PKE Waiver Process Is Updated

Published, May 3, 2011

The process for requesting waivers for systems that have not been properly Public Key Enabled (PKE) has been updated. System owners requesting a PKE waiver must now also assert the system's overall compliance with the DON Enterprise Architecture.

The DON CIO, OPNAV N2/N6 and HQMC C4 coordinated message DTG 211312Z APR11: "DON Public Key Enablement Waiver Request Process for Unclassified Networks, Private Web Servers, Portals and Web Applications" provides updated guidance for requesting a waiver through the Department of Defense Information Technology Portfolio Repository-DON. It also supersedes DTG 262302Z SEP 09: "Department of the Navy NIPRNET Public Key Enablement Waiver Process."

All DON unclassified networks, private web servers, portals and web applications are required to be enabled to authenticate users via DoD-approved public key infrastructure certificates. Systems that are not public-key enabled must request a waiver, which is now incorporated into the DON EA compliance assessment. For more information, view the Naval message.

TAGS: Cybersecurity, DADMS/DITPR-DON, EA, PKI

Related Policy
Related CHIPS Magazine