It also makes the PKI arrangements as important as the document itself, and that is where most of the underestimation happens.
The last row is the one that surprises people. You do not migrate to a new passport — you begin issuing one, and then live with two documents in circulation for as long as the old one remains valid.
The PKI, consistently
Country Signing Certificate Authority, Document Signer certificates, key ceremonies, PKD upload, CRL distribution. It is exacting, auditable, institutional work — and a mistake is visible at every border in the world simultaneously. It is also not primarily a technology problem: it requires a governed function inside the authority with defined roles, witnessed procedures and succession planning, which takes longer to establish than the infrastructure it runs on.
The transition period
Two documents in circulation for years means two verification paths, two issuance workflows, two sets of staff training and two supply chains — including for a document you have stopped issuing but must still support.
Chip end-of-life
The chip in a ten-year passport must be supported for its full validity plus the tail. A chip discontinued in year four leaves you supporting a component nobody manufactures.
Photograph capture quality
ICAO portrait requirements are strict, and non-conforming photographs are among the most common causes of rejection at issuance — which shows up as a queue at the counter, not as a technical defect.
The document is procured once. The PKI is operated forever.
Data page substrate
Polycarbonate versus paper laminate determines which security features are available to you and how the document ages in a back pocket for a decade.
Which security features
Chosen against the threat profile of your actual document, not from a catalogue. Features no examiner in the field can check add cost without adding security.
Centralised or decentralised personalisation
A trade-off between control and issuance speed that is expensive to change once the estate is built.
Where the signing keys live
The sovereignty question, and one to settle before procurement rather than during it.
- PKI treated as a technical deliverable rather than a governed institutional function
- Security features specified from a supplier's catalogue instead of a threat assessment
- Enrolment network sized for normal renewals but not for the surge when the transition is announced
- No plan for verifying the old document during the years both remain valid
- Consular posts treated as an afterthought, so citizens abroad cannot renew
Read rate at foreign borders.
Not issuance volume, not conformance certification at acceptance. Whether the chip is actually read successfully at gates you do not control, by inspection systems you have never tested against. It is the only measure taken outside your own estate, which is exactly why it is the one worth watching.
It is also difficult to obtain, and most authorities do not try. Ask your consular network to report it.