Abstract
NIST Special Publication 800-73 (
http://piv.nist.gov) provides technical specifications for Personal Identity Verification (PIV) cards. However, it does not contain a complete card management specification for PIV systems. This Report provides an overview of card management systems, identifies generic card management requirements, and considers some technical approaches to filling the existing gaps in PIV card management. The primary guiding principle in selecting technical approaches for consideration is that they require no changes to the existing PIV specifications.