1. UNCLASSIFIED
NGA NIPRNET Presentation to FLIP Coordinating Committee, Digital Working Group
Larry Glick, (314) ,
Aeronautical Division, Office of Global Navigation
5-7 Oct 2004
UNCLASSIFIED

2. What is NGA NIPRnet?
A world wide accessible NGA web site which uses PKI for authentication
Users can enter the site with a DoD level 3 certificate
To gain access to NGA unclassified products users need to register at the site to become a member of the U.S. Only Community of Interest (USCOI)

3. Why do I need to register if I am authenticated with PKI?
Because of the LIMDIS caveat on some of the data inside this domain, the NGA policy office (OIP) has indicated that though users are authenticated with the certificate, an additional process of authorization must occur prior to access to create an access control list
This will be accomplished at the registration process along with a request to verify via that you are born a U.S. citizen or naturalized citizen from your supervisor/COR and your security officer
Verification of your “Need to know” and U.S. government affiliation from your supervisor/COR and your security office

4. Using NGA’s PK Enabled NIPRNET
Registered
Class 3
DoD PKI
Certificate
Internet Users
NGA PK Enabled NIPRNET
Class 3
DoD PKI
Certificate
Registration
Required
Non-Registered

5. How will my first log- in process be achieved?
A User MUST present their DoD PKI X509 Certificate every time they use the system
Certificate can be encoded onto a Common Access Card (CAC - cryptographic hardware token)
CAC must be inserted into a CAC reader and a PIN must be entered to gain access to the certificate
Certificate can be encoded onto a floppy
Certificate must be installed into a browser
A User MUST register the first time they use the system
Provide Basic user contact information
Provide Security Officer contact information
User’s Clearance Level will be obtained
User’s Citizenship will be obtained
Provide Supervisor contact information
User’s Need To know will be obtained
Identify U.S. Government Affiliation
Provide COTR contact information (CONTRACTORS ONLY)
DoD or U.S. Contract Start and End Date will be obtained
DoD or U.S. Contract Number will be obtained

6. Where to Obtain DoD PKI X509 Certificate
DoD Military and Civilian employees
Contact NGA Help (800)
Request a DoD PKI X509 Certificate
DoD Contractors with .mil address
Contact NGA (800)
DoD Contractors with NO .mil address
Contact one of three DoD APPROVED Commercial Vendors
Purchase a DoD PKI ECA/IECA X509 Certificate
Operational Research Consultants (ORC) -
Digital Signature Trust (DST) -
Verisign -

7. NGA NIPRNET/PKI Aeronautical Data Implementation Schedule
Planned removal of Aeronautical products from “www” and public sale

8. NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY
Know the Earth…Show the Way