DPSAC News Header

October 19, 2011 issue of the DPSAC NEWS

In This Issue
HHS ID Badge Rollout Scorecard
Online Appointment System Goes Live for HHS ID Badge Certificate Renewals
NED Training Schedule for October & December, 2011
ICs Continue to Purchase Lifecycle Work Stations to Assist Their Staffs with PIN Resets, Cert Renewals
DPSAC's PIV Card Issuance Facility Passes Audit with Flying Colors
Helpful Tips
News Briefs
FAQs

   

 

Contact Us

 

Division of Personnel Security and Access Control

 

Personnel Security 

Helpdesk: 301-402-9755

e-QIP: 301-402-9735

Appointment Line: 301-496-0051

E-mail: orspersonnesecurity@ 

mail.nih.gov

 

Access Control

Helpdesk: 301-451-4766

E-mail: facilityaccesscontrol@ 

mail.nih.gov

 DHHS Logo gif   NIH Logo gif    ORS jpg

    

HHS ID Badge Rollout Scorecard

  

Here are the most recent NIH badging statistics provided by HHS as of October 14, 2011.  

 

Sponsored: 39,216    Enrolled: 38,296   Issued: 37,854 *

 

*This figure represents 96.5% of individuals who have been sponsored.

            
10-14-11 Pie Chart HHS ID Badge Scorecard

            
Excel Table for 10-14-11 Pie Chart


Online Appointment System Goes Live for HHS ID Badge Certificate Renewals

 

Making an appointment to renew your HHS ID Badge (PIV card) certificates just got a little easier with the recent modification to the Background Information Tracking System (BITS). This modification allows users to create appointments from their desktop or laptop.

 

An AO receiving an applicant's request for a certificate may refer the applicant to the NIH online scheduling system link:

 

https://scheduler.ors.od.nih.gov/CertificateRenewal.aspx.  

 

Note: the applicant MUST be logged into the NIH network in order to use the system.

 

When the applicant clicks the link, they will see the following screen:

 

NIH Scheduling System for Cert Renewals 

Applicants will need to enter their NIH ID found on the back of the HHS ID Badge and retype the verification code. Once this information is submitted, the applicant will automatically receive an e-mail allowing them to schedule the online appointment.   

 

The AO has the option of creating the appointment for the individual manually in the BITS Scheduling System by following this link:

 

https://scheduler.ors.od.nih.gov/CertificateRenewal.aspx.

 

In the next several weeks, the HHS e-mail which is automatically sent to cardholders six weeks in advance of their certificate expiration date will be modified to include the link and instructions, allowing users to schedule the appointment themselves without the assistance of their AO. Below is a sample notification:  

 

Subject: ACTION REQUIRED: The certificates on your HHS ID Badge must be renewed

 

<Dear *NAME*>

 

You are receiving this e-mail because the PKI digital certificates loaded on your HHS ID Badge are expiring <on *DATE*> and must be renewed. The PKI digital certificates have a shorter lifespan than the expiration date printed on your HHS ID Badge.

 

To renew your digital certificates, you need to appear in-person at an NIH Badge Issuance location. Please copy the following link into your browser to schedule an appointment *:

 

https://scheduler.ors.od.nih.gov/CertificateRenewal.aspx

 

You must be logged into the NIH network to access the appointment scheduler or you may call 301-451-4766 or 301-402-9755.

  • Special Note: Some Institutes and Centers have purchased a Lifecycle Work Station (LWS) that can renew your certificates. To see if your Institute or Center has an LWS, please copy this link, http://idbadge.nih.gov into your browser, then click on the link "Locating LWS Administrators by IC' under 'What's New.'

* Individuals located at the following remote sites should contact their local Badge Issuance location for a certificate renewal appointment:

 

-    Biomedical Research Center, Baltimore, MD

-    Rocky Mountain Labs, Hamilton, MT

 

Failure to renew your digital certificates <by *DATE*> will prevent you from sending and receiving encrypted e-mail, or digitally signing e-mail.

   

NED Training Schedule for October and December, 2011

 

The HSPD-12 Program Office is offering two NED classes in October and four classes in December for NED beginners and experienced NED users. Take advantage of this opportunity to quickly master NED in a hands-on computer lab environment.

 

NED for Beginners
    Date: Monday, October 24, 2011
    Time: 9 a.m. - 12:00 p.m.
    Location: 6120 Executive Blvd., Room 4 (EPS)


    Date: Thursday, December 1, 2011

    Time:  9 a.m. - 12:00 p.m.

    Location: Building 12A, Room 49/51

   

    Date:  Monday, December 19, 2011

    Time:  9 a.m. - 12:00 p.m.

    Location:  6120 Executive Blvd., Room 2 (EPS)    

        

 

NED for Advanced Users
   Date: Monday, October 24, 2011
   Time: 1:00 p.m. - 4:00 p.m.
   Location: 6120 Executive Blvd., Room 4 (EPS)


   Date: Thursday, December 1, 2011

   Time:  1:00 p.m. - 4:00 p.m.

   Location: Building 12A, Room 49/51

 

   Date:  Monday, December 19, 2011

   Time:  1:00 p.m. - 4:00 p.m.

   Location:  6120 Executive Blvd., Room 2 (EPS)

 

 

Contact Lanny Newman at [email protected] to reserve a space. In your e-mail, provide Lanny with your name and IC and which course you would like to attend. Sign up soon to ensure your place in the class. Seating is limited.

ICs Continue to Purchase Lifecycle Work Stations to Assist Their Staffs with PIN Resets, 'Cert' Renewals

 

DPSAC reports that ICs have purchased a total of 79 Lifecycle Work Stations to provide PIN reset and HHS ID Badge certificate renewal services for their staffs at convenient locations.

 

Whether you've forgotten your PIN and need to have it reset, or you've received notification that your ID Badge certificates are about to expire and need to be renewed, a trained LWS operator from your IC can help.  

 

To view a table of LWS Administrators by IC, visit:

 

http://www.ors.od.nih.gov/ser/dpsac/badge/Pages/lifecycle.aspx

  

An LWS training guide, "IAM@HHSLifecycle Work Station: PIN Reset and Certificate Update Training" is included with every LWS order and can also be viewed online at:

 

  http://www.ors.od.nih.gov/ser/dpsac/training/Pages/lifecycle.aspx   

 

NIH's PIV Card Issuance Facilities Pass Audit With Flying Colors

 

Congratulations to DPSAC and NIEHS for successfully passing a recent HHS audit of its Bethesda main campus and Research Triangle Park (NC) PIV Card Issuance Facilities.  

 

An HHS representative observed the PIV Identity Proofing, Enrollment and Badge Issuance Stations at these locations, reviewed operational documents, and interviewed leadership to assess the level of compliance with the National Institutes of Standards and Technology (NIST) Special Publication 800-79.   

 

Helpful Tips  

 

Remembering your PIN -- When you are issued your HHS ID Badge, or when you go for a PIN reset, you are advised to select a PIN that will be easy to remember. Unfortunately, if you don't have occasion to use your PIN on a regular basis, the more likely it is you will forget it.  

 

One way to ensure that you are using your PIN regularly is to make it your code for retrieving voicemails or accessing your ATM.  

 

The more opportunities you have to use your PIN, the easier it will be to remember.  

 

Also, if your card reader and software are currently installed on your desktop, consider using dual factor authentication now. You'll be computing in a more secure IT environment and, of course, you'll be using your PIN on a regular basis.*


 With dual- or two-factor authentication, two independent items of authentication are used to prove that the individual is an authorized user of the system. The two items used are: (1) something the user has [e.g., the PIV Card/HHS ID Badge or SecureID token]; and (2) something the user knows [e.g., the PIN associated with the PIV Card/HHS ID Badge.]  


News Briefs  

  

GAO Study Reveals Government Information Security Incidents Up by 650% in Past 5 Years

 

Security incidents reported by Federal agencies have risen by more than 650 percent over the past five years, placing the GAO 5-Yr Bar Graph of Security Incidents confidentiality, integrity and availability of sensitive government information and information systems at risk, according to a Government Accountability Office (GAO) report to congressional committees ("GAO-12-137") dated October 3, 2011.  

 

In the report, GAO recommends "that the Director of OMB provide performance targets for metrics included in OMB's annual FISMA reporting instructions to agencies and inspectors general."  

 

Read more...

 

FAQs

Q. Is there a quick way for me to check my PIV Card's certificate expiration date?

 

A. Yes. In the Windows environment, just follow these five easy steps to check your PIV Card's certificate expiration date:

 

Using Windows Internet Explorer (IE) select:      

  1. Tools
  2. Internet Options (from drop down menu)
  3. Content (Tab of Internet Options pop-up window)
  4. Certificates (button in middle of Internet Options pop-up window content's tab)
  5. Personal (tab in Certificates' pop-up window)

At least four certificates should be displayed (3 in your name and one called PIV users). All four should have the same expiration date. If there are multiple sets of four, the latest expiration date is the expiration date of your certificates.

 

Also, your IC is able to track the certificate status for individuals in their organization. This information can be helpful when planning appointments with local Lifecycle Work Station (LWS) operators who will be renewing the certificates on site. 

 

The Office of the Chief Information Officer (OCIO) has posted on its website a spreadsheet listing, alphabetically by IC, the names of subscribers along with their SAC or Admin Code, certificate expiration date, and other information that would be helpful to the ICs.  

 

The expiration dates will be posted chronologically and will be added to the list based on a rolling two-year time frame (one year for contractors).

 

To view the Smart Card subscriber spreadsheet, click on: http://smartcard.nih.gov/PKI_subscribers.htm . From there, click on the link found under the first bullet: "NIH Smart Card (PIV) badge holders as of xx/xx/20xx (spreadsheet)."

 

Note: Do not bookmark this latter link ["NIH Smart Card (PIV) badge holders..."] as it is subject to change due to periodic updates.

 

    

Q. If I discover that my HHS ID Badge certificates are expired, can I have my IC's Lifecycle Work Station (LWS) operator reissue new certificates.

 

A. Yes. Once your PIV Card certificates are expired, you can have them reissued either by an LWS operator or at a DPSAC Badge Issuance Station. In either case, you will need to make an appointment.    

 

A biweekly e-newsletter from the Office of Research Resources, Division of Personnel Security and Access Control (ORS/DPSAC) to keep you informed as NIH rolls out "Homeland Security Presidential Directive 12" (HSPD-12) establishing a common identification standard to better safeguard NIH and its workforce.