Enrollment is an identity ceremony
The card must be issued to the intended person before fingerprint capture begins. Define who verifies identity, which evidence is accepted, whether enrollment is supervised and how an audit record is created without storing unnecessary biometric information.
What the user actually does
Products commonly request several touches so the card can create a usable template across finger placement and normal variation. Record median completion time, retries and failures in a pilot instead of relying only on a vendor demonstration.
Map every data transition
Document whether capture and template creation happen entirely on-card or involve an app, sleeve, reader or workstation. Verify temporary buffers, logs, backups and diagnostic data. The phrase “stays on the card” should describe the whole path, not only routine authentication.
Plan for people who cannot enroll
Dry skin, injury, disability or occupational wear can make enrollment unreliable. Provide an accessible alternative with an explicitly assessed assurance level; repeated failed attempts should not force users into an improvised help-desk bypass.
Reset and reassignment
A returned card should not be reassigned until credentials and biometric references are securely erased under a documented process. Lost cards should be revoked in the access or identity system even when fingerprint verification prevents ordinary misuse.
