Appendix G Change Log 1436

1437 1438

1439 1440

1441 1442

1443

1444

1445

1446 1447

1448 1449

1450 1451

1452 1453

1454

1455

1456

1457 1458

1459

1460 1461

1462 1463 This appendix is informative. It provides an overview of the changes to SP 800-157 since its initial release.

• Throughout — Removed restrictions to only use derived PIV credentials on mobile devices

• Sections 1.1, 1.2 — Allowed binding of non-PKI-based derived PIV credentials at AAL2 and AAL3

• Sections 1.2, 2.1, 2.2, 3.1, 3.2, C — Changed assurance levels from LOA to AAL

• Sections 1.4, 2.2 — Removed relationship to obsolete OMB memoranda

• Section 2.1 — Added life cycle of non-PKI-based derived PIV credentials

• Sections 2.2.1, 2.2.2 — Added detail on issuance for PKI and non-PKI-based derived PIV credentials

• Sections 2.3.1, 2.3.2 — Added detail on maintenance for PKI and non-PKI-based derived PIV credentials

• Sections 2.4, 2.4.1, 2.4.2 — Added invalidation detail, replacing linkage with PIV Card

• Section 3.1, 3.2 — Reorganized sections into PKI and non-PKI-based derived PIV credential requirements

• Section 3.1.3 — Removed specific physical details for authenticators

• Sections 3.1.4, 3.2.3 — Referenced SP 800-63B for activation requirements

• Section 3.3 — Added reference to binding requirements in SP 800-63B

• Appendix B.1.2, B.1.3 — Added secure messaging and VCI capabilities for removable and wireless authenticators

• Appendix C.1 — Added reference to issuance requirements in SP 800-63B

• Appendix C.2 — Updated existing PIV credential issuance example and added example of issuance of non-PKI-based derived PIV credentials

• Appendix D — New appendix on the use of derived PIV credentials with physical access control systems

`Appendix G` Change Log 1436

Title

Control