Smartcard certificates expired every two-to-three years, no matter how long access has been granted for.

Smartcard expirying?

When users are notified that their Smartcard is expiring, they should follow the prompts to self-renew.

 Users will receive an expiry notification at every login for three months prior to their card's expiration. If a user’s device prevents them from completing this process, they should raise an Incident with their IT support team. During this period, they can select "No" and continue using the card as normal. Once the issue is resolved, they should complete the self-renewal process.

Smartcard already expired?

A smartcard expire because self-renewal was not completed or the card has gone unused for an extended period, such as during long-term leave. Once expired, self-renewal is no longer an option.

As a Smartcard Sponsor, you likely have the necessary permissions to unlock expired Smartcards. To do so, you will need a second Smartcard reader.

Renewal process

Important: Both you and the user must be present to renew the Smartcard; this process cannot be completed virtually. You must be reasonably assured they are they owner and they will set a passcode during the process.

1. Ensure the person requesting the renewal is indeed the Smartcard owner.

2. Check their photo ID and any identifying documents that match the name on the card.

   ⚠️ If you are not confident that the person is the card owner based on the provided information, do not proceed with renewal. Report the incident to your governance team.

3. Sign in to Care Identity Management with your Sponsor credentials.
4. Follow the instructions provided by NHS Digital to complete the Smartcard renewal process.