BaselineWatch
Desk

1.3.4 Deprecated and Removed

NIST PIV and digital identity FIPS 201-2
All changes in this version
first version loaded 1 Introduction part of 1.3

Title

Deprecated and Removed

Control

When a feature is to be discontinued or is no longer needed, it is deprecated. In general, a feature that is currently in use by relying systems would only be deprecated if there were a compelling (e.g., security) reason to do so. Deprecated features may continue to be used, but should be phased out in future systems since the feature will likely be removed in the next revision of the Standard. For example, the CHUID authentication mechanism (Section 6.2.5) has been deprecated, since it provides LITTLE or NO assurance in the identity of the cardholder, and so relying systems should phase out use of this authentication mechanism. 2

In the case of deprecated features on PIV Cards, such as the authentication key map, existing PIV Cards with the deprecated features remain valid, however, new PIV Cards should not include the deprecated features.