BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

10 Send VERIFY card command repeatedly until after

NIST PIV and digital identity SP 800-85A-4 against SP 800-85A-2
All changes in this version
added 10 Send VERIFY card command repeatedly until after

Title changed

Before · SP 800-85A-2

After · SP 800-85A-4

Send VERIFY card command repeatedly until after

Control changed

Before · SP 800-85A-2

After · SP 800-85A-4

the issuer specified maximum number of PIN tries is exceeded with
• P2, key reference value is set to '00'
• Data field of the command will contain an arbitrary, but correctly formatted, PIN value other than what is obtained from the vendor, padded with 'FF' to complete the total length of the value to 8 bytes 2c. Test case for implementations that support OCC ('96' and '97') for PIV data access and command execution. 1. Send VERIFY card command with
• P2, key reference value is set to '96'
• Data field of the command will contain a value that matches the Primary Finger OCC value 2. Send GET DATA command with
• Data field of the command containing the tag of the Printed Information data object 3. Reset the security status of the '96' key reference by sending the VERIFY command with
• P2, key reference value is set to '96'
• P1 parameter is 'FF' and both L c and the data field are absent 4. Send VERIFY card command with
• P2, key reference value is set to '97'
• Data field of the command will contain a value that matches the Secondary Finger OCC value 5. Send GET DATA command with
• Data field of the command containing the tag of the Printed Information data object