808bits

ActivIdentity Digital Identity Applet Suite V2 for Extended PIV

FIPS 140-2 certificate #962 · ActivIdentity, Inc. · data as of 2026-10-21

ActivIdentity Digital Identity Applet Suite V2 for Extended PIV, from ActivIdentity, Inc., holds FIPS 140-2 certificate #962 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number962
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle-chip
VendorActivIdentity, Inc. · website
Hardware versionsP/N 77 Versions E303-063683 and E303-063684
Firmware versionsACA applet package v2.6.2.A3, PKI/GC applet package v2.6.2.A1, ASC library package v2.6.2.A1, PIV End-Point package v2.6.2.A1 and v2.6.2.A2, SKI applet package v2.6.2.A2

Module description

Quoted from the NIST CMVP entry for this certificate.

This version of the product can be used over contact and contactless interface (with some restrictions) and can be configured for use with ActivIdentity applet suite v2.6.2 for the support of GSC-IS v2.1, NIST SP800-73-1 Transitional and End-Point Card Edge (for HSPD-12/PIV). The product allows issuance and post-issuance support for PIV End Point Card Edge and Data Model. The validated product is similar to Applet v2.6.2a (FIPS 140-2 Cert. #880), but added the One Time Password applet.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 3
  • EMI/EMC: Level 3

Approved algorithms (6)

AlgorithmCAVP certificates
CVL204
RNG94
RSA43
SHS209
Triple-DES232
Triple-DES MACvendor affirmed

Other algorithms

DES; DES MAC; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Validation history

DateTypeLab
2008-06-12InitialUL Verification Services, Inc.
2008-06-23Update
2014-02-06Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2008-06-12, 2008-06-23, 2014-02-06

Source documents