Download Here - Common Access Card (CAC)

More documents

Recommendations

Info

PKCS11 Public Key Cryptography Standard #11 PKI Public Key Infrastructure PIN Personal Identification Number PIV Personal Identity Verification UNCLASSIFIED 8
2 Middleware Background 2.1 Middleware Definitions Middleware is defined as the software application that serves as the interface between host applications (such as email, cryptographic network logon, web browsers, and PKenabled applications) and the CAC. Functionally, middleware provides access to cryptographic services, CAC data, and CAC management features. 2.2 Cryptographic Services Cryptographic services are the set of functions necessary for cryptographic operations, such as signing and encrypting email. Middleware provides cryptographic services through three standards-based interfaces: MS-CAPI, MS-CAPI Next Generation (CNG), PKCS11, and BSI. 2.3 CAC Data CAC data is defined as non-cryptographic data stored on the CAC such as name, rank and person identifier. 2.4 CAC Management CAC management is the set of functions necessary to manage the card and the middleware environment, such as PIN changes and PIN timeout. 2.5 New Card Type A new card type is a smart card that is functionally equivalent to the CAC that is currently being issued, which has been selected by the DoD to replace the CAC in the future. Functional equivalency means that new features and changes in the middleware are restricted to version updates within a software release and changes required to make the CAC operational. 2.6 New Applet A new applet is an applet, approved for use on the CAC by DoD, that provides unique functionality not available with current approved DoD applets. A new instantiation of an existing applet, for example a Generic Container Applet, is not a new applet. 2.7 Modified Applet A modified applet is an applet, previously approved for use on the CAC by DoD, where the functionality, data and/or layout is changed to accommodate new features, requirements, or capabilities. A new instantiation of a modified PKI Container Applet would be an example of a modified applet. UNCLASSIFIED 9
Page 1 and 2: DoD CAC Middleware Requirements Rel
Page 3 and 4: 5.3 PIN Services ..................
Page 5 and 6: Document Revision History Date Vers
Page 7: 1.5 Document Objectives The objecti
Page 11 and 12: 3 Middleware Requirements 3.1 Requi
Page 13 and 14: 4.2.2 Middleware must be configurab
Page 15 and 16: 4.4 Common Access Card (CAC) and Al
Page 17 and 18: Operating Systems Supported by Midd
Page 19 and 20: 4.8.1.3 Only items relative to the
Page 21 and 22: 4.12.2 PIN Change 4.12.2.1 Middlewa
Page 23 and 24: 4.14 Process Descriptions 4.14.1 Mi
Page 25 and 26: 5.1.10 Middleware should monitor sm
Page 27 and 28: Section B: Requirements for CAC Mic
Page 29 and 30: 6.3.1.3 CAC Developer’s Kit versi
Page 31 and 32: 6.5.3.4 Minidriver implementation s
Page 33 and 34: 6.8.3 Client Authentication 6.8.3.1
Page 35 and 36: Section C: Requirements for CAC PKC
Page 37 and 38: 7.3.1.6 National Institute of Stand
Page 39 and 40: 7.5.5 Certificates 7.5.5.1 PKCS11 i
Page 41 and 42: 7.9.3.4 PKCS11 shall indicate to th
Page 43 and 44: Example [HKEY_LOCAL_MACHINE\SOFTWAR
Page 45 and 46: Figure 5: Web Servers, Browsers, an
Page 47 and 48: Appendix B- CSP Functions All CSPs
Page 49 and 50: one[0].pValue = &cko_data; char*)tw
Page 51 and 52: Appendix E- BSI Header Files The la
Page 53 and 54: Industry References • GlobalPlatf
Page 55 and 56: Appendix G- List of CAC Platform Co
Page 57 and 58: Attributes Current Platforms Card M

Download Here - Common Access Card (CAC)

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?