HHS Sending Out "Action Required" E-mails to Renew Digital Certificates
The Department of Health and Human Services (HHS) recently began sending "certificate renewal notifications" to HHS ID Badge holders (PIV card holders) starting six (6) weeks prior to the certificate expiration date.
These notifications alert the cardholder of the impending expiration and provide directions on how to renew certificates.
While HHS ID Badges (PIV cards) for employees may be valid for up to five years after issuance, HHS policy allows certificates on these cards to be valid for no longer than three (3) years. Because of this difference in validity durations (between the PIV card and the certificates on the card), cardholders must renew (replace) their certificates before they expire.
DPSAC wants to underscore the importance of following the instructions provided in the e-mail to renew certificates before they expire. Should the certificates expire, new certificates will need to be issued. In that case, the individual will need to return to a badge issuance station.
Currently, most cardholders are unaware of when their certificates will expire because the expiration date printed on the PIV card (HHS ID Badge) applies to the PIV card itself.
The following is a sample e-mail notification that the Department will send to NIH holders of the HHS ID Badge (PIV card) whose names are stored in the Department's Identity Management System (IDMS):
Subject: ACTION REQUIRED: The certificates on your HHS ID badge must be renewed
You are receiving this e-mail because the PKI digital certificates loaded on your HHS ID Badge are expiring on <<Date>> and must be renewed.
Please note that the expiration date printed on your HHS ID Badge does not always match the expiration date of the PKI digital certificates contained in your badge. For security reasons, these certificates have a shorter lifespan than the HHS ID Badge itself.
To renew your digital certificates, you need to appear in-person at an NIH Badge Issuance location or your local Lifecycle Workstation (if purchased by your IC). To schedule an appointment with the Division of Personnel Security & Access Control on the Bethesda campus, please call 301-451-4766 or 301-402-9755. To see if your IC has a Lifecycle Workstation (LWS) near you, please click here:
Special Note: Individuals located in the Biomedical Research Center in Baltimore, the NCI-Frederick facilities at Fort Detrick in Maryland, the Research Triangle Park facilities in North Carolina or the NIAID facility in Hamilton, Montana should contact their local badging office for a certificate renewal appointment.
Failure to renew your digital certificates by <<Date>> will prevent you from using your HHS ID Badge to login to computers, and you will no longer be able to send and receive encrypted or digitally signed e-mail.