BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.2.1 PIV Card Application Card Command Interface Tests

NIST PIV and digital identity SP 800-85A-4 against SP 800-85A-2
All changes in this version
modified 3 Test Suite Elements part of 3.2

Title

PIV Card Application Card Command Interface Tests

Control changed

Before · SP 800-85A-2

These tests will validate that the card under test can successfully execute the commands in the PIV card command interface. Successful execution constitutes the card responding with appropriate data and response status codes to the commands sent by the test system. It also involves setting state variables within the PIV Card. For example, the criteria for successful execution of the SELECT command involve the following:

The Response Status Code returned is “90 00”.

The application property template is returned with the right format and content.

The “PIV Card Application” is the value of “currently selected application” (state variable) on the card.

The card command interface test suite includes conformance tests for the following PIV Card Application commands: Data access commands

ƒ SELECT ƒ GET DATA Card authentication commands

ƒ VERIFY ƒ CHANGE REFERENCE DATA ƒ RESET RETRY COUNTER ƒ GENERAL AUTHENTICATE Credential initialization and administration commands

ƒ PUT DATA ƒ GENERATE ASYMMETRIC KEY PAIR

The card edge commands will be validated against the following conditions: Card interface type (contact vs. contactless)

Precondition for use (PIN verified, cryptographic authentication)

Expected response status codes

Appropriate state variables set in the card.

After · SP 800-85A-4

These tests will validate that the card under test can successfully execute the commands in the PIV card command interface. Successful execution constitutes the card responding with appropriate data and response status codes to the commands sent by the test system. It also involves setting state variables within the PIV Card. For example, the criteria for successful execution of the SELECT command involve the following:

 + The Responseresponse Statusstatus Codecode returned is “90'90 00”00'.

 + The application property template is returned with the rightcorrect format and content.

 + The “PIV Card Application” is the value of “currently selected application” (state variable) on the card.

 The card command interface test suite includes conformance tests for the following PIV Card Application commands: + Data access commands

ƒ. SELECT ƒ GET DATA + Card authentication commands

ƒ. VERIFY ƒ CHANGE REFERENCE DATA ƒ RESET RETRY COUNTER ƒ GENERAL AUTHENTICATE + Credential initialization and administration commands

ƒ. PUT DATA ƒ GENERATE ASYMMETRIC KEY PAIR

 The card edge commands will be validated against the following conditions: + Card interface type (contact vs. contactless, including virtual contact interface)

. + Precondition for use (PIN, OCC verified, cryptographic authentication)

. + Expected response status codes

. + Appropriate state variables set in the card.