BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

5 PIV Card Application Administration Keys

NIST PIV and digital identity SP 800-78-4
All changes in this version
first version loaded 5 PIV Card Application Administration Keys

Title

PIV Card Application Administration Keys

Control

PIV Cards may support card activation by the card management system to support card personalization and post-issuance card update. PIV Cards that support card personalization and post-issuance updates perform a challenge response protocol using a symmetric cryptographic key (i.e., the PIV Card Application Administration Key) to authenticate the card management system. After successful authentication, the card management system can modify information stored in the PIV Card. Table 5-1 , below, establishes specific requirements for cryptographic algorithms and key sizes for PIV Card Application Administration Keys.

Table 5-1. Algorithm and Key Size Requirements for PIV Card Application Administration Keys

Card Expiration Date Algorithm

After 12/31/2010 3TDEA AES-128, AES-192, or AES-256