48 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts

As of November 30, 2007, all government contractors accessing the Commercial Asset Visibility Air Force (CAV AF) system are mandated to use a valid Public Key Infrastructure (PKI) certificate to comply with Department of Defense security policies outlined in DODI 8520.2. This ensures secure electronic transactions and applies to contractors working both on and off DoD facilities. Contractors physically located on DoD sites with a Common Access Card (CAC) are presumed to already possess a PKI certificate, while those off-site may acquire one through approved External Certificate Authorities. Exceptions to this rule exist only for overseas foreign contracts from countries excluding the United Kingdom, Canada, New Zealand, and Australia. The PKI requirement aligns with broader DoD cybersecurity practices and is expected to impose minimal burden as most contractors should already hold PKI certificates. This notification is specifically relevant for contractors involved with Contract Depot Maintenance acquisitions supporting CAV AF. Questions or concerns regarding compliance should be directed to the designated Contracting Officer, with Gregory D English serving as a key point of contact for the E-3 KC-135 Contracting Branch. The solicitation referenced is titled "48 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts," tied to NAICS code 336412, reinforcing the emphasis on secure and verified access to DoD electronic systems.