pivCLASS Solutions Brochure - HID Global

pivCLASS ® Validation Server
Software Components:
pivCLASS Validation Service:
periodically generates and
distributes updated validation
status of all enrolled credentials
pivCLASS Management Station:
configures and manages the
various PAMs connected to the
system.
Path Builder SerVE Client: used
to support path discovery and
revocation checking using either
the OCSP or SCVP protocols.
Optional pivCLASS Enroller: for
systems that do not already
have PKI enabled registration
functionality.
Figure 2
pivCLASS ® Validation Server
The pivCLASS Validation Server is a software
solution that provides centralized management
and control of pivCLASS system components.
The software regularly communicates with
external trust authorities, imports updated
credential information and sends that
information via Ethernet (AES256 encryption
optional) to the pivCLASS Authentication
Modules for enforcement.
pivCLASS ® System Diagram
pivCLASS Validation Server
Communicates with Trust
Authorities
The software validates multiple card types,
including PIV, PIV-I, CIV (PIV-C), CAC NG, CAC
EP, Legacy CAC, TWIC and FRAC, and supports
multiple authentication modes including
FASC-N, CHUID, CAK, PIV + PIN, CHUID + BIO,
CAK + BIO, and PIV + PIN + BIO.
The pivCLASS Validation Server also configures
PAMs and manages their firmware updates. An
API enables third party integration to physical
access control system software. Typically, an
agency will install the pivCLASS Validation
Server software on one dedicated server in
each site, although alternative configurations
can be implemented to meet specific needs.
PACS
Controller/Panel
Existing Physical
Access Control System
(PACS)
pivCLASS ®
Authentication
Module
Authentication Module
& Reader Functions
Signature checks
Private key challenge
Conformity & freshness checks
PIN & BIO checks
PACS
Software
Existing Security Mgmt
System Head-end
pivCLASS ®
Validation
Server
The communication flow between pivCLASS
elements and other parts of the architecture is
detailed in Figure 2.
Genuine HID
With Genuine HID, the
U.S. Federal Government,
government contractors
and other facilities
Validation Server Functions
Path discovery
Path validation
Revocation checking
Construct FACL
benefit from the broadest
product line of trusted,
fully interoperable secure
G E N U I N E
s e c u r e i d e
identity solutions in the market. Genuine HID
solutions are designed and built in IS0 9001
certified facilities; include worldwide agency
certifications; and are backed by global
n t i t y
product warranties. Supported by industry-
leading expertise and the strongest delivery
and response platform available, Genuine HID
solutions reinforce the long-standing trust that
when customers purchase from HID Global,
they are investing with absolute confidence.
Validation Authorities
Federal Bridge, CRL, OCSP,
SCVP, TWIC Cancelled Card List