Workstation baseline
Use this as a configuration record, then check the live source guidance before deployment. Record installed versions, hardware IDs and evidence for each device.
| Component | Published baseline or dependency | Source |
|---|---|---|
| Operating system | Windows 11, 64-bit; use a Microsoft-supported release. | SRC-002, SRC-007 |
| Browser | Native Edge or Chrome; WES does not support private browsing modes. | SRC-007 |
| Standalone readers | Primary and secondary HID OMNIKEY 3121 for the RA reference setup. | SRC-002 |
| Printer | DoH 300 (V2), with one USB connection and an integrated Elatec reader. Older DoH (V2) and Datacard SP35 are unsupported. | SRC-003 |
| Authentication and card management | Smartcard Connect packaged with Credential Management; published download is 4.2.3.0. NHS Port Service must run. | SRC-005 |
| Card middleware | Oberthur plus the combined Series 9/10 Idemia PIV minidriver, as applicable to the supported setup. | SRC-008 |
| Local browser integration | Cookie exceptions and Local Network Access policy require configuration. | SRC-010 |
The secondary reader services the target card while the operator uses their own authenticator. The printer has a separate electronic interface. This explains why successful face printing is not sufficient evidence of card personalisation.
Driver selection is a separate task
The printer guidance names Elatec TWN4 MultiTech, hardware ID VID_09D8&PID_0428, with reader driver 5.3.0.31. Its printer-driver 3.0.2.967 and firmware 15.57 values are published reference values, not a verified claim that these are the latest downloads. Confirm the current package against the exact device. SRC-003, SRC-014
For 3121 readers, NHS guidance distinguishes CCID 2.3.4.121 and X-Chip 1.2.29.156 variants. Install by hardware ID; retain the BU component where required. The RU component can interfere with Series 9 issuance and should not be included in blanket printer-workstation updates. SRC-009
HID describes the 3121 as a USB contact reader supporting CCID and PC/SC. Its general plug-and-play statement does not override NHS instructions to use the correct manufacturer drivers. SRC-015, SRC-009
Magicard's Windows driver guidance excludes ARM64 and requires administrator rights for installation. Select an appropriate Windows hardware architecture; Windows 11 alone is not a sufficient procurement specification. SRC-013
Resolve the runtime ambiguity
The workstation checklist still calls for .NET Framework 4.8, while Smartcard Connect release notes describe a .NET 10 change. These names describe different runtime families. Follow the actual installer and current guidance; do not infer that one removes the other requirement. This remains VAL-003. SRC-002, SRC-005, SRC-010
Continue with connectivity, issuance and the requirements register.