This site uses cookies for various purposes including enhancing your experience, analytics, and ads. By continuing to browse this site or by clicking "Accept and close", you agree to our use of cookies. For more information, read our Cookies page.

CAC Modernization

New mandated regulatory compliance to keep confidential information secure

CAC Modernization Image

Lexmark has been providing CAC-enabled MFDs to the Department of Defense (DoD) for well over a decade and in fact was among the first manufacturers to offer this capability. We continue to be a leader in this area by providing information and resources to assist you with the DoD CAC Modernization mandate.

Secretary of Defense for Personnel and Readiness and the DoD Chief Information Officer (CIO) Memorandum

  • Mandates that all DoD Components transition Non-Secure Internet Protocol Router Network (NIPR) Public Key-Enabled IT resources to use the PIV Authentication Certificate for Authentication

The DoD CAC Certificate Reduction and Realignment Plan details the following:

  • All DoD Components transition NIPRnet IT resources to use the PIV-AUTH certificate as the Identity for authentication.
  • Eliminate the Identity Certificate from the CAC.
  • Realign the Email Signing certificate to perform only signature operations.
  • Users must have Activated the PIV certificate no later than March 31, 2019 via the Manpower Data Center (DMDC) Self Service Portal.
  • Users will not be required to use the PIV cert until the transition is completed in 2020, as set by the specific service (Army, Air Force, Navy, DoD) Beginning January 01, 2020.

Expected Changes from the directive above:

  • Reduction of Card certificates from 4 to 3 certificates.
  • Change of the user’s EDPI from 10 digits to 16 digits on card. Change of the user’s Active Directory account to reflect the 16 digits UPN
    • DoD PIV authentication (Required and contains a User Principal Name (UPN) in the Subject alternate name (SAN) field of last 16 digits of the FASCN@mil)

Actions/Changes to CAC-enabled Multi-Function Devices (MFDs) which must be performed:

  • Where the model number has two leading alpha character (CX### / MX###), the changes can be accomplished via a configuration bundle.
    • Install a specially created configuration bundle
  • Where the model number has a single leading alpha character (C### / X###), these require the following steps.
    • Install the PIV driver
    • Remove/Stop CAC card driver
    • Install an app, depending on the model of the MFD

When planning the device transition, take notice that currently the MFD will not support a Mixed certificate (CAC & PIV) authentication environment.

  • It will either support either the PIV or the CAC cert, not both on the same device at the same time.
  • The Active Directory PIV authentication transition for users will need to coincide with the MFD changes.

User impact if the above actions/changes to CAC-enabled MFDs are not performed:

  • CAC Authentication on MFDs will fail, due to the type of active certificate on the card.

For additional instructions and to receive the necessary software to prepare my Lexmark multifunction device, please fill in the Request Information form section on this page.

CAC Modernization Request Information

To access detailed instructions and the required MFD update files or if you would like to have your Lexmark Account Manager contact you, please complete and submit this form.

Need other technical assistance with your CAC Modernization efforts please contact our Technical Support Center at:

For DOD CONUS Support  1-800-Lexmark (539-6275) Option 1, Option 2, Option 2. 

For DOD OCONUS SUPPORT  OCONUSSolSup@lexmark.com to open new cases or ask for updates.

aa

I agree that the personal data I provide may be stored and used to send me marketing materials and surveys and for Lexmark's research purposes. I understand that my agreement to permit Lexmark to process my information is voluntary and that I can at any time revoke my permission. If you do not agree to the use of your personal data, please do not disclose any such information to Lexmark. Please note that in this case Lexmark may not be able to send you information and certain features of Lexmark's websites may not function properly. The terms of the Privacy Statement, available at lexmark.com/en_us/privacy-policy.html shall apply to personal data you submit.

Thanks for your request

The additional instructions and the necessary software needed to prepare your Lexmark multifunction devices are provided via this link – CAC Modernization Instructions.

 

Untitled Document