BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

4.3.2 Activation by Card Management System

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 4 PIV Front-End Subsystem part of 4.3

Title

Activation by Card Management System

Control changed

Before · FIPS 201-2

PIV Cards may support card activation by the card management system to support card personalization and post-issuance card update. To activate the card for personalization or update, the card management system shall perform a challenge response protocol using cryptographic keys stored on the card in accordance with [SP 800-73]. When cards are personalized, PIV Card Application Administration Keys shall be set to be specific to each PIV Card. That is, each PIV Card shall contain a unique PIV Card Application Administration Key. PIV Card Application Administration Keys shall meet the algorithm and key size requirements stated in [SP 800-78].

After · FIPS 201-3

PIV Cards mayMAY support card activation by the card management system to support card personalization and post-issuance card update. To activate the card for personalization or update, the card management system shallSHALL perform a challenge response protocol using cryptographic keys stored on the card in accordance with [SP 800-73]. When cards are personalized, each PIV Card ApplicationSHALL Administrationcontain Keysa shallunique bePIV setCard toapplication beadministration key specific to eachthat PIV Card. ThatPIV is,Card eachapplication PIVadministration Cardkeys shallSHALL containmeet athe uniquealgorithm PIVand Cardkey Applicationsize Administrationrequirements Keystated in [SP 800-78].

34 Activation in this context refers to the unlocking of the PIV Card Applicationapplication Administrationso Keysthat shallprivileged meetoperations can be performed. 35 A read of a CHUID or use of the algorithmcard andauthentication key sizeis requirementsnot statedconsidered ina [SPprivileged 800-78]operation.