The reason for this is due to the access rules for the various data containers.

If the 'forgot PIN' option is being used then only the CHUID will be imported. *Important: The fingerprints, facial image, and printed information data is ONLY imported if the cardholder enters their PIN during import. The card expiration date, as printed on the card, is NOT imported into OnGuard since this is already imported from the CHUID, which is always encoded on all PIV cards. Printed Information* - the name (parsed into first name, last name, middle initial, or full name as printed), employee affiliation, organizational affiliation, agency card serial number, and issuer Identification are all imported.Typically the photo on the card is compressed using JPEG-2000 OnGuard performs this conversion to JPEG automatically. Facial image* - the facial image is imported into OnGuard as a JPEG compressed photo.These templates are stored in one 378 template on the card but are split up when storing them in the OnGuard database. Fingerprints* - two ANSI 378 templates for the primary and secondary template are imported.For government issued cards that contain the PIV application, this will not be encoded on the cards, and therefore will not be imported. The DUNS is an optional element for the CHUID and it is used for non-federal issuers. CHUID - only the FASCN, GUID, DUNS, and card expiration date are imported.OnGuard imports the following from PIV cards: Cardholder Fingerprints – The enciphered biometric reference template.Cardholder Unique Identifier – Signed CHUID.TWIC Privacy Key (TPK) – used to encipher/decipher the reference biometric template stored in the TWIC card application.Included to allow faster reading speeds than that of the signed CHUID. Unsigned Cardholder Unique Identifier – An unsigned version of the CHUID.X.509 Certificate for Card Authentication (Optional) - certificate used for device to device authentication purposes.Ī TWIC card has the PIV application listed above, plus a TWIC application containing:.X.509 Certificate for Key Management (Optional) - certificate used for encrypting data.

X.509 Certificate for Digital Signature (Optional) - certificate used for signing data.X.509 Certificate for PIV Authentication - certificate used to authenticate the card and cardholder using PIN.

What is a twic card