Defense Manpower Data Center (DMDC) Trusted Associate ...

1 Defense Manpower Data Center (DMDC) Trusted Associate Sponsorship System (TASS) Overview Guide Version December 2020 Prepared by: The Defense Manpower Data Center Note: This guide is not intended to serve as a service/agency policy document. Document History Version Date Author Comments 05/23/13 DMDC Original 05/22/14 DMDC Updated current through TASS version (EMMA changes only) 04/26/17 DMDC Updated current through TASS version 11/20/17 DMDC Updated current through TASS version 03/30/18 DMDC Updated to reflect the removal of one of the WBTs from each of the TASS Certifications 09/28/18 DMDC Updated the DSO Fax number in Appendix F 04/11/19 DMDC Updated to TASS version 05/28/20 DMDC Updated to TASS version.

2 HVDF Section updated 06/20/20 DMDC Updated the DSO Fax number in Appendix F, and IDCO URL for RAPIDS Site Locator and Appointment Scheduler 12/09/20 DMDC Updated Section , adding Note re: automatic 60 day extension for TASS access if operator has not completed training. TASS Overview Guide 3 of 51 December 2020 Table of Contents 1 Introduction .. 5 Purpose of TASS .. 5 CAC Program Background .. 5 2 TASS Roles and Responsibilities .. 6 DoD Application .. 6 Defense Manpower Data Center (DMDC) .. 6 Service or Agency Point of Contact (SPOC) .. 6 SPOC Responsibilities.

3 7 SPOC Position Requirements .. 8 High Volume Data Feed (HVDF) or Batch Upload .. 8 Trusted Agent Security Manager (TASM) .. 8 TASM Responsibilities .. 9 TASM Position Requirements .. 9 Trusted Agent (TA) .. 10 TA Responsibilities .. 10 TA Position Requirements .. 11 3 TASS Business Process Overview .. 11 Site 11 TASM Registration .. 12 TASM Registration Notification .. 12 Updates to TASM Information .. 12 TA Registration .. 12 SPOC, TASM, and TA TASS Certification Training .. 13 Applicant Requires Government Credential .. 15 TA Submission of Application .. 15 Applicant Login .. 17 Verification .. 17 Letter of Authorization.

4 18 Status-of-Forces Agreement .. 18 TASS Overview Guide 4 of 51 December 2020 Card Issuance .. 18 DEERS 19 Applicant Reverification .. 19 Eligibility Expiration .. 19 Applicant Revocation .. 19 TA Sponsorship Transfer .. 20 Site ID Removal .. 20 Criteria and Actions for TASM 21 Appendix A DD Form 1172-2 .. 23 Appendix B DD Form 1172-2 Instructions .. 25 Appendix C TASS Email Notifications .. 38 Appendix D Acronyms, Abbreviations, and Standard Terms .. 41 Appendix E Alphanumeric Character Translations .. 44 Appendix F Documentation for DEERS Data Changes .. 47 TASS Overview Guide 5 of 51 December 2020 1 Introduction This Overview Guide includes a description of the Trusted Associate Sponsorship System (TASS) application.

5 This section discusses the purpose and background of the Common Access Card (CAC) program. Purpose of TASS The TASS application, initially designed in 2003 as the Contractor Verification System (CVS), was designed to automate the paper application process using DD Form 1172-2, Application for Department of Defense (DoD) CAC Defense Enrollment Eligibility Reporting System (DEERS) Enrollment. See Appendix A and Appendix B, respectively, for copies of DD Form 1172-2 and instructions. As a web-based system, TASS allows the following populations to apply for a Common Access Card (CAC) or other governmental credential electronically through an approved DoD web application: Affiliated Volunteers (requiring DoD Network access) DoD and Uniformed Service Contractors Foreign Affiliates Non-DoD Civil Service Employees Non-DoD Presidential Appointees Non-Federal Agency Civilian Associates Non-US Non-Appropriated Fund (NAF) Employees OCONUS Hires Other Federal Agency Contractors Government sponsors approve the applications to receive government credentials.

6 CAC Program Background The DoD began issuing advanced identification (ID) cards for Active Duty Military, Selected Reserves, DoD civilians, and inside the wall Contractors in October 2000. The CAC is a personalized Smart Card a plastic card the size of a credit card with an embedded integrated circuit chip (ICC) for storing and processing data. Incorporated with public key infrastructure (PKI) security, the CAC consolidates multiple types of credentials and data and may be used for various applications, including network security and secure email communication. For example, TASS supports various types of government credentials such as the Volunteer Logical Access credential and the Uniformed Services ID (USID) card.

7 The original CAC featured 32 kilobytes of Electronically Erasable Programmable Read- Only Memory (EEPROM) and supported on-card secure cryptographic functions, including key generation encryption and digital signing. With PKI, data encrypted with the public key may be decrypted only with the private key. The ICC contains protected data about the cardholder (including personal identification number [PIN]), personal TASS Overview Guide 6 of 51 December 2020 demographics, benefits, digital certificates, and card management and security applets. Four unique digital certificates stored on the chip allow the cardholder to digitally sign documents, encrypt data for transmission or storage, and establish secure web sessions to access and update information via the Internet.

8 The new version of the CAC is equipped with 144 kilobytes of EEPROM. The increased memory provides for the creation of more complex and functional applets in support of business processes. The Defense Manpower Data Center (DMDC) Identity Services Division and Identity Programs Branch Program Management and Development organizations sponsor the CAC program. 2 TASS Roles and Responsibilities This section describes each of the roles within TASS and discusses the responsibilities of the individuals assigned to each role. TASS users must meet the requirements listed in the following sections to assume their roles and responsibilities and qualify for access to the TASS application.

9 DoD Application Since the release of version , organizations seeking to use TASS no longer need to submit a Memorandum of Agreement (MOA) to implement TASS service. The TASS application has become a DoD application and no longer requires every entity to possess an individual MOA with DMDC. Defense Manpower Data Center (DMDC) DMDC, as the administrator of DEERS and Real-Time Automated Personnel Identification System (RAPIDS), operates and maintains the TASS infrastructure. To manage the phases of the TASS Business Process, DMDC has created three TASS user roles, the Service or Agency Point of Contact (SPOC), the Trusted Agent Security Manager (TASM), and the Trusted Agent (TA).

10 The TASS SPOC, TASM, or TA must fulfill the responsibilities and comply with the position requirements listed for his or her role, or risk having that role revoked. Note: Applicants use TASS to submit applications for the government credential issuance process. Service or Agency Point of Contact (SPOC) SPOC(s) handle the day-to-day TASS management and operation. The TASS SPOC ensures that assigned TASM(s) and TA(s) meet TASS requirements. Therefore, they should be familiar with the requirements for each role. TASS Overview Guide 7 of 51 December 2020 SPOC(s) fulfill the following key roles: Manage TASS for their service or agency Liaison between DMDC and other TASS roles Create TASS sites Manage TASM registration and revocation Maintain other required field support SPOC Responsibilities SPOC(s) have the following responsibilities.