Identity Proofing - Enrollment Codes, v3.0
The requirements for enrollment codes during the identity proofing process.
Enrollment Codes (EnrollmentCodes)
Does the CSP issue enrollment codes that meet minimum entropy requirements? This requires six random alpha-numeric characters for human readable strings or machine-readable optical labels.
Provide policies, practices, or existing security audit reports indicating conformance.
Conformance Criteria (1)
The CSP SHALL only issue enrollment codes that are, minimally, a random six character alphanumeric sequence or other value of equivalent entropy, represented either as a human-readable text string; OR A machine-readable optical label.
Section 4.6 P1-2