BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

7.2 Acceptance Criteria for the PIV Card Application Tests

NIST PIV and digital identity SP 800-85A-4 against SP 800-85A-2
All changes in this version
modified 7 Acceptance Criteria part of 7

Title

Acceptance Criteria for the PIV Card Application Tests

Control changed

Before · SP 800-85A-2

Acceptance criteria for the PIV Card Application tests are based on the PIV Card Application passing the following two classes of tests: PIV Card Application card command interface tests and PIV data objects accessibility and storage tests. The PIV Card application that has passed these classes of tests is called “SP 800-73-3 conformant PIV Card application.” For PIV Card Application card command tests, the PIV Card Application should send the appropriate response status codes and application data in response to commands. It should also set or reset certain card state variables and thus fulfill the test post conditions. For the PIV data objects accessibility and storage tests, the PIV Card Application should show the presence of all mandatory PIV data objects and published optional PIV data objects. It should also demonstrate the ability to access and store all the above data objects using the correct BER- TLV tag under the appropriate security conditions and interfaces (contract or contactless) and that the containers for storing them have the needed size requirements. The acceptance criteria for the testing of PIV Card functionalities, for which FIPS 201 makes reference to external documents (such as digital signature formats), is based on visual verification of vendor-provided documents and test/compliance certificates.

After · SP 800-85A-4

Acceptance criteria for the PIV Card Application tests are based on the PIV Card Application passing the following two classes of tests: PIV Card Application card command interface tests and PIV data objects accessibility and storage tests. The PIV Card applicationApplication that has passed these classes of tests is called an “ SP 800-73-3800-73-4 conformant PIV Card applicationApplication.” For PIV Card Application card command tests, the PIV Card Application should send the appropriate response status codes and application data in response to commands. It should also set or reset certain card state variables and thus fulfill the test post conditionspostconditions. For the PIV data objects accessibility and storage tests, the PIV Card Application should show the presence of all mandatory PIV data objects and published optional PIV data objects. It should also demonstrate the ability to access and store all the above data objects using the correct BER- TLVBER-TLV tag under the appropriate security conditions and interfaces (contractcontact, contactless, secure messaging, or contactlessVCI) and that the containers for storing them havesatisfy the neededspecified minimum size requirements. The acceptance criteria for the testing of PIV Card functionalities, for which FIPS 201 makes reference to external documents (such as digital signature formats), is based on visual verification of vendor-provided documents and test/compliance certificates.