**Installation and Configuration Information**

**for PIV Data Model Tester (SP 800-85B Tool)**

-   **January 31, 2007**

-   **(Ramaswamy Chandramouli (Mouli) -- NIST**

-   **(301) 975 -- 5013**

**[Pre-Installation Requirements]{.underline}**

1.  Install Java (Java Run Time Environment (JRE) Version 5.0 or
    better). The latest download will be available from:
    <http://www.java.com/getjava>

2.  Define the environmental variable JAVA_HOME with value: c:\\program
    files\\java\\jre5.0 (the last subdirectory depends upon the folder
    the JRE installation creates)

3.  You will also need the \"The Java Cryptography Extension (JCE)
    Unlimited Strength Jurisdiction Policy Files 5.0\" which can be
    downloaded here:

> <http://java.sun.com/j2se/1.5.0/download.jsp>

4.  copy files local_policy.jar and export_policy.jar (or)
    US_export_policy.jar files found in the above URL to the directory:
    c:\\program files\\java\\jre5.0\\lib\\security.

**[Installation]{.underline}**

5.  Download the zip file (install_data_model_tester_enc.zip) containing
    the PIV Data Model Tester and click on the file to unzip.

6.  This will reveal the install_data_model_tester.jar file. Clicking on
    the jar file will ask for the password. Type in the password.

7.  The software will then guide you through the rest of the
    installation.

**[Configuration]{.underline}**

1.  The Graphical User Interface of the tool will present two tabs on
    the top left corner -- Configuration and Test Manager.

2.  Clicking on the *Configuration* Tab will reveal three Menu Options

-   Report Settings

-   Test Settings

-   Connectivity

3.  Clicking on the *Report Settings* option will present a screen to
    the right of the menu list. This screen will enable you to enter
    some details of your product, date of test as well the directory you
    want the test reports to go.

4.  Clicking on the *Test Settings* will present a screen that will help
    you input the following: PIN value, PUK value as well as choose the
    list of optional objects implemented on your card.

5.  Clicking on *Output Locations* (a sub-menu under Test Settings) will
    help you choose the directories for logs and results.

6.  Clicking on *Use Case* (a sub-menu under Test Settings) will in turn
    present two sub menus: - Authentication using PIV Authentication Key
    and Authentication using CHUID. Clicking on *PIV Authentication Key*
    option will enable you to choose the asymmetric key algorithm used
    in PIV Authentication certificate -- right now the options are RSA
    1024 (With algorithm code '06') and RSA 2048 (with algorithm code
    '07'). Clicking on *CHUID* option will enable you to choose the
    cutoff date before which CHUID should not expire. If you leave this
    field blank, the test tool will default to the current system date.

7.  Clicking on *Key-Type Algorithm* (a sub-menu under Test Settings)
    will enable you to import certificates for PIV Authentication (key
    reference '9A') corresponding to RSA 1024 (Code '06') or RSA 2048
    (Code '07') as well as input the symmetric key string for Card
    Application Administrator (key reference '9B').

8.  Clicking on *Connectivity* option will enable to input the Reader
    Name and Reader Protocol (T=0 or T =1)

> **[Running the Tests]{.underline}**

1.  Click on the Test Manager tab at the top left of the GUI screen of
    the tool.

2.  Clicking on the Tests will display the Test Reports on the main
    screen. To clear all the existing values in the report and to start
    with a clean slate: Click the Project Menu at the top and then click
    on the two submenus -- Reset All Results, Clear Cache Files.

3.  The Data Model Tester contains 5 Major types of tests.

    i.  Use Case Authentication Tests -- Menu Options 1 and 2 -- 2 tests

    ii. BER-TLV Conformance Tests -- Menu Option 3 - 11 tests

    iii. Biometric Data Conformance Tests -- Menu Option 4 -- 57 tests

    iv. Certificate Profile Conformance Tests -- Menu Option 5 -- 35
        tests

    v.  Digital Signature Conformance Tests -- Menu Option 6 - 66 tests