29 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts

As of November 30, 2007, government contractors accessing the Commercial Asset Visibility Air Force (CAV AF) system are mandated to use a valid Public Key Infrastructure (PKI) certificate to comply with Department of Defense (DoD) security policies outlined in DoDI 8520.2. This requirement ensures secure electronic transactions for contractors supporting Contract Depot Maintenance acquisitions. Contractors who work at DoD facilities and possess a Common Access Card (CAC) will already have a PKI certificate, while those not stationed at such facilities must obtain a DoD PKI certificate through one of three authorized External Certificate Authorities. Exceptions to this requirement apply only to overseas foreign contractors from countries other than the United Kingdom, Canada, New Zealand, and Australia. This mandate is intended to have minimal impact as most DoD contractors are likely already equipped with the necessary PKI certificates due to similar security protocols across DoD systems. Contractors needing assistance or with questions regarding their compliance with the PKI requirement are advised to contact the designated Contracting Officer for their contract. The point of contact for related issues is Gregory D English, Chief E-3 KC-135 Contracting Branch. The requirement underscores the ongoing commitment to secure communications and data protection within the DoD contractor community.