NIST PIV and digital identity SP 800-116 → SP 800-116 Rev. 1
Published 2018-06-29
Snapshot taken 2026-10-19 23:49 · sp-800-116 source
Snapshot taken 2026-10-19 23:49 · sp-800-116 source
Why this release
No stated reason was captured with this release. Check the publisher's release notes.
All · 681 HK HA or HKA · 110 Avoid long-term, side-by-side operation of deployed and PIV technologies. Once PIV · 311 CAK BIO CPB · 112 CAK BIO-A PKI · 113 CAK BIO-A CPB · 12 HA HK or HKA · 12 Introduction · 43 HKA HK, HA, or HKA · 14 Threat Environment · 105 Limitations of Deployed Physical Access Control Systems · 76 The PIV Vision · 57 PIV Authentication Mechanisms · 158 PACS Use Cases · 129 Migration Strategy · 6
Controls added, removed or revised 68
| Control | Title | Change |
|---|---|---|
| 1 | HK HA or HKA | Control text, Title |
| 10 | Avoid long-term, side-by-side operation of deployed and PIV technologies. Once PIV | removed |
| 10.1 | Generalized Credential Identifier | removed |
| 10.2 | Secure Biometric Match-On-Card | removed |
| 11 | CAK BIO CPB | removed |
| 12 | CAK BIO-A PKI | removed |
| 13 | CAK BIO-A CPB | removed |
| 2 | HA HK or HKA | Title |
| 2.1 | Authority | removed |
| 2.2 | Background | removed |
| 2.3 | Purpose and Scope | removed |
| 2.4 | Audience | removed |
| 3 | HKA HK, HA, or HKA | Control text, Title |
| 4 | Threat Environment | removed |
| 4.1 | Identifier Collisions | removed |
| 4.2 | Terminated PIV Cards | removed |
| 4.3 | Visual Counterfeiting | removed |
| 4.4 | Skimming | removed |
| 4.5 | Sniffing | removed |
| 4.6 | Social Engineering | removed |
| 4.7 | Electronic Cloning | removed |
| 4.8 | Electronic Counterfeiting | removed |
| 4.9 | Other Threats | removed |
| 5 | Limitations of Deployed Physical Access Control Systems | removed |
| 5.1 | Cardholder Identification | removed |
| 5.2 | Door Reader Interface | removed |
| 5.3 | Authentication Capability | removed |
| 5.4 | Deployed Wiring | removed |
| 5.5 | Software Upgrades | removed |
| 5.6 | Deployed Non-PIV PACS Cards and PIV Card Differences | removed |
| 6 | The PIV Vision | removed |
| 6.1 | Interoperability | removed |
| 6.2 | Qualities of the Complete Implementation | removed |
| 6.3 | Benefits of the Complete Implementation | removed |
| 6.4 | Infrastructure Requirements | removed |
| 7 | PIV Authentication Mechanisms | removed |
| 7.1 | Authentication Factors | removed |
| 7.1.1 | Deployed Proximity or Magnetic Stripe Authentication | removed |
| 7.1.2 | Visual (VIS) Authentication | removed |
| 7.1.3 | Cardholder Unique Identifier (CHUID) Authentication | removed |
| 7.1.4 | Card Authentication Key (CAK) Authentication | removed |
| 7.1.5 | PIV Authentication Key (PKI) Authentication | removed |
| 7.1.6 | BIO Authentication | removed |
| 7.1.7 | BIO-A Authentication | removed |
| 7.1.8 | CAK + BIO(-A) Authentication | removed |
| 7.2 | Multi-Factor Authentication | removed |
| 7.3 | Selection of PIV Authentication Mechanisms | removed |
| 7.4 | PACS Registration | removed |
| 7.5 | Credential Validation and Path Validation | removed |
| 7.6 | Lost PIV Card or Suspicion of Fraudulent Use | removed |
| 8 | PACS Use Cases | removed |
| 8.1 | Single-Tenant Facility | removed |
| 8.2 | Multi-Tenant Facility | removed |
| 8.3 | Mixed-Multi-Tenant Facility | removed |
| 8.4 | Single-Tenant Campus | removed |
| 8.4.1 | FSL I or II Campus Facility | removed |
| 8.4.2 | FSL III Campus Facility | removed |
| 8.4.3 | FSL IV or V Campus Facility | removed |
| 8.5 | Multi-Tenant Campus | removed |
| 8.6 | Role-Based Access Control | removed |
| 8.7 | Temporary Badges | removed |
| 8.8 | Disaster Response and Recovery Incidents | removed |
| 9 | Migration Strategy | removed |
| 9.1 | Project Planning | removed |
| 9.2 | Risk Assessment | removed |
| 9.3 | Business and Functional Requirements | removed |
| 9.4 | Develop Migration Plan | removed |
| 9.5 | Migration Strategy & Tactics | removed |
Read every requirement in this version · All versions of NIST PIV and digital identity