Smart Card Policies

HSPD-12

Homeland Security Presidential Directive 12 (HSPD-12) requires that Federal employees and contractors be issued smart card identification badges, known as personal identity verification (PIV) cards, and requires that PIV cards be used to the maximum extent practicable for logical access to Federally controlled IT systems and physical access to Federally controlled facilities.

NIH Policy on Smart Card Authentication

The NIH Smart Card Authentication Policy provides the framework for NIH to satisfy the logical access requirements of HSPD-12 and other related Federal requirements and directives.

The NIH Account Lifecycle and Password Policy was updated in 2014 to include the requirement for PIV authentication to all workstations where practicable.

OMB Memo 11-11

OMB M-11-11: Continued Implementation of Homeland Security Presidential Directive (HSPD) 12 Policy for a Common Identification Standard for Federal Employees and Contractors requires Federal Agencies to begin using PIV cards for logical access, as follows:

  • Effective immediately, all new systems under development must be enabled to use PIV credentials, in accordance with NIST guidelines, prior to being made operational.

  • Beginning in FY2012, existing systems must be upgraded to use PIV credentials, in accordance with NIST guidelines, prior to using development and technology refresh funds to complete other activities.

Other Policies

Information and Assistance

For additional information, search the NIH IT Knowledge Base for tutorials, instruction sheets and user guides or refer to the appropriate How-To Guide.

For questions or user support, please contact the NIH IT Service Desk.‚Äč