<!-- Derived Markdown alternate of workstation.md; canonical repository sources and registered evidence retain authority. -->


# Workstation baseline

Use this as a configuration record, then check the live source guidance before deployment. Record installed versions, hardware IDs and evidence for each device.

| Component | Published baseline or dependency | Source |
|---|---|---|
| Operating system | Windows 11, 64-bit; use a Microsoft-supported release. | [SRC-002](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-002), [SRC-007](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-007) |
| Browser | Native Edge or Chrome; WES does not support private browsing modes. | [SRC-007](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-007) |
| Standalone readers | Primary and secondary HID OMNIKEY 3121 for the RA reference setup. | [SRC-002](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-002) |
| Printer | DoH 300 (V2), with one USB connection and an integrated Elatec reader. Older DoH (V2) and Datacard SP35 are unsupported. | [SRC-003](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-003) |
| Authentication and card management | Smartcard Connect packaged with Credential Management; published download is 4.2.3.0. NHS Port Service must run. | [SRC-005](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-005) |
| Card middleware | Oberthur plus the combined Series 9/10 Idemia PIV minidriver, as applicable to the supported setup. | [SRC-008](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-008) |
| Local browser integration | Cookie exceptions and Local Network Access policy require configuration. | [SRC-010](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-010) |

The secondary reader services the target card while the operator uses their own authenticator. The printer has a separate electronic interface. This explains why successful face printing is not sufficient evidence of card personalisation.

## Driver selection is a separate task

The printer guidance names Elatec TWN4 MultiTech, hardware ID `VID_09D8&PID_0428`, with reader driver **5.3.0.31**. Its printer-driver **3.0.2.967** and firmware **15.57** values are published reference values, not a verified claim that these are the latest downloads. Confirm the current package against the exact device. [SRC-003](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-003), [SRC-014](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-014)

For 3121 readers, NHS guidance distinguishes CCID **2.3.4.121** and X-Chip **1.2.29.156** variants. Install by hardware ID; retain the BU component where required. The RU component can interfere with Series 9 issuance and should not be included in blanket printer-workstation updates. [SRC-009](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-009)

HID describes the 3121 as a USB contact reader supporting CCID and PC/SC. Its general plug-and-play statement does not override NHS instructions to use the correct manufacturer drivers. [SRC-015](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-015), [SRC-009](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-009)

Magicard's Windows driver guidance excludes ARM64 and requires administrator rights for installation. Select an appropriate Windows hardware architecture; Windows 11 alone is not a sufficient procurement specification. [SRC-013](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-013)

## Resolve the runtime ambiguity

The workstation checklist still calls for .NET Framework 4.8, while Smartcard Connect release notes describe a .NET 10 change. These names describe different runtime families. Follow the actual installer and current guidance; do not infer that one removes the other requirement. This remains [VAL-003](https://nhs-smartcard-printing-wiki.pages.dev/validation-queue/index.md#val-003). [SRC-002](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-002), [SRC-005](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-005), [SRC-010](https://nhs-smartcard-printing-wiki.pages.dev/sources/index.md#src-010)

Continue with [connectivity](https://nhs-smartcard-printing-wiki.pages.dev/connectivity/index.md), [issuance](https://nhs-smartcard-printing-wiki.pages.dev/issuance/index.md) and the [requirements register](https://nhs-smartcard-printing-wiki.pages.dev/requirements/index.md).
