In this case, the PIVReaderFormat string variable should be as follows:
SS – Agency + System + Credential + CS + ICI + HMAC – OC– OI – POA – ES – LRC
FULL_FASCN
We could not use the shortcut keyword “FULL_FACSN” to describe the
ExceedID reader output above because the FASCN for that format
removes the PI field and replaces it with the 10-digit HMAC.
The only time that the shortcut keyword “FULL_FASCN” can be used
is when it replaces the following set of tokens:
SS – Agency + System + Credential + CS + ICI + PI– OC– OI – POA – ES – LRC
Note: Think of the “FULL_FASCN” keyword as merely an alias for the
above set of tokens so that you don’t have to spell out each token.
This common sequence of tokens describes how the full FASCN
output is formatted for most readers.
Examples
This section describes some examples of creating values for the
PIVReaderFormat variable based on the output of selected FIPS-PIV
credential readers.
Note: To specify the output of a FIPS-PIV credential reader, you need
only to concatenate the appropriate elements as described in the
following examples. The string elements are NOT case sensitive.
Example 1
For a medium assurance reader that outputs the elements found in the
standard FIPS-PIV 75-bit plus the 32-bit HMAC, the
PIVReaderFormat string variable should be as follows:
STD_75Bit_PIV – 32BitHMAC
