A Trusted Agent must immediately cut a Registration or CRI to a token.

• A. True
• B. False
• C. Not applicable
• D. Sometimes

Answer: (B)

Token personalization relies on strong identity verification and a secure provisioning process. A Trusted Agent should not immediately cut a Registration or CRI to a token; loading the registration data too early risks binding the token to an claim that hasn’t been properly validated. The correct approach is to validate the applicant’s identity, confirm enrollment details, check for duplicates or revocation status, and perform the provisioning in a secure, auditable environment. Only after these safeguards are satisfied should the token be personalized with the registration information. This sequencing protects against fraud, ensures the token represents a verified identity, and allows for revocation or reissuance if issues arise.