The PIN Reset CRI is created via which system?

• A. Token Management System (TMS)
• B. PKI Issuance System
• C. RA Portal
• D. Subscriber Console

Answer: (A)

The system that handles token lifecycles and PIN-related operations is the Token Management System. It is responsible for managing all aspects of tokens, including PIN creation, changes, and resets. When a PIN reset is needed, the TMS generates a PIN Reset CRI (a secure credential) that uniquely ties the reset to the specific token and user, ensuring the reset goes through the trusted token-management workflow and can be tracked and audited.

Other systems serve different roles: the PKI Issuance System focuses on issuing certificates to users or devices; the RA Portal manages enrollment and identity verification tasks; and the Subscriber Console provides user-facing controls for tokens but does not create the PIN reset credential.