BaselineWatch
Desk

5 PIV Key Management Requirements

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 5 PIV Key Management Requirements

Title

PIV Key Management Requirements

Control changed

Before · FIPS 201-2

PIV Cards consistent with this specification will have two or more asymmetric private keys. To manage the public keys associated with the asymmetric private keys, departments and agencies shall issue and manage X.509 public key certificates as specified below.

After · FIPS 201-3

This section is normative. It defines the processes and components required for managing a PIV Card’s lifecycle and provides the requirements and specifications related to key management.

PIV
Cards consistent with this specification willSHALL have two or more asymmetric private keys. To manage the public keys associated with the asymmetric private keys, departments and agencies shallSHALL issue and manage X.509 public key certificates as specified belowin this section.