Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal Government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a Federal Government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

FIPS 201 Approved Products List - PIV Cards

The Personal Identity Verification (PIV) cards listed below are approved for FICAM implementation under the FIPS 201 Evaluation Program. These are blank PIV cards available for purchase. A PIV service provider will personalize these blank cards for federal agencies and contractors. PIV service providers are required to use PIV cardstock from the Approved Products List (APL).

If you do not see a card below, it’s possible it’s on the Removed Product List

Please Note:

  • Tri-Interface cards are not approved for Federal Government PIV or CAC card use. Agencies should not procure them. They are listed on the APL for industry-only acquisition.
  • Manufacturers may call Tri-Interface cards by different names (for example, Dual Hybrid). The prohibited feature of Tri-Interface cards is a prox interface (a 125 kHz antenna).
  • Agencies should procure only cards validated by the NIST Personal Identity Verification Program (NPIVP).

How To Purchase

Visit the Buy Page to view FICAM products, services and purchasing guidance.

Approved PIV Cards

APL Number Product Name Valid Date
1428 ID-One PIV v 2.4.0 on Cosmo V8.1 (EEPROM) 08/15/2017
1428 ID-One PIV v 2.4.1 on Cosmo V8.1 (ROM) 11/13/2017
1428 ID-One PIV v 2.4.1 on Cosmo V8.1 (EEPROM) 11/13/2017
1355 ID-One PIV v 2.3.5 on Cosmo V8 (High Speed) 06/17/2015
1354 ID-One PIV v 2.3.5 on Cosmo V8 06/17/2015
1511 IDEMIA Cosmo V8.0 11/13/2019
1431 HID Global Crescendo PIV 01/24/2018
1500 Gemalto TOP DL v2.1 with HID Global ActivID Applet Suite v2.7.4 08/03/2018
1510 Safenet IDPrime PIV v3.0 08/01/2019
1430 Gemalto IDPrime PIV v2.1 01/10/2018
1429 Giesecke+Devrient Mobile Security SmartCafe Expert 7.0 with HID Global ActivID Applet v2.7.5 11/09/2017
1502 Giesecke+Devrient Mobile Security SmartCafe Expert 7.0 with StarSign Applet v1.0 12/13/2018

Legacy PIV Cards

Legacy PIV cards are no longer approved for purchase by the FIPS 201 Evaluation Program. Any cardstock designated as “legacy” is placed on this legacy list as well as the Removed Product List. However, some federal agencies still need to procure the legacy cardstock to use while existing systems are being upgraded. Agencies must stop using cardstock on the legacy list by June 30, 2024.

  • Gemalto IDCore 3020 v1, 128k dual-interface with ActivIdentity Digital Identity Applet Suite – APL# 1244
  • Giesecke & Devrient StarSign(R) SmartCafe(R) Expert 144K with PIV Applet – APL# 525
  • IDEMIA ID-One (Type A) Large D – APL# 587

Agencies procuring cardstock from the legacy list assume all risks associated with its use from now until the NIST-mandated deadline of June 30, 2024.

If your agency needs to purchase cardstock from this legacy list, you must submit an Assumption of Risk Memorandum (memo) from the agency Chief Information Officer(s) to the General Services Administration (GSA). The memo must contain the following information:

  • Acknowledgement of the assumption of all associated security risks;
  • Acknowledgement of non-compliance with NIST standards;
  • A transition plan specifying major milestones to achieve full compliance by the 2024 deadline; and
  • Implications resulting from non-compliance with federal policy related to this purchase.

Submit the memo to GSA’s Associate Administrator for Government-wide Policy (OGP). (regardless of the acquisition vehicle used). If using GSA Multiple Award Schedule as the acquisition vehicle, also submit a copy of the memo to the Commissioner of GSA’s Federal Acquisition Service.

Note that GSA will provide the Office of the Federal Chief Information Officer (OFCIO) at the Office of Management and Budget (OMB) with copies of all memos submitted.

Based on agency-provided transition plans, GSA OGP will review the products on the legacy list in 12 months (May 2020) for removal.

Please email fips201ep at gsa.gov with questions.