With the vSEC:CMS User application it is possible for a user to perform advanced hardware credential management tasks in a straightforward automated fashion. The credentials can be smart cards, tokens (USB, RFID, NFC) , virtual credentials such as virtual smart cards and the popular Windows Hello for Business (WHfB). The credentials complete lifecycle is managed by the vSEC:CMS/vSEC:CLOUD server and includes self -service of PKI/PIV certificates, FIDO2 enrollment and management, PIN policies, PIN resets and much more. Users can for example do self-issuance of certificates, self-unblock, renewals and updates of credentials that are managed by vSEC:CMS. To perform these operations, it is necessary to enable them in the vSEC:CMS template server-side.

Change User PIN Offline Unblock User PIN (User Side) Certificate Listing Card Information Support for a large set of credentials (https://versasec.com/products/supported-smart-cards) Certificate and FIDO2 self-self service

vSEC:CMS User version 7.4 Release Date: 2026-06-18 Product News vSEC:CMS Identity Introducing vSEC:CMS Identity! vSEC:CMS Identity is an add-on MFA authentication server for vSEC:CMS and vSEC:CLOUD. Now, during issuance, a passkey can be generated in vSEC:CMS Identity and used for instant authentication. Short-lived Temporary Domain Passwords Due to having misplaced their hardware credential, users can now set a temporary password for their Domain accounts for short-term use. For example, in Smart Card Repository, search by CSN#, Key ID, Assigned ID, Status. Hybrid environments leveraging both Entra ID and Active Directorythat authenticate with a mix of PKI and FIDO2 can now issue certificates and passkeys using the Active Directory account as a base, and connect their Azure Entra ID tenant. No more duplicate user accounts, no more vulnerable workarounds. Setting up dual-credential security keys or smart cards has never been easier!