BaselineWatch
Desk

B.2 PIV Background Investigation Indicator Certificate Extension

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
added Appendix B PIV Object Identifiers and Certificate Extension part of B

Title changed

Before · FIPS 201-2

After · FIPS 201-3

PIV Background Investigation Indicator Certificate Extension

Control changed

Before · FIPS 201-2

After · FIPS 201-3

(Deprecated)

The PIV background investigation indicator (previously known as the NACI indicator) is deprecated under this version of the Standard, and it is expected that the indicator will be removed from a future revision. Instead of the on-card indicator, background investigative status is commonly maintained in each agency IDMS and personnel security system as well as in the Central Verification System (or successor). The status of the investigation can be communicated as needed using federation protocols.

If used, the PIV background investigation indicator extension indicates to the issuer whether the subject’s background investigation was incomplete at the time of credential issuance. The PIV background investigation indicator extension is always non-critical. The value of this extension is asserted as follows:

• TRUE if, at the time of credential issuance, (1) the FBI National Criminal History Fingerprint Check has completed, and (2) a background investigation has been initiated but has not completed.
• FALSE if, at the time of credential issuance, the subject’s background investigation has been completed and successfully adjudicated.

The PIV background investigation indicator extension is identified by the id-piv-NACI object identifier. The syntax for this extension is defined by the following ASN.1 module:

PIV-Cert-Extensions { 2 16 840 1 101 3 6 10 1 } DEFINITIONS EXPLICIT TAGS ::= BEGIN -- EXPORTS ALL - - -- IMPORTS NONE - - id-piv-NACI OBJECT IDENTIFIER ::= { 2 16 840 1 101 3 6 9 1 } NACI-indicator ::= BOOLEAN END