61 -- Notification of PKI Requirement CAV AF on DoD CDM Contracts

As of November 30, 2007, government contractors accessing the Commercial Asset Visibility Air Force (CAV AF) system are mandated to use a valid Public Key Infrastructure (PKI) certificate in compliance with Department of Defense security policy DODI 8520.2. This requirement aims to secure electronic transactions and applies to contractors both on and off DoD facilities. Contractors with a Common Access Card (CAC) should already possess a PKI certificate, while those without access to a DoD facility must obtain a DoD PKI certificate from one of three approved External Certificate Authorities. Exceptions to this policy include overseas foreign contracts from countries other than the United Kingdom, Canada, New Zealand, and Australia. This notification specifically targets contractors involved in Contract Depot Maintenance acquisitions who use CAV AF, emphasizing that the PKI requirement is standard across many DoD systems and should have minimal impact, as most contractors are expected to already hold the necessary certificate. Questions or issues related to compliance with this requirement are directed to the cognizant contracting officer. For additional guidance or certificate procurement, contractors may refer to resources provided by the Defense Information Systems Agency. The primary point of contact for this policy is Gregory D. English, Chief of the E-3 KC-135 Contracting Branch.