Personal Identity Verification Card Management Report

摘要

This report provides an overview of card management systems, identifies generic card management requirements, and considers some technical approaches to filling the existing gaps in PIV card management. The primary guiding principles in selecting technical approaches for consideration are that they should require no changes to the existing PIV specifications and should conform to applicable formal standards. Expanding the PIV command set to include management and personalization would result in a higher level of consistency and testability for PIV card issuance processes, enhanced ability to outsource various card management components and functions, and improved overall security for the federal PIV framework.