl: String url = "jdbc:oracle:thin:@//myhost:1521/orcl";

or, with the instance name orcl: String url = "jdbc:oracle:thin:@myhost:1521:orcl";

You can find the SID/SERVICE name in your tnsnames.ora file (sample content from tnsnames.ora is shown below):

CC_ORACLE = (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = myhost)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = CC_ORACLE) ) )CC_ORACLE = (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = myhost)(PORT = 1521)) (CONNECT_DATA = (SID = CC_ORACLE) ) )


Printer SupportAdvanced Printer and Card Functionality Supported

TruCredential works with printers, ribbons, and cards to provide support for many advanced

features that you can take advantage of to increase the security and utility of your credentials.

Specifically, the following technologies are supported:

Smart chip cards (refer to “Smart Chips Supported” on page 60)

Emboss printing (using the Datacard CE840 printer)

Indent printing (using the Datacard CE840 printer)

Impress printing, which leaves a tactile impression on the surface of the card

Multiple magnetic stripes per card

Holograms (certain ribbons required)

“Ghosting” of images

Double lamination

Ultraviolet printing (certain ribbons required)

Multi‐Hopper Support


Password Security LevelsThere are three levels of password security that the TruCredential administrator can set for users

and groups system‐wide: low, medium, or high. The default level upon first installation of the

product is medium security. Refer to page 48 if you want to change the level of security

throughout the TruCredential system.

Low Security Level Password Requirements1. The new password must be at least five (5) characters long.

2. The new password must NOT contain your user ID.

Note that passwords are not case‐sensitive, so “ABC” is recognized as well as “abc” and “Abc”.

Note also that your password MIGHT expire every 30, 60, 90, 180, or 365 days (having no

expiration period is typical).

Medium Security Level Password Requirements1. The new password must be at least six (6) characters long.


3. You cannot use a password that has been used recently (within the last 1 through 100

password changes, as specified by your TruCredential Administrator).

4. At least one character must be from each of the following categories:

An uppercase European character A through Z, with a diacritic mark (Á for example) or

the sharp‐s(ß), Greek (Δ for example), or Cyrillic (Ї for example).

A lowercase European character a through z, with a diacritic mark (é for example) or the

sharp‐s(ß), Greek (λ for example), or Cyrillic (Ї for example).

A numeral (0123456789).

Any non‐uppercase or ‐lowercase alphabetic Unicode character, including Asian language

characters (฿ for example).

Note that passwords ARE case‐sensitive, so “ABC” is different from “abc” and “Abc”.

Note also that your password WILL expire every 30, 60, 90, 180, or 365 days (90 days is typical).


High Security Level Password Requirements1. The new password must be at least eight (8) characters long


3. You cannot use a password that has been used recently (within the last 1 through 100

password changes, as specified by your TruCredential Administrator).

4. At least one character must be from at least three (3) of the following categories:

An uppercase European character A through Z, with a diacritic mark (Á for example) or

the sharp‐s(ß), Greek (Δ for example), or Cyrillic (Ї for example).

A lowercase European character a through z, with a diacritic mark (é for example) or the

sharp‐s(ß), Greek (λ for example), or Cyrillic (Ї for example).

A numeral (0123456789).

A non‐alphanumeric character: ~!@#$%^&*_‐+=`|(){}[]:;"'<>.?/

A non‐uppercase or ‐lowercase alphabetic Unicode character, including Asian language

characters (฿ for example).

Note that passwords ARE case‐sensitive, so “ABC” is different from “abc” and “Abc”.

Note also that your password WILL expire every 30, 60, 90, 180, or 365 days (90 days is typical).

Change the Password Complexity LevelTo change the level of complexity that users of the system must use when selecting a password

from the default of “Medium” to “Low” or “High” complexity, follow this procedure.

1. Go to the installation location InstallPath\webapps\trucredential-server\WEB-INF\classes\. Where “InstallPath” is the location where you installed TruCredential.

2. Right‐click the file passwordPolicies.xml and select Open with > Notepad.

3. On line three of the file, change the value of “DefaultPolicy” from “Medium” to “Low” or “High”, depending on your requirements.

4. Save and close the file, and then restart the TruCredential server. The new password policies

will apply to any passwords set from then on.


TroubleshootingGeneral Issues

When starting TruCredential, “This page can’t be displayed”

Several things can cause this message. The most common are:

The server is not running. Resolve this by starting the Datacard TruCredential server in

Window Services.

If you are running in a multiple workstation environment, the Windows Firewall must be

configured on the server. Refer to “Server Firewall Settings” on page 19.

The port entered in the URL is incorrect or missing. This is generally caused by importing

workflows with their application settings, which reset the port value. To resolve this:

a. Find the port value in C:\Program Files\Datacard\TruCredential\ conf\server.xml. Open the file with a text editor such as Notepad.

b. Find the line: <Service name=“CatalinaTruCredential”>. Below it, find the line: <Connector.... then find the text Port=NNNN. Where NNNN is the port number to use.

c. In a browser’s address bar, enter http://localhost:NNNN/trucredential. Refresh the

browser to verify that the problem is solved.

You Cannot Capture a Photograph, Signature, or Document

In some cases, you may not be able to capture an image either using a capture device or

capturing an image from a file. An error message similar to “Unable to capture photo” displays.

To resolve this issue:

1. Make sure that the Capture Manager Service is running by looking for the Capture Manager

service icon in the system tray. Expand the system tray to see all of the services.

2. If the service is running, click the icon . A status window displays that the service is

running, or it displays an error. Make sure to record this error in case you must contact

support.

3. Click the Close button in the upper‐right. This stops the service and removes the icon from

the system tray.

4. Select Start > All Programs > Datacard > Capture Manager. Right‐click the Service application

and select Run as administrator.

5. Repeat step 2 to determine if the Capture Manager Service is now running properly.

6. If the service is running, capture an image in TruCredential. If you are successful, the issue is

resolved.

7. If the issue is not resolved, restart the computer and repeat this entire process.


Printing to a registered USB‐connected printer does not work

In this situation, the printer connects to a client or server‐client computer via USB and it is

properly registered with TruCredential software, yet it does not print.

To remedy this, first ensure that the printer driver is installed on the computer. Next, start the

TruCredential service as a Windows Administrator on both the server and affected client

computers. Select Start > All Programs > Datacard > TruCredential > then right‐click

TruCredential and select Run as administrator.

The Internet Explorer Browser Crashes

The most common cause of this is using a newer version (11.0.18 or higher) of Internet Explorer

than is supported by TruCredential software (11.0.17). To remedy this, do the following:

1. Determine what version of Internet Explorer you are using.

a. Click the gear icon in the upper right‐hand corner of the browser, and select About Internet Explorer.

b. Important: Clear the option Install new versions automatically.

c. Note the Update Version that is currently installed and, if it is 11.0.18 or higher, write

down the code that displays after the Update Versions number (for example,

KB3021952), and proceed to the next step.

2. Select Start > Control Panel > Programs and Features.

3. Select View installed updates, and scroll or use the search box to locate the update version

you wrote down in step 1c.

4. Right‐click your update version and select Uninstall.

5. Restart your computer.

6. Repeat this procedure until your Internet Explorer browser Update Version is at 11.0.17.


Specific Messages“The selected fields have incompatible data therefore they cannot be connected”

If you get this message when mapping fields, the data type in one field is not identical to the data

type in the other field, therefore you cannot connect them. The types of data cannot be mixed.

“Error occurred while retrieving enrollments”

Your search might be on an incompatible field. Check the log for more information. The log is at

install path\TruCredential\logs\trucredential‐stdout.YYYY‐MM‐DD.log, where install path is the

path to which you installed TruCredential (C:\Program Files\Datacard by default) and YYYY‐

MM‐DD is today’s date.

Contact Entrust Datacard Customer ServiceGo to entrustdatacard.com/support for information about getting support in your region of the

world. Be prepared to access shipping documents (before installation) or the TruCredential

software (after installation) to view software version and product key information.



Chapter 10: Specifications

This section covers detailed specifications for the TruCredential software.

System RequirementsBasic Requirements

Refer to “System Requirements” on page 2 for basic system requirements.

Ports Used by TruCredential Software

Product/Component

Default Port

Port Used (Write In) Configuration Method

TruCredential Server 80 In the TruCredential software, click the Settings button then select Settings.

TruCredential Embedded LDAP

10389 10389 (Not configurable.)

TruCredential Client 80 During installation: Change the value when prompted for the port number.

After installation:

1. Go to INSTALL_PATH/conf/Tomcat server.xml.

2. Change the port number “XX” in the following string as required: <Connector protocol="com.datacard.foundation.tomcat

x.Http11CustomNioProtocol" port="XX"3. Restart the Windows service for this change to take effect.


Entrust Datacard Capture Manager (on a workstation)

8000 1. Go to INSTALL_PATH/CaptureManager/bin/Capture Manager XML Config.

2. Change the port number XX in the following string as required: trucredential.client.capturemanager.port

=XX3. Go to INSTALL_PATH/properties/trucredential.properties.

4. Repeat step 2.

DPI Server(desktop printing server)

9443 1. Go to INSTALL_PATH/properties/trucredential.properties.

2. Change the port number XX in the following string as required: trucredential.server.dpi.port=XX

3. Go to INSTALL_PATH\conf\server.XML4. Repeat step 2.

DPI Workstation(desktop printing workstation)

9443 During installation: Select the port during client installation.

After installation: Select the port during USB printer configuration. Refer to the TruCredential Online Help system for details.

SCDI Server(smart card encoding server)

16000 Java system property

scdi.port

SCDI Workstation(smart card encoding workstation)

16000 Java system property

scdi.port

HSC WS 9443

SCS Communication Controller

10000 Change the Windows environment variable SCS_CONFIG_FILE that is pointing to the SysConfig.ini file. The default path is: C:\ProgramData\Datacard\SCS\main\

SysConfig.ini

Product/Component

Default Port

Port Used (Write In) Configuration Method (Continued)

54 Specifications

SCS Configuration Server

8080 Change the Network section of the SCS config file. ConfigSecurePort and ConfigSecurePort.

SCS Trace Server 11221 Edit the Sysconfig.ini file on your computer.

JobManagement

AppEdlPort

11299 Edit the Sysconfig.ini file on your computer.

JobManagement

AppPort


HostComm

ControllerPort


EmbeddedComm

ControllerPort


ObjComm

ControllerPort


DataAccessComm

ControllerPort


Application

InstancePort


LegacyNkPort 1500 Edit the Sysconfig.ini file on your computer.

TransactionPort 15001 Edit the Sysconfig.ini file on your computer.

Product/Component

Default Port

Port Used (Write In) Configuration Method (Continued)


TruCredential Software’s Windows ServicesThe following Windows services are installed by TruCredential software:

Entrust Datacard-Brand Printers Supported

Card Stock Sizes Supported CR‐80 (ISO ID‐1) cards: width 3.3750 inches, height 2.1250 inches.

CR‐50 cards: width 3.5000 inches, height 1.7250 inches.

Custom size: any dimensions that you specify in inches that are supported by your supported

printer.

Services for the Server Services for the Client

SCS‐related services:

Datacard SCS Communicator Controller

Datacard SCS Configuration Server

Datacard Trace Server

TruCredential software services:

Datacard Software License Server

Datacard TruCredential Database

Datacard TruCredential Software

Credential Manager

TruCredential software services:

Datacard Software License Server

Datacard TruCredential Software

Credential Manager

Note that there is also the service “Capture Manager”, however it is not a Windows service at this time.

SP25 Plus

SP35 Plus

SP55 Plus

SP75 Plus

CP80 Plus SD160

SD260

SD260L

SD360

SD460

CD800 CE840

CE870

FP65i

56 Specifications

Paper Sizes Supported by the Report Designer

Paper Size Size in Inches Size in Millimeters

Junior Legal 8 × 5 203 × 127

Government‐Letter 8 × 10.5 203 × 267

Letter 8.5 × 11 216 × 279

Legal 8.5 × 14 216 × 356

Tabloid 11 × 17 279 × 432

Ledger 17 × 11 432 × 279

A0 33.110 × 46.811 841 × 1189

A1 23.386 × 33.110 594 × 841

A2 16.535 × 23.386 420 × 594

A3 11.693 × 16.535 297 × 420

A4 8.268 × 11.693 210 × 297

A5 5.827 × 8.268 148 × 210

A6 4.134 × 5.827 105 × 148

A7 2.913 × 4.134 74 × 105

A8 2.047 × 2.913 52 × 74

Custom (User‐entered) (User‐entered)


Supported Photograph FormatsThe following formats are supported for photographs saved in 24‐bit RGB (color) format that do

not have transparency applied to them:

JPEG file interchange format (JPG)

Portable network graphics (PNG)

Tagged image file format (TIFF)

Windows bitmap (BMP)

Graphics interchange format (GIF) (non‐animated .gif files only)

Supported Capture Devices or Sources

Data Sources SupportedRefer to the product release documents for supported data sources.

1‐bit (monochrome) images and 32‐bit CMYK images are not supported by TruCredential software.

Photographs Signatures Documents Importing a file

Canon DSLR cameras

Microsoft video for Windows

TWAIN‐obtained scans

Topaz signature pad TWAIN‐obtained scans

The AssureID system

SnapShell R2

TruCredential software does not support views in any database.

58 Specifications

Bar Codes Supported

Bar Code Name Valid Characters Invalid Characters

Code 39 0123456789[Space]ABCDEFGHIJKLMNOPQRSTUVWXYZ‐.$/+%

@,!,~,#,^,&,*,(,),<,>,?,;,:,",',{,},[,],|,\,`,=,,,_

Code 39 extended 0123456789[Space]ABCDEFGHIJKLMNOPQRSTUVWXYZ!#$%&'()*+,‐./:;<=>?@[\]^_` abcdefghijklmnopqrstuvwxyz{|}

@,!,~,#,^,&,*,(,),<,>,?,;,:,",',{,},[,],|,\,`,=,,,_

Code 93 0123456789[Space]ABCDEFGHIJKLMNOPQRSTUVWXYZ‐.$/+%

@,!,~,#,^,&,*,(,),<,>,?,;,:,",',{,},[,],|,\,`,=,,,_

Code 93 extended 0123456789[Space]ABCDEFGHIJKLMNOPQRSTUVWXYZ‐.$/+%!#&'()*,:;<=>?@[\]^_` abcdefghijklmnopqrstuvwxyz{|}~

@,!,~,#,^,&,*,(,),<,>,?,;,:,",',{,},[,],|,\,`,=,,,_

Codabar 01234567890‐$:/.+ @,!,~,#,^,&,*,(,),<,>,?,;,%,",',{,},[,],|,\,`,=,,,_

EAN‐8 01234567890 All uppercase and all lowercase characters; all special symbols.

EAN‐13 01234567890

UPC‐A 01234567890

UPC‐E 01234567890

Code 128 ‐ Auto Nearly the complete ASCII character set including control characters.Code 128 A

Code 128 B

Code 128 C


Smart Card SupportSmart Chips Supported

TruCredential supports personalization, encoding, configuration, and adding a smart chip field to

the following smart cards:

MiFARE Classic

MiFARE DESFire EV1

HID Prox

IClass

Chip Readers Supported DUALi (single‐wire)

DUALi (two‐wire)

PCSC (SCM or Identiv and can be single‐wire or two‐wire)

RFIdeas

Proximity Card SupportProximity Cards Supported

iClass

Prox

Card Readers/Couplers Supported RFIdeas

60 Specifications

Chapter 11: Glossary

The following terms have specific meanings within the TruCredential

environment and in this document.

ABA. American Bankers Association.

AFIS. Automated fingerprint identification system.

APM. Access point manager.

ASCII (American Standard Code for Information Interchange). A standard for processing

information in computer processors. An 8‐bit character set of 255 decimal numbers, each

assigned to numbers, letters, punctuation, and special characters.

audit log. TruCredential creates audit logs containing detailed system behavior information for

use by Datacard technical personnel in troubleshooting any problems you may be having with

your system.

Background layer. When designing a credential, this is the layer that displays behind all other

layers. Often the background layer contains a solid color, a picture, or no content at all.

bar code. A series of alternating black and white stripes, of varying widths (each character

denoted by a set number and width of black stripes) that allows characters to be optically read by

a computer.

Black (K) layer. This layer uses the "K" panel of the printer's ribbon, which is typically, though not

always, black in color.

BMP. An image format.

card serial number (CSN). A unique number associated with a card. Typically card serial numbers

are printed on the card in human‐readable format, although sometimes they are located within a

smart chip or magnetic stripe that can only be read by a special card reader.

card stock. The actual cards that you are using to print the credential on. Some cards have special

features such as magnetic stripes, embedded circuits, or pre‐printing on them.

check in. The process of enrolling and issuing an access credential to a visitor, new employee, or

other type of credential applicant.


check out. The process of revoking access granted to a checked in visitor, employee, or other

person with an access credential.

checksum. Also called “check digit”, it’s an extra character added to a bar code to ensure its

accuracy.

Codabar. A bar code encoding type.

coercivity. (1) Also known as “coercive field”, coercivity is the measure of a ferroelectric/

ferromagnetic material’s ability to stand up to an external magnetic or electric force. It is

measured in ampere/meters or oersteds. (2) The property of a magnetic stripe that indicates the

amount of force required before magnetic saturation, measured in Oersted (Oe).

Color (YMC) layer. This is the default layer on the front side of the credential upon which the full‐

color design is done on a particular credential.

configured devices. Supported devices that have been configured and prioritized to work with a

TruCredential software installation.

CPI. Characters per inch.

CR. A card type.

CR‐100. A card dimension standard of 2.625 X 3.875 (+/‐0.002 W, +/‐ 0.005 L) or 66.675 X 98.425

mm.

CR‐79. A card dimension standard of 2.0625 L X 3.3125 W (+/‐0.002 W, +/‐0.005 L) or 52.400 X

84.150 mm.


mm.


mm.

credential. In this context, a card or badge that grants an individual the access rights to a location

such as an office building, credit or monetary charging rights, or other rights based on assertion

of their identity as verified by their possession of a card or badge.

credential design template. A credential design that is predefined with default fields. You can use

it as it is or modify it to suit your requirements.

CSN. See “card serial number”.

CSV file. A comma‐separated value file, meaning that a comma follows each piece of data.

CVC. Card verification code.

darkness. A reference to color saturation.

62 Glossary

data source type. A type of database used by a TruCredential software installation. For example,

Microsoft SQL Server or Oracle.

DCPL2. Datacard programming language 2.

dithering. (1) When an image is created semi‐transparently, either partially or in whole, by using

small dots of ink in varying densities. Dithering can be used to create a “gray‐scale” effect by

taking a single color and simply dithering it more to get lighter shades of it or less to get darker

shades to approximate the average level of that color in the original image. This dithering process

is what newspapers do to get rich depth in their images using just black ink. (2) A system of

distributing dots to control the hue, brightness, and/or saturation. In monochrome printing, this

controls the brightness. In color printing, dithering can supply a larger color gamut than non‐

dithering. In the driver, dither modes can be selected to provide better image quality depending

on the type of image to be printed.

dot pitch. A measurement of image sharpness denoting the width of the dots that makes up a

pixel. The smaller the pitch, the sharper the image.

dot. The smallest unit of an image that the printer is able to produce. The smaller the dot, see

dot pitch, the sharper the image.

DPI (dots per inch). A measurement of the printer resolution indicating how many dots a printer

can produce in a linear inch.

DTC. Direct‐to‐card.

DUALi. A manufacturer of smart cards and related products.

duplex printing. Personalization on the front and the back of the card.

E‐card. An abbreviation for electronic card. A generic term used to reference any card with built‐

in electronic devices such as smart cards or prox cards.

EAN‐8. An encoding type.

edge‐to‐edge. Refers to the maximum printable area on a card resulting in printed cards with

virtually no border.

emboss. The process and result of raising part of the surface of a credential off from the rest of

the surface to create raised lettering or design.

EMEA. Europe, Middle‐East, Africa.

encoder, smart card. An electro‐mechanical interface to transfer data from a computer to a chip

or magnetic stripe built into a card.

enroll. The process of making or accepting someone a member of, or participant in, something.


Enterprise edition. This is the top‐of‐the‐line version of TruCredential with all of the features of

the other editions plus support for 20 workflows, 100 session users, PACS integration, PeopleSoft

integration, and smart card configuration and support.

export. To transfer data into a format that can be used by another TruCredential installation.

Express edition. TruCredential’s basic edition, which supports one user per session, three

credential designs, and three workflow templates.

film. A thin flexible transparent sheet used to carry dye‐impregnated material or resin to be

transferred to the card.

FIPS. A card type; federal information processing standard.

font. A character set similar in style and form. Fonts can be graphical or mathematical constructs,

represented by a series of dots or an assembly of curves and lines.

FR. Facial recognition.

full bleed. Personalization that covers the entire card surface.

GIF. Graphics interchange format (a standard image format).

gray scale. A graduation through the various brightness levels from white to black.

halftoning. A process in monochrome printing that simulates continuous tone by using changes

to the distribution of single dots. Increasing the number of dots in a given area increases the

darkness even though the individual dots stay the same size.

HIBC. An encoding type.

HiCo (high coercivity). The coercivity value of magnetic media between 2500 ‐ 4000 Oe

(ISO 7811‐6). Most high coercivity cards are 2750 Oe.

HSC. See “hardware systems command”.

IAT. This is a format for the three‐track magnetic stripe on cards. It comprises the default data

formats—IATA, ABA, and TTS. This format is also called ISO format.

IATA. International Air Transport Association.

iClass chip. Embeddable read or write contactless smart card technology from HID. It can be used

for many applications, including personnel access control, public transportation, cashless

vending, biometrics, customer loyalty programs, and airline ticketing. A 13.56MHz chip.

ID (identification). An abbreviation for identification.

image. A collection of pictures or graphical elements that compose the visual features on a card.

Also refers to the digital representation.

64 Glossary

import. The process of taking in data in a special format that can be used by the TruCredential

installation.

indent. The process and result of lowering part of the surface of a credential off from the rest of

the surface to create a lowered lettering or design area.

inhibit (panel). The inhibit or I designation of a ribbon under YMCI, YMCKI, and YMCKIKI indicates

the ability to prevent the transfer of film to the card surface. Users can select these ribbon types

to prevent film from transferring over security features, signature panels, or other areas of

special interest on the card surface.

issue card. The process of actually making a credential available for use by an individual, such as

by handing it to them.

JPEG. Joint Photographic Export Group, an image format.

JPEG 2000. Joint Photographic Export Group, an image format.

K Panel. An area of a multicolored ribbon (for example, YMCK) that contains black resin for

transfer to the card surface. Also used in reference to the application of preference to items

printed on the card ‐ those using the black panel in lieu of a process (YMC) black.

lamination. The application of a film or resinous substance, fused by heat and pressure, to the

surface of a card.

Lamination layer. The top‐most layer that can be applied to a credential, the Lamination layer

serves both to protect the design underneath from tampering and to seal it from damage by the

elements.

landscape. A document layout that is viewed with the document’s long axis in a horizontal

orientation.

layer. A layer can be a color, such as black, or it could be something that is applied to a credential,

such as lamination or ultraviolet material.

LDAP. Lightweight Directory Access Protocol.

magnetic stripe (MS). (1) A band of material that can be placed on a credential to encode

information on the card. (2) An area of the card with an applied or impregnated ferrous material

that can hold encoded data through a series of prescribed polarity changes.

Magnetic Stripe layer. This layer symbolically represents the fact that the credential card stock

that is loaded into the credential printer contains a magnetic stripe and this layer is programmed

with the information that the printer must encode on that magnetic stripe and in what format.

MIFARE Classic card. A brand of smart card that is available with 1KB, 2KB, 4KB, and 8KB memory

capacities. Parameters and security settings for this card are configured using a workflow step

and the resulting data is made available in the system workflow.


monochrome. An image composed of a single color.

MS. Magnetic stripe.

network. A series of computers connected by data transfer cable for communication and sharing

of functions and peripherals.

NFC. Near‐field communication.

Non‐Printable Area layer. This layer supersedes all other layers and allows the designer to

designate areas where no printing on the card must be done, for example over a manual

signature line or a magnetic stripe.

non‐sponsored visitor. A visitor who does not have a sponsor but has a legitimate reason for

visiting.

PACS. Physical access control system.

PACS interface. The information required to connect to a physical access control system (PACS).

PCI. Payment card industry.

PCX. An image format.

peripheral. Any device that is attached externally to a computer. These often share the same

data cable or port as a printer and can be the source of communication problems.

PII. Personally identifiable information.

PIN. Personal identification number.

Plus edition. TruCredential’s second‐tier edition, which supports up to five users per session, six

credential designs, and six workflow templates. Additionally, it adds signature capture, Microsoft

SQL Server support, camera support, the ability to add and remove users, stock reports, and co‐

branding support.

PNG. Portable network graphic, an image format.

port. A communication interface, serial or parallel, used for the transference of data. Includes

USB and Ethernet.

portrait. A document layout that is viewed with the document’s long axis in a vertical

orientation.

pre‐enroll. The process of pre‐populating some of the data necessary for checking in an

applicant. For example, someone visiting a building can pre‐enroll to enter that building by

providing their name, address, and other information online before they arrive to save time at

check‐in.

66 Glossary

primary data source. The main data source to and from which all TruCredential software data is

written.

print driver. A software utility that serves as an interface between the printer and the Windows

GDI (Graphical Device Interface), making the printer’s functions available through the software

application. It also provides the format information for the rasterizing of the print file including

any necessary escape or function commands.

print job. A file of one or more cards for the printer to print, including image data and printer

functions, transmitted through the parallel interface and at times stored temporarily in the print

buffer and spooler.

print server. A device used to connect and control a printer on a network.

Professional edition. In addition to all of TruCredential Express and Plus features, the Professional

edition supports up to 25 users per session, 20 card designs, and ten workflow templates.

Additionally, it adds support for document capture, Oracle databases, and Active Directory

Service.

proximity (prox) card. Proximity cards allow access and tracking utilizing contactless technology,

usually by communicating through a built‐in antenna.

PSD. An image format.

publish. The process of preparing and manufacturing a completed credential.

queue. A sequence of files or sets of data awaiting transmission or processing.

re‐issue card. The process of issuing a credential to someone who was previously issued the

same credential, such as someone who lost or damaged it.

report. A list of visitors, employees, persons who were granted credentials, or another type of

chart providing data to a supervisor. Reports can be used for audit purposes.

resin. A semi‐solid material.

resolution. The number of individual pixels in a graphic, taken over a given length, used to

indicate the sharpness of the picture and the level of detail. The number of elements in the

printhead determines printer resolution.

saturation. A measure of the degree of color, from gray, with the same brightness.

SC. Smart card.

SID. Secure ID.

slap fingerprint scan. Also known as four‐finger simultaneous plain impressions. This refers to

scanning the fingerprints on all four fingers at once (one image) and then software separates the

image into different pictures for each finger.


smart card. (1) Any card, typically made of plastic, with embedded integrated circuits that

provides security authentication, identification, data storage, or application processing. Examples

are a chip card or integrated circuit card (ICC). (2) Smart cards have an embedded computer

circuit that contains either a memory chip or a microprocessor chip. There are several types of

Smart Cards: Memory, Contact, Contactless, Hybrid (Twin), Combi (Dual Interface), Proximity and

Vicinity.

SN. Serial number.

sponsored visitor. A visitor who is expected by someone who has already been issued access

credentials.

static text. Static text is text that does not change from credential to credential; every credential

you print from this credential design contains this text.

supported devices. Devices that are compatible with TruCredential software. Examples include

cameras, signature pads, document scanners, and chip card readers.

system dashboard. A display that shows the status and relevant metrics of the TruCredential

installation all in one reference place.

TAC (thermal acceptance composite) cards. Card stock produced by laminating sheets of PVC

with sheets of PET for better thermal distortion resistance. Ultra III cards.

template. An example that can be used to make similar or identical credentials or workflows in

the TruCredential software. See “credential template” or “workflow template”.

text. In contrast with static text, text can be changed with each printed credential. Examples of

text are a name, ID or account number, or telephone number.

TGA. An image format.

thin film overlaminate. A 0.25‐mil thick resin material that enhances credential security and

durability applied over the printed surface with a hot roller. Available as clear or with embedded

holographic‐type security images.

TIFF. An image format.

timeout. An interruption of a print job that occurs when a function is not completed in the time

allotted by the operating system.

token crop. “Token Crop” refers to processing a photographic image so that it can be used in

machine‐readable travel documents. These are covered by INCITS (International Committee for

Information Technology Standards) standards. In a sense, token crops are a sample of the whole

image.

Topcoat layer. A clear protective material that helps to protect a credential design from the

elements and from tampering.

68 Glossary

track. The area on a magnetic stripe designated to contain the magnetic data string.

track type. On a card with a magnetic stripe, the kind of track or stripe used. For example, NTT or

IAT.

TTS. Thrift Third Standard.

Ultraviolet (UV) layer. A transparent layer that contains material that reacts by changing color

under ultraviolet light. This is typically used as a security feature.

watch list. A list of persons who can not be granted access to a facility. AFIS is one example of a

watch list.

WMF. An image format.

workflow design. The process of defining the steps, in order, that the operators must take to

create a particular credential.

workflow template. A workflow that was pre‐designed with default steps. You can use it as it is or

modify it to suit your requirements.

zoom. You can zoom, or change the viewing magnification, from 100% to 500% of the actual

design size in 50% increments.


70 Glossary