Register or remove a passkey in Care Identity Management
How to register a passkey as an authenticator, as an alternative to a smartcard, or remove a passkey from a user's profile.
Which roles can do this?
- Registration Authority Manager
- Registration Authority Agent (Advanced)
Before you start
You'll need to set up a meeting with your user, either via video or face-to-face. The passkey registration must be completed in your presence.
Register a passkey
From the Care Identity Management home page, choose 'Find an existing user'.

Enter the user's details and select 'Search'.

Choose 'View profile' on the right of the screen.

Go to the 'Authenticators' tab on the user's profile page and select 'Issue other authenticator'.

Select the 'Passkey' authenticator type and 'Continue'.

You'll now see a screen with instructions on how to register the passkey.

When you've read the instructions and are both ready to proceed, select 'Generate link'.

Copy the link and send it to the user by email, or paste it into the chat function of the video call software you are using.
When the user opens the link, they'll go through a series of registration steps on their device. You can see below how this might look on the user's device.



Finally a message will be displayed that the registration has been successful.

The user can now close the page.
The user profile page will now show that the user's device has been registered to the user.

Remove a passkey
From the user's profile, select the 'Authenticators' tab, find the passkey in the list and select 'Remove' on the right.

Select the box to confirm you want to remove the passkey, followed by the 'Remove authenticator' button.

Finally you'll see a message confirming that the passkey has been removed from the user's profile.

Last edited: 16 July 2025 11:16 am