Preparing a Smart Card Deployment Schedule

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Deploying smart cards to a large organization is a major undertaking, often involving thousands of employees. It is essential that you plan the deployment schedule so that your deployment is orderly, controlled, efficient, and secure. For example, you might stagger your deployment so that a defined number of users migrate each week. You can organize this by building or by organizational unit structure.

For a worksheet to assist you in documenting your smart card deployment schedule, see "Smart Card Deployment Schedule" (DSSSMC_5.doc) on the Windows Server 2003 Deployment Kit companion CD (or see "Smart Card Deployment Schedule" on the Web at https://www.microsoft.com/reskit).

Figure 16.7 shows an example of a completed Smart Card Deployment Schedule worksheet for an organization that deployed smart cards according to building.

Figure 16.7   Example of a Smart Card Deployment Schedule Worksheet

In this example, smart card–enabled badges replace the existing building access badges. The plan is to have one member of the distribution team verify the credentials and status in the corporate database, while a second person deactivates the old physical access badge and activates the new smart card. The users receive the smart card, and a document that includes basic instructions, links for more information, an initial PIN, and a reminder that they need to change their PINs within eight hours.

For more information about preparing users for the smart card deployment, see "Educating Users About Establishing Issuance Processes" earlier in this chapter.