BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

5.1 Architecture

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 5 PIV Key Management Requirements part of 5

Title

Architecture

Control changed

Before · FIPS 201-2

The CA that issues certificates to support PIV Card authentication shall participate in the hierarchical PKI for the Common Policy managed by the Federal PKI. Self-signed, self-issued, and CA certificates issued by these CAs shall conform to Worksheet 1: Self-Signed Certificate Profile , Worksheet 2: Self-Issued CA Certificate Profile , and Worksheet 3: Cross Certificate Profile, respectively, in X.509 Certificate and Certificate Revocation List (CRL) Extensions Profile for the Shared Service Providers (SSP) Program [PROF]. The requirements for legacy PKIs are defined in Section 5.4.

After · FIPS 201-3

The CACAs that issuesissue certificates to support PIV Cardprivate authenticationkeys shallSHALL participate in the hierarchical PKI for the Common Policy managed by the Federal PKI. Self-signed, self-issued, andManagement Authority.

CA certificates issued by these CAs shallSHALL conform to Worksheet 1: Self-Signed Certificate Profile , Worksheet 2: Self-Issued CA Certificate Profile , and Worksheet 3: Cross Certificate Profile, respectively, in X.509 Certificate and Certificate Revocation List (CRL) Extensions Profile for the Shared Service Providers (SSP) Program [PROFCOMMON]. The requirements for legacy PKIs are defined in Section 5.4.