BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

7.1.5 PIV Authentication Key (PKI) Authentication

NIST PIV and digital identity SP 800-116
All changes in this version
first version loaded 7 PIV Authentication Mechanisms part of 7.1

Title

PIV Authentication Key (PKI) Authentication

Control

PACS may be designed to perform public key cryptography-based authentication using the PIV Authentication Key. Use of the PKI provides two-factor 6 authentication, since the cardholder must enter a PIN to unlock the card in order to successfully authenticate. When using the PKI authentication mechanism, FIPS 201 requires the PACS to determine the validity of certificates at the time an individual presents his or her card to a card reader. This may

6 Two-factor authentication is a system wherein two different methods are used to authenticate. An example of two- factor authentication is a verification of “something you have” and “something you know". Using two factors as opposed to one delivers a higher level of authentication assurance. be done on-line in real-time, or it may be implemented by pre-validating the certificates and caching the results. Section 7.4 specifies procedures for performing public key cryptography- based authentication under the assumption that only individuals who are pre-enrolled will be granted access. 7 Section 7.5 further describes the caching status proxy.