Transcript What is a USB Token? - NCMS

ECA-PKI Options
For access to JPAS
Mark D. Chapman
Facility Security Officer
Advanced Concepts Enterprises, Inc.
Medium Token Assurance
Vendor
1 Year
2 Year
3 Year
Delivery
Method1
IdenTrust
$132
$237
$303
SmartCard
ORC
$129
n/a
$279
USB Token or
SmartCard
VeriSign
$119
$218
n/a
USB Token or
SmartCard2
1. Will require purchase of SmartCard, card reader and middleware or USB
Token depending upon delivery method selected.
2. VeriSign is in process of developing a SmartCard delivery option . Date
available TBD.
Medium Hardware Assurance
Vendor
1 Year
2 Year
3 Year
Delivery
Method
IdenTrust
$166
n/a
$380
SmartCard
OCA
$169
n/a
$369
USB Token or
SmartCard
VeriSign
TBD
TBD
n/a
USB Token or
SmartCard
NOTE: Medium Hardware Assurance requires applicant to present
themselves In-Person to the vendor to establish identity and US Citizenship.
SmartCard or USB Token
What is a SmartCard?
• A plastic card with an embedded logic circuit
• Medium Token Assurance or Medium Hardware
Assurance on a SmartCard is the ONLY authorized
means of accessing JPAS
What is a USB Token?
• A USB Token is a USB device similar to a thumb drive.
• It IS NOT approved for use accessing JPAS
What is Middleware?
• Middleware* is software, i.e. ActivClient©, that acts as a
bridge between your SmartCard Reader and JPAS.
* Talk with your SmartCard vendor about what middleware you will need
Issues
DISA’s position, supported by all vendors, is that the delivery method
(USB Token or SmartCard) is immaterial as long as it is FIPS-140
compliant.
- DISA contends that JPAS only sees the certificate – not the
delivery method.
JPAS (DMDC) states that the ONLY acceptable delivery method is via a
SmartCard.
The preferred method is Medium Hardware Assurance on a SmartCard
- However: This requires each applicant presenting themselves
in-person to the vendor.
Recommended method is Medium Token Assurance on a SmartCard.