5 PIV Key Management Requirements
All changes in this version
Title
PIV Key Management Requirements
Control changed
Before · FIPS 201-2
PIV Cards consistent with this specification will have two or more asymmetric private keys. To manage the public keys associated with the asymmetric private keys, departments and agencies shall issue and manage X.509 public key certificates as specified below.
After · FIPS 201-3
This section is normative. It defines the processes and components required for managing a PIV Card’s lifecycle and provides the requirements and specifications related to key management.
PIV Cards consistent with this specification willSHALL have two or more asymmetric private keys. To manage the public keys associated with the asymmetric private keys, departments and agencies shallSHALL issue and manage X.509 public key certificates as specified belowin this section.