DPSAC News Header

July 25, 2012 issue of the DPSAC NEWS

In This Issue
HHS ID Badge/PIV Card Rollout Scorecard
NED Training Schedule for September
Notice to Update Expiring Certificates Revised
Returning Your HHS ID Badge/PIV Card When Leaving NIH
Replacing Your HHS ID Badge/PIV Card
Helpful Tips
FAQs

   

 

Contact Us

 

Division of Personnel Security and Access Control

 

Personnel Security 

Helpdesk: 301-402-9755

e-QIP: 301-402-9735

Appointment Line: 301-496-0051

E-mail: orspersonnesecurity@ 

mail.nih.gov

 

Access Control

Helpdesk: 301-451-4766

E-mail: facilityaccesscontrol@ 

mail.nih.gov

 DHHS Logo gif   NIH Logo gif    ORS jpg

    

HHS ID Badge/PIV Card Rollout Scorecard

  

Here are the most recent NIH badging statistics provided by HHS as of July 20, 2012.  

 

Sponsored: 39,764    Enrolled: 38,752   Issued: 38,234*

 

*This figure represents 96.2% of individuals who have been sponsored.

            
7-25-12 Pie Chart for ID Badge Scorecard

            
7-25-12 Excel table for ID Badge Scorecard


NED Training Schedule for September   

Computer classroomThe HSPD-12 Program Office continues to offer free NED training for beginners and experienced NED users. Take this opportunity to quickly master NED in a hands-on computer lab environment. 

 

 

NED for Beginners     

   

    Date:      Friday, September 14, 2012
    Time:      9:00 a.m. - 12:00 p.m.
    Location: Building 12A, Room B51
   

NED for Advanced Users     

  

    Date:      Friday, September 14, 2012
    Time:      1:00 p.m. - 4:00 p.m.
    Location: Building 12A, Room B51
     

 

Contact Lanny Newman at [email protected] to reserve a space. In your e-mail, provide Lanny with your name and IC and which course you would like to attend.  

 

Notice to Update Expiring Certificates Revised

 

Forty-two (42) days before the digital certificates stored on an individual's PIV Card/HHS ID Badge expire, the Department sends out a reminder to the badge holder to update his/her certificates. Due to recent technical difficulties with the scheduling system embedded in the original notification, the Department on Monday July 20, started sending out the following revised notice. In place of the scheduling system link, the revised email provides a link to the directories for LWS operators and locations:    

 

Subject: ACTION REQUIRED: The certificates on your HHS ID Badge/PIV Card must be renewed

 

Dear [ NAME],

 

You are receiving this e-mail because the PKI digital certificates loaded on your HHS ID Badge/PIV Card are expiring on [DATE] and must be renewed. The PKI digital certificates have a shorter lifespan than the expiration date printed on your HHS ID Badge/PIV Card.

 

To renew your digital certificates, you need to appear in person at a Lifecycle Work Station (LWS). To see if your Institute or Center has an LWS, please copy the link http://www.ors.od.nih.gov/ser/dpsac/badge/Pages/lifecycle.aspx into your browser.

 

If an LWS is not available in your IC or immediate area, please call 301-451-4766 or 301-402-9755 to schedule an appointment.

 

Special Note: Individuals located at the following remote sites should contact their local Badge Issuance office for a certificate renewal appointment:

 

   - Bayview Research Center (BRC), Baltimore, MD

   - NCI, Frederick National Lab for Cancer Research, Ft. Detrick, MD

   - NIEHS, Research Triangle Park, NC

   - NIAID, Rocky Mountain Labs (RML), Hamilton, MT

 

Failure to renew your digital certificates by [DATE] will prevent you from using your HHS ID Badge/PIV Card to login to your desktop or laptop, send and receive encrypted email, or digitally sign email.

 

Returning Your HHS ID Badge/PIV Card When Leaving NIH

 

Individuals leaving the employ of NIH - whether as employees, contractors or affiliates - will need to turn in their HHS ID Badge/PIV card to their Administrative Officer for deactivation in NED. The AO will turn over the deactivated HHS ID Badge/PIV Card to the local badging office.  

 

Note: individuals moving from one Institute/Center to another will keep their current badge unless they change status, for example, from employee to contractor or vice versa, in which case they will need to be issued a new HHS ID Badge/PIV card.

 

Replacing Your HHS ID Badge/PIV Card 

 

Lost/Stolen ID Badges (start with your AO)   

Report lost/stolen ID Badges/PIV cards to your Administrative Officer (AO) AND to Access Control (301-451-4766). Your AO will need to report your badge as lost/stolen in the NIH Enterprise Directory (NED) to authorize a replacement ID Badge.  

 

It will be necessary to repeat the identity proofing, photographing and fingerprinting process (Enrollment), but the replacement ID Badge can be issued shortly thereafter. The expiration date on the new ID Badge will be the same as the date on your lost/stolen badge.

   

Broken Badges (start with Access Control)  

Badge holders working at the Bethesda campus or at nearby locations should bring their broken badge to the DPSAC Badge Issuance Center in Bldg. 31, Rm. B1A26 or at the Badging Station in Bldg. 10-Clinical Research Center.   

 

Access Control will diagnose and correct the problem or replace the ID Badge if necessary. The expiration date on the new badge will be the same as the date on your broken badge.*

   

*Instructions for replacing a broken badge at certain NIH remote satellite facilities can be found by clicking on the appropriate link below: 

      NIEHS 

      RML 

      NCI - Frederick 

      Other Remote Locations 

 

 

Helpful Tips

   

Exemptions to Mandatory PIV Card (HHS ID Badge) & PIN Login to ITAS -- to view the criteria that allow an individual to use a Username/ Password in place of an HHS ID Badge/PIV Card & PIN to access ITAS, click on: Exemptions 

  

Do not lend your HHS ID Badge/PIV Card to anyone -- lending out your HHS ID Badge/PIV Card is prohibited. The issuance of the HHS ID Badge/PIV Card is based on strict identity proofing and the determination of one's suitability for a specific position classification.  


After you successfully log in with your PIV Card/HHS ID Badge -- it's good practice to remove it from the card reader and put it back in the card holder. This not only improves security at the desktop or laptop, but also helps ensure that when you leave for the day, you will have your HHS ID Badge/PIV Card to get you back onto your campus the following day.

   

Eventually, all employees, contractors and affiliates will be required to log in using their HHS ID Badge/PIV Card and PIN unless granted a permanent exemption.

 

ICs that want to add LWS operators to the approved roster -- send a written request to Richie Taffet at [email protected]. Once he has approved the request, he will forward the name to [email protected] to complete the approval process, add the name to the LWS operator roster, and inform the IC that the individual is now approved to operate the IC's LWS.

   

Keep your passwords up to date!  -- everyone transitioning away from username & password to HHS ID Badge/PIV Card & PIN login will still need to update their password when they receive an e-mail notice that their password is about to expire. Otherwise, they will be locked out of their computer until they have updated their password, even though they may not be using their password for login.

 

           Question Mark in Blue

FAQs


Q. One of our LWS Operators has had a name change.  She's been issued a new HHS ID Badge/PIV Card but the new card is not working in the LWS laptop.  Is there something more she needs to do so she can perform PIN resets and 'Cert' renewals?  

 

A. Yes. You will need to inform Richie Taffet, HSPD-12 Program Manager, of this change. He will pass along the new information to the HHS Identity Administrator. You will be notified once the change is made in their system, at which time your LWS operator should be able to use her LWS laptop with her new HHS ID Badge/PIV Card.

 

  

Q: How do I log in to my computer with my HHS ID Badge/PIV Card?

 

A: To log in with your HHS ID Badge/PIV Card, insert your HHS ID badge/PIV Card into your

card reader at the login screen on your desktop; enter your six-, seven- or eight-digit Personal Identification Number (PIN) when prompted to do so. For step-by-step instructions on how to log in with an HHS ID Badge/PIV Card, reference the "How to Log in" guides posted at: http://www.ors.od.nih.gov/ser/dpsac/Pages/Continued-Implementation-of-HSPD-12.aspx.  

    

 

Q: What is required to log in with an HHS ID Badge /PIV card? 

    

A: To log in, you must have:

  • Your PIV Card/HHS ID Badge
  • A smart card reader connected to your computer
  • Your PIN for your PIV Card/HHS ID Badge
  • Active (not expired) digital certificates

You might also need to have: 

  • Software that allows your computer to read and use the digital certificates on your HHS ID Badge/PIV Card  

 

Q: What does login with a smart card and PIN replace?

 

A: Once smart card login is enforced for the NIH network, you will no longer need your username and password to log in to your computer. You may still use your username and password to unlock your screensaver, and you may still need them to log in to certain NIH systems.  

 

Smart card authentication with an HHS ID Badge/PIV card and PIN is more secure than usernames and passwords because it is a form of two-factor authentication, i.e., something you have, like your HHS ID Badge/PIV Card, and something you know, like a PIN.

 

 

Q: What happens to my username and password?

 

A: At this time, you must maintain your username and password. Do not let your password expire! While NIH is transitioning to smart card login, your username and password are still needed to access many NIH systems.  

 

Also, at this time, if you let your password expire you will not be able to log in with your HHS ID Badge/PIV Card and PIN either. In the long-term, NIH is working towards reducing these additional steps, but during transition they are still necessary.

 

 

Q: What information is stored on my HHS ID Badge/PIV Card?

 

A: Your full name, photograph, email address, HHS Operating Division, badge serial number and expiration date, and your public key.

 

   
A biweekly e-newsletter from the Office of Research Resources, Division of Personnel Security and Access Control (ORS/DPSAC) to keep you informed as NIH rolls out "Homeland Security Presidential Directive 12" (HSPD-12) establishing a common identification standard to better safeguard NIH and its workforce.