| |
- 08/12/2010 - The Server-based Certificate Validation Protocol (SCVP) profiles V3.0 have been approved by the Security Industry Association .
The GSA FIPS 201 Evaluation Program is pleased to announce that after review by the Security Industry Association the Server-based Certificate Validation Protocol (SCVP) profiles V3.0 (both client and server) have been approved as a baseline implementation of SCVP.
The SCVP provides the capability to determine the validity of a public key certificate by using the processes of path discovery and path validation to verify the binding between the subject identifier and the subject public key in the certificate. The SCVP profiles developed by our program facilitate the implementation of PKI-based authentication mechanisms as identified in FIPS 201 and SP 800-116.
- 06/25/2010 - SP 800-85b Data Conformance Test Tool v6.0.0 Posted.
- 06/25/2010 - The following documents have been posted:
- Electronic Personalization (Product) Approval Procedure v14.0.0
- Electronic Personalization (Service) Approval Procedure v14.0.0
- Electronic Personalization Test Procedure v5.0.0
- 06/15/2010 - SP 800-85b Data Conformance Test Tool v5.3.0 Posted.
- 06/08/2010 - Single Fingerprint Capture Device Approval Procedure v9.0.0 posted
- 06/07/2010 - FIPS 201 Evaluation Program Information Day held at SIA Government Summit 2010.
Click here to view and/or download a copy of the slides presented.
- 06/04/2010 - GSA SCVP Client v1.2.0 Posted.
- 05/20/2010 - The following documents have been posted:
- Card Printer Station Approval Procedure v14.0.0
- Graphical Personalization Approval Procedure v13.0.0
- 05/19/2010 - Updated GSA SCVP Request and Reponse Profiles v3.0.0 Posted.
- 05/12/2010 - Lab Specification v7.0.0 posted.
- 05/12/2010 - Data Populator Tool v2.3.0 Posted.
- 04/27/2010 - The following documents have been posted:
- Authentication Key Reader Approval Procedure v11.0.0
- CHUID Authentication System Approval Procedure v2.0.0
- Biometric Authentication System Approval Procedure v2.0.0
- CHUID Authentication Reader (Contactless) Approval Procedure v5.0.0
- CHUID Authentication Reader (Contact) Approval Procedure v5.0.0
- CAK Authentication System Approval Procedure v2.0.0
- PIV Authentication System Approval Procedure v2.0.0
- Biometric Reader Approval Procedure v11.0.0
- Transparent Card Reader Approval Procedure v9.0.0
- CHUID Reader (Contact) Approval Procedure v9.0.0
- Biometric Authentication Reader Approval Procedure v4.0.0
- 04/07/2010 - The following documents have been posted:
- SCVP Client Approval Procedure v3.0.0
- SCVP Client Test Procedure v1.0.0
- Certificate Validator Test Procedure v2.0.0
- SCVP Client (without authentication capability) Test Procedure v1.0.0
- Certificate Validator (without authentication capability) Test Procedure v1.0.0
- 03/29/2010 - New Product Category - Certificate Validator (without authentication) - Approval Procedure v1.0.0 posted.
- 03/29/2010 - New Product Category - SCVP Client (without authentication) - Approval Procedure v1.0.0 posted.
- 02/02/2010 - Lab Specification v6.0.0 posted.
- 01/26/2010 - The following Approval Procedures Updated:
- CHUID Authentication Reader (contact) v4.0.0
- CHUID Authentication Reader (contactless) v4.0.0
- Biometric Authentication Reader v3.0.0
- PIV Authentication Reader v10.0.0
- 12/03/2009 - SP 800-85b Data Conformance Test Tool v5.2.0 Posted.
- 11/13/2009 - GSA SCVP Client v1.1.0 Posted.
- 10/20/2009 - Electronic Personalization (Product) Approval Procedure v13.0.0 posted.
- 10/20/2009 - Electronic Personalization Test Procedure v4.0.0 posted.
- 10/16/2009 - Lab Specification v5.0.0 posted.
- 10/16/2009 - SP 800-85b Data Conformance Test Tool v5.1.0 Posted.
- 08/17/2009 - Evaluation Request Login form updated to include new categories.
- 08/17/2009 - The following Approval Procedures Updated:
- Cryptographic Module v8.0.0
- SCVP Client v2.0.0
- Biometric Reader v10.0.0
The updates are based on a clarification with reference to FIPS 140-2 requirements.
- 08/11/2009 - Errata sheet posted for the following Approval Procedures.
- Caching Status Proxy v1.0.0
- CAK Authentication System v1.0.0
- Certificate Validator v1.0.0
- CHUID Authentication System v1.0.0
- Biometric Authentication System v1.0.0
- PIV Authentication System v1.0.0
The errata sheet clarifies the requirement of having approved PIV Middleware within the product configuration.
- 07/23/2009 - CCV Registration Procedures Posted.
- 07/22/2009 - GSA SCVP Client v1.0.0 Posted.
- 07/22/2009 - FIPS 201 Evaluation Program Information Day held at GSA.
Click here to view and/or download a copy of the slides presented.
- 06/17/2009 - Electromagnetically Opaque Sleeve Approval Procedure v11.0.0 posted.
- 5/18/2009 - The following new Approval Procedures based on SP 800-116 Posted:
- Caching Status Proxy v1.0.0
- CAK Authentication System v1.0.0
- Certificate Validator v1.0.0
- CHUID Authentication System v1.0.0
- Biometric Authentication System v1.0.0
- PIV Authentication System v1.0.0
- SCVP Client v1.0.0
- 5/18/2009 - The following new Test Procedures Posted:
- CAK Authentication System v1.0.0
- Certificate Validator v1.0.0
- CHUID Authentication System v1.0.0
- Biometric Authentication System v1.0.0
- PIV Authentication System v1.0.0
- 5/15/2009 - The following Approval Procedures Updated and Posted:
- CHUID Authentication Reader (Contact) v3.0.0
- CHUID Authentication Reader (Contactless) v3.0.0
- Biometric Authentication Reader v2.0.0
- Authentication Key Reader v9.0.0
Updated requirements for cryptographic module validation.
- 4/15/2009 - EPTWG Meeting minutes from 4.7.09 posted.
- 01/08/2009 - SP 800-85b Data Conformance Test Tool v5.0.3 Posted.
This version of the tool incorporates the test to check content within the data containers previously performed using v5.0.2 of SP 800-85B tool.
- 12/12/2008 - Suppliers Handbook v5.0.0 Posted.
- 12/04/2008 - Lab Qualification Procedures and Requirements v2.5.0 Posted.
- 11/26/2008 - SP 800-85b Data Conformance Test Tool - Content Verifier v5.0.2 Posted.
This version of the tool incorporates tests to check content within the data containers.
- 11/26/2008 - SP 800-85b Data Conformance Test Tool v5.0.1 Posted.
This version of the tool incorporates SP 800-73-2 related tests.
- 11/18/2008 - atsec information security corporation approved as an EP Lab.
- 11/17/2008 - Suppliers Handbook v4.0.0 Posted.
- 08/22/2008 - Electromagnetically Opaque Sleeve Approval Procedure v10.0.0 posted.
- 08/11/2008 - Suppliers Handbook v3.0.0 Posted.
- 08/04/2008 - SP 800-85b Data Conformance Test Tool v4.0.9 Posted.
- 08/04/2008 - Removed Products List (RPL) added to the Evaluation Program's Website.
- 07/31/2008 - PIV Card Approval Procedure v9.0.0 posted.
- 07/18/2008 - SP 800-85b Data Conformance Test Tool v4.0.8 Posted.
- 07/18/2008 - Meeting minutes from the EPTWG held on 06/17/2008 posted.
- 07/11/2008 - Facial Image Capturing Middleware Test Procedure v1.0.0 posted.
- 07/09/2008 - New Product Category - Biometric Authentication Reader - Approval Procedure v1.0.0 posted.
- 06/02/2008 - Graphical Personalization Approval Procedure v12.0.0 posted.
- 05/28/2008 - PIV Card Approval Procedure v8.0.0 posted.
- 05/19/2008 - Facial Image Capturing Middleware Approval Procedure v8.0.0 posted.
- 05/14/2008 - Electromagnetically Opaque Sleeve Approval Procedure v9.0.0 posted.
- 05/14/2008 - Card Printer Station Approval Procedure v13.0.0 posted.
- 05/06/2008 - Suppliers Handbook v2.0.0 Posted.
- 05/06/2007 - Appeals Form (orginally NCR Form) v3.0.0 Posted.
The Non-conformance Review (NCR) form has been renamed to Appeals Form and updated appropriately to be used in cases other than review of non-conforming products and services.
- 04/28/2008 - PIV Facial Image Test (PFIT) Tool v1.0.1 Posted.
- 04/28/2008 - SP 800-85b Data Conformance Test Tool v4.0.7 Posted.
- 04/16/2008 - GSA FIPS 201 Evaluation Program documentation is open for public comments.
Interested parties can use the comments submission form to submit any comments they may have on any of the Evaluation
Program's documents (Approval Procedures, Supplier Handbook etc).
Please email the completed form to fips201eplabmain@gsa.gov. The last day for submission of comments is 05/16/2008.
- 04/14/2008 - Cardholder Facial Image Test Tool v1.0.0 Released.
- 04/10/2008 - SP 800-85b Data Conformance Test Tool v4.0.6 Posted.
- 04/08/2008 - Electromagnetically Opaque Sleeve Approval Procedure v8.0.0 posted.
- 03/27/2008 - Evaluation Program Technical Working Group scheduled for April 16, 2008 between 10.00 and 11.30am at GSA.
- 03/06/2008 - Lab Qualification Procedures & Requirements v2.4.0 Posted.
- 03/05/2008 - SP 800-85b Data Conformance Test Tool v4.0.5 Posted.
- 03/05/2008 - Updated Errata posted for Card Printer Station and Graphical Personalization Categories.
Vendor Test Data Reports are required for submission by all approved Suppliers and those submitting Products under these categories. Required additional tests specified in ANSI 322 for card durability.
- 02/25/2008 - Biometric Reader Approval Procedure v9.0.0 posted.
- 02/22/2008 - Errata posted for Card Printer Station and Graphical Personalization Categories.
Vendor Test Data Reports are required for submission by all approved Suppliers and those submitting Products under these categories. Required tests include two abrasion tests specified in ANSI 322.
- 01/11/2008 - SP 800-85b Data Conformance Test Tool v4.0.4 Posted.
- 11/08/2007 - SP 800-85b Data Conformance Test Tool v4.0.3 Posted.
- 11/02/2007 - All Approval Procedures revised and posted.
All 23 approval procedures have been revised in structure based on the newly created Supplier's Handbook. These procedures now contain only information relevant to that category. All general information is available in the Supplier's Handbook.
- 10/19/2007 - SP 800-85b Data Conformance Test Tool v4.0.1 Posted.
- 10/18/2007 - The following Approval Procedures Updated and Posted:
- Electronic Personalization v12.0.0
- Electronic Personalization (Service) v12.0.0
Updated to include requirements specified by SP 800-78-1.
- 10/18/2007 - The following Approval Procedures Updated and Posted:
- Card Printer Station v12.0.0
- Graphical Personalization v11.0.0
Updated to include requirements specified by SP 800-104.
- 10/18/2007 - EPTWG Distribution List.
In order to participate in the EPTWG, please send an email to
fips201eplabmain@gsa.gov with "Request EPTWG Participation" in the Subject line.
- 10/17/2007 - New Suppliers Handbook v1.0.0 Posted.
This document provides details on the policies that apply and procedures that need to be followed by Suppliers as they submit products and services for evaluation.
- 10/16/2007 - FIPS 201 Evaluation Program Information Day held at GSA.
Click here to view and/or download a copy of the slides presented.
- 08/29/2007 - FIPS 201 Evaluation Program Information Day set for October 16, 2007.
Click here to view the agenda.
- 08/28/2007 - Updated Lab Specifications Document v4.0.0 Posted.
Details on the upgrade procedure to be followed by the Lab is included in this version.
- 08/28/2007 - Upgrade Form v1.2 Posted.
Detail on the upgrades process provided within the form and form fields updated to be aligned with the new procedure.
|
|
|
|
Product/Services Category List
Evaluation Program CONOPS
Requirements Traceability Matrix
Acquisition Process
Card to Reader Interop Guideline
Agency APL Verification List
Test Card Configurations
Suppliers Handbook
CCV RTM
CCV Req and Resp Profiles
SP 800-85B Content Verification RTM
Lab Documentation
Forms and Templates
Approval Procedures
Test Procedures
Special Publications
Supporting Documents
|
|
