4 ms·
You don't use your PIV anywhere because you don't want your creds--certs, etc--to be swiped. You use it for facility access and PKI.
by aimonster2 2y ago
You don't use your PIV anywhere because you don't want your creds--certs, etc--to be swiped. You use it for facility access and PKI.
- lxgr 2y agoIsn’t there a PIN to protect these? Also, I’m assuming GP meant “not visually displaying as ID”, not “trying to swipe the PIV at a random computer”?
- rkeene2 2y agoThe PIN is required to get the card to perform cryptographic operations, not list certificates -- although the certificates aren't a secret, within DOD there's sites like DOD411 to get anyone's certificate, though I haven't checked for an FPKI equivalent. The real reason not to use your PIV for ID in random places is that it's meant to be used as an ID for you acting as your official capacity. This can also be seen in the case where people have multiple PIVs to represent their multiple identities, like National Guard who may have a PIV as a contractor and a PIV as a National Guard -- they would use the correct one depending on what capacity they are acting, or none if it's not part of their official duties.