FIPS 201/FICAM Testing Program
Your official resource for product testing and approved products.
Announcement - ICAM Test Cards are now available!
The FICAM Testing Program now offers a unique and new alternative - ICAM Test Cards. These sets of cards provide a convenient and systematic approach to unit testing, acceptance testing, and C&A of PIV and PIV-I enabled Enterprise PACS (E-PACS) solutions. ICAM Test Cards and the corresponding ICAM PKI is designed for self-testing products and services against the Functional Requirements and Test Cases [FRTC] required for listing on the GSA FIPS 201 APL. Proactively self-testing will reveal whether your E-PACS solution can withstand known attacks and common PKI errors, allowing you to fix vulnerabilities before submitting to the FICAM Testing Program, and most importantly to agencies, before deploying. More information and technical details about the ICAM Test Cards can be found here in the ICAM Test Card User Guide.
The 1st generation of ICAM Test Cards, which is a set of vulnerability assessment cards, is now available. A 2nd generation of ICAM Test Cards and PKI is being developed now. They will focus on valid configurations of PIV, PIV-I and CAC, as well as valid PKI and cryptographic methods, greatly enhancing the probability that your solution will handle known variations from issuers. This 2nd generation is coming soon
The following methods are available to acquire 1st generation ICAM Test Card sets:
Purchase from private vendors:
1. CertiPath ICAM ProofCards
Contact Name: Tim Rohrbach
Phone Number: (703) 793-7876
Contact Name: Chi Hickey
Phone Number: (202) 501-1881