15 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts

As of November 30, 2007, government contractors accessing the Commercial Asset Visibility Air Force (CAV AF) system are mandated to use a valid Public Key Infrastructure (PKI) certificate, in compliance with Department of Defense security policy DODI 8520.2. This measure ensures secure electronic transactions and applies primarily to contractors working on DoD facilities who possess a Common Access Card (CAC) with an embedded PKI certificate. Contractors not located on DoD sites may acquire a Department of Defense PKI certificate through one of three approved External Certificate Authorities. An exemption is granted only for overseas foreign contractors from countries outside the United Kingdom, Canada, New Zealand, and Australia. The PKI requirement is broadly consistent with existing DoD security protocols and is expected to have minimal operational impact, as most contractors should already possess the necessary certificate. This notification specifically targets contractors supporting Contract Depot Maintenance acquisitions through CAV AF. For any questions or concerns regarding compliance, contractors are advised to contact the designated Contracting Officer, Gregory D English, Chief of the E-3 KC-135 Contracting Branch. The policy is intended to safeguard the integrity of electronic access to CAV AF and aligns with broader DoD efforts to secure sensitive contract-related information.