BaselineWatch
Desk

7.1.4 Card Authentication Key (CAK) Authentication

NIST PIV and digital identity SP 800-116
All changes in this version
first version loaded 7 PIV Authentication Mechanisms part of 7.1

Title

Card Authentication Key (CAK) Authentication

Control

The CAK is an optional key that may be present on any PIV Card. As the name implies, the purpose of the CAK authentication mechanism is to authenticate the card and therefore its possessor. The CAK is unique among the PIV keys in several respects: