Common Access Card (CAC) Policy Memo 003
This MARADMIN establishes policy and guidance for the implementation of the Common Access Card (CAC) across the Marine Corps. It designates roles and responsibilities for various Marine Corps commands in managing CAC issuance, integration, and application development. The message sets near-term and mid-term goals for full CAC implementation and outlines how the CAC will replace the Teslin ID card while providing enhanced capabilities including PKI certificates, computer access, and integration into various business processes.
Issued: April 29, 2003
1. PURPOSE. TO PROMOTE AN UNDERSTANDING OF THE CAC, ARTICULATE GOALS AND OBJECTIVES, AND HIGHLIGHT TECHNOLOGY ISSUES ASSOCIATED WITH THE CAC. 2. BACKGROUND. REF B DESIGNATED THE DIRECTOR, C4/CIO AS THE FUNCTIONAL MANAGER FOR THE USMC CAC. DEFENSE MANPOWER DATA CENTER (DMDC) WILL CENTRALLY PROCURE AND MANAGE CAC ISSUANCE FOR THE DOD. THE CAC IS POTENTIALLY MUCH MORE THAN THE REPLACEMENT FOR THE TESLIN ID CARD. IT HAS BEEN SUCCESSFULLY PILOTED AS A TIME AND MONEY SAVING DEVICE IN SEVERAL AREAS, INCLUDING FOOD SERVICE, AIRCRAFT MANIFESTING, AND VARIOUS TRAINING MANAGEMENT APPLICATIONS. IN THE FUTURE THE CAC WILL PROVIDE ACCESS TO THE USERS COMPUTER TERMINAL AND PROVIDE PKI CERTIFICATES THAT WILL ENABLE THE TRANSMISSION OF ENCRYPTED E-MAIL AND ENCRYPTED WEBSITE COMMUNICATIONS. CURRENTLY REF G DIRECTS THE USE OF SOFTWARE CERTIFICATES FOR DIGITALLY SIGNING AND ENCRYPTION OF E-MAIL. ONCE KEY RECOVERY ISSUES HAVE BEEN RESOLVED, MIGRATION TO THE USE OF PUBLIC KEY CERTIFICATES LOCATED ON THE CAC WILL TAKE PLACE. THE CIO SUPPORTS THE INTEGRATION OF THE CAC AND SCT INTO EXISTING OR PLANNED PROGRAMS OF RECORD. CAC APPLICATIONS MUST BE INTEGRATED INTO THE BUSINESS PROCESS. IT IS THE MARINE CORPS GOAL TO INTEGRATE SCT INTO EXISTING PROGRAMS INSTEAD OF CREATING SEPARATE APPLICATIONS. ALL CAC PILOTS MUST BE REGISTERED WITH THE CIO AND THEIR GOALS AND SUCCESS METRICS FULLY IDENTIFIED. THE CAC CONTAINS MEMORY ON THE CIRCUIT CHIP FOR POTENTIAL APPLICATIONS. THE CIO WILL MANAGE THE MARINE CORPS SPECIFIC MEMORY SPACE, AND MCSC(SE&I) WILL HAVE RESPONSIBILITY FOR CONFIGURATION MANAGEMENT. THE FUNCTIONAL AREA ADVOCATES WILL BE RESPONSIBLE FOR CONTACTING THE CIO WITH SPACE UTILIZATION REQUESTS. IF APPROVED, THE CIO WILL FORWARD THE REQUEST TO THE ITSG FOR REVIEW AND RECOMMENDATIONS. 3. GOALS. IT IS THE INTENT OF THE MARINE CORPS CIO TO INTEGRATE SCT INTO EXISTING PROGRAMS OF RECORD WHERE APPROPRIATE AND POSITION THE CAC AS PART OF THE MARINE CORPS' IT ARCHITECTURE. IN ORDER TO ACCOMPLISH THIS, THE FOLLOWING NEAR AND MID TERM GOALS MUST BE ACHIEVED: A. NEAR TERM (BY OCT 03). PER REF B, ISSUE THE CAC TO ALL MARINE CORPS ACTIVE DUTY MILITARY, SELECTED RESERVES, CIVILIAN EMPLOYEES, AND ELIGIBLE CONTRACTORS. B. MID TERM (BY OCT 04) - CONFIGURATION MANAGEMENT OF ALL MARINE CORPS APPLICATIONS REQUESTING SPACE ON THE CIRCUIT CHIP LOCATED ON THE CAC. 5. RESPONSIBILITIES. A. HQMC C4 (1) DEVELOP AND PUBLISH USMC POLICY AND DIRECTIVES REGARDING CAC IMPLEMENTATION. (2) REVIEW AND APPROVE THE DEFENSE MANPOWER DATA CENTER (DMDC) BILL FOR CARD STOCK, PRINTER CONSUMABLES, AND ADDITIONAL WORKSTATIONS BASED ON M&RA'S CURRENT AND PROJECTED CARD ISSUANCE REQUIREMENTS. (3) MANAGE THE USMC SERVICE SPECIFIC MEMORY SPACE. (4) PROVIDE STATUS REPORTS TO FUNCTIONAL AREA ADVOCATES AND OTHER AGENCIES (AS APPROPRIATE) ON THE UTILIZATION OF THE USMC SPECIFIC SPACE. (5) COORDINATE REPRESENTATION AT ALL DOD, JOINT, AND SERVICE LEVEL MEETINGS RELATED TO SCT AND CAC. (6) HOST AND COORDINATE WITH M&RA AN ANNUAL USERS CONFERENCE TO DISCUSS CAC POLICY, APPLICATIONS AND PILOTS WITH USERS ACROSS THE USMC. (7) MITNOC WILL TEST DOD CAC BIOMETRIC SCENARIOS FOR MARINE CORPS FOR BIOMETRIC FEASIBILITY STUDY. B. M&RA (1) SERVE AS THE MARINE CORPS SINGLE POINT OF CONTACT BETWEEN DEERS/RAPIDS OPERATIONS DEPARTMENT (DROD) AND THE USMC BASES/STATIONS FOR CAC IN ITS CAPACITY AS A MILITARY ID CARD. (2) IN COORDINATION WITH HQMC C4, CONTINUE TO PROVIDE POLICY/GUIDANCE TO THE PASS AND ID OFFICES. (3) COORDINATE WITH DMDC ON ALL DEERS/RAPIDS UPGRADE AND TRAINING ISSUES. (4) ON AN ANNUAL OR AS NEEDED BASIS, PROVIDE TO HQMC C4 THE FOLLOWING DATA: NUMBER OF CARDS ISSUED, CARD STOCK AND PRINTER CONSUMABLES USED, AND WORKSTATIONS AND PERSONNEL DEPLOYED TO SUPPORT CAC ISSUANCE. C. MCSC (1) PROVIDE PROGRAMMATIC AND LIFE CYCLE SUPPORT OF SCT APPLICATIONS AS REQUESTED BY FUNCTIONAL AREA ADVOCATES. (2) IDENTIFY APPROPRIATE USE OF SCT TO ASSIST THE WARFIGHTER IN MISSION ACCOMPLISHMENT AND THE SUPPORTING ESTABLISHMENT IN IMPROVING EXISTING PROCESSES. (3) ASSIST FUNCTIONAL ADVOCATES WITH THEIR REQUIREMENTS TO INTEGRATE SCT INTO EXISTING AND FUTURE APPLICATIONS. (4) DESIGN NEW SMART CARD ENABLED APPLICATIONS AS REQUIRED BY EACH FUNCTIONAL AREA ADVOCATE. (5) PROVIDE QUARTERLY UPDATES ON ON-GOING PROOFS OF CONCEPT AND TESTING OF SMART CARD ENABLED APPLICATIONS TO HQMC C4. D. P&R (1) ASSIST HQMC C4 IN RESOLVING ISSUES CONCERNING THE DMDC BILL. (2) ASSIST HQMC C4 IN MAINTAINING THE FUNDING FOR CAC AS A CORPORATE BILL. E. MCCDC (1) IAW REF H, VALIDATE THE REQUIREMENTS FOR THE CAC AND APPLICATIONS THAT UTILIZE SCT. (2) SUPPORT THE DEVELOPMENT OF REQUIREMENTS FOR ALL SMART CARD INITIATIVES. F. FUNCTIONAL AREA ADVOCATES (1) AS APPROPRIATE, DEVELOP PLANS FOR THE INTEGRATION OF SCT INTO EXISTING APPLICATIONS TO IMPROVE FUNCTIONAL AREA PROCESS. (2) PROVIDE SPONSORSHIP OF NEWLY DEVELOPED SMART CARD ENABLED APPLICATIONS TO SUPPORT OR IMPROVE FUNCTIONAL AREA PROCESSES. (3) PARTICIPATE IN LIFE-CYCLE MANAGEMENT OF SMART CARD ENABLED APPLICATION(S). (4) VIA THE ITSG, IDENTIFY AND VET APPLICATIONS TO BE SMART CARD ENABLED AND PROVIDE CAC PRIORITIZATION RECOMMENDATION TO THE CIO. 6. WEBSITE. ALL PERTINENT CAC INFORMATION AND LINKS WILL BE PLACED UNDER THE "USMC USERS" AREA OF THE C4 WEBSITE, WHICH IS LOCATED AT HTTP:(SLASH_SLASH)HQINET001.HQMC.USMC.MIL/C4/DEFAULT.ASP.