BaselineWatch
Desk

B.1.1 Derived PIV Application Identifier

NIST PIV and digital identity SP 800-157 Rev. 1 (Draft)
All changes in this version
first version loaded Appendix B Data Model and Interfaces for Removable or Wireless PKI-Based Cryptographic 840 part of B.1

Title

Derived PIV Application Identifier

Control

The PIV application ID (AID) SHOULD be used to maximize interoperability with PIV Cards. For reference, that application ID is (in hexadecimal):

A0 00 00 03 08 00 00 10 00 01 00

Alternatively, the derived PIV application identifier defined in the previous edition of this guideline MAY be used. This application ID is deprecated and may not be included in future editions of this guideline. That application ID is (in hexadecimal):

A0 00 00 03 08 00 00 20 00 01 00

No other application ID SHALL be used.

The PIV or derived PIV application can be selected as the current application on the removable cryptographic token by providing the full AID listed above or the right- truncated version, as follows (hexadecimal):

A0 00 00 03 08 00 00 x0 00

where ‘x’ is either 1 for the PIV application or 2 for the derived PIV application.