While there is plenty of guidance available for issuing PIV credentials to government employees, challenges still exist. “The value of Special Publication 800-116 is that it lays out how to implement PIV cards, now that you have them,” according to Consuelo Bangs, senior program manager at MorphoTrak. However, it’s not that easy as Bangs explains challenges and hurdles each agency must evaluate when looking to utilize their investment in PIV cards.

Interoperability, including how the card authentication key is placed on the card and different technologies being used are some hurdles to conquer, Bangs says.

Another challenge that federal agencies have is validating certificates on the cards for physical access control. “You have more than 50 different certificate authorities issuing certificates.” So how does an agency’s PACS know that a card is valid? “It’s a process that is ongoing in the background all the time … a certificate manager.”

---

Related articles:

Is cryptography the future of physical access control? Will PIV-I be the identity standard of the future? PIV and multi-factor authentication