BaselineWatch
Desk

4.3 PIV Card Activation

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 4 PIV Front-End Subsystem part of 4

Title

PIV Card Activation

Control changed

Before · FIPS 201-2

The PIV Card shall be activated 27 to perform privileged 28 operations such as using the PIV Authentication key, digital signature key, and key management key. The PIV Card shall be activated for privileged operations only after authenticating the cardholder or the appropriate card management system. Cardholder activation is described in Section 4.3.1 and card management system activation is described in Section 4.3.2.

27 Activation in this context refers to the unlocking of the PIV Card Application so privileged operations can be performed. 28 A read of a CHUID or use of the Card Authentication key is not considered a privileged operation.

After · FIPS 201-3

The PIV Card shallSHALL be activated 2734 to perform privileged 2835 operations such as using the PIV Authenticationauthentication key, digital signature key, and key management key. The PIV Card shallSHALL be activated for privileged operations only after authenticating the cardholder or the appropriate card management system. Cardholder activation is described in Section 4.3.1 and card management system activation is described in Section 4.3.2.

27 Activation in this context refers to the unlocking of the PIV Card Application so privileged operations can be performed. 28 A read of a CHUID or use of the Card Authentication key is not considered a privileged operation.