Click here to find out how TSA's Secure Flight helps Alex Johnson

Frequently Asked Questions

Transportation Worker Identification Credential (TWIC®)

Notice:

Click here to learn more about an issue related to improperly encoded TWICs and to determine if this issue affects your TWIC.

twic_faq_menu

PROGRAM INFORMATION

General

What is TWIC?
- TWIC is a common identification credential for all personnel requiring unescorted access to secure areas of MTSA -regulated facilities and vessels, and all mariners holding Coast Guard-issued credentials. Individuals who meet TWIC eligibility requirements will be issued a tamper-resistant credential containing the worker's biometric (fingerprint template) to allow for a positive link between the card and the individual. (homeport.uscg.mil)

How was TWIC created?
- Congress directed the federal government, through the Maritime Transportation Security Act (MTSA), to issue a biometric security credential to individuals who require unescorted access to secure areas of facilities and vessels and all mariners holding Coast Guard- issued credentials or qualification documents. Controlling access to secure areas is critical to enhancing port security. (homeport.uscg.mil)

How will the TWIC be used?
- During the initial rollout, TWIC will be used for visual identity checks. TWIC holders will present their cards to authorized personnel, who will compare the holder to his or her photo, inspect security features on the TWIC and evaluate the card for signs of tampering. The Coast Guard will conduct vessel and facility inspections and use hand -held readers during spot checks to ensure credentials are valid and identity is verified. A second rulemaking will establish access control requirements, including the use of electronic readers by certain vessel and facility owners and operators.

Who must get a TWIC?
- Coast Guard-credentialed merchant mariners, port facility employees, long shore workers, truck drivers, and others requiring unescorted access to secure areas of maritime facilities and vessels regulated by MTSA are required to get a TWIC. (homeport.uscg.mil)

Are individuals who work on cruise ships required to get a TWIC?
- Most cruise ships that call on U.S. ports are foreign flagged and do not have secure areas as defined by MTSA, therefore individuals working on those ships would not require a TWIC. For U.S. flagged cruise ships, if an individual requires unescorted access to areas designated as 'secure' or 'restricted', a TWIC is required. If the individual only requires access to 'passenger access' areas, a TWIC is not required.

Does TWIC apply to mutual aid, first responders, etc. in the event of an emergency?
- State and local emergency responders are exempt from the requirement to have a TWIC when they are responding to an emergency. Additional guidance has been included in the U.S. Coast Guard Navigation and Vessel Inspection Circular (NVIC).

Where do I go for 'official' TWIC enrollment information and services?
- TWIC information and resources are available on the official TWIC Program web site (www.tsa.gov/twic) and through the TWIC help desk (1-866-DHS-TWIC), at no additional cost to the enrollment fee.

Does TSA utilize individuals or companies to assist in the pre-enrollment process for a TWIC?
- TSA is aware of individuals and companies offering consulting services to ports and using the TWIC name and service mark. These individuals and companies are not sponsored or endorsed by the Federal Government and therefore we can not guarantee that the information they provide on the TWIC program is accurate. The official TWIC Program web site (www.tsa.gov/twic) and TWIC help desk (1-866-DHS-TWIC) offers accurate and comprehensive information and resources on the TWIC program at no additional cost to the enrollment fee.

Who can I reach to get information or assistance if I believe my privacy or personal information was compromised from a vendor providing TWIC services (that are not endorsed by the Federal Government)?
- Federal Trade Commission, Privacy and Identity Protection
  The Federal Trade Commission (FTC) has comprehensive information on identity theft at http://www.ftc.gov/bcp/edu/microsites/idtheft.
- TSA Privacy Office
  If you suspect your personal information is being misused in conjunction with the program, please contact the TSA Privacy Office:
  
  Transportation Security Administration
  TSA-36 OSC Privacy
  Transportation Security Administration
  601 South 12th Street
  Arlington, VA 20598
- TSA Freedom of Information Act/Privacy Act (FOIA/PA) requests (access to one's own information):
  Individuals may request access to their information by submitting a Freedom of Information Act/Privacy Act (FOIA/PA) request to TSA in writing by mail to the following address:
  
  Transportation Security Administration
  TSA-20 OSC Freedom of Information Act (FOIA)
  Transportation Security Administration
  601 South 12th Street
  Arlington, VA 20598

How will I be notified to get a TWIC?
- Facility and vessel owners/operators are required to notify employees of their responsibility to possess a TWIC based on their need to have unescorted access to secure areas of vessels and facilities. Notification should be provided in a timely manner to give individuals sufficient time to complete the entire enrollment process by the compliance date.
- Owners/operators are encouraged to provide this same information to personnel who are not facility or vessel employees (e.g. contractors, truck drivers). Coast Guard Captains of the Port (COTP) will also be working with the local Area Maritime Security Committees (AMSC) to inform individuals of TWIC requirements and compliance dates.

Can contractors apply for a TWIC if they anticipate bidding on or receiving a contract that would require unescorted access to secure areas of MTSA-regulated vessels or facilities?
- Contractors (or individuals who are not direct employees of a port owner or operator, but rather are 'contract' employees) can apply for a TWIC as long as they meet the TWIC eligibility requirements and, at a minimum, are expecting to pursue contracts at MTSA-regulated vessels and facilities where the owners or operators have determined a need for unescorted access in secure areas. If circumstances change and the individual no longer meet certain conditions, they are required to surrender their TWIC.

Will the facility ID card, which would be based on the TWIC, be acceptable for access to secured areas?
- Regulations allow a plant or facility owner to use their own plant/facility specific card as their access control measure, as long as they ensure individuals without a TWIC cannot gain unescorted access to secure areas and the TWIC is checked at least once before the specific card is reissued/accepted. There is no requirement to check/verify TWICs for access to restricted areas, only secure areas.

What are the training requirements for Transportation Worker Identification Credential (TWIC) holders who act as escorts for individuals who do not hold TWICs in secure areas of Maritime Transportation Security Act (MTSA) regulated vessels, facilities, and OCS facilities?
- o TWIC holders who escort non-TWIC holders in secure areas of MTSA regulated vessels, facilities, and OCS facilities are required to meet the training requirements listed in 33 CFR 104.225, 105.215, or 106.220 (Security training for all other vessel/facility/OCS facility personnel). Specifically, escorts must have knowledge of owner/operator's escorting procedures, and the procedures and contingency plans determined by the owner/operator if an escorted individual is engaged in activities other than those for which escorted access was granted.
  
  While monitoring or side-by-side physical accompaniment must be conducted by individuals who possess TWICs, escorts are not considered "facility personnel with security duties" as described in 33 CFR 104.220 or 105.210 or 106.215.

How long is the TWIC card valid?
- TWICs remain valid for five years, unless the expiration date was based on a comparable credential -- Free and Secure Trade (FAST) card, Merchant Mariner Document/License, or Hazmat Endorsement. The expiration date is displayed on the face of the TWIC. TWIC holders are responsible for knowing when to begin the renewal process. For individuals who pay the reduced fee, the expiration date of their TWIC will be the same expiration date of their comparable credential.

When will I be required to have a TWIC?
- All workers who require unescorted access to secure areas of maritime facilities and vessels and all U.S. credentialed mariners are required to have a TWIC.

Where can I find TWIC documents translated in other languages?
- The TWIC program provides communications materials in Spanish and English for the following areas:
  - Pre-enrollment https://twicprogram.tsa.dhs.gov/TWICWebApp/
  - Help desk (1-866-347-8942)
  - The TWIC Disclosure and Certification Form has been translated into 13 languages and also accommodates the use of a translator in order to assist applicants. Click here for more information.
  - General fact sheets and informational flyers http://twicinformation.tsa.dhs.gov/twicinfo/twic_information.jsp
  - Port-specific materials http://twicinformation.tsa.dhs.gov/twicinfo/schedule.jsp

Will these rules affect all Merchant Mariners?
- Yes. All credentialed U.S. merchant mariners must obtain a TWIC.

What measures are in place to protect small businesses, such as small passenger vessels?
- TSA and the Coast Guard worked with the Small Business Administration to minimize adverse financial and operational impacts on small businesses wherever possible. The rule includes provisions that allow MTSA -regulated passenger vessels (excluding cruise ships) to establish employee access areas for crewmembers that do not require unescorted access to secure areas such as the pilot house and engine room. Employee access areas are typically include locations where waiters, entertainers and galley staff work and live. This provision reduces the impact on employees who rarely need to use spaces beyond those designated for support of passengers, while maintaining the integrity of a vessel's secure areas. (homeport.uscg.mil)
  
  The Small Entity Guide for Owners and Operators and a Small Entity Guide for Applicants provides useful information to small businesses and their personnel on the TWIC program. (homeport.uscg.mil)

How do I know my personal information is safeguarded?
- Privacy and the security of your personal information are critical to the TWIC program. Information collected at the enrollment center or during the pre-enrollment process (including the TWIC Disclosure and Certification Form and identity or immigration-related documents) is scanned into the TWIC system for the security threat assessment process. To ensure privacy is protected, applicant data is encrypted and stored at a secure government facility using methods that protect the information from unauthorized retrieval or use.

Will this credential be required for all modes of transportation?
- At this time, the TWIC program is focused on the maritime mode, specifically MTSA-regulated facilities and vessels.

Is TWIC an acceptable form of ID at an airport screening checkpoint?
- Yes, the TWIC card is an approved government issued photo ID.

If a TWIC holder’s name changes are they required to obtain a new TWIC under their new name?
- Yes. TSA completes a security threat assessment (STA) based on the name and identity documents presented at the time of enrollment; this STA is tied to that specific identity. In the event of a name change, the individual is required to re-enroll with the information and documentation supporting the name change; this would trigger a new STA to be performed on that identity.

Who can I contact to get more information on TWIC?
- Web site: www.tsa.gov/twic
- TWIC Program Help Desk: 1-866-DHS-TWIC (1-866-347-8942) Monday through Friday from 8 a.m. - 10 p.m. Eastern.
- Please visit homeport.uscg.mil/twic for answers relating to Coast Guard enforcement and TWIC implementation.
- Owners/operators/FSOs/VSOs/CSOs are encouraged to seek guidance directly from their local Captain of the Port TWIC action officer.

What is the relationship between the Merchant Mariner Credential (MMC) and the TWIC?
- The MMC and the TWIC serve two separate purposes for a mariner. The MMC serves as an individual’s qualification document, certificate of identification and certificate of service. The TWIC is an identification credential indicating that an individual does not pose a terrorism threat. When a Mariner serves on a vessel requiring a vessel security plan, he/she is required to have been issued a TWIC. TWIC is issued after the completion of a security threat assessment. MMC is issued after an applicant demonstrates he/she is qualified as to age, character, habits of life, experience, professional qualifications, physical fitness and citizenship.

Where do I get more information related to the MMC?
- Information regarding the MMC may be found on the following website: www.uscg.mil/nmc.

Rulemaking

Where can I read the TWIC rule?
- The TWIC Final Rule is available on TSA's website and more information on port security is available at the U.S. Coast Guard's Homeport site. (homeport.uscg.mil)

How was the public involved in the rulemaking?
- In addition to direct involvement from the National Maritime Security Advisory Committee, TSA and the U.S. Coast Guard held four public meetings around the nation and received more than 1,900 comments from workers, port owners and operators, small businesses and others who would be affected by the new program. All comments were carefully considered and significant changes to the rule were incorporated as a result.

Deletes

If you no longer require your TWIC or no longer wish to hold a TWIC prior to the expiration date, please contact us at https://apps.tsa.dhs.gov/tsacontact/DynaForm.aspx?FormID=210.
- Please include, in the description portion of the request, that you no longer require your TWIC or no longer wish to hold a TWIC.

Improperly Encoded TWICs

What is the issue with improperly encoded TWICs?

Every TWIC contains a Federal Agency Smart Credential Number (FASC-N) on its integrated circuit chip.The FASC-N uniquely identifies each card.When a TWIC is read by a card reader, the FASC-N is one of the pieces of information the reader obtains from the card.Due to a card production system error, the number of characters in the FASC-N on some TWICs was shortened (truncated), causing readers to not recognize the card as a valid TWIC. Click here to access the TSA notification bulletin on this issue.

How many TWICs are affected by this?

TSA estimates that the integrated circuit chips (ICCs) on approximately 26,000 previously issued TWICs were improperly encoded and may not work with TWIC readers.

What time frame did this problem occur?

The system error causing the FASC-N to be truncated was corrected on April 5, 2011 and TWIC issued before this date (April 5, 2011) could potentially have this issue and as a result, TWIC readers could have problems reading these cards.TWICs issued after that date do not have truncated FASC-Ns.

How can I determine if my TWIC is affected by this issue?

The TWICs that have this problem can be identified by the 8-digit Agency Serial Number (ASN) that is printed on the back of the TWIC.The ASN is on the bottom left side of the back of the card (on the same line as the numbers ‘7099’ which appear on the bottom right.) Click here, to see if the ASN on your TWIC matches a number on the TSA list.If it does, then your card has a truncated FASC-N and you may need to obtain a replacement depending on how you use your card.

What do I do if my card has a truncated FASC-N?

If you confirm that your TWIC has this problem (and is on the TSA list), then you have two options:
If you currently do not use your TWIC with a card reader, then you do not need to get a replacement right away—you will be able to get one later.
If you currently need to use your TWIC with a card reader and you are experiencing problems, you should get a replacement TWIC as soon as possible

How do I get a replacement?

If your TWIC is identified on the TSA list of cards with truncated FASC-Ns you can receive a no-cost replacement by calling the TWIC Help Desk at 1-866-347-8942, Monday through Friday, 8AM to10PM Eastern.Please identify that your card has a truncated FASC-N, and the Customer Service Representative will assist you with ordering a replacement.You must designate the enrollment center where you will pick up your replacement TWIC.You must turn in your TWIC with the truncated FASC-N when you return to pick up your replacement TWIC.

Important Information For Employers

Can employers require their employees to enroll for a TWIC even if their job does not require them to have unescorted access to facilities and vessels regulated by Maritime Transportation Security Act (MTSA )? (homeport.uscg.mil)
- No. All applicants must certify that they need a TWIC to perform their job. Applicants either have to currently be, or are applying to be, a port worker requiring unescorted access to secure areas of maritime facilities and vessels regulated by MTSA; or they are a commercial HME driver licensed in Canada or Mexico. Applicants also certify that the information they provide during the enrollment process is true, complete, and correct. If required, civil or criminal action may be taken if an individual provides false statements (per 49 CFR 1570.5 and 18 U.S.C. 1001). (homeport.uscg.mil)

Can a TWIC be confiscated, or taken from an individual, by an employer?
- Per the Code of Federal Regulations 49 CFR 1572.19(c), the TWIC^® is the property of the Transportation Security Administration (TSA), and held by the individual to whom the card was issued. The TWIC allows an individual worker to gain employment with any company that requires access to secure areas within a Maritime Transportation Security Act (MTSA) of 2002 regulated facility, and should not be taken from the worker. There is one exception to this standard: an employer must retrieve a TWIC from an alien who is working pursuant to a visa listed in 49 CFR 1572.105(a)(7) when the visa expires or when the work authorized by the visa expires. In this case, the employer must return the TWIC to TSA.

ELIGIBILITY

General

What are the eligibility requirements for a TWIC?

An individual must be a U.S. citizen or fall into an eligible immigration category (click here for immigration categories) and can not have been convicted of certain crimes. In addition, individuals cannot be connected to terrorist activity or lack mental capacity.

What if I do not meet the eligibility requirements?

Applicants who are denied a TWIC will be sent a letter explaining the reason for denial and instructed on how to apply for an appeal or waiver. See the disqualifications, waivers, and appeals section for more information. Once issued a TWIC, the applicant has an obligation to inform TSA if they are no longer eligible to hold a TWIC.

Immigration

What immigration categories are eligible to apply for a TWIC?

Click here for the eligible immigration categories. (pdf, 71 KB)

What documents are required in order to verify my immigration status?

Click here for a listing of acceptable documents that verify a lawful immigration status. Applicants should bring these documents with them to the enrollment center to facilitate efficient processing. (pdf, 71 KB)

Will a non-U.S. citizen be able to get a TWIC?

The TWIC regulation includes a list of various immigration categories that are eligible to apply for a TWIC, including nationals, refugees, lawful non-immigrants with unrestricted work authorization, and certain professionals with restricted work authorization. Click here to view the listing of eligible immigration categories. (pdf, 71 KB)

Can a U.S. citizen born outside the U.S. receive a TWIC?

An applicant that is a U.S. citizen but was born outside the U.S must bring the proper documentation to the enrollment center or they may be initially disqualified related to their immigration status. Click here to review the listing of acceptable documents that the applicant should bring with them to TWIC enrollment (see pages 3 & 4 which covers applicants who are U.S. citizens born outside the United States).

Can the Merchant Mariner Document (MMD) verify an applicant's U.S. citizenship?

The Coast Guard verifies U.S. citizenship when issuing an MMD, and therefore, an unexpired/valid MMD can be presented during TWIC enrollment to verify that an individual is a U.S. citizen. Note: "Citizenship: UNITED STATES" will be printed on the MMD.*
The Merchant Mariner Credential (MMC) may be also be used in the same way as the MMD for verification of citizenship.
* Note: Effective April 15, 2009, the Merchant Mariner Credential (MMC) replaced the MML and MMD. Given this, the MML and MMD were discontinued. However, some mariners may still possess valid/current MMLs and MMDs because MMLs and MMDs are valid for 5 years. After April 14, 2014, there shall be no current/valid forms of these documents in circulation.

Can the Merchant Mariner Document (MMD) verify a non-U.S. citizen's status?

An MMD does not satisfy the TWIC immigration requirements for applicants who are not U.S. citizens. In order to confirm that these applicants meet the TWIC immigration standards, these applicants are required to present other acceptable documents that verify immigration status, such as an unexpired foreign passport or unexpired Permanent Resident Card (I-551), etc. Visit http://www.tsa.gov/assets/pdf/immigration_status_documents.pdf (pdf, 92kb)to view the listing of eligible documents for individuals who are not U.S. citizens.

What documents should a commercial driver licensed in Canada or Mexico to transport hazardous materials and/or conduct business in the U.S present at the time of TWIC enrollment?

Mexican Citizens

Mexican CDL AND
Mexican Passport AND I-94 OR
FAST Card (identifying Mexican citizenship) AND I-94 OR
SENTRI Card (identifying Mexican citizenship) AND I-94 OR
BCC/BBBCV

Canadians Citizens

Canadian Commercial Driver’s License (CDL) AND
I-94 (if issued) AND
Canadian Passport OR
NEXUS Card (identifying Canadian citizenship) OR
SENTRI Card (identifying Canadian citizenship) OR
FAST Card (identifying Canadian citizenship) OR
Enhanced Driver’s License

What is required of TWIC applicants with Temporary Protected Status (TPS)?

The National Employment Law Project (NELP) has prepared information for TWIC applicants with TPS status. The English version of this information can be found at: http://www.nelp.org/page/-/SCLP/TPSNotice.pdf, and the Spanish version at: http://www.nelp.org/page/-/SCLP/TPSNoticeSpanish.pdf. Please note: the accuracy of these translations has not been confirmed by TSA, but we are providing them as a convenience for our applicants.

What should an applicant do if they receive a Preliminary Determination of Ineligibility (PDI) letter due to their citizenship/immigration status?

Applicants should follow the instructions in the enclosure section of their PDI letter. Applicants should request an appeal using the TWIC cover sheet and provide valid documentation demonstrating they are one of the categories identified above.

What happens to my TWIC when my lawful nonimmigrant status expires?

The applicant must report the disqualifying condition to TSA and surrender the TWIC. In addition, the TWIC becomes invalid if the applicant is in one of the permissible visa categories and the employment for which the visa was granted ends; one of the following then needs to take place:

The employer retrieves the TWIC from the applicant and provides it to TSA,
The applicant surrenders the TWIC to the employer, or
If an employer terminates an applicant working under a nonimmigrant status or the applicant otherwise ceases working for the employer, the employer must notify TSA within five business days and provide the TWIC to TSA if possible.

TWIC annotated B-1 visa

Who can apply for a TWIC annotated B-1 visa?

Foreign nationals who perform maritime services in the United States and require access to secure areas of facilities and vessels can apply for this new type of B-1 visa, specifically designed for the TWIC program. These individuals are required to meet the eligibility requirements set forth by the Department of State for a B-1 visa (‘Temporary Visitor for Business’) and are required to provide an official letter from their employer stating that a TWIC is required to perform the individual’s job in the maritime industry. This letter must be provided to the relevant U.S. Embassy or Consulate as part of the individual’s visa application.

What information should be contained in the letter from an employer sponsoring an individual for a TWIC annotated B-1 visa?

Details such as the type of work performed by the individual, the location and duration of the work, as well as employer contact information is required if additional information or follow up is necessary. Click here for a sample letter template. (.pdf, 16kb)

Does issuance of the TWIC annotated B-1 visa mean an individual will receive a TWIC?

Issuance of the TWIC annotated B-1 visa makes an individual eligible to apply for a TWIC. Once the individual successfully completes the comprehensive TSA security threat assessment and meets the TWIC eligibility requirements, they will be issued a TWIC. Additionally, once presented with a TWIC, access decisions are made entirely by local ports and facilities.

HME/TWIC COMPARABLE SECURITY THREAT ASSESSMENTS

Are the background checks for a TWIC the same as the background checks conducted for individuals applying for a HME STA?

Yes. They have the same eligibility requirements, share a consistent waiver and appeal process, and leverage the same fingerprint-based criminal history records check. As a result, the HME and TWIC STAs have been deemed comparable.

Do applicants with TWICs have to repeat the STA if they are applying for HME STAs?

Applicants who apply for an HME STA do not have to pay the full price for an HME STA if they hold a valid TWIC, apply in a State supporting comparability, and they meet the eligibility requirements for that State regarding the length of time prior to the credential expiring (i.e., at least one year or at least four years). Applicants must fill out the HME STA application online or over the phone, depending on existing application procedures within the State in which the individual is applying, and will verify their eligibility during the application process. An HME STA based on comparability will expire no later than the TWIC STA. Applicants have the option to apply for a full-fee HME STA if they determine it is more cost effective to do so.

If an applicant already has a TWIC and qualifies for a comparable HME STA, what is the application fee?

Overall, the application fee is reduced by $19.50. The programmatic portion of the threat assessment fee is reduced by $5, because this is the historical cost of the portion of the threat assessment that is satisfied by previously conducted TSA vetting services. In addition, the $14.50 FBI fee is not required because the applicant is not submitting fingerprints for a criminal check.
For individuals licensed in the 38 States and the District of Columbia that use the TSA-contracted agent for this program, the HME STA application fee is $86.50 (this fee covers the TSA threat assessment only and the State may charge additional fees for the HME application process, including testing and license issuance). If an applicant already has a TWIC and qualifies for a comparable HME STA, the application fee is reduced by $19.50 to $67.00.
All HME STA applicants must pay the fees that cover the other components of the HME Threat Assessment Program (HTAP), including application fees and any other fees charged by their respective States for license testing and issuance.
Note: Individuals should consider the expiration date of their current TWIC in order to determine if it is more cost effective to apply for a full or a comparable/reduced fee HME STA.

Since HME requirements are specific to the individual States, are all 50 States and the District of Columbia offering individuals who hold TWICs a reduced fee when applying for an HME STA?

No. Due to specific State statutes, license cycles, and system limitations, not all States will be able to offer a reduced fee for the HME STA to their applicants. Applicants in a State that can offer comparability will be provided notice during the application process, and the application itself will offer individuals the option to pay a reduced fee by electing to use a comparable TWIC STA. The States that offer comparability are listed below. Note that some States require at least one year remaining before expiration on a comparable STA, whereas others require at least four years remaining before expiration. Applicants can confirm their eligibility online with TSA during the HME STA application process at: http://hazprints.tsa.dhs.gov.
Effective June 08, 2012, HME STA applicants are eligible to use their TWIC STA as a comparable STA during the application process in the following States (including District of Columbia) as long as they hold a valid TWIC STA with at least one year remaining before expiration:

Arizona
California
Delaware
District of Columbia
Hawaii
Missouri
Nebraska

Nevada
North Carolina
Oregon
South Dakota
Utah
West Virginia
Wyoming

Effective June 08, 2012, HME STA applicants are eligible to use their TWIC STA as a comparable STA during the application process in the following States as long as they hold a valid TWIC STA with at least four years remaining before expiration:

Alabama
Colorado
Kansas
Minnesota
Montana

New Jersey
North Dakota
Oklahoma
Vermont

If TWIC holders choose to use comparable HME STAs, when will their HMEs expire?

The HME will be issued with the same expiration date as the individual’s TWIC STA. Therefore, individuals should consider the expiration date of their current TWIC STA to determine if it is cost effective to apply for a comparable HME STA.

How do TWIC holders who are applying for HME STAs know if the State where they are applying for the HME STA offers comparability?

Please see the listing of States above. Applicants can ask States about comparability during the application process, or they can contact the HazPrints Help Desk at (877) 429-7746 (7AM-9PM Eastern, Monday - Friday). Additionally, the online application (available at http://hazprints.tsa.dhs.gov) for the HME STA will identify whether particular States offer comparability once applicants specify the State in which they are licensed.

DISQUALIFICATION, WAIVERS, AND APPEALS

Disqualification

What can disqualify me from getting a TWIC?

An individual who lacks lawful presence and certain immigration status in the United States, has a connection to terrorist activity, has been determined to lack mental capacity or was convicted of certain crimes will be ineligible for a TWIC.

What if I do not meet the qualification standards?

Applicants who are denied a TWIC will be notified of the reason for denial and instructed on how to apply for an appeal or waiver. Once issued a TWIC, the applicant has the continuing obligation to inform TSA if he or she is no longer eligible for a TWIC.

What are the disqualifying offenses? What are the waiver policies for each type of offense?

Parts A and B provide a comprehensive list of disqualifying offenses and the waiver policies for each.

Part A – Permanent Disqualifying Offenses
Conviction for one of the following felonies is disqualifying regardless of when it occurred, and the applicant is not eligible for a waiver.

Espionage or conspiracy to commit espionage.

Sedition, or conspiracy to commit sedition.

Treason, or conspiracy to commit treason.

A federal crime of terrorism as defined in 18 U.S.C. 2332b(g), or comparable State law, or conspiracy to commit such crime.

Conviction for one of the following felonies is disqualifying regardless of when it occurred, and the applicant may apply for a waiver.

A crime involving a transportation security incident. A transportation security incident is a security incident resulting in a significant loss of life, environmental damage, transportation system disruption, or economic disruption in a particular area, as defined in 46 U.S.C. 70101. The term "economic disruption" does not include a work stoppage or other employee-related action not related to terrorism and resulting from an employer-employee dispute.

Improper transportation of a hazardous material under 49 U.S.C. 5124, or a State law that is comparable.

Unlawful possession, use, sale, distribution, manufacture, purchase, receipt, transfer, shipping, transporting, import, export, storage of, or dealing in an explosive or explosive device. An explosive or explosive device includes an explosive or explosive material as defined in 18 U.S.C. 232(5), 841(c) through 841(f), and 844(j); and a destructive device, as defined in 18 U.S.C. 921(a)(4) and 26 U.S.C. 5845(f).

Murder.

Making any threat, or maliciously conveying false information knowing the same to be false, concerning the deliverance, placement, or detonation of an explosive or other lethal device in or against a place of public use, a state or government facility, a public transportations system, or an infrastructure facility.

Violations of the Racketeer Influenced and Corrupt Organizations Act, 18 U.S.C. 1961, et seq., or a comparable State law, where one of the predicate acts found by a jury or admitted by the defendant, consists of one of the crimes listed in Column A.

Attempt to commit the crimes in Part A, items 1 - 4.

Conspiracy or attempt to commit the crimes in Part A, items 5 – 10.

Part B – Interim Disqualifying Offenses
Conviction for one of the following felonies is disqualifying if the applicant was convicted, pled guilty (including 'no contest'), or found not guilty by reason of insanity within 7 years of the date of the TWIC application; OR if the applicant was released from prison after conviction within 5 years of the date of the application. The applicant may apply for a waiver.

Unlawful possession, use, sale, manufacture, purchase, distribution, receipt, transfer, shipping, transporting, delivery, import, export of, or dealing in a firearm or other weapon. A firearm or other weapon includes, but is not limited to, firearms as defined in 18 U.S.C. 921(a)(3) or 26 U.S.C. 5 845(a), or items contained on the U.S. Munitions Import List at 27 CFR 447.21.

Extortion.

Dishonesty, fraud, or misrepresentation, including identity fraud and money laundering where the money laundering is related to a crime described in Columns A or B. Welfare fraud and passing bad checks do not constitute dishonesty, fraud, or misrepresentation for purposes of this paragraph.

Bribery.

Smuggling.

Immigration violations.

Distribution of, possession with intent to distribute, or
importation of a controlled substance.

Arson.

Kidnapping or hostage taking.

Rape or aggravated sexual abuse.

Assault with intent to kill.

Robbery.

Fraudulent entry into a seaport as described in 18 U.S.C.
1036, or a comparable State law.

Violations of the Racketeer Influenced and Corrupt
Organizations Act, 18 U.S.C. 1961, et seq. , or a comparable State law, other than the violations listed in Part A, item 10

Conspiracy or attempt to commit felonies listed in Part B.

What if a conviction is "exonerated?"

If a conviction is expunged or pardoned, the criminal records may reveal this. If they do not, TSA sends the applicant a Preliminary Determination of Ineligibility letter explaining what the records show and how the applicant can correct inaccurate records.

What if my initial disqualifying crime is no longer applicable? Can I reapply for a TWIC?

Applicants are encouraged to reapply if their initial disqualifying offense is no longer applicable. Applicants will need to understand the nature of the initial disqualification and the corresponding look-back periods of 5 or 7 years if applicable. Reapplying can occur as long as there are no secondary disqualifying events.

What if I have a disqualifying crime that was expunged from my record?

The applicant should proceed with TWIC enrollment as though they do not have a disqualifying offense, as long as the record is truly expunged. Per 49 C.F.R. §1570.3, a conviction is expunged when "the conviction is removed from the individual's criminal history record and there are no legal disabilities or restrictions associated with the expunged conviction, other than the fact that the conviction may be used for sentencing purposes for subsequent convictions." However, if the applicant is a credentialed mariner or intends to apply for a mariner credential, he or she must report convictions that were expunged on their application to obtain the MMC. Failure to disclose expunged convictions could result in a determination that the application for the mariner credential is fraudulent.

Can a person under indictment apply for a TWIC? Do they still have the appeal and waiver process available to them?

An individual under indictment for a disqualifying criminal offense may not hold a TWIC until the indictment is dismissed. If the applicant has an indictment pending, the applicant could apply for a waiver; however, a request for a waiver does not guarantee that a waiver will be granted.

Waivers and Appeals

What options are available to me if I am initially determined to be ineligible for a TWIC?

Applicants who are initially determined to be ineligible for a Transportation Worker Identification Credential (TWIC) will be provided with TSA's justification for denial, and instruction for how to apply for an appeal or waiver. The process is straight forward, and no legal knowledge is needed, nor is legal representation necessary. Requests may be typed or handwritten.

Appeal -- If you believe you that you should not have been determined to be ineligible for a TWIC (i.e. you may think the decision was based on incorrect court records or incorrect information provided at enrollment), you may request an appeal. You may request copies of the materials that TSA used to make the determination to assist you in deciding whether a correction must be made to your court records and/or what information must be provided to justify your appeal.
Waiver -- If you have a disqualifying offense, meet the description of mental incapacity, or are an alien under temporary protected status, you may request a waiver. When completing a waiver request, the applicant should describe why he/she no longer poses a security threat. Information that assists TSA with this determination includes:

The circumstances surrounding the conviction.
The length of time the applicant has been out of prison if sentenced to incarceration.
The applicant's work and personal history since the conviction.
Whether the applicant made restitution or completed mitigation remedies, such as probation or community service.
References from employers, probation officers, parole officers, clergy, and others who know the applicant and can attest to his/her responsibility and good character.
If denied due to mental incapacity, court records or official medical release documents that relate to the applicant's mental health may also be included with the waiver request.
If an alien under temporary protected status, information attesting to that.

What options are available if I am denied an appeal or waiver?

Appeals and Waivers Related to Immigration Status
- If an applicant’s appeal or waiver is denied because he or she was unable to prove immigration eligibility to hold a TWIC, then the applicant may re-enroll when he or she has documents that prove immigration eligibility.
Appeals Related to Disqualifying Criminal Offenses
- If an applicant’s appeal is denied because he or she was unable to prove that a disqualifying criminal offense has been expunged or that the applicant has been pardoned, then the applicant may file a waiver.
Waivers Related to Disqualifying Criminal Offenses
- If an applicant’s waiver for a disqualifying criminal offense has been denied, then the applicant may request a review by an Administrative Law Judge (ALJ), a third party who reviews the information pertaining to an individual’s case.. Additional information on the ALJ process is available in section 49 CFR 1515.11.

What is the timeframe for submitting a request for an appeal or a waiver?

Applicants must send appeal and waiver requests to TSA within 60 days of receiving TSA's Preliminary Determination of Ineligibility letter. If the applicant does not respond to TSA within 60 calendar days, TSA's decision regarding the applicant's eligibility for a TWIC automatically becomes final, and the applicant is disqualified from holding a TWIC.
If an applicant needs more than 60 days to respond, then the applicant should send a letter to TSA asking for an extension. Any requests for time extensions will automatically be granted by TSA.

Where do I send appeals or waivers requests?
- Fax Number: 540-710-2763 OR 540-710-2783
- Mailed via U.S. Postal service (note: Registered Mail is accepted) to:
  Transportation Security Administration
  TSA TWIC Processing Center
  P.O. Box 8118
  Fredericksburg, VA 22404-8118
  
  Please remember to include the cover sheet (that was provided with your letter from TSA) and all supporting documentation when faxing or mailing your material.

Can I see a sample Preliminary Determination of Ineligibility letter?

Click here to see a sample letter. Note these letters are tailored to the individual and their circumstances.

If someone has received an initial determination of ineligibility, can he or she access secure areas of a port pending the appeal/waiver process or does the applicant have to wait for its completion?

Access to these areas will depend on the owner/operator security plan and their escorting procedures, as well as the enforcement and compliance date for that particular USCG Captain of the Port zone.

ENROLLMENT

General

What is the process for obtaining a TWIC?


• Applicants can save time by pre-enrolling online • During pre-enrollment, applicants will: - Enter biographic information required for the security threat assessment - Make an appointment at the enrollment center • Pre-enrollment is available by clicking here	• Applicants are required to bring identity documents to the enrollment center • Click here to access the latest listing of acceptable documents (to include those documents required to prove immigration status if not born in the U.S.).	• Applicants must visit an enrollment center where they will: - Complete a TWIC Disclosure and Certification Form - Pay the enrollment fee - Provide biographic information (if applicant did not pre-enroll) and a complete set of fingerprints - Sit for a digital photograph	• Applicants will be notified by email or phone, as specified during enrollment, when their TWIC is available at the enrollment center • Applicants must return to the center at which they enrolled to pick up their TWIC (unless they specify another enrollment center at the time of enrollment) • TWICs will be issued to workers 6 – 8 weeks after enrollment • Applicants can check the status of their card and schedule a pick-up appointment by clicking here

How long does enrollment take?

The enrollment process for a pre-enrolled applicant takes approximately 10 minutes. The enrollment process for those who did not pre-enroll takes approximately 15 minutes. There may be a wait time at the enrollment center depending on the amount of workers choosing to enroll at any particular time.

What are the addresses and hours of operation for the enrollment centers?

Click here to get enrollment site locations and hours of operation

Are mobile enrollment and activation services available to stakeholders?

Click here for details on mobile enrollment and activation service options.

How can I pre-enroll?

Pre-enrollment is available by clicking here.
The pre-enrollment process allows applicants to provide much of the biographic information required for enrollment; to select an enrollment center where they wish to complete the enrollment; and to make an appointment. Applicants are encouraged, but not required, to "pre-enroll."

How do I make an appointment?

Applicants can make an appointment by pre-enrolling online or by calling the TWIC Help Desk at 1-866-DHS-TWIC (1-866-347-8942).

Are appointments required for enrolling?

No. Appointments are encouraged to save applicants time, but are not required and walk-ins are welcome.

Can hats or religious headgear be worn for the photo taken during TWIC enrollment?

Unless worn daily for religious reasons, all hats or headgear should be removed for the photo. For clarification, a ball cap, knit cap, or do-rag is not considered religious headgear. In all cases, no item or attire should cover or otherwise obscure any part of the face.

Can eyeglasses be worn for the photo?

Eyeglasses worn on a daily basis can be worn for the photo. However, there should be no reflections from the eyeglasses that obscure the eyes. Dark glasses or nonprescription glasses with tinted lenses are not acceptable unless they are needed for medical reasons. A medical certificate may be required.

Are photographs required for TWIC enrollment?

Since the TWIC serves as a form of visual identification, a photograph is required for all applicants.

Required Documentation

What identity documentation is required for a TWIC?

TWIC applicants are required to provide identity verification documents to complete the enrollment process. The attached document covers U.S. citizens born within the United States, as well as U.S. citizens born abroad. Applicants are required to present acceptable documentation from this list at the time of enrollment. Click here to access the latest listing of acceptable documents.

What is the purpose of the TWIC Disclosure and Certification Form ?

The TWIC Disclosure and Certification Form provides additional information to the applicant on the security threat assessment process, as well as a notice on privacy and paperwork reduction. The applicant is also required to review and certify statements pertaining to eligibility for a TWIC, military service, and, once a TWIC is issued, his or her responsibility to disclose information to TSA that would disqualify them from holding a TWIC. The applicant is required to sign and date the form. If participating in the process, the helper/translator will also sign the form and provide contact information.

Applicants are encouraged to complete the TWIC Disclosure and Certification Form and bring it with them to the enrollment center.

Is the TWIC Disclosure and Certification Form translated into other languages?

The TWIC Disclosure and Certification Form is available in 13 languages (click on the language choice in order to download the appropriate one):

What if I do not have the required forms of identification or do not wish to sign the TWIC Disclosure and Certification Form?

You will not be able to enroll or obtain a TWIC.

Payment

How much does a TWIC cost?

The enrollment fee for the TWIC program is $129.75. Workers with current, comparable background checks will pay a reduced fee of $105.25. If workers are eligible to pay the lower price, their TWIC will expire 5 years from the date of the comparable credential. The cost of a replacement TWIC, if the original is lost, stolen, or damaged, is $60. The cost of an Extended Expiration Date (EED) TWIC is $60.

What are the methods of payment?

Payment must be made with credit card (Visa® or MasterCard® only), money order, or certified/cashier's check. Checks should be made payable to Lockheed Martin. An additional option has been provided through the use of company purchased pre-paid debit cards. For companies choosing to use the pre-paid option, please visit http://www.twiccard.com.
In all cases, payment will be made at the enrollment center at the beginning of the enrollment process.

What is the fee for a replacement card?

The card replacement fee (for lost, stolen, or damaged TWICs) is $60.

How can employers purchase TWIC cards for their employees?

This method of payment is a prepaid Visa® card and is intended for employers who wish to purchase TWICs for their employees. They may be purchased in bulk and are redeemable at any TWIC enrollment center. The website for additional information or purchasing them is at: http://www.twiccard.com.

If I have a comparable assessment, how can I determine which fee is more economical -- the reduced fee or the full, 5 year fee?

It is most beneficial for applicants who will use a comparable security threat assessment and pay the reduced fee to do so within 12 months of receiving the comparable threat assessment. After 12 months, it is more cost effective to pay the full fee for TSA to complete the security threat assessment and issue a TWIC with an expiration date 5 years from the date of issuance.

Why was the enrollment fee reduced on March 19, 2012?

The Federal Bureau of Investigation (FBI) periodically reviews its process related to performing a fingerprint-based criminal history records information (CHRI) check. As a result of a recent review, the FBI decided to implement a fee reduction effective March 19, 2012. Since a component of the TWIC enrollment fee is the CHRI fee, the enrollment fee was reduced accordingly.

Will individuals be credited if they enrolled prior to March 19, 2012?

Individuals who enrolled for a TWIC prior to March 19, 2012 will not receive a refund of $2.75.

Will the cost of other TSA enrollment programs be reduced as a result of this FBI fee reduction?

The enrollment fee for the Hazardous Materials Endorsement Program was also reduced by $2.75 for individuals who apply in a TSA Agent State (see HAZMAT Endorsement Threat Assessment Program for more information). The enrollment fee for specific aviation credentialing programs is also being reduced.

Security Threat Assessment

How is the security threat assessment conducted?

The assessment includes checks against criminal history records, terrorist watch lists and immigration databases.

Will the results of my threat assessment be shared with my employer?

If TSA determines that an applicant poses an imminent threat to the transportation system or national security, TSA may notify the applicant's employer. Generally, TSA will not provide the reason(s) for a disqualification to an employer. However, if TSA has reliable information concerning an imminent threat posed by an applicant and providing limited threat information to an employer, facility, vessel owner or Coast Guard Captain of the Port would minimize the risk, then TSA would provide such information.

Why is the MMC deemed to not be a comparable endorsement?

The MMC is issued based upon information provided by the TSA gathered through the enrollment process, as well as the outcome of the STA. The Coast Guard no longer conducts a security threat assessment before issuing a MMC, it is only issued after the Coast Guard receives a report that the TWIC has been issued. If the Coast Guard begins to conduct security threat assessments before issuance of the MMC, then the comparability of the MMC will be re-evaluated.

What if I have already completed a comparable threat assessment?

A reduced fee of $105.25 will be made available for applicants who will not require the security threat assessment. The reduced fee is available for the following:

applicants who hold a valid Hazardous Materials Endorsement (HME) issued after May 31, 2005,
applicants who hold a valid Free and Secure Trade (FAST) card,
applicants who hold a Merchant Mariner Document (MMD)* issued after February 3, 2003, or
applicants who hold a Merchant Marine License (MML)* issued after January 13, 2006.
Note: For those applicants seeking to pay the reduced fee, they must present their valid HME, FAST card, MMD, or MML (meeting the requirements outlined above) at the time of enrollment.
* Effective April 15, 2009, the Merchant Mariner Credential (MMC) replaced the MML and MMD. Given this, the MML and MMD were discontinued. However, some mariners may still possess valid/current MMLs and MMDs because they are valid for 5 years. After April 14, 2014, there will be no current/valid forms of these documents in circulation.

Are the background checks for a TWIC the same as the background checks conducted for an individual applying for a Hazardous Material Endorsement?

Yes. They have the same eligibility requirements, share a consistent waivers and appeals process and leverage the same fingerprint-based criminal history records check.

Does someone with a Hazardous Material Endorsement (HME) have to repeat the criminal history records check (CHRC) if they are applying for a TWIC?

No. As a result of this, an applicant who applies for a TWIC after successfully completing the HME security threat assessment does not have to pay for a second CHRC - and the fee for the TWIC is reduced by $24.50. All TWIC applicants must pay the fees that cover the other components of the TWIC program, including enrollment and card issuance.

Card Issuance

How will the cards be issued?

The applicant will be notified by email or phone, as specified during enrollment, when his/her credential is available at the enrollment center. Typically applicants will return to the same enrollment center as where they enrolled, unless they requested that their TWIC be shipped to another enrollment center (ideally they specify this at the time of enrollment).

How long does it take to receive a TWIC?

Currently, there is typically a six to eight week turnaround from enrollment until card activation. Eligibility issues or insufficient paperwork may increase this turnaround time.

What occurs during the card activation process?

Once an applicant is notified that their TWIC is ready for pick-up, the applicant has the choice of either making an appointment for card activation (which is recommended) or going directly to an enrollment center (as a ‘walk-in’). At that time, the applicant will have their identity verified (by providing a government-issued photo id), match their fingerprint to one stored on their TWIC, select and input a personal identification number (PIN), and review and agree to the cardholder responsibilities. Once all of these steps have occurred, the applicant’s TWIC is activated.

How can I check the status of my card and schedule a pick-up?

Click here to check the status of your card and schedule a pick-up

Card Transfers

Can I enroll at one location, but request that my TWIC be delivered to another location? For example, can I enroll in New Orleans and have my TWIC shipped to Houston?

Yes, you can request that your TWIC be shipped to another enrollment center. If possible, you should specify this at the time of enrollment. This option also exists for replacement cards and should be requested at the time the replacement card is ordered.

Can I get my TWIC transferred from one enrollment center to another?

We encourage you to request that your TWIC be delivered to another location during the enrollment process. However, we understand that this request may come in after your TWIC arrives at the enrollment center. In these cases, you can request a transfer by calling the TWIC Help Desk at 1-866-DHS- TWIC (1-866-347-8942) or making the request via email at twic.helpdesk@lmbps.com (please specify that you are requesting a card transfer in the body of the email with location specifics). Your card should arrive at the requested enrollment center within 1-2 weeks.

Personal identification numbers (PINs)
PIN usage

What is the purpose of the PIN on a TWIC?
When an individual enters their PIN into a card reader, the digital photograph (which was taken at the time of enrollment) stored on their TWIC is retrieved.

What ‘mode’ of a reader is the PIN required – contact or contactless?

The TWIC system was designed to predominantly use contactless communications with a TWIC card reader. PIN entry can only be done with a contact communications interface. TWIC readers can perform all 4 specified identification / authentication modes without the need for the PIN.
Note: Currently, use of the digital photograph is optional and not detailed in the TWIC Reader Hardware and Card Application Specification.

When would someone ask for a TWIC holder’s PIN?

There are two situations where the digital photograph might be requested:
During registration at a physical access control system at a facility.
At an access control point (where there is a reader) to verify one’s identity/grant access – If a facility currently used TWIC readers at access control points, then the PIN may be required (as a secondary measure) if the individual’s fingerprint could not be matched to the reference template in their TWIC.
Note: In this situation the TWIC must be read using the contact interface AND a successful PIN presentation must occur before a portable TWIC reader can retrieve the digital photograph. This operation is predominantly done with portable readers.

What happens if an individual forgets their PIN – can their photograph still be retrieved?

Should the PIN be forgotten or has become unusable as a result of too many failed PIN presentations (i.e. PIN BLOCKED) the digital photograph would not be accessible. The local facility would use alternate methods to verify the individual's identity, per approval by the U.S. Coast Guard. If the PIN is BLOCKED, the TWIC holder should return to an enrollment center to have a PIN reset operation performed.

PIN resets

How do I reset the personal identification number (PIN) on my TWIC?
If you were issued a TWIC after October 21st, 2008:

To reset your PIN, you must bring your TWIC to an enrollment center, walk-ins are welcome. Click here to find the closest enrollment center.

If you were issued a TWIC before October 21st, 2008:

The power outage that disrupted TWIC activations on Oct. 21, 2008 permanently damaged the equipment used to reset TWIC PINs. No data or personal information was lost or compromised. As a result, if you were issued a TWIC prior to this date and forgot your PIN, you will be issued a replacement TWIC free of charge. In order to do this, please contact the TWIC Help Desk (1-866-DHS-TWIC) to open a ticket and receive further instructions. Once your replacement TWIC is ready for pick up, you will be notified via phone or email (the option you selected during enrollment). At that time, you make an appointment for activation at www.tsa.gov/twic.

Replacement Card Process

How can I request a replacement card?

We can process lost/stolen or damaged cards with a Visa® or Master Card® credit card over the phone via the TWIC Help Desk at 1-866-DHS-TWIC (1-866-347-8942). Lost/stolen/damaged replacement cards are $60.00. If you report your card lost/stolen or damaged to the Help Desk, they will initiate the replacement and email you a payment receipt with the payment confirmation number immediately upon confirmation. If you do not have access to email, it is recommended that you still go to your nearest enrollment center to report your card lost/stolen and purchase your replacement TWIC in order to secure your receipt. Whether you visit an enrollment center or contact the TWIC Help Desk, please ensure that you are given a receipt for payment (in person or via email) as well as a ticket number, which is a record of your transaction.
Note: An individual requesting a replacement card must request the replacement during the initial call to report the card lost or stolen OR must request the replacement card in-person at any enrollment center the same day. An individual who requests a replacement card at any time after the initial report of a lost/stolen card must repeat the enrollment process and pay $129.75 for the new card.
Also, specify the enrollment center where you want your replacement TWIC delivered. If you do not specify another enrollment center, your replacement TWIC will be delivered to the enrollment center where you originally enrolled. You should allow up to two weeks to receive an automated notification about the status of your new TWIC. If you need your card transferred to another location, you can request a transfer by calling the TWIC Help Desk at 1-866-DHS-TWIC (1-866-347-8942) or making the request via email at twic.helpdesk@lmbps.com (please specify that you are requesting a card transfer in the body of the email with location specifics).
Once you have reported your card lost or stolen, you may have 7 days of unescorted access to a facility, at the facility's discretion, if you meet the below requirements:

The facility's security staff knows that you had a valid TWIC
You have previously been given unescorted access
You have reported your card lost or stolen to TSA (which occurs when you receive your ticket number when ordering your replacement TWIC)

Card Technology and Durability

What technologies are being used on the TWIC?

The TWIC is a Smart Card (i.e., a card with a small integrated circuit chip embedded in the card) and contains the following technologies:

Dual Interface Integrated Circuit Chips (ICC) - a small computer chip that can be read by either inserting the card in a slot in a "contact" card reader; or, holding the card within 10 centimeters of a "contactless" card reader
Magnetic Stripe - commonly found on the back of credit cards; read by "swiping" the card through a magnetic stripe card reader
Linear Bar Code - commonly used to quickly identify items by scanning the codes with an optical reader-i.e. scanning grocery items at a checkout counter

How durable is the TWIC?

In general, while TWIC holders should treat their cards with care, they were created to be durable in the maritime operational environment. The durability of the TWIC is based on the FIPS 201-1 and ANSI 322 card durability requirements and testing conditions (refer to paragraph 4.1.3 Physical Characteristics and Durability in FIPS 201, page 16). These tests include: card flexure, U/V exposure, humidity, surface abrasion, fading, and a "laundry test."

May a cardholder punch a hole in the TWIC (i.e., to place a string through it and make a lanyard)?
- No. Punching a hole in the card may disable or obstruct security features on the card, invalidate electronic/technology components within the card that are necessary for electronic verification, and may impair the ability to conduct a full visual inspection of the security features on the card. Workers who have punched a hole in their cards should call the TWIC Help Desk at 866-DHS-TWIC or visit an enrollment center to order a replacement card as soon as possible. Workers will be charged $60 for a replacement TWIC.
- Workers should ensure they handle their cards carefully to avoid unnecessary wear and tear or damage. Some workers may choose to use a card holder with their TWIC. These card holders cannot be purchased through TSA or Coast Guard but are generally available commercially.

What should I do if I already punched a hole in my card?
- Workers who have punched a hole in their cards should call the TWIC Help Desk at 866-DHS-TWIC or visit an enrollment center to order a replacement card as soon as possible. Workers will be charged $60 for a replacement TWIC.
- If you have already punched a small hole in your card to facilitate hanging it on a lanyard, it is not valid for obtaining unescorted access to secure areas at MTSA regulated vessels and facilities. However, you may continue to access these vessels and facilities so long as the procedures outlined in 33 CFR 104.265(c)(2), 105.255(c)(2), or 106.260(c)(2) (as appropriate), which allow for continued access for an individual whose card has been reported as lost, stolen, or damaged, are followed.

What is the impact of magnets on the TWIC card?
- Magnets do not impact the contact chip or the contactless antenna on the TWIC card; however, a very strong magnet might degauss the magnetic stripe resulting in a loss of the TWIC Privacy Key (TPK) information. The TWIC card was designed to use a high coercivity (hi-co) stripe (2750 Oersted) meaning you need more than 10 times the normal "purse magnet" to effect the stripe.

What type of magnets may affect a TWIC card?
- Industrial magnets (e.g. scrap yards, container lifters, etc.) may affect a TWIC card but even then, the TWIC would need to be in close proximity to the magnet.

Renewal TWICs

What is the renewal process?
- The renewal process consists of the same steps as the original enrollment process (optional pre-enrollment, in-person enrollment, and card activation.) These steps are required since a security threat assessment is required on all applicants, confirming they still meet eligibility requirements.
- o An alternate process is available for individuals that hold a TWIC that expires on or before December 31, 2014 and who are U.S. citizens or U.S. nationals. These individuals are be able to replace their expiring TWIC with a 3-year Extended Expiration Date (EED) TWIC. Click here for further information on EED TWICs.

How much does a renewal cost?
- The fee for a renewal TWIC (valid for 5 years) is the same amount as the initial enrollment fee, which is currently $129.75.

How much does an EED TWIC cost?
- The cost for a 3-year Extended Expiration Date (EED) TWIC is $60.

When should I renew for a TWIC?
- We recognize that TWIC applicants require flexibility due to the nature of maritime jobs. As a result, individuals may renew their TWIC at any time in advance of the expiration of their card at any enrollment center.

When should I request a EED TWIC?
- If you were a United States Citizen when you enrolled for your current TWIC, TSA recommends that you request your Extended Expiration Date TWIC 30 to 45 days before the expiration date on your current TWIC.
- If you were not a United States Citizen when you enrolled for your current TWIC but you are now a United States Citizen, TSA recommends you request your EED TWIC 60 days before the expiration date on your current TWIC.

What should I take into account when applying for a renewal?
- Individuals should take into account the expiration date of their previous TWIC and understand that the expiration date associated with their ‘renewal’ TWIC is tied to the security threat assessment performed for that (renewal) application. For example, an individual currently has a TWIC with an expiration date of October 20, 2012 and applies for a full-fee renewal TWIC on June 1, 2012, getting approved on June 20,2012. The new TWIC will have an expiration date of June 20, 2017.

OUTREACH

General

What outreach efforts have been deployed in support of TWIC?

TSA, the U.S. Coast Guard and its contractors meet with TWIC Stakeholder Communications Committee (TSCC) on a quarterly basis to discuss program status and stakeholder concerns.

What materials can I use to promote TWIC at my port or facility?

Click here for materials to promote TWIC at your port or facility

TWIC Pilot Test

What did TSA hope to achieve with the TWIC pilot test?

As required by the SAFE Port Act of 2006, TSA conducted a pilot test to evaluate the impact of verifying a worker's identity by using card readers to conduct a one-to-one match of a worker's biometric to the biometric stored on the TWIC. The technical performance of readers and the operational and business impact of using readers were evaluated during this pilot.

Where was the pilot test conducted?

The pilot included facilities and vessels at the ports of New York/New Jersey; Brownsville, TX; and Los Angeles and Long Beach. The pilot also includes vessel operations in Annapolis, MD; Vicksburg, MS; Seattle WA; and Staten Island, NY.

Who purchased readers and infrastructure necessary to conduct the pilot test?

Facility and vessel owners who participated in the pilot test purchased readers and other infrastructure using Port Security Grant Program (PSGP) funds.

Since PSGP funds were used for the acquisition of readers for the pilot test did the Government have final approval authority over those purchases?

All readers purchased with PSGP funds met TWIC Initial Capability Evaluation (ICE) test requirements. However, pilot participants selected readers that best met their specific requirements (among those that met the TWIC ICE requirements).

Was the Government's intention to test both reader types during the pilot test (e.g., handheld and fixed)?

Yes, both configurations of readers were tested during the pilot.

Where can the pilot test final report to Congress be accessed?

The final report (dated February 27, 2012) was delivered by the Secretary of Homeland Security to Congress and is located at: http://chsdemocrats.house.gov/sitedocuments/twicreaderreport.pdf.

Why did the name of the Hotlist change to the Canceled Card List?

The previous name, Hotlist, was being misinterpreted as representing the eligibility status of the individual TWIC holder. The new name, Canceled Card List, more appropriately represents the purpose of the list -- a listing of cards that are now inactive due to them being lost, stolen, damaged, or canceled because the holder is no longer eligible for a TWIC. It is important to note that there are no changes to any functionality related to this list as a result of this name change.

FAQs pertaining to pilot reader tests and evaluations:

What is the process for testing and evaluating TWIC readers during the pilot?

The process for testing and evaluating TWIC readers was described in a series of Broad Agency Announcements (BAAs) issued by TSA. The most recent BAA can be found on the main page of the reader pilot section.

How are damaged/defective readers replaced?

Damaged and defective readers were fixed/replaced based upon the contractual arrangement between the vendor and the facility.

Will there be a Qualified Technology List (QTL) maintained by the Government for the TWIC readers and will there be an opportunity for on-going testing for conformance as new products are developed?

We anticipate that some form of a Qualified Technology List will be maintained by the program at some point prior to the effective date of the TWIC reader rule.

What confidence level should I have for those readers on the ICE List?

TSA evaluated ICE list readers for correctly reading and processing information obtained from the TWIC card in each of the reader modes defined in the TWIC Reader and Card Application Specification. TSA did not perform environmental testing as part of the ICE process.

Entities purchasing a reader on the ICE List were encouraged to work with their vendor to establish reasonable terms and conditions protecting said entity from any changes in technical requirements, unexpected integration issues, or environmental factors unique to a given location. It is likely that readers that pass ICE testing will not be grandfathered in and will need to go through the testing associated with the QTL.

Can I use the TSA or DHS logo in any manner on my TWIC reader, either as part of the software display or on the exterior of the reader?

No, the TSA and DHS seal shall not be used in any manner which implies TSA or DHS endorsement of commercial products or services, the user's policies or activities, or on any article that may discredit the seal or reflect unfavorably on TSA or DHS. Any use of the seal must be approved by the Secretary or their designee.

Does a PIN interface to access the fingerprints on the card qualify as the fingerprint interface you need for our solution to be compliant?

TWIC strongly prefers the use of the TWIC Privacy Key (TPK) and the enciphered biometrics held by the TWIC card-application to retrieve the reference biometrics. The rationale for this is that TWIC holders will rarely use the PIN on the card and may not remember their PIN value which will invariably complicate PACS registration. Also, PIN requires the use of the contact interface—the easiest way to retrieve the TPK. The reference biometric from the card, successfully compared to the card holder, satisfies the Chain-of-Trust requirement.

If the TWIC reader used for the PACS registration has already satisfactorily demonstrated support of TPK usage to TSA during a previously completed ICE, this will be accepted as meeting the Chain-of-Trust requirement.

If a separate application is written to allow use of a laptop, a PC/SC reader, fingerprint sensor, etc, then this custom solution would need to be demonstrated using the ICE scenarios to the satisfaction of TSA.

TWIC Specification

General FAQs pertaining to v1.1.1 of Specification:

Where can I find a copy of the current TWIC Reader Hardware and Card Application Specification?

o The current TWIC specification (v1.1.1) was issued May 30, 2008 and can be viewed through the following link on this website: http://www.tsa.dhs.gov/assets/pdf/twic_reader_card_app_spec.pdf (pdf,463kb)

Is there any change in scope in Version 1.1.1 of the specification from the previous release?

Version 1.1.1 retains the same scope as the previous release though some details have been expanded in Version 1.1.1 as a result of vendor enquiries and the specification editorial process.

Who can I contact if I have questions on either version of this specification?

General questions can be submitted using the email link available on the TSA / TWIC pilot test web page. Specification detailed technical questions or proposed contributions should be directed to the Project Editor; refer to Section 1.3 of the Version 1.1.1 specification for contact details.

TWIC Pilot Test—Reader Technology

FAQs pertaining to technical issues regarding reader tests:

Which version of the TWIC specification does TSA use for evaluating TWIC readers for possible use in the Pilot test?

TSA uses Version 1.1.1 for the TWIC reader baseline.

Do you expect that fixed readers will test the validity of the Security Object? I don't see the Security Object referenced in any of the workflow descriptions.

It is not expected that fixed readers will test the validity of the TWIC Application Security Object.

The Security Object on the TWIC card issued to me does not contain a hash for the TWIC Privacy Key, as specified in the TWIC spec (page 30):
"The objects hashed are: the Unsigned CHUID (0x3002), The TWIC Privacy Key (0x2001), the Signed CHUID (0x3000), and the signed fingerprint templates (0x2003)." The other object hashes are there. Is this a problem that the card producer should be notified about?

The problem here lies in the specification; not an omission by the card producer. The security object may contain mappings and hash values for any data objects selected by the Issuer per policy. In this case the TPK is NOT included in the security object. The specification will be amended to reflect this fact.

Finally, a suggestion on the TWIC Privacy Key Network Processing portion of the spec (page 39): I think it might be better in the long run to return not just the AES encryption key, but the whole contents of the TWIC Privacy Key buffer. That way, applications would not need to be hard-coded to use AES-ECB-128, but could easily be written to support any of the other AES types in the future. It wouldn't add much network overhead and would enhance expandability.

This approach would permit changes to the AES key length without having to modify reader communications software.

The spec says "The reader shall provide an automated alert or lockout after a configurable number of biometric matching attempts (facility chooses). Is the intent of this specification to provide an automated alert or lockout after a configurable number of consecutive failed biometrics matching attempts?

The automated alert is intended to trigger after X (configurable) consecutive failures to match.

The spec says that Appendix B is "the method used to perform the TWIC Privacy Key retrieval from the PACS system." Does this really mean that this is the only way this can be done, or that it's the preferred way, or just a suggested way?

Appendix B should be read as an Informative Annex in that the method described is preferred and suggested; but not mandated.

The spec says "The input parameter value corresponds to the unique user ID that was read from the TWIC card as a binary value and base64 encoded". What is this unique user ID?

The unique user ID is determined by the local facility but is expected to be the FASC-N or a portion of the FASC-N (such as the first 5 fields of the FASC-N).

The spec says "The response would be the base64-encoded 128-bit (16-byte) AES encryption key", but the example response decodes to 17 bytes. Is this a mistake?

The annex has incorrect information in both of the value fields. Here is a simplified example ->
For Annex B set the Content-length to "xx" for both the input request and the response indicating "length was not computed for this example"
The TPK shall be 16 bytes [30313233343536373839303132333435] base64 encoded as [MDEyMzQ1Njc4OTAxMjM0NQ==]
For the "unique user ID" use a full FASC-N of 25 bytes [D70339DAA1822C10842125A1685821084216C1B9870339A3EB] base64 encoded as [1wM52qGCLBCEISWhaFghCEIWwbmHAzmj6w==].
Note that [ ] are not part of either the hexadecimal value or the base64 encoded string.

Does TWIC offer a Certificate Revocation List (CRL)?

Yes. The TWIC program CRL maintains a regularly updated list of all revoked TWIC certificates. The CRL is in addition to the Canceled Card List mechanism found on the pre-enrollment web site. TWIC readers can automatically retrieve the location of the CRL by looking at any of the certificates on the TWIC Card. TWIC certificates are formatted per rfc3280 and support the "CRL Distribution Points" extension indicating the Internet addresses available to reach the TWIC CRL.

How does TWIC encode the ANSI 378 template on the card in the case where no biometrics were enrolled?

TWIC immediately notifies the TWIC reader of this case by encoding the CBEFF Header field entitled "Length of biometric data (BDB)" with a value of zero.

Why does my TWIC reader software generate a padding error on some TWIC cards when attempting to decipher the TWIC biometrics template?

TWIC cards produced before May 9, 2008 used an AES-128 enciphering algorithm that did not correctly pad the data in the case of the data being divisible by the block size; 16 bytes in this case. By setting the decipher mode to "no padding" the operation will no longer produce this specific error at the expense of adding from 0 to 16 padding bytes at the end of the result. As the biometrics template is TLV encoded these extra bytes do not cause a problem in interpretation. Alternatively your software might continue to use the "padding" mode of AES-128 but trap any error and, in such a case, re-run the operation in "no padding" mode. This will work as well AND eliminate any extra padding bytes in the result at the expense of a longer time to decipher the template.

My testing of TWIC cards indicates some TWIC cards have an expired content signing certificate in the signed CHUID. What should my software do in such a case?

TWIC has published a TWIC Technical Advisory TA-2008-TWIC001-V1.0 that spells out what should be done when this specific content signing certificate is discovered. This Technical Advisory is posted on the Pilot Test portion of the TWIC web site.

Our organization has detected that the LDAP URL in the Authority Info Access extension of all TWIC certificates is missing a formatting character. What is TWIC doing to correct this issue?

The Lightweight Directory Access Protocol (LDAP) link is indeed missing a formatting character ('%') in front of the 'US' portion of the URL. This has been corrected in all TWIC cards activated after October 22, 2008. In addition the badly formed URL is supported by our PKI infrastructure should you have a need to reference this URL. That said, TWIC does NOT support an Online Certificate Status Protocol (OCSP) server or LDAP presence at this time.

International Biometric Industry Association (IBIA) November 2007 submitted to TSA for comment.

OVERVIEW

The following responses are to questions submitted to TSA and the U.S. Coast Guard by the International Biometric Industry Association (IBIA). These questions and responses are specific to the November 19, 2007 public meeting to discuss the TWIC reader hardware and card application specification.

GENERAL

Estimate of Number of TWIC Readers

Manufacturers of reader devices will need to make engineering changes to existing products to meet the requirements of the TWIC Reader Hardware and Card Application specification. There is a need for manufacturers to accurately forecast the potential market for these readers to enable an informed business decision as to how to price their products competitively and in such a way that they recover the unique product development costs over a reasonable time period. The requirement for TWIC readers in the maritime environment, in terms of projected quantities, is heavily dependent on several policy positions that have yet to be fully developed by the Coast Guard and TSA. Specifically, there are 3,200 facilities and 10,000 vessels that are subject to regulations under the Maritime Transportation Security Act (MTSA) and each maritime worker will be required to present a TWIC card for unescorted access to secure areas. Reader manufacturers are asking for policy guidance regarding the extent to which TWIC readers will be required for use in reading the TWIC card at entry points and the reader authentication mechanisms that will be required at various threat levels (e.g., CHUID only, CHUID + biometric). Reader manufacturers also need to know if policy will require TWIC readers at each facility exit point (in addition to the entry points), in order to enable awareness of what personnel are in the secure area at any given time. Can the Government please provide general guidance as to the expected operational use of TWIC readers?

In due course, we will be providing guidance. That said, the operational use case is expected in the short term to vary dramatically from one location to another due to the need to satisfy local operational practice, provisional law, and established policy.

Can the government provide guidance on the expected ratio of fixed indoor; fixed outdoor; and handheld devices in a typical deployment?

There is no "typical deployment". Each deployment has unique characteristics in terms of access control policy, secure areas, manpower, etc. As such there is no general guidance available as of today with respect to the distribution of reader types (fixed outdoor, fixed indoor and mobile).

Feature Extractor Used to Store Reference Fingerprint Minutiae Templates

What specific vendor template feature extractor has been used by the TWIC implementation contractor to generate the reference fingerprint minutiae templates stored on the TWIC card?

The TWIC program has selected a NIST certified extractor.

Has this template generator been tested and approved as a compliant feature extractor by NIST through the MINEX on-going testing program?

The selected template generator is NIST tested and approved.

If so, what is the specific SDK code that is used to create the reference fingerprint templates on the TWIC card?

See http://fingerprint.nist.gov/minex/QPL.html for reference. The TWIC program has selected a NIST recognized SDK.

SPECIFIC QUESTIONS RELATED TO SECTIONS OF TWIC SPECIFICATIONS

Section 4.2.1.2 - 4th and 6th bullets

The specification requires the use of the stored fingerprint templates on the TWIC card to be matched during the mode "Biometric Verification - Network Attached Reader". There is no mention of a provision for an alternate "operational" biometric that may be stored off of the TWIC card. While not explicit in the specification, our assumption is that when the reader is in "CHUID only" mode, the local operator could require the user to present an "operational" biometric that is indexed by the CHUID pointer within a repository of separately enrolled biometric data. We assume that such an implementation would be permitted but is outside the scope of the TWIC reader hardware and card application specification. Is this assumption correct?

The assumption is correct.

Reference Sections 5.1.4, 5.1.4.1, and 5.1.4.2

Please define or give examples of how "…or equivalent commercial practice…" may be successfully demonstrated.

It is preferred to meet the requirements as stated in the referenced clauses. Alternate, equivalent means to meet these referenced requirements are yet to be defined and may not ultimately be considered.

The following example is offered as guidance on the use of equivalent commercial practice.

EXAMPLE: "equivalent commercial practice" might be a certification obtained by an accredited test house that performed similar tests to those referenced in the specification. Such documentation might be reviewed against the specification referenced requirements and, on a case by case basis, considered as proof of successfully demonstrating the referenced requirements have been satisfied using "commercial practice". This example presumes what would be submitted in lieu of documentation of performing the preferred, required tests would include:
- the name, address, and contact within the accredited test house,
- the certification obtained,
- the test methods and procedures used to achieve the certification, and
- a statement by the manufacturer indicating what specification requirements are considered in scope of the equivalent commercial practice.

Reference Section 8 - Last Paragraph

Does the TWIC reader require the use of template matchers that have been certified by NIST under the MINEX On-Going Test Program?

Yes. The reader and card application specification references SP800-76 which requires said certification by NIST.

Reference Section 11.1

The note below the table describing the Card-application Identifier states: "As not all TWIC cards may be issued with the TWIC application as the default selected card-application, the reader shall explicitly select the TWIC card-application." Please describe an example of a TWIC card that is not issued with the TWIC application as the default selected card-application.

Future versions of the TWIC card may have more than one version of the TWIC application (as determined by the Proprietary Extension (PIX) of the Application identifier). In addition future applications may desire to return File Control information (FCI) to the reader that contains "discovery information" useful to the transaction session. This is why an explicit SELECT is warranted.

Reference Appendix A.2 - 8) b)

This reference states that "the reader could be locally configured with a copy of every trusted document signing certificate." Since there is only one central issuing authority for TWIC cards, what is the estimate of the maximum number of document signing certificates that will need to be stored in the reader?

The exact number is not defined. The total number is expected to be small given the central issuing authority structure. Further document signing is not currently anticipated as a normal mode of operation.

Reference Appendix A.3

Since active card authentication over the contactless interface is only supported through selection of the PIV application and is not directly performed within the TWIC card application, is it correct to assume that this function will typically not be performed during routine access with a TWIC reader and will more likely occur at a PC workstation such as in a security office when a worker is being initially registered into a physical access control system?

It is NOT correct to presume the TWIC card will be used in this way.

The fifth paragraph in this section states: "The reader (or bi-directional panel) would need to have access to a system clock capable of providing the current date and time in order to determine the expiration status of the credential." Is it not also possible for the expiration data of a TWIC card to be registered one time in the PACS head end server during initial privilege granting and have the PACS disable any CHUID that has expired? In such a scenario, there is no need for the reader to send the expiration date to the panel - only the CHUID. Is this a valid implementation scenario?

The expiration date might be stored at the head end. The expiration date is part of the CHUID. [If you meant to just send the FASC-N within the CHUID in this scenario this MAY be acceptable depending on the requirement to verify the signature field of the CHUID].

Download Plug-in
Some of the links on this page require a plug-in to view them, which are available below.

Adobe Acrobat (PDF)

WinZip