CAC Modernization
New mandated regulatory compliance to keep confidential information secure
Lexmark has been providing CAC-enabled MFDs to the Department of Defense (DoD) for well over a decade and in fact was among the first manufacturers to offer this capability. We continue to be a leader in this area by providing information and resources to assist you with the DoD CAC Modernization mandate.
Secretary of Defense for Personnel and Readiness and the DoD Chief Information Officer (CIO) Memorandum
- Mandates that all DoD Components transition Non-Secure Internet Protocol Router Network (NIPR) Public Key-Enabled IT resources to use the PIV Authentication Certificate for Authentication
The DoD CAC Certificate Reduction and Realignment Plan details the following:
- All DoD Components transition NIPRnet IT resources to use the PIV-AUTH certificate as the Identity for authentication.
- Eliminate the Identity Certificate from the CAC.
- Realign the Email Signing certificate to perform only signature operations.
- Users must have Activated the PIV certificate no later than March 31, 2019 via the Manpower Data Center (DMDC) Self Service Portal.
- Users will not be required to use the PIV cert until the transition is completed in 2020, as set by the specific service (Army, Air Force, Navy, DoD) Beginning January 01, 2020.
Expected Changes from the directive above:
- Reduction of Card certificates from 4 to 3 certificates.
-
Change of the user’s EDPI from 10 digits to 16 digits on card. Change of the user’s Active Directory account to reflect the 16 digits UPN
- DoD PIV authentication (Required and contains a User Principal Name (UPN) in the Subject alternate name (SAN) field of last 16 digits of the FASCN@mil)
Actions/Changes to CAC-enabled Multi-Function Devices (MFDs) which must be performed:
-
Where the model number has two leading alpha character (CX### / MX###), the changes can be accomplished via a configuration bundle.
- Install a specially created configuration bundle
-
Where the model number has a single leading alpha character (C### / X###), these require the following steps.
- Install the PIV driver
- Remove/Stop CAC card driver
- Install an app, depending on the model of the MFD
When planning the device transition, take notice that currently the MFD will not support a Mixed certificate (CAC & PIV) authentication environment.
- It will either support either the PIV or the CAC cert, not both on the same device at the same time.
- The Active Directory PIV authentication transition for users will need to coincide with the MFD changes.
User impact if the above actions/changes to CAC-enabled MFDs are not performed:
- CAC Authentication on MFDs will fail, due to the type of active certificate on the card.
For additional instructions and to receive the necessary software to prepare my Lexmark multifunction device, please fill in the Request Information form section on this page.
CAC Modernization Request Information
To access detailed instructions and the required MFD update files or if you would like to have your Lexmark Account Manager contact you, please complete and submit this form.
Need other technical assistance with your CAC Modernization efforts please contact our Technical Support Center at:
For DOD CONUS Support 1-800-Lexmark (539-6275) Option 1, Option 2, Option 2.
For DOD OCONUS SUPPORT OCONUSSolSup@lexmark.com to open new cases or ask for updates.
Thanks for your request
The additional instructions and the necessary software needed to prepare your Lexmark multifunction devices are provided via this link – CAC Modernization Instructions.