J-0200000-11.a How to purchase PKI to Access Maximo.pdf

FEC EURAFSWA

Purchasing PKI to access Maximo

2 NAVFAC EURAFCENT

PKI certificates - Process

Purchase the token DoD ECA Certificate

• The certificate can be purchased on https://www.identrust.com/index.php/wizard?nid=146.

• During the purchasing process insure to specify the system for which the Pki certificate is requored (i.e. Maximo)

• Recommended on usb drive only if not operating on Gov computers.

• During the purchase process it is required to provide the name of the person who will use the certificate and the DUNS number of the company for which the person is operating.

Once the purchasing process is complete the employee will receive a Document Package that will be filled prperly and certified by the ADE (Authorized DOD employee).

The ADE will send the package of paperwork to HQ Identrust in USA.

Identrust US validate that every thing is fine and send the usb token to the employee.

the token with the pki shall be registred before the use.

The validity can be from 1 to 3 years (it depends by the license purchased).

Important note: The whole process shall not exceed 30 days.

It is recommended to purchase the Dod ECA Certificate and download the Document Package once you have the appointment alrteady scheduled with the ADE in order to save days before the shipping to US.

3 NAVFAC EURAFCENT

ACTIVITY 01 - PKI certificates – Process (page 2)

Open Identrust webpage: https://www.identrust.com/index.php/wizard?nid=146

• Scroll down and then select certificate for MAXIMO and then click on NEXT button.

• On next page you have to choose: I live in US = YES or NOT

• If yes then = ECA Medium Token Assurance $185.00 - $445.00*

• If Not then = ECA Medium Token Assurance Foreign $200.00 - $476.00*

• Note: The price of PKI certificate for Maximo changes based upon time chosen, either 1 year or 3 years.

Free USPS shipping within the U.S.

• Additional fees may apply for shipping outside of the U.S. Expedited delivery is available.

• State sales tax may apply in CA, CO, FL, TX, UT and VA

*Price may change, please check identitrust web page to retrieve the most updated prices.

4 NAVFAC EURAFCENT

Questions

In case of questions please contact:

Salvatore Mazza

NAVFAC EURAFCENT - PW1

Business and Industry Specialist / MAXIMO Support Comm: +39 081 568 5291

DSN: 314 626 5291

E-mail: Salvatore.mazza15@us.navy.mil

5 NAVFAC EURAFCENT

Backup slides

6 NAVFAC EURAFCENT

Who can become an ADE

Source: DISA

Requirements to become an ADE are below:

1. Must be a US Citizen

2. Must possess a DoD issued Common Access Card (CAC)

3. Must hold a minimum of a US Sec Clearance

7 NAVFAC EURAFCENT

Documents required for the applicants

Applicants have to provide two identity source documents in original form which come from the list of acceptable documents included in Form I-9, OMB No. 1115- 0136, Employment Eligibility Verification Must possess a DoD issued Common Access Card (CAC).

• Non US Citizens must provide a valid passport from their country of citizenship.

• Second form of ID (driver license, or Identity Card)

Source: United States Department of Defense External Certification Authority X.509 Certificate Policy - Version 4.6 - 9 March 2022

8 NAVFAC EURAFCENT

Things to Know About The ECA Program

• IdenTrust is one of a limited number of approved ECA vendors, having received our Approval to Operate (ATO) in November 2007 after a rigorous certification program.

• ECA certificates are digital credentials that attest to the certificate owner’s identity and affiliation. They can be issued to people who reside in the U.S. or in a country that is approved by the U.S. government. The Department of Defense (DoD) relies on these credentials to ensure the identity of a user who is accessing DoD information systems.

• ECA certificates may only be issued to individuals who are affiliated with an organization that interacts with DoD systems. This affiliation will be designated during the application process and will be confirmed prior to certificate issuance.

• IdenTrust also offers DoD-approved TLS/SSL certificates to secure website applications.

• Medium Assurance ECA certificates that are issued to affiliated individuals can be used to:

• Establish your identity when accessing a protected site;

• Legally “sign” a document, form or application using a digital signature; and

• Encrypt messages (email) or documents to ensure confidentiality.

• Much like a driver’s license or a passport, ECA certificates are unique to each individual and cannot be shared. It is against DoD regulations to share a username and password or to allow someone to access another’s ECA certificate for any reason. Violation of this policy will result in the immediate revocation of the original owner’s certificate.

• ECA certificates are stored in a software version on your computer’s hard drive or on a hardware device (i.e., a smart card or USB token) for portability and added security. The type of ECA certificate you purchase may dictate the required type of certificate storage mechanism.

• Please be aware that DoD policy requires that you retrieve your certificate within 30 days from the date your forms are signed. If you are not able to complete this process and retrieve your certificate before that time elapses, your application will be cancelled and you will need to start this process again from the beginning. Before starting your application, please ensure that you will be able to complete all steps within 30 days.

Source: https://www.identrust.com/certificates/learn/about-eca-certificates