BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

1.3.4 Deprecated and Removed Features (was: Deprecated and Removed)

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 1 Introduction part of 1.3

Title changed

Before · FIPS 201-2

Deprecated and Removed

After · FIPS 201-3

Deprecated and Removed Features

Control changed

Before · FIPS 201-2

When a feature is to be discontinued or is no longer needed, it is deprecated. In general, a feature that is currently in use by relying systems would only be deprecated if there were a compelling (e.g., security) reason to do so. Deprecated features may continue to be used, but should be phased out in future systems since the feature will likely be removed in the next revision of the Standard. For example, the CHUID authentication mechanism (Section 6.2.5) has been deprecated, since it provides LITTLE or NO assurance in the identity of the cardholder, and so relying systems should phase out use of this authentication mechanism. 2

In the case of deprecated features on PIV Cards, such as the authentication key map, existing PIV Cards with the deprecated features remain valid, however, new PIV Cards should not include the deprecated features.

After · FIPS 201-3

This subsection is normative.

When a feature is to be discontinued or is no longer needed, it is deprecated. In general, a feature that is currently in use by relying systems would only be deprecated if there were a compelling reason to do so (e.g., security) reason to do so. Deprecated features mayMAY continue to be used, but shouldSHOULD be phased out in future systems since the feature will likely be removed in the next revision of the Standard. Removed features SHALL NOT be used. For example, the CHUID authentication mechanism (Section 6.2.5) haswas beenpreviously deprecated, sincein itFIPS provides201-2 LITTLEand orhas NObeen assuranceremoved infrom thethis identityversion of the cardholder, andStandard. soTherefore, relying systems should phasemust outnot use of this authentication mechanism. 1 The PIV Visual Credentials (VIS) authentication mechanism (Section 6.2.6) has been deprecated as a stand-alone authentication mechanism, but it could still be used in conjunction with other authentication mechanisms.

In the case of deprecated features on PIV Cards, such as the authenticationmagnetic keystripe map(Section 4.1.4.4), existing PIV CardsCard withstock thewith deprecated features remainremains valid,. howeverHowever, newfuture PIV CardsCard shouldstock notacquisitions includeSHOULD exclude the deprecated features.