Identity Proofing - Enrollment Codes, v3.0

The requirements for enrollment codes during the identity proofing process.

Assessment Step

1
Enrollment Codes (EnrollmentCodes)
Does the CSP issue enrollment codes that meet minimum entropy requirements? This requires six random alpha-numeric characters for human readable strings or machine-readable optical labels.
Artifact
Documentation
Provide policies, practices, or existing security audit reports indicating conformance.

Conformance Criteria (1)

Enrollment Codes
The CSP SHALL only issue enrollment codes that are, minimally, a random six character alphanumeric sequence or other value of equivalent entropy, represented either as a human-readable text string; OR A machine-readable optical label.
Citation
SP800-63A
Section 4.6 P1-2