BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.2 Issuing Facilities (was: PCI Facilities)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION part of 2

Title changed

Before · SP 800-79-1

PCI Facilities

After · SP 800-79-2

PCIIssuing Facilities

Control changed

Before · SP 800-79-1

A PCI Facility (PCIF) is a physical site or location–including all equipment, staff, and documentation–that is responsible for carrying out one or more of the following PIV functions: (i) enrollment/identity proofing; (ii) card production; (iii) card activation/issuance; or (iv) maintenance. A PCIF operates under the auspices of a PCI, and implements the policies and executes procedures prescribed by the PCI for those functions sanctioned for the facility (e.g. an enrollment/identity proofing facility). Based on certain characteristics (e.g. size, geographic locations, the organization(s) that it supports), a PCI may have its services and functions provided centrally or distributed across multiple locations. Independent of how or where a PCI implements these functions, at least one PCIF is required. For example, a geographically dispersed organization may decide to have enrollment/identity proofing and card activation/issuance functions performed in different facilities in different parts of the country so that applicants can minimize travel. In this example, the different PCIFs fall under the purview (policy, management) of a single PCI which encompasses all the functions necessary to issue PIV Cards. Within that PCI, the geographically dispersed PCIFs have specific responsibilities and are under the direct management control of the PCI.

After · SP 800-79-2

A PCIAn Facilityissuing (PCIF)facility is a physical site or location–including all equipment, staff, and documentation–that is responsible for carrying out one or more of the following PIV functions: (i) enrollment/identity proofing/registration; (ii) card/token 6 production; (iii) card activation/issuance; orand (iv)

5 Note: Some of the processes may not apply to Derived PIV Credentials Issuers. 6 When the term token is used within this document it is used to refer to the various Derived PIV Credential tokens detailed in [SP800-157] . maintenance. AAn PCIFissuing facility operates under the auspices of a PCIPIV Card or Derived PIV Credential Issuer, and implements the policies and executes procedures prescribed by the PCIissuer for those functions sanctioned for the facility (e.g., an enrollment/identity proofing/registration facility).

Based on certain characteristics (e.g., size, geographic locations, the organization(s) that it supports), aan PCIissuer may have its services and functions provided centrally or, distributed across multiple locations. Independent of how, or where amay PCIeven implementsbe theseable functions,to atperform leastthe oneentire PCIFissuance isprocess requiredremotely. 7 For example, in the case of PIV Card issuance, a geographically dispersed organization may decide to have enrollment/identity proofing/registration and card activation/issuance functions performed in different facilities in different parts of the country so that applicants can minimize travel. In this example, the different PCIFsissuing facilities fall under the purview (policy, management) of a single PCIissuer which encompasses all the functions necessary to issue PIV Cards.

Within that PCIissuer, the geographically dispersed PCIFsissuing facilities have specific responsibilities and are under the direct management control of the PCIissuer.