Enroll a Derived PIV / Mobile PKI Credential

Add Derived PIV Credential

1. Log in to the Axiad Conductor portal.

2. Navigate to My Identities.

3. Click "Add Identity Device".

4. Select Mobile PKI or Derived PIV Credential from the list of authenticator types.

5. Click Next.

Notes: This enrollment page applies only to the Mobile PKI authenticator type. Other types, such as OTP token, Mobile OTP Token, and Axiad ID, follow a different flow.

6. Review the Pre-Enrollment Dialog

• Your sponsor PIV card must be physically inserted into a card reader connected to the computer you are using for this enrollment. The portal needs to detect it to proceed.

• The Axiad ID app must be installed on your mobile device.

• Click "Continue" to proceed to the next step.

Note: No sponsor configured? If your organization’s workflow is not configured with a sponsor, the pre-enrollment dialog will still appear, but without the PIV card icon. This is expected behavior – proceed normally through the same steps.

7. Wait for the Portal to Detect Your Card

The portal will now check for your connected PIV card. You will see an "Issuance In Progress" screen with a progress bar.

• Do not unplug your card reader or device during this step.

• Wait until the portal moves to the next screen automatically.

8. Enter Your PIV Card PIN

• Enter your current PIV Card PIN in the field provided.

• Click Submit.

9. Scan the QR Code

After proceeding, the device setup screen appears with a QR code displayed prominently.

iOS App Enrollment Steps

1. Open the Axiad ID app on your mobile phone and accept required permissions (camera, notifications).

2. In the app, tap Add Account from the menu and scanthe QR code to enroll the Derived PIV Credential or Mobile PKI and click on Done.

Scan failure? If the QR code does not scan: ensure you are inside the Axiad ID app (not the native camera), check that your screen brightness is high enough, and maintain a stable distance of 6–12 inches (15–30 cm). If the problem persists, click "Check out the documentation" in the pre-enrollment dialog or contact your IT support team.

3. After the successful scan, iOS will ask the user to allow “Axiad ID” to use Face ID. Select the Allow button. So you will be able to unlock your device with Face ID, or Fingerprint.

4. Certificate Enrolled Successfully finished, and you will see this certificate listed on your phone.

Android App Enrollment Steps

1. Open the Axiad ID app on your mobile phone and accept required permissions (camera, notifications).

2. In the app, tap Add Account from the menu and scan the QR code to enroll the Derived PIV Credential or Mobile PKI

3. The Install Certificate message will pop up, click on the okay button,

4. On the Choose certificate type, please ensure to keep the default “VPN or app certificate " selected. (Please do not change the certificate type.)  

5. On the next screen, name this certificate. Please ensure that you do not change the certificate name, and click on Ok. Please keep the default name, as it will help you disable or delete previous certificates if you have multiple certificates issued on the device.

6. Certificate Enrolled Successfully finished, and you will see this certificate listed on your phone.

7. Return to the Axiad Conductor portal in your browser and click on the Done button on the QR Code Scan screen.