Appendix B XML Sample PIV ChainOfTrust Record

<? xml version = "1.0" encoding = "utf - 8" ?> <nist:PIVChainOfTrust xmlns:nist = " http://csrc.nist.gov/ns/piv/chain - of - trust/1.0 " > <nist:EnrollmentRecord> <nist:PersonalInformation> <nist:PrimaryIdentifier> Doe </nist:PrimaryIdentifier> <nist:SecondaryIdentifier> Jane </nist:SecondaryIdentifier> <nist:PrintedName> Jane Doe </nist:PrintedName> <nist:IsUSCitizen > true </nist:IsUSCitizen> <nist:CitizenshipCountryCode> US </nist:CitizenshipCountryCode> <nist:CardUUID> bb3618a0 - 4d26 - 11e5 - 885d - feff819cdc9f </nist:CardUUID> <nist:CHUID> 538206493019D4F81oD901156010020285836oDRB4BC32D14F8184388E13FC341830303038303030 3830303030303830303538323031313B333 B343E82068D30820689060929864886F7BD8187829082SFR308205F68201033189300786052BBEB30219388906086386488165030601908284233082841F3 882038890 03020102020219E13000068929864886F7BDo10105050030503103388906035584861302555331183816860 355048913oF552E532E28476F7665726E6D656E74318038 09860355048B1303446F44318C380906035504oB138358484931173815868355040313oE444F44204R4954432843412D3133381E17BD3B373B31323231393 238343459 17BD31323031323131393238343459306231BB3809868355048613825553311838168603558 48913BF552E532E23476F7665726E6D656E74318C388906835504881383 446F44313C338906B35584BB13B3534B49311D381306035584331314446F44284361726420497373756572205438303738819F3ooDo68929864886F780010 101050003 818Do83081890281818oD4C2B97DD4F37C1RBD573094286B2058DE9B2667DDE 1924981140673DB3BC8ED285663E8563475ECC3EE1100809028DDGE88BFBSR9B8964CBB 4BESF81E1ERSB342992298F557F44905C6709B37326B47D66DSC313D1965BRE33FZBQFD34FEo571FDDBlBBl43DEB8EDSDI4B297C83EEF2CB8771E8E640342 9C7F74flE D982D69050203010801fl38201E8308201E4301Fo603551D23B 41830168014DB88CB96584EFQCD4D107E994EZB4FC173D37917301Do603551DBEB416B414773988D289 E69D889D4EIC7F28C99DS91297697938138683551D2584BC3889060868864801658386873BBE8683551DBFBlBlFFB4848302860038160683551D2884oF3BB D38038609 6886480165823183093081DF8683551D1F8481D 73881D4383898399037863568747478392F2F63726C2E6764732E6E69742E646973612E6D696C2F67657463726C3F44 4F4425323849495443253230434120313330819498819190818E86818B6C646170392F2F63726C2E6764732E6E69742E646973612E6D696C2F636E2533644 44F442532 304949544325323043412031332 532636F752533645048492532636F75253364446F442532636F253364552E532E253230476F7665726E6D656E742532636325336455 533F63657274696669636174657265766F636174696F6E6C6973743B62696E61727933818206082886810505873101@476307438420688230601058507388 286366874 7478392F2F63726 €2E6764732E6E69742E646973612E6D696C2F6765747369676E3F444F442532304fl49544325323843412D3133382E8608230681850587308186226 8747470392F2F6F6373782E6E736E382E726376732E6E69742E646973612E6D696CBBBD868929864886F7BD818185850883818188B631481DF3DD55029782 9919FB464 R75 063387378203BF3E7DFCICSSERD91F104E562893996CRFD8613EC3B991592904529371oD3B4CDQBB4DFBS478oF867Q61918433922259CEOE37BR944504145 C258E5 837089942418CE382215028nCB3EC4BFF26B372D5F340754DE6787CR3953SF509FE854CZBC9CBF881426917078590318201B1308201900201013062305C31 083809060 35504B61302555331183816860355048913oF552E532E28476F7665726E6D656E7431003889860355048B1303446F44318C30090603550403130350434931 173815868 355040313oE444F44284R4954432843412D3133028219E13BB7B6BSZBBEB38219988199381186836729083189868860864881658386813823 068929864886F78Do109B 431168414EDDBB7R710158C6689F66828D73421FCSZB460843078068860864881658386853164306231BB3809068355848613025553311833168683558439 13BF552E5 32E20476F7665726E6D656E7431oC3BBRB6035584BBI383446F44310€308906035504BB1303504349311D3018068355048313 14446F442043617264284973737565722 05430383738oB868929864886F7BDo1010584818980162C29697DF641EE7E141C2BC29B41689SF96FB77R79959E69C4438DFDC7BBE9128E8D05BDDSRFF819 4RB3C4E61 37EB9354B8F3773DC142F7F57E9E1E244BCBFRR3E949D9724B1BFCR49F9E1C2B1CB821B3BD1flECD9RF636SCD 2BE95CF5C64808879D67942CF4B18624F4763F9BBD713 Do4CDD899FE480629F4235BCEB3884FEBB </nist:CHUID> </nist:PersonalInformation> <nist:AdjudicationInformation> <nist:NACIAdjudicationValue> Approved </nist:NACIAdjudicationValue> <nist:NACIAdjudicationEffDat e> 2014 - 12 - 13 </nist:NACIAdjudicationEffDate> </nist:AdjudicationInformation> <nist:EnrollmentPackage> <nist:EPBiographic> <nist:GenderCode> Female </nist:GenderCode> <nist:EyeColorCode> Brown </nist:EyeColorCode> <nist:HairColorCode> Brown </ni st:HairColorCode> <nist:Height> 508 </nist:Height> <nist:Weight> 150 </nist:Weight> <nist:EthnicityCode> W </nist:EthnicityCode> <nist:EnrollmentDate> 2015 - 11 - 13 </nist:EnrollmentDate> </nist:EPBiographic> <nist:EPBiometrics> <nist:Photo> Base64EncodedData... </nist:Photo> <nist:FingerprintsOffCardComparisonRepresentation> Base64EncodedData... </nist:FingerprintsOffCardComparisonRepresentation> <nist:FingerprintOnCardComparisonRepresentation> Base64EncodedData... </nist:FingerprintOnCard ComparisonRepresentation> <nist:Iris Representation > Base64EncodedData... </nist: Representation Iris> </nist:EPBiometrics> <nist:EPDocument> <nist:DocumentTypeIdentifier> Primary identity source </nist:DocumentTypeIdentifier> <nist:DocumentTypeCod e> Driver's license or an ID card issued by a state or possession of the United States provided it contains a photograph </nist:DocumentTypeCode> <nist:DocumentNumber> T12345678 </nist:DocumentNumber> <nist:SequenceNumber> 00001 </nist:SequenceNumber> <nist:CountryCode> USA </nist:CountryCode> <nist:StateCode> VA </nist:StateCode> <nist:ExpiryDate> 2018 - 12 - 18 </nist:ExpiryDate> <nist:DocumentImageFront> Base64EncodedData... </nist:DocumentImageFront> <nist:DocumentImageBack> Base64EncodedData.. . </nist:DocumentImageBack> <nist:CollectionDate> 2012 - 12 - 13 </nist:CollectionDate> </nist:EPDocument> <nist:EPDocument> <nist:DocumentTypeIdentifier> Secondary identity source </nist:DocumentTypeIdentifier> <nist:DocumentTypeCode> U.S. Social Security Card issued by the Social Security Administration </nist:DocumentTypeCode> <nist:SequenceNumber> 123 - 12 - 1234 </nist:SequenceNumber> <nist:CountryCode> USA </nist:CountryCode> <nist:DocumentImageFront> Base64EncodedData... </nist:DocumentImage Front> <nist:DocumentImageBack> Base64EncodedData... </nist:DocumentImageBack> <nist:CollectionDate> 2012 - 12 - 13 </nist:CollectionDate> </nist:EPDocument> </nist:EnrollmentPackage> <nist:PIVCardTopography> <nist:EmployeeAffiliation> Employee </n ist:EmployeeAffiliation> <nist:AgencyDepartmentOrOrganization> DHS </nist:AgencyDepartmentOrOrganization> <nist:CardExpirationDate> 2016 - 12 - 13 </nist:CardExpirationDate> <nist:AffiliationColorCode> W </nist:AffiliationColorCode> <nist:AgencyCardSeria lNumber> 987654321 </nist:AgencyCardSerialNumber> <nist:IssuerIdentificationNumber> 123456123412345 </nist:IssuerIdentificationNumber> <nist:Signature> Base64EncodedData... </nist:Signature> <nist:AgencySpecificText4F> Zone 2 Approved </nist:AgencySpecifi cText4F> <nist:Rank> SES </nist:Rank> <nist:PDFBarCode> Base64EncodedData... </nist:PDFBarCode> <nist:Header> United States Government </nist:Header> <nist:AgencySeal> Base64EncodedData... </nist:AgencySeal> <nist:Footer> Federal Emergency Response O fficial </nist:Footer> <nist:PhotoBorder> Base64EncodedData... </nist:PhotoBorder> <nist:AgencySpecificData> str1234 </nist:AgencySpecificData> <nist:OrganizationalAffiliationAbbreviation> DHS </nist:OrganizationalAffiliationAbbreviation> <nist:Ridgin gOrNotchedTactileMarker> Ridging </nist:RidgingOrNotchedTactileMarker> <nist:LaserEngraving> true </nist:LaserEngraving> <nist:ReturnAddress> Return to: Washington Navy Yard, Building 410, 245 Murray Lane SW Washington , DC 20528 </nist:ReturnAddress> <n ist:AdditionalLanguageForEmergencyResponseOfficials> Priority 1 </nist:AdditionalLanguageForEmergencyResponseOfficials> <nist:StandardSection499Title18> This credential is the property of the U.S. Government. Counterfeiting, altering, or misusing violates Section 499, Title 18 of the U.S. Code. </nist:StandardSection499Title18> </nist:PIVCardTopography> </nist:EnrollmentRecord> <ds:Signature xmlns:ds = " http://www.w3.org/2000/09/xmldsig# " > <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm = " http://ww w.w3.org/2001/10/xml - exc - c14n# " /> <ds:SignatureMethod Algorithm = " http://www.w3.org/2001/04/xmldsig - more#rsa - sha256 " /> <ds:Reference URI = "#_65c217dd - 6589 - 4830 - a277 - 2083fe4a6183" > <ds:Transforms> <ds:Transform Algorithm = " http://www.w3.org/2000/09 /xmldsig#enveloped - signature " /> <ds:Transform Algorithm = " http://www.w3.org/2001/10/xml - exc - c14n# " /> </ds:Transforms> <ds:DigestMethod Algorithm = " http://www.w3.org/2001/04/xmlenc#sha256 " /> <ds:DigestValue> BaCypVvGnmkJvmHImOfavpbrq1f4bL9HasRWG mm7HW0= </ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue> dmbTWZKUYFquHclxtaGOoPYt6Y/J7aFSwj5kfaWIQRG6StlVUk/2OBl7iIDuvRKOYSjwRTpGOXFikjh+iXuA1M+fRKpdTTHPQx/jyLuZDUhcKLWmK/4Sf1DWC39pR Lu Rue5ZSA6zMut+CFEO/x75BQVI2+qwBxCBGLkW V7Bw00JVkYTAV9ILAfP4PNQopnvYA25XAn7XjLX+a/0cC5/l9HB8G1TCKbEmTIBok3oW/j4YaofUhz+zp0Q7YZMMAXZDW3P3B S2Jy6C90xnihvqBhrQaSCI+acQ1EvLPq8843IUMjSu6Fxr0NOeBBx9sqa837eMlUZZ2UVooOa83q2CHww== </ds:SignatureValue> <KeyInfo xmlns = " http://www.w3.org/2000/09/xmldsig# " > <X509Data> <X509Certificate> MIIFPzCCBCegAwIBAgIHKySIQq+lZDANBgkqhkiG9w0BAQUFADCByjELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTCl Njb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMTMwMQYDVQQLEypodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9 zaXRvcnkxMDAuBgNVBAMT J0dvIERhZGR5IFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTERMA8GA1UEBRMIMDc5NjkyODcwHhcNMTQwODE5MTg1NjAxWhcNMTUwODE5MTg1NjAxWjA7M SEwHwYDVQ QLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFjAUBgNVBAMMDSoudHNjcGxhYi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwA wggEKAoIBAQC3begiEJktcO17B3DdNGYJ +KFC4E9sgh0VgkzYas4DVcT9CFAvWaeZCC8Gqp/ywfA4fjIE9U5Toe+t/o9CMReqmnKX52Zd8iGhCawgsdZOLEq5E5Zxe5OJG1IKH+KNH2q1lJPpSd2LShqmqHawq nGplF5Dz9 vSMEcBxXePO/vWInTIkpUCdaKM0DGW34wWZsuk0fpFSjABGxVBsVoy7R40gnDvCBLDDHs7NydorpBrD5hp194feqN TWpda6TgLrsYkh1Ln0AD4y9509u4bHzIsgzac/FFGAJzW ZZ8+9VbsMpB02GlbjFK4NRAiZHTPlAiJwH6xHQxQzSl1acnq65udAgMBAAGjggG2MIIBsjAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFB QcDAjAOBg NVHQ8BAf8EBAMCBaAwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZHM xLTExMi5jcmwwUwYDVR0gBEwwSjBIBgtghkgBhv1tAQcXATA5MDcGCCsG AQUFBzIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMIGABggrBgEFBQcBAQR0MHIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwL mdvZGFkZH kuY29tLzBKBggrBgEFBQcwAoY+aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmN vbS9yZXBvc2l0b3J5L2dkX2ludGVybWVkaWF0ZS5jcnQwHwYDVR0jBBgwFoAU/axhMpNs Rdbi7oVfmrrndplozOcwJQYDVR0RBB4wHIINKi50c2NwbGFiLm9yZ4ILdHNjcGxhYi5vcmcwHQYDVR0OBBYEFP0E9r1Mgzp48Kd74+fbhZjUvzZQMA0GCSqGSIb3D QEBBQUAA4 IBAQAxl/u3Nb8mG5Bm4tWV+j+NW2PqwvLVL2qTafk+fNwlI46Rjxm b4+QR2xZbYytO0zPPa9rszVQy43SA2+sOD5OAWoUv+P7lOX87d26Nzi/gAJCgfbLj6YMaeOKfut5KIVih h2x/CJbV12w3Gn0Jf6TUYi/6HayKrDVAw1MFNzTS0oFCWOZj9I1KIyhe99+s+h5rIVjT75ETyPn3jfjmiWr4sXwswjdGhuxOrgq0tonKI6NdzQnC1OAgvFcAiMzJT +RmN8Ltat SwESv5YBND8PYJ/1rD2nGVI27S/LkAMeWCQxGf+9w FtzuqzYtbX1nxv5ksvimzJ+cOaa/BcAYkGC10 </X509Certificate> </X509Data> </KeyInfo> </ds:Signature> </nist:PIVChainOfTrust>

`Appendix B` XML Sample PIV ChainOfTrust Record

Title

Control