BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

D.1.1 Derived PIV Application Identifier

NIST PIV and digital identity SP 800-157 Rev. 1 (Draft)
All changes in this version
first version loaded Appendix D Physical Access 1151 part of D.1

Title

Derived PIV Application Identifier

Control

Either the PIV card application identifier (AID) defined in Sec. 2.2 of [SP800-73pt1] or the derived PIV application AID, defined in Appendix B , SHALL be used. To maximize compatibility with existing PACS readers, the AID of the PIV card application SHOULD 1188 1189

1190

1191

1192

1193

1194 1195

1196 1197 1198

1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209

1210 1211

1212 1213 1214 1215 1216 1217

1218 1219 1220 be used unless the use of the derived PIV AID for logical access makes this infeasible.

For reference, the AID of the PIV card application is (in hexadecimal):

A0 00 00 03 08 00 00 10 00 01 00

The AID of the derived PIV application is (in hexadecimal):

A0 00 00 03 08 00 00 20 00 01 00

The desired application can be selected by providing the full AID listed above or a truncated version that omits the last two bytes ‘01 00’.