+IA-08(05) Acceptance of PIV-I Credentials

IA-08(05) Acceptance of PIV-I Credentials

Control

Accept and verify federated or PKI credentials that meet [Assignement: policy].

Discussion

Acceptance of PIV-I credentials can be implemented by PIV, PIV-I, and other commercial or external identity providers. The acceptance and verification of PIV-I-compliant credentials apply to both logical and physical access control systems. The acceptance and verification of PIV-I credentials address nonfederal issuers of identity cards that desire to interoperate with United States Government PIV systems and that can be trusted by Federal Government-relying parties. The X.509 certificate policy for the Federal Bridge Certification Authority (FBCA) addresses PIV-I requirements. The PIV-I card is commensurate with the PIV credentials as defined in cited references. PIV-I credentials are the credentials issued by a PIV-I provider whose PIV-I certificate policy maps to the Federal Bridge PIV-I Certificate Policy. A PIV-I provider is cross-certified with the FBCA (directly or through another PKI bridge) with policies that have been mapped and approved as meeting the requirements of the PIV-I policies defined in the FBCA certificate policy.

Assessment Objective

  1. federated or PKI credentials that meet [Assignement: policy] are accepted;
  2. federated or PKI credentials that meet [Assignement: policy] are verified.

Assessment Method

Examine

Identification and authentication policy system security plan procedures addressing user identification and authentication system design documentation system configuration settings and associated documentation system audit records PIV-I verification records evidence of PIV-I credentials PIV-I credential authorizations other relevant documents or records

Interview

Organizational personnel with system operations responsibilities organizational personnel with information security responsibilities system/network administrators system developers organizational personnel with account management responsibilities

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by IA-08(05) Acceptance of PIV-I Credentials – Assessment Procedure
is blocked by Acceptance of PIV Credentials