UNCLASSIFIED Know the Earth Show the Way NGA NIPRNET

UNCLASSIFIED Know the Earth…Show the Way NGA NIPRNET Presentation to FLIP Coordinating Committee, Digital Working Group Larry Glick, (314) 263 -4984, glickla@nga. mil Aeronautical Division, Office of Global Navigation 5 -7 Oct 2004 UNCLASSIFIED NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY What is NGA NIPRnet? • A world wide accessible NGA web site which uses PKI for authentication • Users can enter the site with a Do. D level 3 certificate • To gain access to NGA unclassified products users need to register at the site to become a member of the U. S. Only Community of Interest (USCOI) 2 UNCLASSIFIED Know the Earth…Show the Way

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY Why do I need to register if I am authenticated with PKI? • Because of the LIMDIS caveat on some of the data inside this domain, the NGA policy office (OIP) has indicated that though users are authenticated with the certificate, an additional process of authorization must occur prior to access to create an access control list • This will be accomplished at the registration process along with a request to verify via e-mail that you are born a U. S. citizen or naturalized citizen from your supervisor/COR and your security officer • Verification of your “Need to know” and U. S. government affiliation from your supervisor/COR and your security office 3 UNCLASSIFIED Know the Earth…Show the Way

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY Using NGA’s PK Enabled NIPRNET Registered Class 3 Do. D PKI Certific ate Internet Users Class 3 Do. D PKI Certific ate Non-Registered Registration Required 4 UNCLASSIFIED Know the Earth…Show the Way

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY How will my first log- in process be achieved? • • A User MUST present their Do. D PKI X 509 Certificate every time they use the system • Certificate can be encoded onto a Common Access Card (CAC - cryptographic hardware token) • CAC must be inserted into a CAC reader and a PIN must be entered to gain access to the certificate • Certificate can be encoded onto a floppy • Certificate must be installed into a browser A User MUST register the first time they use the system • Provide Basic user contact information • Provide Security Officer contact information • User’s Clearance Level will be obtained • User’s Citizenship will be obtained • Provide Supervisor contact information • User’s Need To know will be obtained • Identify U. S. Government Affiliation • Provide COTR contact information (CONTRACTORS ONLY) • Do. D or U. S. Contract Start and End Date will be obtained • Do. D or U. S. Contract Number will be obtained • Identify U. S. Government Affiliation 5 UNCLASSIFIED Know the Earth…Show the Way

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY Where to Obtain Do. D PKI X 509 Certificate • Do. D Military and Civilian employees • Contact NGA Help Desk @ (800) 455 -0899 • Request a Do. D PKI X 509 Certificate • Do. D Contractors with. mil email address • Contact NGA Help Desk @ @ (800) 455 -0899 • Request a Do. D PKI X 509 Certificate • Do. D Contractors with NO. mil email address • Contact one of three Do. D APPROVED Commercial Vendors • Purchase a Do. D PKI ECA/IECA X 509 Certificate • Operational Research Consultants (ORC) - http: //eca. orc. com/ • Digital Signature Trust (DST) http: //www. digsigtrust. com/federal/dod_4. html • Verisign - http: //www. verisign. com/enterprise/government/iecadod. html UNCLASSIFIED 6 Know the Earth…Show the Way

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY NGA NIPRNET/PKI Aeronautical Data Implementation Schedule Planned removal of Aeronautical products from “www” and public sale 7 UNCLASSIFIED Know the Earth…Show the Way

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY Know the Earth…Show the Way 8 UNCLASSIFIED Know the Earth…Show the Way