NIST is pleased to announce the approval of Federal Information Processing Standard (FIPS) Publication 201-3, Personal Identity Verification of Federal Employees and Contractors. (See the Federal Register Notice announcing FIPS 201-3 approval.)

 
FIPS 201-3 addresses the comments received during the public comment period in November 2020.
 
High-level changes include:

• Alignment with current NIST technical guidelines on identity management, OMB policy guidelines, and changes in commercially available technologies and services
• Accommodation of additional types of authenticators through an expanded definition of derived PIV credentials
• Focus on the use of federation to facilitate interoperability and interagency trust
• Addition of supervised remote identity proofing processes
• Removal of the previously deprecated Cardholder Unique Identifier (CHUID) authentication mechanism and deprecation of the symmetric card authentication key and visual authentication mechanisms (VIS)
• Support for the secure messaging authentication mechanism (SM-AUTH)

A detailed list of changes is available in FIPS 201-3, Appendix E, Revision History, and this matrix includes public comments received on the November 2020 draft, and their resolutions.