Entrust® Adaptive Issuance™ Instant

ID Software Release Notes

This document provides information for Adaptive Issuance™ Instant ID Software.

This document includes:

l Instant ID Software Version 9.1.1 on the next page

o Introduction on the next page

o Fixed Issues on the next page

o Software Specifications on page 3

o Component Version Numbers on page 4

o Known Issues on page 5

o Limitations on page 7

o Frequently Asked Questions on page 8

l Instant ID Software Version 9.1 on page 10

o Introduction on page 10

o Fixed Issues on page 10

o Software Specifications on page 10

o Component Version Numbers on page 12

o Known Issues on page 13

o Limitations on page 15

o Frequently Asked Questions on page 16

l Instant ID Software Version 9.0.1 on page 17
o Introduction on page 18

o New Features on page 18

o Fixed Issues on page 19

o Software Specifications on page 19

o Component Version Numbers on page 20

o Known Issues on page 21

o Limitations on page 23

o Frequently Asked Questions on page 24

l Technical Support on page 25

© 2024 Entrust Corporation. All Rights Reserved 528192-001, Rev P

October 2024
Entrust® Adaptive Issuance™ Instant ID Software

Instant ID Software Version 9.1.1

This section provides product information for Entrust® Instant ID software, covering the 9.1.1
release.

Introduction
Instant ID software provides the ability to design credentials, maintain applicant information,
and issue credentials. Refer to the following documentation for more information on using
Instant ID software:

l Entrust Adaptive Issuance Instant ID Installation Guide, Part No. 528223, provides
instructions for installing and configuring Instant ID software.
l Entrust Adaptive Issuance Instant ID Online Help and Administrator’s Guide, Part No.
528224, provides instructions for using Instant ID software. It is available through the
Instant ID software user interface after installation.
l Datacard ID Works® to Instant ID Migration Guide, Part No. 528225, provides complete
instructions for migrating to Instant ID software from ID Works software.
l Entrust Adaptive Issuance Instant ID Developer’s Guide, Part No. 528226, provides
information about using custom scripts to create custom enrollment applications,
processes, or smart card key applications or plug-ins.
l Entrust Adaptive Issuance Instant ID Specifications Guide, Part No. 528227, describes the
software specifications, supported hardware, and edition descriptions for Instant ID
software.

Fixed Issues
l Fixed an issue where Instant ID software failed to upgrade due to incompatible special
characters in H2 database passwords. Passwords can now only include the following
supported characters: a-z, A-Z, 0-9 !@#$*_~,?;: . These characters also apply when
changing passwords in the UI.
l Fixed an issue where operators saw an "Access Denied" warning when viewing Web
Service data during enrollment loading.
l Fixed an issue where enrollment record previews did not reflect values from a web service
in data-driven designs, affecting unmapped fields or fields with no returned data. This
issue was limited to previews, and printing was unaffected.
l Fixed an issue where the Print Count field did not reflect the correct value when included in
a composite field and passed to a web service.

2
 Entrust® Adaptive Issuance™ Instant ID Software

Software Specifications
The information in this section reflects Instant ID software version 9.1.1.

Component Version

7.2, 7.2.x -> 7.3, 7.3.1, 7.3.2, 7.4, 7.4.1, 7.4.2, 7.5

7.3, 7.3.x -> 7.4, 7.4.1, 7.4.2, 7.5, 7.6, 7.6.1

7.4, 7.4.x -> 7.5, 7.6, 7.6.1, 7.7, 7.7.1

7.5 -> 7.6, 7.6.1, 7.7, 7.7.1, 7.8

7.6, 7.6.x -> 7.7, 7.7.1, 7.8, 7.9

7.7, 7.7.x -> 7.8, 7.9, 8.0

7.8 -> 7.9, 8.0, 8.0.1, 8.1

7.9, 7.9.X -> 8.0, 8.0.1, 8.1, 8.2

8.0, 8.0.X -> 8.1, 8.2, 8.3

8.1 -> 8.2, 8.3, 8.4

8.2 -> 8.3, 8.4, 8.5

8.3 -> 8.4, 8.5, 8.5.1

8.4 -> 8.5, 8.5.1, 8.6, 8.6.1

8.5 -> 8.5.1, 8.6, 8.6.1

8.5.1 -> 8.6, 8.6.1,8.7, 8.8, 8.8.1

8.6 -> 8.6.1, 8.7, 8.8, 8.8.1

8.6.1 -> 8.7, 8.8

3
Entrust® Adaptive Issuance™ Instant ID Software

Component Version

8.7 -> 8.8, 8.8.1, 9.0, 9.0.1

8.8 -> 9.0, 9.0.1, 9.1

9.0 -> 9.0.1, 9.1, 9.1.1

9.0.1 -> 9.1 > 9.1.1

9.1 -> 9.1.1

Component Version Numbers

Major components for this release are listed in the following table:

Component Version

Entrust® Adaptive Issuance™ Instant ID Software 9.1.1

Desktop Printer Interface software (DPI) 3.5.0

Entrust Chip Interface Lite software 8.3.0

Datacard Capture Manager™ software 8.7

Datacard Software Licensing System 1.3.0

JRE (OpenJDK) 17.0

Apache Tomcat software 10.1.13

Supported Operating Systems

Instant ID software supports the following 64-bit operating systems:

l Microsoft Windows 10
l Microsoft Windows 11
l Microsoft Windows Server 2016

4
 Entrust® Adaptive Issuance™ Instant ID Software

l Microsoft Windows Server 2019

l Microsoft Windows Server 2022

The latest service pack is recommended.

Browser Support Notice

Instant ID no longer supports Internet Explorer 11.

Database Support Notice

Instant ID software no longer supports Oracle 12c database.

Known Issues
This section describes known issues in Instant ID software version 9.1.1.

l Due to network issues, smart card operations in a client/server installation With a 2-wire
USB printer might timeout causing an error titled ICP002. (19102)
Workaround: Follow these steps to increase the timeout value for smart card operations:
a. Create a file named com.datacard.issuance.scdi.foundation.properties in INSTALL
PATH\TruCredential\webapps-dc\scdi-ws\WEB-INF\classes\ on the client computer.
b. Add the following entry to the file:
c. scdi.client.commandTimeoutMs=20000
d. Save the file.
e. Restart Datacard Software service on the client computer.
Note: This is only one possible cause for an ICP002 error. If you continue to have
issues, contact Technical Support.
l With a virtual private network (VPN) enabled, Instant ID software has limited
communication with printers configured on Instant ID software clients and might report
false statuses for print jobs due to intermittent network connectivity. (288)
Workaround: Restart TruCredential software service.
l Instant ID software logs out the user when on the Credential Designer or Workflow
Designer due to session timeout even though the user has been active. (17814)
Workaround: Increase the session timeout.
l Due to browser caching, the Instant ID login screen may reload multiple times while
signing in.
Workaround: Clear the browser cache, or use Incognito (Google Chrome) mode.
l Due to a port conflict issue with Windows services, Instant ID might not be accessible after
installation, service restart, or system restart and might give '404 Not Found' error on
browser and below error message in the Catalina log file under <INSTALL_
PATH>\Datacard\TruCredential\logs\catalina.{date}.log file.
Error: 'Failed to create server shutdown socket on address [localhost] and port [8005]
java.net.BindException: Address already in use: JVM_Bind'

5
Entrust® Adaptive Issuance™ Instant ID Software

Workaround: Edit the server.xml file present at <INSTALL_

PATH>\Datacard\TruCredential\conf\server.xml, change the shutdown port from 8005 to
any other available port on the system (8006 is suggested) and save and restart Instant ID
software service.
Refer to Application Access or Startup Issues on page 54 of the Instant ID Installation
Guide for instructions on using alternate port 8006.
Printing might fail due to network latency with error: “Could not establish a trusted
connection with the device.” Input/Output error: “Read timed out, nested exception is
javax.net.ssl”. SSLException: “Read timed out.”
Workaround: Follow below steps to increase the timeout:
a. Go to INSTALL PATH\TruCredential\webapps-dc\dcpi-ws\WEB-INF\classes\
b. Open application.properties, update below properties:
o http.socket.timeout=120

o http.connection.timeout=10

o http.connection.request.timeout=20
c. Save and close the file.
d. Stop and start Instant ID software service.
l Instant ID reports error when the Codabar barcode is added to the card that contains A-D
start/end characters.
Workaround: Users don’t need to type in the “A” start/stop character as it is added
automatically.
l Customer reported that the H2 Database size continues to grow despite using the H2 Trim
tool daily.
Workaround: If the customer is not using the default credentials design template, the TRU
files, located at C:\ProgramFiles\Datacard\TruCredential\DefaultCredentialTemplates,
must be moved to a folder outside an Instant ID file directory or deleted.
l The login might fail if the user tries to log into Instant ID with a browser window opened
from the time before upgrade.
Workaround: After the Instant ID upgrade, close the previously opened browser window,
access the Instant ID URL in your browser, and try to log in again.
l Field connections for workflows created using the 'Save as' functionality might not work
properly.
Workaround: Disconnect all the field connections using the 'Disconnect All' button and
then create the required field connections again.
l Instant ID uninstallation might be slow and take up to 15 minutes.
l Audit entries for Credential Designer, Workflow Design and Field Connections are
removed to avoid errors at runtime.
l With h2_2x version the TRUCREDENTIAL service at startup expects the database file
(.mv) to be already present. Deleting the db folder, and then restarting will not work further.
l Upgrading from the previous build to Instant ID 9.0 might be slow.

6
 Entrust® Adaptive Issuance™ Instant ID Software

l While using the card preview API, color images on non-color layers will preview with
colors.
l Felica profiles might not work properly and may give some errors.
l H2 Service may become unresponsive when attempting manual shutdown, leading to a
state where it fails to stop.
l Uninstalling Instant ID may sometimes show an error message for not removing a registry
key.
Workaround: Click Done and continue with the uninstallation.
l Configuring a password-protected Microsoft Access database as external datasource may
fail.
l Data_ENCRYPT mode is no longer supported with Open JDK 11 onwards for DB2 version
11.x and must use SSL.
l Smart Card batch printing may cause the printer to appear stuck in a busy state and push a
C5 error.
Workaround:
a. Navigate to (Installation Location)/webapps-dc/dcpi-ws/WEB-INF/classes.
b. Open the com.datacard.issuance.scdi.foundation.properties file.
c. Update the following SCDI properties:
o scdi.dualiCardConnectRetries=2

o scdi.dualiCardConnectRetryDelay=700

d. Restart TRUCREDENTIAL service.

l Network printing for Mifare Desfire EV1/EV2 cards could slow printing completion.
Workaround:
a. Navigate to (Installation Location)/webapps-dc/dcpi-ws/WEB-INF/classes.
b. Open the com.datacard.issuance.scdi.foundation.properties file.
c. Add "scdi.mode=IID" at the end of file.
d. d. Restart TRUCREDENTIAL service.
l Logging into Instant ID (with SSO enabled) and using a fully qualified domain name
(FQDN) in the URL could display an authentication error.
Workaround: Add “login.html” to the end of the URL. For example:
https://<computer-name>.<domain-name>:<port-no>/trucredential/login.html?
This way of accessing will adhere to all security and SSO standards.

Limitations
The following limitations to Instant ID software may cause issues when using Instant ID
software:

l Instant ID software does not currently support Capture Tower.

l When a user password is changed, then the old password will continue to work until
Instant ID software services are restarted.

7
Entrust® Adaptive Issuance™ Instant ID Software

l Communication between Capture Manager and Instant ID software might be exposed to

security threats. To secure communication between Instant ID software and Capture
Manager, generate a certificate and configure Instant ID software to communicate with
Capture Manager over HTTPS.
l Print jobs with smart card operations might fail if communication between the proximity
card reader and the smart card reader fails. Contact Entrust Datacard technical service.
Refer to “Technical Support” on page 10 for technical support contact information. (61)
l Signatures saved in WMF format do not display in report queries until they have been
displayed in a workflow (where they are converted to SVG). They do not display in PDF
reports. (5098)
l When the Instant ID software Java.exe file is blocked by antivirus software, Instant ID
software fails to print a credential. Add an exception for the executable file to the antivirus
scan. (228)
l Installation might be slow over a network or when a virus scan is enabled. (11532)
l Instant ID fails to print if the printer name contains non-English characters. (422)
l Instant ID no longer provides default support for MySQL databases, although the support
can be added manually with these steps:
a. Download MySQL database connector library “mysql-connector-java-8.0.28.jar” or
the latest version.
b. b. Place the jar file under
<InstallDir>\Datacard\TruCredential\webapps\trucredential\WEB-INF\lib\.
c. Stop and start Instant ID software service.
l Instant ID software might show the status of a Smart Card print job (with write operation) as
completed, even when the printing fails due to any issue, such as a ribbon issue, etc., on
the printer.

Frequently Asked Questions

What is Supported?
Question: Does Instant ID software support databases hosted in cloud storage?

(14057990)

Answer: No, this has not been tested by Entrust.

Question: Does Instant ID software support manual duplex printing, in which cards are flipped
over by hand? (14647308)

Answer: This is a feature of some printers. If a particular printer supports manual duple
printing, then Adaptive Issuance™ Instant ID Software supports it.

8
 Entrust® Adaptive Issuance™ Instant ID Software

Smart Card-Related Questions

Question: In a 1-wire network-connected printer configuration, what smart card readers can I
use? (15270854)

Answer: Instant ID software supports DUALi and HID OmniKey smart card readers in a 1-wire
configuration. All other reader types (codes S1-S12) require a two-wire connection, including a
USB connection to the reader. For more information, refer to the Entrust Instant ID Installation
and Administration Guide.

Messages
Question: During an external database write operation, I got the following message: “The
system did not complete the task due to an unexpected error. Contact your Instant ID software
administrator for assistance.” What can be the cause? (15271747)

Answer: Check the trucredential-stdout.{date] logs under INSTALL_

PATH\Datacard\TruCredential\logs. Often this is a database error caused by a “not null”
column that was not updated by the system during an insert. The external database Write
operation determines whether to insert or update the database. This may work on database
inserts but not on updates.

Printing-Related Questions
Question: Why is the print count that displays in the workflow different from that

shown in the preview?

Answer: The two print count values are different until you click Personalize. The current print
count that shows in the workflow is what the database print count value is equal to at the
current time. It is updated to the number shown in the preview after you click Personalize.

Question: I was not able to print to both sides of the credential: the front design printed on one
card and the back on a second card. What can cause this?

Answer: This can happen if the Windows Instant ID Service is configured as a member of the
local Administrators group. Configure the Local System account. It can also happen if certain
printers are connected by USB cable rather than by a network connection. It can also happen if
Windows printing preferences are not set for your card. To correctly set the printer preferences
for USB-connected printers:

1. Click Start > Devices and Printers to open the Windows Devices and Printers window.
2. Right-click the printer name and select Printing preferences.
3. On the Layout or Finishing tab, enable Print on Both Sides.
4. Click the Advanced button and set the options Apply the Laminator material1 and Apply
the Laminator material 2 to Do not apply. (For third-party printers with laminators)
5. Click Apply.

9
Entrust® Adaptive Issuance™ Instant ID Software

Instant ID Software Version 9.1

This section provides product information for Entrust® Instant ID software, covering the 9.1
release.

Introduction
Instant ID software provides the ability to design credentials, maintain applicant information,
and issue credentials. Refer to the following documentation for more information on using
Instant ID software:

l Entrust Adaptive Issuance Instant ID Installation Guide, Part No. 528223, provides
instructions for installing and configuring Instant ID software.
l Entrust Adaptive Issuance Instant ID Online Help and Administrator’s Guide, Part No.
528224, provides instructions for using Instant ID software. It is available through the
Instant ID software user interface after installation.
l Datacard ID Works® to Instant ID Migration Guide, Part No. 528225, provides complete
instructions for migrating to Instant ID software from ID Works software.
l Entrust Adaptive Issuance Instant ID Developer’s Guide, Part No. 528226, provides
information about using custom scripts to create custom enrollment applications,
processes, or smart card key applications or plug-ins.
l Entrust Adaptive Issuance Instant ID Specifications Guide, Part No. 528227, describes the
software specifications, supported hardware, and edition descriptions for Instant ID
software.

Fixed Issues
l Fixed a Desfire EV1/EV2 issue where the UID value present in the database didn't match
with the value present in trace.
l Fixed an API printing issue on the upgrade from 9.0 to 9.0.1.
l Added SQL Server 2022 support.
l Fixed an issue where the database cleaner utility failed due to special characters in the
database password.

Software Specifications
The information in this section reflects Instant ID software version 9.1.

10
 Entrust® Adaptive Issuance™ Instant ID Software

Component Version

7.2, 7.2.x -> 7.3, 7.3.1, 7.3.2, 7.4, 7.4.1, 7.4.2, 7.5

7.3, 7.3.x -> 7.4, 7.4.1, 7.4.2, 7.5, 7.6, 7.6.1

7.4, 7.4.x -> 7.5, 7.6, 7.6.1, 7.7, 7.7.1

7.5 -> 7.6, 7.6.1, 7.7, 7.7.1, 7.8

7.6, 7.6.x -> 7.7, 7.7.1, 7.8, 7.9

7.7, 7.7.x -> 7.8, 7.9, 8.0

7.8 -> 7.9, 8.0, 8.0.1, 8.1

7.9, 7.9.X -> 8.0, 8.0.1, 8.1, 8.2

8.0, 8.0.X -> 8.1, 8.2, 8.3

8.1 -> 8.2, 8.3, 8.4

8.2 -> 8.3, 8.4, 8.5

8.3 -> 8.4, 8.5, 8.5.1

8.4 -> 8.5, 8.5.1, 8.6, 8.6.1

8.5 -> 8.5.1, 8.6, 8.6.1

8.5.1 -> 8.6, 8.6.1,8.7, 8.8, 8.8.1

8.6 -> 8.6.1, 8.7, 8.8, 8.8.1

8.6.1 -> 8.7, 8.8

8.7 -> 8.8, 8.8.1, 9.0, 9.0.1

11
Entrust® Adaptive Issuance™ Instant ID Software

Component Version

8.8 -> 9.0, 9.0.1, 9.1

9.0 -> 9.0.1, 9.1

9.0.1 -> 9.1

Component Version Numbers

Major components for this release are listed in the following table:

Component Version

Entrust® Adaptive Issuance™ Instant ID Software 9.1

Desktop Printer Interface software (DPI) 3.5.0

Entrust Chip Interface Lite software 8.3.0

Datacard Capture Manager™ software 8.7

Datacard Software Licensing System 1.3.0

JRE (OpenJDK) 17.0

Apache Tomcat software 10.1.13

Supported Operating Systems

Instant ID software supports the following 64-bit operating systems:

l Microsoft Windows 10
l Microsoft Windows 11
l Microsoft Windows Server 2016
l Microsoft Windows Server 2019
l Microsoft Windows Server 2022

The latest service pack is recommended.

12
 Entrust® Adaptive Issuance™ Instant ID Software

Browser Support Notice

Instant ID no longer supports Internet Explorer 11.

Database Support Notice

Instant ID software no longer supports Oracle 12c database.

Known Issues
This section describes known issues in Instant ID software version 9.1.

l Due to network issues, smart card operations in a client/server installation With a 2-wire
USB printer might timeout causing an error titled ICP002. (19102)
Workaround: Follow these steps to increase the timeout value for smart card operations:
a. Create a file named com.datacard.issuance.scdi.foundation.properties in INSTALL
PATH\TruCredential\webapps-dc\scdi-ws\WEB-INF\classes\ on the client computer.
b. Add the following entry to the file:
c. scdi.client.commandTimeoutMs=20000
d. Save the file.
e. Restart Datacard Software service on the client computer.
Note: This is only one possible cause for an ICP002 error. If you continue to have
issues, contact Technical Support.
l With a virtual private network (VPN) enabled, Instant ID software has limited
communication with printers configured on Instant ID software clients and might report
false statuses for print jobs due to intermittent network connectivity. (288)
Workaround: Restart TruCredential software service.
l Instant ID software logs out the user when on the Credential Designer or Workflow
Designer due to session timeout even though the user has been active. (17814)
Workaround: Increase the session timeout.
l Due to browser caching, the Instant ID login screen may reload multiple times while
signing in.
Workaround: Clear the browser cache, or use Incognito (Google Chrome) mode.
l Due to a port conflict issue with Windows services, Instant ID might not be accessible after
installation, service restart, or system restart and might give '404 Not Found' error on
browser and below error message in the Catalina log file under <INSTALL_
PATH>\Datacard\TruCredential\logs\catalina.{date}.log file.
Error: 'Failed to create server shutdown socket on address [localhost] and port [8005]
java.net.BindException: Address already in use: JVM_Bind'
Workaround: Edit the server.xml file present at <INSTALL_
PATH>\Datacard\TruCredential\conf\server.xml, change the shutdown port from 8005 to
any other available port on the system (8006 is suggested) and save and restart Instant ID
software service.

13
Entrust® Adaptive Issuance™ Instant ID Software

Refer to Application Access or Startup Issues on page 54 of the Instant ID Installation

Guide for instructions on using alternate port 8006.
Printing might fail due to network latency with error: “Could not establish a trusted
connection with the device.” Input/Output error: “Read timed out, nested exception is
javax.net.ssl”. SSLException: “Read timed out.”
Workaround: Follow below steps to increase the timeout:
a. Go to INSTALL PATH\TruCredential\webapps-dc\dcpi-ws\WEB-INF\classes\
b. Open application.properties, update below properties:
o http.socket.timeout=120

o http.connection.timeout=10

o http.connection.request.timeout=20

c. Save and close the file.

d. Stop and start Instant ID software service.
l Instant ID reports error when the Codabar barcode is added to the card that contains A-D
start/end characters.
Workaround: Users don’t need to type in the “A” start/stop character as it is added
automatically.
l Customer reported that the H2 Database size continues to grow despite using the H2 Trim
tool daily.
Workaround: If the customer is not using the default credentials design template, the TRU
files, located at C:\ProgramFiles\Datacard\TruCredential\DefaultCredentialTemplates,
must be moved to a folder outside an Instant ID file directory or deleted.
l The login might fail if the user tries to log into Instant ID with a browser window opened
from the time before upgrade.
Workaround: After the Instant ID upgrade, close the previously opened browser window,
access the Instant ID URL in your browser, and try to log in again.
l Field connections for workflows created using the 'Save as' functionality might not work
properly.
Workaround: Disconnect all the field connections using the 'Disconnect All' button and
then create the required field connections again.
l Instant ID uninstallation might be slow and take up to 15 minutes.
l Audit entries for Credential Designer, Workflow Design and Field Connections are
removed to avoid errors at runtime.
l With h2_2x version the TRUCREDENTIAL service at startup expects the database file
(.mv) to be already present. Deleting the db folder, and then restarting will not work further.
l Upgrading from the previous build to Instant ID 9.0 might be slow.
l While using the card preview API, color images on non-color layers will preview with
colors.
l Felica profiles might not work properly and may give some errors.
l H2 Service may become unresponsive when attempting manual shutdown, leading to a
state where it fails to stop.

14
 Entrust® Adaptive Issuance™ Instant ID Software

l Uninstalling Instant ID may sometimes show an error message for not removing a registry
key.
Workaround: Click Done and continue with the uninstallation.
l Configuring a password-protected Microsoft Access database as external datasource may
fail.
l Data_ENCRYPT mode is no longer supported with Open JDK 11 onwards for DB2 version
11.x and must use SSL.
l Smart Card batch printing may cause the printer to appear stuck in a busy state and push a
C5 error.
Workaround:
a. Navigate to (Installation Location)/webapps-dc/dcpi-ws/WEB-INF/classes.
b. Open the com.datacard.issuance.scdi.foundation.properties file.
c. Update the following SCDI properties:
o scdi.dualiCardConnectRetries=2

o scdi.dualiCardConnectRetryDelay=700
d. Restart TRUCREDENTIAL service.
l Network printing for Mifare Desfire EV1/EV2 cards could slow printing completion.
Workaround:
a. Navigate to (Installation Location)/webapps-dc/dcpi-ws/WEB-INF/classes.
b. Open the com.datacard.issuance.scdi.foundation.properties file.
c. Add "scdi.mode=IID" at the end of file.
d. d. Restart TRUCREDENTIAL service.
l Logging into Instant ID (with SSO enabled) and using a fully qualified domain name
(FQDN) in the URL could display an authentication error.
Workaround: Add “login.html” to the end of the URL. For example:
https://<computer-name>.<domain-name>:<port-no>/trucredential/login.html?
This way of accessing will adhere to all security and SSO standards.

Limitations
The following limitations to Instant ID software may cause issues when using Instant ID

software:

l Instant ID software does not currently support Capture Tower.

l When a user password is changed, then the old password will continue to work until
Instant ID software services are restarted.
l Communication between Capture Manager and Instant ID software might be exposed to
security threats. To secure communication between Instant ID software and Capture
Manager, generate a certificate and configure Instant ID software to communicate with
Capture Manager over HTTPS.

15
Entrust® Adaptive Issuance™ Instant ID Software

l Print jobs with smart card operations might fail if communication between the proximity
card reader and the smart card reader fails. Contact Entrust Datacard technical service.
Refer to “Technical Support” on page 10 for technical support contact information. (61)
l Signatures saved in WMF format do not display in report queries until they have been
displayed in a workflow (where they are converted to SVG). They do not display in PDF
reports. (5098)
l When the Instant ID software Java.exe file is blocked by antivirus software, Instant ID
software fails to print a credential. Add an exception for the executable file to the antivirus
scan. (228)
l Installation might be slow over a network or when a virus scan is enabled. (11532)
l Instant ID fails to print if the printer name contains non-English characters. (422)
l Instant ID no longer provides default support for MySQL databases, although the support
can be added manually with these steps:
a. Download MySQL database connector library “mysql-connector-java-8.0.28.jar” or
the latest version.
b. b. Place the jar file under
<InstallDir>\Datacard\TruCredential\webapps\trucredential\WEB-INF\lib\.
c. Stop and start Instant ID software service.
l Instant ID software might show the status of a Smart Card print job (with write operation) as
completed, even when the printing fails due to any issue, such as a ribbon issue, etc., on
the printer.

Frequently Asked Questions

What is Supported?
Question: Does Instant ID software support databases hosted in cloud storage?

(14057990)

Answer: No, this has not been tested by Entrust.

Question: Does Instant ID software support manual duplex printing, in which cards are flipped
over by hand? (14647308)

Answer: This is a feature of some printers. If a particular printer supports manual duple
printing, then Adaptive Issuance™ Instant ID Software supports it.

Smart Card-Related Questions

Question: In a 1-wire network-connected printer configuration, what smart card readers can I
use? (15270854)

Answer: Instant ID software supports DUALi and HID OmniKey smart card readers in a 1-wire
configuration. All other reader types (codes S1-S12) require a two-wire connection, including a

16
 Entrust® Adaptive Issuance™ Instant ID Software

USB connection to the reader. For more information, refer to the Entrust Instant ID Installation
and Administration Guide.

Messages
Question: During an external database write operation, I got the following message: “The
system did not complete the task due to an unexpected error. Contact your Instant ID software
administrator for assistance.” What can be the cause? (15271747)

Answer: Check the trucredential-stdout.{date] logs under INSTALL_

PATH\Datacard\TruCredential\logs. Often this is a database error caused by a “not null”
column that was not updated by the system during an insert. The external database Write
operation determines whether to insert or update the database. This may work on database
inserts but not on updates.

Printing-Related Questions
Question: Why is the print count that displays in the workflow different from that

shown in the preview?

Answer: The two print count values are different until you click Personalize. The current print
count that shows in the workflow is what the database print count value is equal to at the
current time. It is updated to the number shown in the preview after you click Personalize.

Question: I was not able to print to both sides of the credential: the front design printed on one
card and the back on a second card. What can cause this?

Answer: This can happen if the Windows Instant ID Service is configured as a member of the
local Administrators group. Configure the Local System account. It can also happen if certain
printers are connected by USB cable rather than by a network connection. It can also happen if
Windows printing preferences are not set for your card. To correctly set the printer preferences
for USB-connected printers:

1. Click Start > Devices and Printers to open the Windows Devices and Printers window.
2. Right-click the printer name and select Printing preferences.
3. On the Layout or Finishing tab, enable Print on Both Sides.
4. Click the Advanced button and set the options Apply the Laminator material1 and Apply
the Laminator material 2 to Do not apply. (For third-party printers with laminators)
5. Click Apply.

Instant ID Software Version 9.0.1

This section provides product information for Entrust® Instant ID software, covering the 9.0.1
release.

17
Entrust® Adaptive Issuance™ Instant ID Software

Introduction
Instant ID software provides the ability to design credentials, maintain applicant information,
and issue credentials. Refer to the following documentation for more information on using
Instant ID software:

l Entrust Adaptive Issuance Instant ID Installation Guide, Part No. 528223, provides
instructions for installing and configuring Instant ID software.
l Entrust Adaptive Issuance Instant ID Online Help and Administrator’s Guide, Part No.
528224, provides instructions for using Instant ID software. It is available through the
Instant ID software user interface after installation.
l Datacard ID Works® to Instant ID Migration Guide, Part No. 528225, provides complete
instructions for migrating to Instant ID software from ID Works software.
l Entrust Adaptive Issuance Instant ID Developer’s Guide, Part No. 528226, provides
information about using custom scripts to create custom enrollment applications,
processes, or smart card key applications or plug-ins.
l Entrust Adaptive Issuance Instant ID Specifications Guide, Part No. 528227, describes the
software specifications, supported hardware, and edition descriptions for Instant ID
software.

New Features
Added Support for License Expiry message via API
Instant ID software provides support to track license expiry data via API call.

Code 39 with Checksum Mod 43

Instant ID software now supports Mod 43 checksum drop-down for the Code 39 bar code.

Removed Legacy Printer Support

Instant ID software no longer supports SP25+, SP35+, SP55+, SP75+, CP40+, CP60+,
CP80+, and FP65i printers.

Web Browser Camera Support for Chrome and Edge

Instant ID software supports camera configurations for Google Chrome and Microsoft. Edge
web browsers for capturing an image without Capture Manager software.

18
 Entrust® Adaptive Issuance™ Instant ID Software

Fixed Issues
l The product key was disappearing from the license server after a system reboot.
l Previously unable to use Oracle 19c with the TH8TISASCII character set.
l Previously experienced date field issues when using the custom tool kit.
l The UI was previously populating wrong results while navigating through the “Next” or
“Previous” buttons on the Enrollment page.

Software Specifications
The information in this section reflects Instant ID software version 9.0.1

Component Version

7.2, 7.2.x -> 7.3, 7.3.1, 7.3.2, 7.4, 7.4.1, 7.4.2, 7.5

7.3, 7.3.x -> 7.4, 7.4.1, 7.4.2, 7.5, 7.6, 7.6.1

7.4, 7.4.x -> 7.5, 7.6, 7.6.1, 7.7, 7.7.1

7.5 -> 7.6, 7.6.1, 7.7, 7.7.1, 7.8

7.6, 7.6.x -> 7.7, 7.7.1, 7.8, 7.9

7.7, 7.7.x -> 7.8, 7.9, 8.0

7.8 -> 7.9, 8.0, 8.0.1, 8.1

7.9, 7.9.X -> 8.0, 8.0.1, 8.1, 8.2

8.0, 8.0.X -> 8.1, 8.2, 8.3

8.1 -> 8.2, 8.3, 8.4

8.2 -> 8.3, 8.4, 8.5

8.3 -> 8.4, 8.5, 8.5.1

19
Entrust® Adaptive Issuance™ Instant ID Software

Component Version

8.4 -> 8.5, 8.5.1, 8.6, 8.6.1

8.5 -> 8.5.1, 8.6, 8.6.1

8.5.1 -> 8.6, 8.6.1,8.7, 8.8, 8.8.1

8.6 -> 8.6.1, 8.7, 8.8, 8.8.1

8.6.1 -> 8.7, 8.8

8.7 -> 8.8, 8.8.1, 9.0, 9.0.1

8.8 -> 9.0, 9.0.1

9.0 -> 9.0.1

Component Version Numbers

Major components for this release are listed in the following table:

Component Version

Entrust® Adaptive Issuance™ Instant ID Software 9.0.1

Desktop Printer Interface software (DPI) 3.2.1

Entrust Chip Interface Lite software 8.3.0

Datacard Capture Manager™ software 8.7

Datacard Software Licensing System 1.3.0

JRE (OpenJDK) 17.0

Apache Tomcat software 10.1.13

20
 Entrust® Adaptive Issuance™ Instant ID Software

Supported Operating Systems

Instant ID software supports the following 64-bit operating systems:

l Microsoft Windows 10
l Microsoft Windows 11
l Microsoft Windows Server 2016
l Microsoft Windows Server 2019
l Microsoft Windows Server 2022

The latest service pack is recommended.

Browser Support Notice

Instant ID no longer supports Internet Explorer 11.

Database Support Notice

Instant ID software no longer supports Oracle 12c database.

Known Issues
This section describes known issues in Instant ID software version 9.0.1.

l Due to network issues, smart card operations in a client/server installation With a 2-wire
USB printer might timeout causing an error titled ICP002. (19102)
Workaround: Follow these steps to increase the timeout value for smart card operations:
a. Create a file named com.datacard.issuance.scdi.foundation.properties in INSTALL
PATH\TruCredential\webapps-dc\scdi-ws\WEB-INF\classes\ on the client computer.
b. Add the following entry to the file:
c. scdi.client.commandTimeoutMs=20000
d. Save the file.
e. Restart Datacard Software service on the client computer.
Note: This is only one possible cause for an ICP002 error. If you continue to have
issues, contact Technical Support.
l With a virtual private network (VPN) enabled, Instant ID software has limited
communication with printers configured on Instant ID software clients and might report
false statuses for print jobs due to intermittent network connectivity. (288)
Workaround: Restart TruCredential software service.
l Instant ID software logs out the user when on the Credential Designer or Workflow
Designer due to session timeout even though the user has been active. (17814)
Workaround: Increase the session timeout.
l Due to browser caching, the Instant ID login screen may reload multiple times while
signing in.

21
Entrust® Adaptive Issuance™ Instant ID Software

Workaround: Clear the browser cache, or use Incognito (Google Chrome) mode.
l Due to a port conflict issue with Windows services, Instant ID might not be accessible after
installation, service restart, or system restart and might give '404 Not Found' error on
browser and below error message in the Catalina log file under <INSTALL_
PATH>\Datacard\TruCredential\logs\catalina.{date}.log file.
Error: 'Failed to create server shutdown socket on address [localhost] and port [8005]
java.net.BindException: Address already in use: JVM_Bind'
Workaround: Edit the server.xml file present at <INSTALL_
PATH>\Datacard\TruCredential\conf\server.xml, change the shutdown port from 8005 to
any other available port on the system (8006 is suggested) and save and restart Instant ID
software service.
Refer to Application Access or Startup Issues on page 54 of the Instant ID Installation
Guide for instructions on using alternate port 8006.
Printing might fail due to network latency with error: “Could not establish a trusted
connection with the device.” Input/Output error: “Read timed out, nested exception is
javax.net.ssl”. SSLException: “Read timed out.”
Workaround: Follow below steps to increase the timeout:
a. Go to INSTALL PATH\TruCredential\webapps-dc\dcpi-ws\WEB-INF\classes\
b. Open application.properties, update below properties:
o http.socket.timeout=120

o http.connection.timeout=10

o http.connection.request.timeout=20

c. Save and close the file.

d. Stop and start Instant ID software service.
l Instant ID reports error when the Codabar barcode is added to the card that contains A-D
start/end characters.
Workaround: Users don’t need to type in the “A” start/stop character as it is added
automatically.
l Customer reported that the H2 Database size continues to grow despite using the H2 Trim
tool daily.
Workaround: If the customer is not using the default credentials design template, the TRU
files, located at C:\ProgramFiles\Datacard\TruCredential\DefaultCredentialTemplates,
must be moved to a folder outside an Instant ID file directory or deleted.
l The login might fail if the user tries to log into Instant ID with a browser window opened
from the time before upgrade.
Workaround: After the Instant ID upgrade, close the previously opened browser window,
access the Instant ID URL in your browser, and try to log in again.
l Field connections for workflows created using the 'Save as' functionality might not work
properly.
Workaround: Disconnect all the field connections using the 'Disconnect All' button and
then create the required field connections again.

22
 Entrust® Adaptive Issuance™ Instant ID Software

l Instant ID uninstallation might be slow and take up to 15 minutes.

l Audit entries for Credential Designer, Workflow Design and Field Connections are
removed to avoid errors at runtime.
l With h2_2x version the TRUCREDENTIAL service at startup expects the database file
(.mv) to be already present. Deleting the db folder, and then restarting will not work further.
l Upgrading from the previous build to Instant ID 9.0 might be slow.
l While using the card preview API, color images on non-color layers will preview with
colors.
l Felica profiles might not work properly and may give some errors.
l H2 Service may become unresponsive when attempting manual shutdown, leading to a
state where it fails to stop.
l Uninstalling Instant ID may sometimes show an error message for not removing a registry
key.
Workaround: Click Done and continue with the uninstallation.
l Configuring a password-protected Microsoft Access database as external datasource may
fail.
l Data_ENCRYPT mode is no longer supported with Open JDK 11 onwards for DB2 version
11.x and must use SSL.

Limitations
The following limitations to Instant ID software may cause issues when using Instant ID
software:

l Instant ID software does not currently support Capture Tower.

l When a user password is changed, then the old password will continue to work until
Instant ID software services are restarted.
l Communication between Capture Manager and Instant ID software might be exposed to
security threats. To secure communication between Instant ID software and Capture
Manager, generate a certificate and configure Instant ID software to communicate with
Capture Manager over HTTPS.
l Print jobs with smart card operations might fail if communication between the proximity
card reader and the smart card reader fails. Contact Entrust Datacard technical service.
Refer to “Technical Support” on page 10 for technical support contact information. (61)
l Signatures saved in WMF format do not display in report queries until they have been
displayed in a workflow (where they are converted to SVG). They do not display in PDF
reports. (5098)
l When the Instant ID software Java.exe file is blocked by antivirus software, Instant ID
software fails to print a credential. Add an exception for the executable file to the antivirus
scan. (228)
l Installation might be slow over a network or when a virus scan is enabled. (11532)

23
Entrust® Adaptive Issuance™ Instant ID Software

l Instant ID fails to print if the printer name contains non-English characters. (422)
l Instant ID no longer provides default support for MySQL databases, although the support
can be added manually with these steps:
a. Download MySQL database connector library “mysql-connector-java-8.0.28.jar” or
the latest version.
b. b. Place the jar file under
<InstallDir>\Datacard\TruCredential\webapps\trucredential\WEB-INF\lib\.
c. Stop and start Instant ID software service.
l Instant ID software might show the status of a Smart Card print job (with write operation) as
completed, even when the printing fails due to any issue, such as a ribbon issue, etc., on
the printer.

Frequently Asked Questions

What is Supported?
Question: Does Instant ID software support databases hosted in cloud storage?

(14057990)

Answer: No, this has not been tested by Entrust.

Question: Does Instant ID software support manual duplex printing, in which cards are flipped
over by hand? (14647308)

Answer: This is a feature of some printers. If a particular printer supports manual duple
printing, then Adaptive Issuance™ Instant ID Software supports it.

Smart Card-Related Questions

Question: In a 1-wire network-connected printer configuration, what smart card readers can I
use? (15270854)

Answer: Instant ID software supports DUALi and HID OmniKey smart card readers in a 1-wire
configuration. All other reader types (codes S1-S12) require a two-wire connection, including a
USB connection to the reader. For more information, refer to the Entrust Instant ID Installation
and Administration Guide.

Messages
Question: During an external database write operation, I got the following message: “The
system did not complete the task due to an unexpected error. Contact your Instant ID software
administrator for assistance.” What can be the cause? (15271747)

Answer: Check the trucredential-stdout.{date] logs under INSTALL_

PATH\Datacard\TruCredential\logs. Often this is a database error caused by a “not null”

24
 Entrust® Adaptive Issuance™ Instant ID Software

column that was not updated by the system during an insert. The external database Write
operation determines whether to insert or update the database. This may work on database
inserts but not on updates.

Printing-Related Questions
Question: Why is the print count that displays in the workflow different from that

shown in the preview?

Answer: The two print count values are different until you click Personalize. The current print
count that shows in the workflow is what the database print count value is equal to at the
current time. It is updated to the number shown in the preview after you click Personalize.

Question: I was not able to print to both sides of the credential: the front design printed on one
card and the back on a second card. What can cause this?

Answer: This can happen if the Windows Instant ID Service is configured as a member of the
local Administrators group. Configure the Local System account. It can also happen if certain
printers are connected by USB cable rather than by a network connection. It can also happen if
Windows printing preferences are not set for your card. To correctly set the printer preferences
for USB-connected printers:

1. Click Start > Devices and Printers to open the Windows Devices and Printers window.
2. Right-click the printer name and select Printing preferences.
3. On the Layout or Finishing tab, enable Print on Both Sides.
4. Click the Advanced button and set the options Apply the Laminator material1 and Apply
the Laminator material 2 to Do not apply. (For third-party printers with laminators)
5. Click Apply.

Technical Support
Go to https://www.entrust.com/contact/support to access support for your region. For hardware
support, have your product model and serial number available. For software support, have the
software version number and product key available. Refer to the shipping documents or the
software to retrieve this information.

25