Test the PIV / PIV-I Configuration

This section describes how to test the PIV Personal Identity Verification (technical standard of "HSPD-12") configuration by issuing a PIV-compliant smart card in a one-step issuance mode, using a Face-to-Face device policy.

Prerequisites: Before you start testing, make sure that:
  • You have properly configured the ActivID CMS server and at least one device policy for PIV card issuance.

  • You have a supported biometric device (SecuGen® Hamster™ IV v2 or Precise™ Biometrics Fingerprint Reader) connected to the issuance station and a blank or recycled PIV-compliant smart card available.

ActivID CMS cannot issue a PIV / PIV-I card without first receiving a Card Production Request (CPR). In a production environment, the CPR is sent by the Identity Management System (IDMS).

In a testing environment, as it is shown in the following sections of this documentation, IDM is not present, and the sending of the CPR is going to be simulated using one of the PIV Toolkit testing tools.

In the example shown in this section, the PIV card is issued with both the user’s fingerprint and facial Image biometric samples. In your own environment, one or both of these applications may not be present within your smart card deployment. However, the fingerprint sample enrollment is mandatory for a PIV-compliant workflow.

Topics in this section: