BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.9.4 PIV Card Termination Requirements

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 2 Common Identification, Security, and Privacy Requirements part of 2.9

Title

PIV Card Termination Requirements

Control changed

Before · FIPS 201-2

A PIV card is terminated when the department or agency that issued the card determines that the cardholder is no longer eligible to have a PIV Card. The PIV Card shall be terminated under the following circumstances:

+ a Federal employee separates (voluntarily or involuntarily) from Federal service;

+ a contractor changes positions and no longer needs access to Federal buildings or systems;

+ a cardholder passes away;

+ a determination is made after completion of a cardholder’s background investigation that the cardholder should not have a PIV Card; or

+ a cardholder is determined to hold a fraudulent identity. Similar to the situation in which the card or a credential is compromised, normal termination procedures must be in place as to ensure the following:

+ The PIV Card itself is revoked:

o The PIV Card shall be collected and destroyed, if possible.

o Any databases maintained by the PIV Card issuer that indicate current valid (or invalid) FASC-N or UUID values must be updated to reflect the change in status.

o If the PIV Card cannot be collected and destroyed, the CA shall be informed and the certificates corresponding to the PIV Authentication key and the asymmetric Card Authentication key on the PIV Card shall be revoked. The certificates corresponding to the digital signature and key management keys shall also be revoked, if present.

+ The PII collected from the cardholder is disposed of in accordance with the stated privacy and data retention policies of the department or agency.

If the card cannot be collected, normal termination procedures shall be completed within 18 hours of notification. In certain cases, 18 hours is an unacceptable delay and in those cases emergency procedures must be executed to disseminate the information as rapidly as possible. Departments and agencies are required to have procedures in place to issue emergency notifications in such cases.

After · FIPS 201-3

A PIV cardCard is terminated when the department or agency that issued the card determines that the cardholder is no longer eligible to have a PIV Card. The PIV Card shallSHALL be terminated under any of the following circumstances:

+• aA Federalfederal employee separates (voluntarily or involuntarily) from Federalfederal service;

+.
• aA contractor changes positions and no longer needs access to Federalfederal buildings or systems;

+.
• aA cardholder passes away;

+.
• aAn determinationauthorized adjudicative entity determines that the cardholder is madeineligible for a PIV Card after completion of a cardholder’s background investigation that theor cardholderreview shouldof notdeveloped haveinformation a(see PIV[FCS] Card;and or

+[CSP]).
• aA cardholder is determined to hold a fraudulent identity.

Similar to the situation in which the card or aPIV credentialCard is compromised, normal termination procedures must be in place as to ensure the following:

+. The PIV Card itselfSHALL isbe revoked through the following procedure:

o• The PIV Card shallSHALL be collected and destroyed, if possible.

o
• Per OPM guidance, the Central Verification System (or successor) SHALL be updated to reflect the change in status (see Section 2.2).
• Any databases maintained by the PIV Card issuer that indicate current valid (or invalid) FASC-N or card UUID values mustSHALL be updated to reflect the change in status.

o17 If OCC is being reset due to epidermal d amage on a specific finger, it may be prudent to perform the biometric comparison with a different finger or different biometric characteristic. However, it is possible that the comparison algorithm available to the issuer could obtain a positive biometric verification decision with damaged epidermis while the OCC algorithm could not.
• If the PIV Card cannot be collected and destroyed, the CA shallSHALL be informed and the certificates corresponding to the PIV Authenticationauthentication key and the asymmetric Cardcard Authenticationauthentication key on the PIV Card shallSHALL be revoked. The certificates corresponding to the digital signature and key management keys shallSHALL also be revoked, if present.

+
• TheCard PIImanagement collectedsystems fromSHALL thebe cardholderupdated isto disposedreflect PIV Card termination and method of intermination accordance(e.g., withPIV Card destruction for collected PIV Cards or certificate revocations for uncollected PIV Cards).

In addition, the statedPIV privacyCard andtermination dataprocedures retentionSHALL policiesensure ofthat all derived PIV credentials bound to the departmentPIV oridentity agencyaccount are invalidated as specified in Section 2.10.2.

If the card cannot be collected, normal termination procedures shallSHALL be completed within 18 hours of notification. In certain cases, 18 hours is an unacceptable delay and in those cases emergency procedures mustSHOULD be executed to disseminate the information as rapidly as possible.

The DepartmentsPII andcollected agenciesfrom arethe requiredcardholder toSHALL havebe proceduresdisposed of in placeaccordance towith issuethe emergencystated notificationsprivacy inand suchdata casesretention policies of the department or agency.