§161.5. Responsibilities. — Inbound Citations

(c) The DoD is migrating the CAC to meet the Federal requirements for credentialing contained within Homeland Security Presidential Directive 12 and FIPS Publication 201-3. Migration will take place over multiple years as the card issuance hardware, software, and supporting systems and processes are upgraded. Successful migration will require coordination and collaboration within and among all CAC communities (e.g., personnel security, operational security, industrial security, information security, physical security, and information technology). The organizations listed in this section will support the migration in conjunction with the responsibilities listed in § 161.5:

(i) Procure and distribute CAC consumables, including card stock, electromagnetically opaque sleeves, and printer supplies, commensurate with funding received from the DoD Components.

(ii) In coordination with the Office of the Under Secretary of Defense for Policy, establish an electronic process for securing CAC eligibility information on foreign government military, employee, or contract support personnel whose visit status and background investigation has been confirmed, documented, and processed in accordance with DoD Directive 5230.20, “Visits and Assignments of Foreign Nationals” (available at http://www.dtic.mil/whs/directives/corres/pdf/523020p.pdf).

(iii) In accordance with FIPS Publication 201-3, electronically capture and store source documents in the identity-proofing process at the accession points for eligible ID card holders.

(iv) Implement modifications to the CAC applets and interfaces, add contactless capability to the CAC platform and implement modifications to the CAC topology to support compliance with FIPS Publication 201-3.

(v) Establish and implement procedures for capturing biometrics required to support CAC issuance, which includes fingerprints and facial images specified in FIPS Publication 201-3 and National Institute of Standards and Technology Special Publication 800-76-1, “Biometric Data Specification for Personal Identity Verification” (available at http://csrc.nist.gov/publications/nistpubs/800-76-1/SP800-76-1_012407.pdf).

(vi) In coordination with the Executive Manager for DoD Biometrics and the Office of the USD(AT&L), implement the capability to obtain two segmented images (primary and secondary) fingerprint minutiae from the full 10-print fingerprints captured as part of the initial background investigation process for CAC issuance.

(vii) Maintain a capability for a CAC holder to reset or unlock PINs from a system outside of the CAC issuance infrastructure.

(2) The Executive Manager for DoD Biometrics, as appointed by the Secretary of the Army as DoD Executive Agent for DoD Biometrics in accordance with DoD Directive 8521.01E, “Department of Defense Biometrics” (available at http://www.dtic.mil/whs/directives/corres/pdf/852101p.pdf), shall:

(i) Establish biometric standards for collection, storage, and subsequent transmittal of biometric information in accordance with DoD Directive 8521.01E (available at http://www.dtic.mil/whs/directives/corres/pdf/852101p.pdf).

(ii) In coordination with the USD(P&R), the USD(I), and the Heads of the DoD Components, establish capability for biometric collection and enrollment operations to support CAC issuance in accordance with 32 CFR part 310 and National Institute of Standards and Technology Special Publication 800-76-1 (available at http://csrc.nist.gov/publications/nistpubs/800-76-1/SP800-76-1_012407.pdf).

(i) Monitor the CAC and identity management related activities outlined within this Instruction in accordance with DoD Instruction 1000.25 (available at http://www.dtic.mil/whs/directives/corres/pdf/100025p.pdf).

(ii) Maintain a configuration management process for the CAC and its related components to monitor DoD compliance with FIPS Publication 201-3.