How to set up a CIS2 smartcard workstation

Please follow the guidance in sequence. For a full list of platforms compatible with Registration Authority (RA) software, check the Warrantied Environment Specification.

All users

These are the system requirements for an optimal smartcard workstation setup:

• Operating system: Windows 11 64-bit
• Browser: Edge or Chrome
• Smartcard reader: HID Global Omnikey 3121 USB smartcard reader

Registration Authority users 

Additional requirements for a workstation used for servicing or printing smartcards:

• Smartcard reader: secondary HID Global Omnikey 3121 USB smartcard reader
• Smartcard printer (optional): Magicard DoH 300 smartcard printer

To be able to access the newer, internet-facing parts of the Care Identity Service, the user will need to be able to access certain domains. There are also considerations for anyone using a web proxy or VPN.

Read our guidance for IT teams on allowing domains.

This is a mandatory requirement for setting up a workstation. Windows 10 does not install the older versions of .NET by default, but you cannot proceed without it. To check/install it:

• open Control Panel
• go to Programs > Programs and Features
• on the left, choose 'Turn Windows features on or off'
• check the box for .NET 4.8

Follow the supporting documentation for installing and configuring NHS Smartcard Connect, which also includes troubleshooting guidance for common issues.

Oberthur middleware is a mandatory installation for all machines.

The Idemia PIV minidriver is installed automatically via Windows Update (If enabled). If automatic Windows Update is disabled, you can install the middleware manually.

Download the manufacturer drivers for the NHS supported 3121 readers. To support all variants of the Omnikey 3121 smartcard reader, it is recommended to install both the HID Omnikey CCID and HID Global X-Chip driver (BU component). If you are using other smartcard readers to login with, install the manufacturer drivers for those smartcard readers. Find out how to update drivers for other smartcard readers.

Restart the machine to complete the setup process.

You only need to complete these extra steps if you are Registration Authority users - check whether this is you.

RA users who carry out smartcard management services will need to connect a secondary smartcard reader.

They also need to check and verify that the correct drivers are assigned to the secondary smartcard reader (see step 7).

See guidance on how to install smartcard printers.

For printing all smartcard versions with Smartcard Connect v4.1, you will need to make sure you have the latest printer smartcard reader driver.

Check and verify that the correct drivers are assigned to the printer in-built smartcard readers.

As smartcard authentication via CIS2 uses Smartcard Connect, there's no need to use the IA Registry Editor.

If you're having problems or need more help, go to our troubleshooting area.