BaselineWatch
Desk

A.3 Conformance Testing of PIV Card Application and Middleware

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
added Appendix A PIV Validation, Certification, and Accreditation part of A

Title changed

Before · FIPS 201-2

After · FIPS 201-3

Conformance Testing of PIV Card Application and Middleware

Control changed

Before · FIPS 201-2

After · FIPS 201-3

Assurance of conformance of the PIV Card application interface to this Standard and its associated technical specifications is needed in order to meet the security and interoperability goals of [HSPD-12]. To facilitate this, NIST has established the NIST Personal Identity Verification Program (NPIVP). Under this program, NIST has developed test procedures in [SP 800-85A] and an associated toolkit for conformance testing of PIV Card applications. NPIVP conformance testing also includes PIV middleware, but conformance testing may be discontinued at a future time since computer operating systems increasingly provide built-in support for smart cards.

Commercial products under these two categories are tested by the set of test laboratories accredited under the National Voluntary Laboratory Accreditation Program (NVLAP) using the NIST-supplied test procedures and toolkit. The outcomes of the test results are validated by NIST, which then issues validation certificates. Information about NPIVP is available at https://csrc.nist.gov/projects/nist-s-personal-identity-verification-program.