BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.2 PIV Card Lifecycle Activities

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 3 PIV System Overview part of 3

Title

PIV Card Lifecycle Activities

Control changed

Before · FIPS 201-2

The PIV Card lifecycle consists of seven activities. The activities that take place during fabrication and pre-personalization of the card at the manufacturer are not considered a part of this lifecycle model. Figure 3-2 presents these PIV activities and depicts the PIV Card request as the initial activity and PIV Card termination as the end of life.

Figure 3-2. PIV Card Lifecycle Activities

Descriptions of the seven card lifecycle activities are as follows:

• PIV Card Request. This activity applies to the initiation of a request for the issuance of a PIV Card to an applicant and the validation of this request.

• Identity Proofing and Registration. The goal of this activity is to verify the claimed identity of the applicant, verify that the entire set of identity source documents presented at the time of registration is valid, capture biometrics, and optionally create the chain-of-trust record.

• PIV Card Issuance. This activity deals with the personalization (physical and logical) of the card and the issuance of the card to the intended applicant.

• PKI Credential Issuance. This activity deals with generating logical credentials and loading them onto the PIV Card.
• PIV Card Usage. During this activity, the PIV Card is used to perform cardholder authentication for access to a physical or logical resource. Access authorization decisions are made after successful cardholder identification and authentication.

• PIV Card Maintenance. This activity deals with the maintenance or update of the physical card and the data stored thereon. Such data includes various card applications, PINs, PKI credentials, and biometrics.

• PIV Card Termination. The termination process is used to permanently destroy or invalidate the PIV Card and the data and keys needed for authentication so as to prevent any future use of the card for authentication.

After · FIPS 201-3

The PIV Card lifecycle consists of seven activities. 23 The activities that take place during fabrication and pre-personalization of the card at the manufacturer are not considered a part of this lifecycle model. Figure 3-2 presents these PIV activities and depicts the PIV Card request as the initial activity and PIV Card termination as the end of life.

Figureend-of-life 3-2activity. PIV Card Lifecycle Activities

Descriptions of theThe seven card lifecycle activities are as follows:

• PIV Card Request. This activity applies to theThe initiation of a request for the issuance of a PIV Card to an applicant and the validation of this request.

• Identity Proofing and Registration. The goalVerification of this activity is to verify the claimed identity of the applicant, verifyincluding verification that the entire set of identity source documents presented at the time of registration is valid, capture biometricsof biometric characteristics, and optionallycreation createof the chain-of-trustPIV enrollment record.

• 24

PIV Card Issuance. This activity deals with the personalizationPersonalization (physical and logical) of the card and the issuance of the card to the intended applicant.

• PKI Credential Issuance. This activity deals withGeneration generatingof logicalPKI credentials and loading them onto the PIV Card.
•

PIV Card Usage. During thisUse activity,of the PIV Card is used to perform cardholder authentication for access to a physical or logical resource. Access authorization decisions are made after successful cardholder identification and authentication.

• PIV Card Maintenance. This activity deals with the maintenanceMaintenance or update of the physical cardPIV Card and theits data stored thereon. Such data includes various card applications, PINs, PKI credentials, and biometricsbiometric data.

• PIV Card Termination. The termination process is used to permanentlyPermanent destroydestruction or invalidateinvalidation of the PIV Card and the data and keys needed for authentication so as to prevent any future use of the cardPIV Card for authentication.

23 The lifecycle activities of derived PIV credentials are described in [SP 800-157]. 24 In some other National Institute of Standards and Technology (NIST) documents such as [SP 800-63A], registration is referred to as enrollment . PIV Card Request

Identity Proofing & Registration

PIV Card Issuance

PKI Credential Issuance

PIV Card Usage

PIV Card Termination PIV Card Maintenance Reissuance

Post Issuance Updates

Figure 3-2. PIV Card Lifecycle Activities