BaselineWatch
Desk

2.9 PIV Card Maintenance Requirements

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 2 Common Identification, Security, and Privacy Requirements part of 2

Title

PIV Card Maintenance Requirements

Control changed

Before · FIPS 201-2

The PIV Card shall be maintained using processes that comply with this section.

The data and credentials held by the PIV Card may need to be updated or invalidated prior to the expiration date of the card. The cardholder may change his or her name, retire, or change jobs; or the employment may be terminated, thus requiring invalidation of a previously issued card. In this regard, procedures for PIV Card maintenance must be integrated into department and agency procedures to ensure effective card maintenance. In order to maintain operational readiness of a cardholder's PIV Card, agencies may require PIV Card update, reissuance, or biometric enrollment more frequently than the maximum PIV Card and biometric lifetimes stated in this Standard. Shorter lifetimes may be specified by agency policy collectively, or on a case-by-case basis as sub-par operation is encountered.

After · FIPS 201-3

The PIV Card shallSHALL be maintained using processes that comply with this section.

The data and credentials held by the PIV Card may need to be updated or invalidated prior to the expiration date of the card. The cardholder may change his or her name,For retireexample, ora changepreviously jobs;issued orPIV theCard employmentneeds mayto be terminated,invalidated thuswhen requiringthe invalidationcardholder ofchanges atheir previouslyname issuedor cardemployment status. In this regard, procedures for PIV Card maintenance must be integrated into department and agency procedures to ensure effective card maintenance. In order to maintain operational readiness of a cardholder'scardholder’s PIV Card, agencies may require PIV Card update, reissuance, or biometric enrollment more frequently than the maximum PIV Card and biometric characteristic lifetimes stated in this Standard. Shorter lifetimes mayMAY be specified by agency policy collectively, or on a case-by-case basis as sub-par operation is encountered.