Operator Workflow

We recommend you follow this workflow to begin deploying and configuring Axiad Conductor features for your organization.

1. Configure Axiad Conductor for your Organization

1. Contact your purchasing department to determine your Axiad Conductor package.
2. For all packages other than PKIaaS:
   1. For Windows users, deploy Axiad AirLock 2.2 to your users' machines to enforce and control the rollout of multi-factor authentication in your environment. 
   2. If you're deploying connected devices (such as YubiKeys or smart cards), install Axiad WebPCSC on your users' computers.
   3. Depending on your organization's installation policies, install the Axiad Portal Extension on your users' chromium-based browser via GPOs, scripts, or any third-party package deployment solution.
   4. Install the Axiad ID mobile app to user devices by:
      • allowing individual users to download it to their device via the App Store or Google Play Store, 
      • using a Universal Endpoint Management solution, or
      • using a Mobile Device Management solution. 
        NOTE

        • Axiad WebPCSC and the Axiad Portal Extension only support standard configuration MSI options.
        • End users can install the Axiad Portal Extension and the Axiad ID mobile app themselves if your organization allows it.
3. For the Axiad PKIaaS package deployment options, contact the Axiad Customer Success team.

2. Check Your Devices

Before you begin using Axiad Conductor and its features, we recommend you perform the following device checks:

Proper YubiKey Insertion

1. Verify that your USB port works correctly by inserting a different device, such as a keyboard or mouse.
2. Ensure the gold plating on the device faces up, and insert your YubiKey into the USB port.
   
   TIP

   If your YubiKey has a gold circle on the top of the device, it should be visible from outside the machine once inserted.
3. Watch for intermittent flashing lights on the device.
4. If there are no flashing lights, and you verified the port itself is working as expected, try flipping the YubiKey over and reinserting that side.

3. Run the Required Local Services for Certificate-Based Credentials (Windows Only)

The following services must run locally for successful smart card processing:

• Certificate Propagation
• Smart Card
• Smart Card Removal Policy (optional)

For detailed documentation about running these services, see the following resources:

• Yubico's Smart Card Deployment guide
• Microsoft's Smart Card Technical Reference guide

4. Manage Users in your Organization

Below is a list of some of the things you can do within the Unified Portal's Help Desk:

1. Access the Help Desk User page to search for and view your users, their associated identity devices, and device statuses.
2. Enable or disable multiple devices at once.
3. Retrieve a Personal Unblocking Key (PUK) for a user.
4. Remove user security questions.
5. Change or reset identity device PINs.

5. Manage Devices and Credentials in your Organization

1. Enable or disable multiple devices.
2. Revoke multiple devices and credentials.
3. Unassign multiple tokens.
4. Run reports.