Prerequisites

• Employment must be started, e-identity cannot be issued until first employment date.
• RA Subscriber is not at the same physical location as the RA Local Officer.
• RA Subscriber must be prepared to receive the one-time password (OTP) via email when the e-identity is issued.

Validity time

• Minimum 1 years
• Default 2 years
• Maximum 3 years

Procedure

Enroll and sign the issued e-identity

1. Identify the RA Subscriber and search for the RA Subscriber in the system.
2. Verify that the RA Subscriber is entitled to a eID.
3. On the RA Subscriber's profile page, click Manage, and then click Enroll primary Yubikey.
   
   
4. In the Token template list, click Primary Yubikey eID remote LoA2.
   
5. In the Valid up until box, enter the validity time of the e-identity. See Validity time for possible values.
6. Optionally, you can add information about the RA Subscriber's identity card, such as type of identity card and reference number.
7. Click Execute.
8. Sign the task with your signature PIN.
9. Click Execute to send a one-time password to the RA Subscriber.
   • The one-time password is only valid for five (5) minutes, so make sure that the RA Subscriber is prepared before you click Execute.
   • The one-time password is sent to the email address registered for the RA Subscriber.