DPSAC News Header

April 4, 2012 issue of the DPSAC NEWS

In This Issue
HHS ID Badge Rollout Scorecard
No SSN -- No Badge -- No Job!!
Responding to Letters of InterrogatoryIN...Now Required for Remote VPN Access to the NIH Network
NED Training Schedule for April/May, 2012
Upcoming Changes in NED
Helpful Tips
FAQs
News Briefs

   

 

Contact Us

 

Division of Personnel Security and Access Control

 

Personnel Security 

Helpdesk: 301-402-9755

e-QIP: 301-402-9735

Appointment Line: 301-496-0051

E-mail: orspersonnesecurity@ 

mail.nih.gov

 

Access Control

Helpdesk: 301-451-4766

E-mail: facilityaccesscontrol@ 

mail.nih.gov

 DHHS Logo gif   NIH Logo gif    ORS jpg

    

HHS ID Badge Rollout Scorecard

  

Here are the most recent NIH badging statistics provided by HHS as of March 30, 2012.  

 

Sponsored: 40,041    Enrolled: 39,083   Issued: 38,696 *

 

*This figure represents 96.6% of individuals who have been sponsored.

            
3-30-12 Pie Chard for ID Badge Scorecard

            
3-30-12 Excel Table HHS ID Badge Scorecard

prohibited sign id badge 2

No SSN--No Investigation--No Badge--No Job!!

 

DPSAC reports that it has nearly 400 employees and contractors with no social security number on file, which means that a background investigation has never been initiated for these individuals.  

 

According to CAPT Theresa Minter, Director of the Division of Personnel Security and Access Control (DPSAC), "DPSAC is working to resolve these cases and will soon be sending out to AOs a list of employees and contractors who are in NED but who do not show social security numbers. The AOs will be asked to update these records so that DPSAC can move forward with the background investigation."

 

"Even those who were not US citizens at the time they arrived at NIH should have a social security number for payroll tax purposes. Once this information is available, it must be updated in NED," Minter states.

 

"Once these notices have gone out to the AOs, DPSAC will set a deadline after which those without social security numbers recorded in NED will have their HHS ID Badges deactivated," says Minter. "This will be a short deadline, probably 2 weeks, once the notices go out," she adds.

 

The Administrative Community Can Help 

DPSAC is asking the Administrative community to help NIH come into compliance with Executive Order 10450 and HSPD-12 by updating NED records with social security numbers.  

 

Those who do not provide a social security number cannot be activated in e-QIP; since no investigation can be completed on these individuals, they will no longer be suitable for Federal employment or inclusion on a Federal contract and will be recommended for termination.

 

Please help NIH come into compliance with this important mandate.

 

Responding to Letters of Interrogatory

 

When issues are discovered during the adjudication of a case, no matter how minor, DPSAC is required to follow up with that person and provide a response to the Office of Personnel Management (OPM).    

 

A DPSAC staff member may contact the individual (employee, contractor or affiliate) by e-mail, telephone or by certified mail to that person's home address. If the individual does not respond in the time allowed, s/he will be referred to the appropriate officials for termination. If more time is needed to respond, the individual is given the opportunity to request an extension.

  

According to CAPT Theresa Minter, Director, Division of Personnel Security and Access Control (DPSAC), "In most cases, issues can be mitigated and a letter or warning (advisement) is issued. This happens most often for financial issues."  

 

"In these instances, DPSAC's adjudication standards are very reasonable and the individual will be asked to show progress, for example, in reducing 'overdue debt,'" she notes.

 

DPSAC realizes that overdue debt can result from a number of unpredictable events, including divorce, death of spouse or relative, medical issues, unemployment of spouse, etc. DPSAC can help the individual navigate through the issues.  

 

Federal employees are required to take care of "just debts," and mitigating circumstances are considered.

 

DPSAC can help individuals navigate these issues only if they respond to the Letter of Interrogatory or Advisement.   

 

Computer classroomNED Training Schedule for April/May, 2012

 

The HSPD-12 Program Office continues to offer free NED training for beginners and experienced NED users. Take this opportunity to quickly master NED in a hands-on computer lab environment. 

 

NED for Beginners     

    Date:      Wednesday, April 11, 2012

    Time:      9:00 a.m. - 12:00 p.m.

    Location: Building 12, Room B51 

 

    Date:      Tuesday, May 22, 2012

    Time:      9:00 a.m. - 12:00 p.m.

    Location: Building 12, Room B51 

  

 

NED for Advanced Users     

    Date:      Wednesday, April 11, 2012

    Time:      1:00 p.m. - 4:00 p.m.   

    Location: Building 12, Room B51 

 

    Date:      Tuesday, May 22, 2012

    Time:      1:00 p.m. - 4:00 p.m.

    Location: Building 12, Room B51

 

Contact Lanny Newman at [email protected] to reserve a space. In your e-mail, provide Lanny with your name and IC and which course you would like to attend. 

 

Upcoming Changes in NED

Excerpted from 'NED News, February/March 2012'

 

There are several new changes coming to NED in the next release scheduled for April 16, 2012. The biggest change modifies the existing badge process. NED will only allow one active badge service request at a time. This new feature ensures that NED is compliant with FIPS-201 rules.

 

Other changes to NED application

Additional changes to the NED application [include the] removal of references to single factor VPN, and the addition of the Position Title for FTE Commissioned Corps personnel as a required field.

  

Effective March 1, 2012, all NIH and NIH external customers who connect to the NIH Network via NIH VPN Remote Access must use two-factor authentication (PIV Card or RSA Token). ICs have undertaken efforts to move all users to the two-factor authentication groups.  AOs and ATs no longer have the ability to place users in the single-factor (username/password) authentication groups. 

 

If customers are having problems with connecting to the NIH Network via remote access VPN, they should contact the NIH IT Service Desk at 301-496-HELP, 866-319-HELP, or submit a case through the Online Service Request at http://itservicedesk.nih.gov/support.

 

Helpful Tips  


View individual certificate expiration dates by IC, -- the 'cert' expiration dates are posted at: http://smartcard.nih.gov/PKI_subscribers.htm. The first bullet on that page shows an NIH Smart Card Badgeholders Excel sheet (see the 2nd tab at the bottom of the spread sheet) that includes 'Cert Expiration Date.'  

 

Where to go to reset your PIN -- check the Lifecycle Work Station (LWS) administrator table (posted at: http://www.ors.od.nih.gov/ser/dpsac/badge/Pages/lifecycle.aspx) to find a trained LWS operator from your IC. These individuals will be able to help you reset your PIN and/or update the digital certificates that reside on your HHS ID Badge smart card.

   

ICs that want to add LWS operators to the approved roster -- should send a written request to Richie Taffet at [email protected] . Once he has approved the request, he will forward the name(s) to [email protected] to complete the approval process, add the names to the LWS operators roster and inform the IC that the individual is now approved to operate the IC's Lifecycle Work Station.    

  

How to remember your PIN...guaranteed! -- if your card reader and software are currently installed on your desktop, start using your smart card and PIN to login to the NIH network now. You'll also be computing in a more secure IT environment.

 

Do not lend your HHS ID badge (smart card) to anyone -- lending out your HHS ID Badge (smart card) is prohibited. The issuance of the new HHS ID Badge is based on strict identity proofing and the determination of one's suitability for a specific position classification.

 

FAQs

 

Q. When does the AO know when the person's HHS ID Badge is (or will be) deactivated?

 

A. The AO is cc'd on all the reminders. The supervisor/project office is notified in addition to the AO when the badge is deactivated.

 

 

Q. I am responsible for ensuring PIV card certificates and PIN resets are up-to-date in my Institute. What do I need to know in order to carry out my responsibilities?

 

A. I noticed that your IC is not listed on the Lifecycle Work Station (LWS) Administrators table posted at: http://www.ors.od.nih.gov/ser/dpsac/badge/Pages/lifecycle.aspx. ICs who have staff listed on this table have purchased one or more LWSs and have trained staff to operate these units (i.e., to reset PINs and/or renew digital certificates on the smart cards).

 

If your IC wishes to purchase one or more of these units, it should direct inquiries to: [email protected]. They can also be reached by phone at: 571-249-2273.

 

Note: The purchase agreement for these units has expired and a new one is currently being negotiated. In the meantime, DPSAC is working to establish a new purchasing contract and will inform the ICs as soon as it becomes available.  

 

The Lifecycle Work Station Training Manual is posted at: http://www.ors.od.nih.gov/ser/dpsac/training/Pages/lifecycle.aspx.

 

 

Q. TwoWhat is dual- or two-factor authentication?

 

A. With dual- or two-factor authentication, two independent items of

authentication are used to prove that the individual logging into the NIH network is an authorized user of the system.

  

The two items used are: (1) something the user has [e.g., the smart card (HHS ID Badge) or SecureID token]; and (2) something the user knows [e.g., the PIN associated with the smart card (HHS ID Badge)].

 

News Briefs

 

e-QIP Version 3.0 goes live

OPM recently deployed e-QIP version 3.0. Training materials and job aids are available in the Public Library section of the OPM Secure Portal.  Also, a Quick Guide is posted on the OPM Portal home page at: https://opmis.xsp.org/member/.

 

A biweekly e-newsletter from the Office of Research Resources, Division of Personnel Security and Access Control (ORS/DPSAC) to keep you informed as NIH rolls out "Homeland Security Presidential Directive 12" (HSPD-12) establishing a common identification standard to better safeguard NIH and its workforce.