ADMINISTRATIVE MESSAGE ROUTINE R 301930Z MAR 01 ZYB MIN PSN 279620J26 FM SECNAV WASHINGTON DC//SN// TO ALNAV UNCLAS ALNAV 028/01 MSGID/GENADMIN/DONCIO// SUBJ/COMMON ACCESS CARD// REF/A/DOC/CONGRESS/-// REF/B/DOC/CONGRESS/-// REF/C/DOC/DEPSECDEF WASHINGTON DC/10NOV1999// REF/D/DOC/DEPSECDEF WASHINGTON DC/16JAN2001// NARR/REF A, FY1999 NATIONAL DEFENSE AUTHORIZATION ACT, SECTION 344, DIRECTED TWO CARRIER BATTLE GROUPS, ASSOCIATED CARRIER AIR WINGS, AND TWO AMPHIBIOUS READINESS GROUPS/MARINE EXPEDITIONARY UNITS TO IMPLEMENT SMART CARD TECHNOLOGY (SCT) NLT 30 JUN 99. REF B, FY2000 NATIONAL DEFENSE AUTHORIZATION ACT, SECTION 373, DIRECTS TWO MAJOR NAVAL REGIONS TO IMPLEMENT SCT BEGINNING IN FY2000. REF C DIRECTS MILITARY COMPONENTS TO ADOPT A SMART CARD AS THE COMMON ACCESS CARD (CAC). REF D IMPLEMENTS DEPARTMENT WIDE SCT THROUGH A CAC.// POC/ROB CAREY/CIV/DON CIO/LOC:WASHINGTON DC/TEL:703-607-3420// RMKS/1. THIS MESSAGE DESCRIBES THE DEPARTMENT OF THE NAVY STRATEGY TO IMPLEMENT THE DEPARTMENT OF DEFENSE COMMON ACCESS CARD (DOD CAC) POLICY DESCRIBED IN REF C AND D FOR NIPRNET/UNCLASSIFIED NETWORKS. 2. BACKGROUND. SINCE 1997, THE DEPARTMENT OF THE NAVY (DON) HAS BEEN CONDUCTING A NUMBER OF PILOTS USING SMART CARD TECHNOLOGY (SCT) AND APPLICATIONS ENABLED BY MULTI-FUNCTION SMART CARDS. THESE PILOTS HAVE DEMONSTRATED THAT PROPERLY DESIGNED SMART CARD APPLICATIONS CAN REDUCE COSTS, IMPROVE INFORMATION ASSURANCE, REDUCE ROUTINE PAPERWORK (AN IMPORTANT QUALITY OF LIFE ISSUE) AND IMPROVE MISSION READINESS. SINCE JUN 98, EVERY NAVY RECRUIT HAS USED SCT IN DAILY ACTIVITIES AT THE RECRUIT TRAINING CENTER GREAT LAKES, IL. NAVY AND MARINE CORPS PERSONNEL ON THE ISLAND OF OAHU HAVE SMART CARDS FOR DAILY USE WITH FUNCTIONAL APPLICATIONS SUCH AS FOOD SERVICES, ACCESS CONTROL, AND ARMORY ISSUANCE, AND HAVE USED SCT FOR MANIFESTING AND IN-COUNTRY TRACKING FOR MAJOR MILITARY EXERCISES DIRECTED BY USCINCPAC. IN THE SPRING OF 1999, SCT WAS INTRODUCED ON TWO CARRIER BATTLEGROUPS AND TWO AMPHIBIOUS READINESS GROUPS/MARINE EXPEDITIONARY UNITS (REF A). 3. THE NATIONAL DEFENSE AUTHORIZATION ACT FOR FY 2000 REQUIRED THE ESTABLISHMENT OF A SMART CARD SENIOR COORDINATING GROUP (SCSCG) CHAIRED BY THE DON (REF B). THE SCSCG WAS TASKED TO DEVELOP AND IMPLEMENT DEPARTMENT-WIDE INTEROPERABILITY STANDARDS FOR USE OF SCT AND A PLAN TO EXPLOIT SCT AS A MEANS FOR ENHANCING READINESS AND IMPROVING BUSINESS PROCESSES. 4. ON 10 NOV 99, THE DEPUTY SECRETARY OF DEFENSE (DEPSECDEF) DIRECTED THAT A SMART CARD BECOME THE COMMON ACCESS CARD (CAC) ACROSS THE ENTIRE DEPARTMENT OF DEFENSE (DOD) (REF C). IN THIS MEMO, THE DEPSECDEF DIRECTED THAT THE CAC WILL BE: A. THE STANDARD IDENTIFICATION CARD FOR ALL ACTIVE MILITARY PERSONNEL (TO INCLUDE THE SELECTED RESERVE) DOD CIVILIAN EMPLOYEES AND ELIGIBLE CONTRACTOR PERSONNEL, REPLACING ALL CURRENT IDENTIFICATION CARDS. B. THE PRINCIPAL CARD USED TO ENABLE PHYSICAL ACCESS TO BUILDINGS AND CONTROLLED SPACES. C. USED AS THE PUBLIC KEY INFRASTRUCTURE (PKI) AUTHENTICATION TOKEN TO GAIN ACCESS TO THE DEPARTMENT'S UNCLASSIFIED COMPUTER NETWORKS AND SYSTEMS. D. THE DOD'S PRIMARY PLATFORM/AUTHENTICATION TOKEN FOR THE USER'S IDENTITY CERTIFICATE IN PKI IMPLEMENTATION. 5. THE DOD CAC POLICY DOCUMENT WAS IMPLEMENTED 16 JAN 01, DESIGNATING THE CAC AS THE OFFICIAL DOD IDENTIFICATION CARD EFFECTIVE IMMEDIATELY (REF D). TO TAKE ADVANTAGE OF EXISTING INFRASTRUCTURE AND MAINTAIN CONSISTENCY ACROSS THE DEPARTMENT, THE CAC WILL BE MAINTAINED USING THE DEFENSE ENROLLMENT ELIGIBILITY REPORTING SYSTEM (DEERS) AND THE REAL-TIME AUTOMATED PERSONNEL IDENTIFICATION SYSTEM (RAPIDS). ALL NAVY AND MARINE CORPS MILITARY, CIVILIAN, AND SELECTED CONTRACTOR PERSONNEL WILL BE ISSUED COMMON ACCESS CARDS AT THEIR LOCAL PERSONNEL SUPPORT DETACHMENTS (PSD) OR OTHER LOCATIONS DEEMED APPROPRIATE BY LOCAL COMMANDS SUCH AS PASS AND TAG OR SECURITY OFFICES. EXISTING PSD OFFICES HAVE STARTED RECEIVING UPGRADED HARDWARE AND SOFTWARE STARTING IN FIRST QUARTER FY 2001 AND WILL BE COMPLETED IN FOURTH QUARTER FY 2002. THE CAC DEPLOYMENT FOR THE DON WILL CLOSELY INTEGRATE WITH THE DEPLOYMENT OF THE NAVY MARINE CORPS INTRANET (NMCI) SEATS SO THAT NETWORK ACCESS AND PUBLIC KEY INFRASTRUCTURE FUNCTIONS CAN BE ACCOMPLISHED USING THE CAC. 6. DOD HAS ESTABLISHED THE ELECTRONIC BUSINESS BOARD OF DIRECTORS (EB BOD) TO OVERSEE THE OPERATIONS OF THE DOD SMART CARD SENIOR COORDINATING GROUP (SCSCG) IN CONVERGING BUILDING PASSES, ID CARDS, AND SECURITY AUTHENTICATION (PKI) TOKENS INTO THE DOD CAC. BY OCT 02, THE CAC AND THE CLASS 3 DOD PKI CERTIFICATES STORED THEREON WILL BE USED TO PERFORM, AT A MINIMUM, THE FOLLOWING INFORMATION ASSURANCE FUNCTIONS: A. DIGITALLY SIGN ALL E-MAILS B. NETWORK AND WORKSTATION LOG ON C. ACCESS PRIVATE PKI PROTECTED WEB PAGES D. E-MAIL ENCRYPTION CAPABILITY FOR NON-MISSION CRITICAL AND NON-ORGANIZATIONAL MESSAGES AS WE MOVE INTO THE NEXT MILLENNIUM, WE MUST PROTECT OUR INFORMATION SYSTEMS AND THE INFORMATION THEY PROCESS. SMART CARD TECHNOLOGY IS ONE OF THE TOOLS WE WILL USE TO ENSURE SECURE COMMUNICATIONS AND ENABLE E-BUSINESS RELATED ACTIVITIES IN THE DEPARTMENT. 7. THE NEW INITIATIVE WILL NOT BE REALIZED WITHOUT SOME GROWING PAINS SO HAVE PATIENCE WITH THE DEPLOYMENT OF THIS CRITICAL ASSET. HOWEVER, IT MUST BE UNDERTAKEN TO SAFEGUARD OUR INFORMATION FROM MALICIOUS INTRUSION AND CYBER ATTACK. WE MUST ALL CONTINUE TO EXPAND THE USE OF SMART CARDS TO REENGINEER BUSINESS PROCESSES TO ENHANCE MISSIONS, IMPROVE QUALITY OF LIFE, AND REDUCE COSTS. I SOLICIT THE FULL COOPERATION AND SUPPORT OF ALL COMMANDERS AS WE UNDERTAKE THIS IMPORTANT EFFORT. 8. THE DEPARTMENT OF THE NAVY CHIEF INFORMATION OFFICER IS RESPONSIBLE FOR OVERSEEING THIS INITIATIVE AND HIS ACTION OFFICERS ARE READY TO ANSWER QUESTIONS. THE POINT OF CONTACT (POC) FOR DON CAC CONCERNS IS MR. ROB CAREY, DIRECTOR, DON SMART CARD OFFICE, 703-602-2641, CAREY.ROB@HQ.NAVY.MIL. THE POC FOR DON PKI CONCERNS IS CAPTAIN SHEILA MCCOY, INFORMATION ASSURANCE TEAM LEADER, 703-602-6882, MCCOY.SHEILA@HQ.NAVY.MIL. THE POC FOR USN PKI CONCERNS IS ROBERT WEILMINSTER (CNO N64322), 703-601-1414, WEILMINSTER.ROBERT@HQ.NAVY.MIL. THE POC FOR USMC PKI CONCERNS IS MAJOR DAN MORRIS (KMI/PKI ACTION OFFICER), 703-693-3490, MORRISDE@HQMC.USMC.MIL. 9. RELEASED BY THE HONORABLE ROBERT B. PIRIE, JR., ACTING SECRETARY OF THE NAVY.// BT