BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.10 Derived PIV Credentials (was: Derived PIV Credentials Issuance Requirements)

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 2 Common Identification, Security, and Privacy Requirements part of 2

Title changed

Before · FIPS 201-2

Derived PIV Credentials Issuance Requirements

After · FIPS 201-3

Derived PIV Credentials Issuance Requirements

Control changed

Before · FIPS 201-2

Valid PIV Cards may be used as the basis for issuing derived PIV credentials in accordance with NIST Special Publication 800-157, Guidelines for Derived Personal Identity Verification (PIV) Credentials [SP 800-157]. When a cardholder's PIV Card is terminated as specified in Section 2.9.4, any derived PIV credentials issued to the cardholder shall also be terminated.

After · FIPS 201-3

ValidDerived PIV Cardscredentials mayare beadditional usedPIV ascredentials thethat basisare forissued issuingbased derivedon PIVproof credentialsof inpossession accordanceand withcontrol NISTof Speciala PublicationPIV 800-157,Card. GuidelinesThese forcredentials Derivedare Personalnot Identityembedded Verificationin (PIV)the CredentialsPIV [SPCard 800-157].but Wheninstead aare cardholder'sstand-alone PIVor Cardintegrated isin terminateda asvariety specifiedof indevices Sectionand 2.9platforms.4, any derivedDerived PIV credentials issuedplay toan important role for environments where use of the cardholderPIV shallCard alsois benot terminatedeasily supported.