BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

5.2 PKI Certificate

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 5 PIV Key Management Requirements part of 5

Title

PKI Certificate

Control changed

Before · FIPS 201-2

All certificates issued to support PIV Card authentication shall be issued under the X.509 Certificate Policy for the U.S. Federal PKI Common Policy Framework [COMMON]. The requirements in this certificate policy cover identity proofing and the management of CAs and registration authorities. CAs and registration authorities may be operated by departments and agencies, or may be outsourced to PKI service providers. For a list of PKI service providers that have been approved to operate under [COMMON], see http://www.idmanagement.gov .

After · FIPS 201-3

All certificates issued to support PIV Cardprivate authenticationkeys shall(i.e., bePIV issuedauthentication, undercard theauthentication, X.509digital Certificatesignature, Policyand forkey themanagement U.S.certificates) FederalSHALL PKIbe Commonissued Policyin Frameworkaccordance with [COMMON]. The requirements in this certificate policy cover identity proofing and the management of CAs and registration authorities. CAs and registration authoritiescan mayeither be operated by departments and agencies, or may be outsourced to PKI service providers. For a list of PKI service providers that have been approved to operate under [COMMON], see httphttps://www.idmanagement.gov.

Details of the cryptographic properties of PIV keys are found in Section 4.2.2 and its subsections.