Issue or remove an iPad in Care Identity Management

There are some steps the user, their local IT team and the Registration Authority must take before the iPad can be registered as an authenticator:

1. The device must have the NHS CIS2 app installed, either by the user or their local IT team. The app is only available on the Apple Business App store. If they have not been set up, the organisation must provide NHS CIS2 Authentication with its name and Apple ID by emailing [email protected]
2. The user must check that the iPad is not already registered. When they open the NHS CIS2 app:
   • if the first screen shows 'This device is not registered', they can begin the registration process
   • if the first screen shows 'This device is registered', they will need to request that the Registration Authority deregister the iPad for them (currently only possible in the Care Identity Service application)
3. The Registration Authority must check that their organisation has the ability to register iPads:
   • Go to the Mobile Device Details section towards the middle of the user's profile page and click refresh. If you see 'Register a device for this user, you can proceed with the registration.
   • If you do not see the option to register a device and you believe this option should be enabled, contact the NHS Digital National Service Desk.
4. The Registration Authority must arrange a meeting with the user, either face to face or via video call. The Registration Authority must be present in one of these ways when the iPad is registered.

From the Care Identity Management home page, choose 'Find an existing user'.

Enter the user's details and select 'Search'.

Choose 'View profile' on the right of the screen.

In the lower part of the user details screen, select the tab named 'Authenticators', and then select the 'Issue other authenticator' button.

On the 'Select authenticator type' screen, select 'iPad' and then the 'Continue' button.

You'll now see a screen with instructions on how to register the iPad. Most importantly, the user must have the NHS CIS2 app installed on the device. The app is free and available on the Apple Business store.

You'll need to be in the room with the user and the iPad, or able to video call the user. When you've read the instructions and you're both ready to proceed, select the button to 'Generate QR code'.

The QR code will now be shown.

The user now has 5 minutes to scan this code using the NHS CIS2 app. They will then need to follow the instructions they see on the iPad.

When they have successfully completed the process, you will not automatically see the screen change in Care Identity Management.

However, if you now return to the user's profile screen you should see the iPad shown in the list within the 'Authenticators' tab.

To test and demonstrate that the registration for iPad biometrics has been successful, the user needs to authenticate using their iPad.

From the user's profile, select the 'Authenticators' tab, find the iPad in the list and select 'Remove' on the right.

Select the box to confirm you want to remove the iPad, followed by the 'Remove authenticator' button.

Finally you'll see a message confirming that the iPad has been removed from the user's profile.