59 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts

As of November 30, 2007, government contractors accessing the Commercial Asset Visibility Air Force (CAV AF) system are mandated to use a valid Public Key Infrastructure (PKI) certificate to comply with Department of Defense security policies outlined in DODI 8520.2. This ensures secure electronic transactions within the system. Contractors working within DoD facilities who possess a Common Access Card (CAC) should already have the required PKI certificate, while those not located on a DoD site must obtain a PKI certificate from one of three approved External Certificate Authorities. The requirement excludes overseas foreign contracts except for those from the United Kingdom, Canada, New Zealand, and Australia. This directive targets contractors supporting Contract Depot Maintenance acquisitions and emphasizes that the PKI mandate aligns with broader DoD cybersecurity standards, having minimal impact due to widespread existing compliance. The contract notification, referenced as "59 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts" with solicitation number Reference-Number-848PK004, was posted on December 20, 2007, and falls under NAICS code 336412. Gregory D English, Chief of the E-3 KC-135 Contracting Branch, serves as the point of contact for inquiries related to this policy. Contractors are advised to direct any questions or concerns about the PKI requirement to their responsible contracting officer to ensure compliance and address any implementation issues. The PKI integration serves as a critical step toward fortified information security within the DoD contracting environment.