Lost Stolen Military CAC and Defense Credential¶

Losing a Department of Defense Common Access Card, Uniformed Services identification card, or federal security badge is an administrative and operational security crisis. A military credential is not a simple employee badge. It contains embedded integrated circuit chips holding Public Key Infrastructure certificates, biometric demographic profiles, digital signature keys, and physical access permissions for military bases, flight lines, and classified facilities. When a credential disappears, military perimeters and federal computer networks face immediate vulnerabilities.

Many service members, defense contractors, and civilian personnel hesitate to report a missing card because they fear command reprimands, counseling statements, or negative security clearance evaluations. Concealing or delaying the report of a lost Common Access Card is far worse than the loss itself. Unreported cards can be exploited by foreign intelligence services or criminal syndicates to breach perimeter gates or authenticate into defense networks. Taking rapid, transparent action stops unauthorized access and protects your security record.

Amma kana godhi¶

1. Notify your immediate chain of command and unit security manager right away.
   • Contact your immediate supervisor, first sergeant, division officer, or contracting officer representative within one hour of discovering the loss.
   • Notify your unit Security Manager or Security Management Office so they can log the incident in national defense security databases.
   • If you were the victim of an armed robbery, carjacking, or physical assault off-base, call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or view our list of lakkoofsa balaa tasaa.
2. File a formal lost or stolen property report with police authorities.
   • If the card was lost or stolen on a military installation, report directly to the Military Police, Security Forces, or Master-at-Arms desk.
   • If the loss occurred off-base in the civilian community, file a theft report with the local municipal police department and obtain an official case tracking number.
   • You must present a signed copy of this formal police report to obtain a replacement credential at a defense enrollment facility.
3. Request immediate PKI certificate revocation from your network help desk.
   • Contact your service branch or agency enterprise service desk, such as the Army Enterprise Service Desk, Navy 311, Air Force IT Service Desk, or defense agency equivalent.
   • Request that an Information Assurance Manager or Registration Authority revoke the Public Key Infrastructure certificates on the missing chip.
   • Revoking the authentication, email signing, and data encryption certificates blocks unauthorized logins across NIPRNet, SIPRNet, and defense web applications.
4. De-authorize physical installation access in perimeter security systems.
   • Notify the base Visitor Control Center or Pass and Decal office that your card is missing.
   • Request that security personnel flag your card profile in the Defense Biometric Identification System, or DBIDS, and local Physical Access Control Systems.
   • Flagging the electronic card serial number makes sure that if an unauthorized person attempts to swipe or scan the card at an installation entry gate, sentries receive an instant alert.
5. Secure the required command documentation for credential reissuance.
   • Obtain a signed Lost Credential Memorandum from your commanding officer, unit security officer, or authorized corporate contractor facility security officer.
   • Complete and sign Department of Defense Form 1172-2, Application for Identification Card/DEERS Enrollment.
   • Verify that the command memorandum explicitly details the date, location, and circumstances surrounding the disappearance of the card.
6. Schedule an urgent appointment at a RAPIDS issuing facility.
   • Locate the nearest Real-Time Automated Personnel Identification System workstation through the official defense appointment scheduler portal.
   • Gather two valid, unexpired forms of government-issued photo identification, such as a state driver license, civilian passport, or certified birth certificate.
   • Present your secondary identification, police report, and command authorization memorandum to receive a newly encoded physical credential.

flowchart TD
    A["Military CAC or security badge lost or stolen"] --> B["Step 1: Notify chain of command and unit security manager"]
    B --> C["Step 2: File formal police report on-base or with civilian precinct"]
    C --> D["Step 3: Call enterprise IT service desk to revoke PKI certificates"]
    D --> E["Step 4: Notify base Pass and ID to flag card in DBIDS gate scanners"]
    E --> F{"Are you stationed on-base or attempting to enter?"}
    F -->|"Entering installation"| G["Report to Visitor Center for temporary escort pass"]
    F -->|"On installation"| H["Step 5: Obtain signed command lost credential memo"]
    G --> H
    H --> I["Step 6: Gather two secondary unexpired photo IDs and DD Form 1172-2"]
    I --> J["Step 7: Visit RAPIDS/DEERS office for replacement card re-encoding"]
    J --> K["Restore network access tokens and re-register in base DBIDS"]

The dual threat: physical perimeter breach and cryptographic compromise¶

Understanding why defense credentials receive extreme protection requires examining how the smart card functions. A Common Access Card combines two completely distinct security layers into a single piece of laminated plastic: physical visual and biometric authentication, and digital cryptographic tokens.

Physical base access vulnerabilities and gate exploitation¶

At the physical installation level, sentries at entry control points inspect credentials to verify identity. When thousands of vehicles queue at installation gates during morning rush hours, gate sentries scan cards using handheld DBIDS wireless optical scanners or perform visual checks through vehicle windows.

If a lost credential matches an individual of similar age, height, hair color, and build, a disciplined intruder can present the card to gain entry to the installation. Once past the perimeter fence, unauthorized individuals can observe operational unit movements, photograph flight line operations, map physical infrastructure, or access unsecured command spaces. For this reason, base security forces treat an unaccounted-for credential as a potential perimeter security breach.

Cryptographic compromise of military networks and PKI keys¶

The digital threat posed by a lost Common Access Card is equally severe. Embedded inside the smart card chip are three primary Public Key Infrastructure (PKI) certificates issued by the Department of Defense Certification Authority: * The Identity Authentication Certificate: Authenticates the user to defense computers, secure network domains, virtual private networks, and web portals. * The Digital Signature Certificate: Applies legally binding digital cryptographic signatures to official military orders, contracts, administrative actions, and emails. * The Data Encryption Certificate: Encrypts sensitive, unclassified, and proprietary correspondence transmitted across government networks.

If a credential falls into the possession of a sophisticated adversary, foreign intelligence service, or advanced cybercriminal group, they can use specialized smart card hardware readers and forensic software to probe the microchip. If the card personal identification number (PIN) is compromised, an attacker can authenticate to defense intranets, exfiltrate sensitive files, or forge cryptographic signatures on official documents. Immediate digital certificate revocation shuts down this electronic attack surface.

Immediate reporting requirements and timeline¶

The Department of Defense, service branch regulations, and federal directives enforce mandatory reporting timelines when defense credentials disappear. Treating a lost credential as an informal administrative matter is a serious mistake.

The mandatory reporting window¶

Service branch regulations, including Army Regulation 380-67, Air Force Instruction 36-3026, Navy Personnel Command directives, and Department of Defense Manual 1000.13, mandate that personnel report lost or stolen credentials immediately: * Beeksisa Jalqabaa (Sa’aatii 1 hanga 2 Keessatti): Baduu kana akkuma kaardii bade mirkaneessiteen supparvaayizara battalaa, qondaala xiqqaa adda duree, itti gaafatamaa komishinii hin taane, ykn itti gaafatamaa kutaa hojiitti gabaasuu. * Ibsa Hogganaa Nageenyaa (Sa’aatii 4 Keessatti): Hogganaa Nageenyaa ykn Bakka Bu’aa Ofisara Kontiraataa kutaa keessaniif ibsa kennaa. Hogganaan nageenyaa gabaasa taatee Sirna Odeeffannoo Ittisaa Nageenyaaf (DISS), kuusaa giddugaleessaa federaalaa hordoffii qulqullina nageenyaa keessatti galmeessa. * Dokumantarii Seera Kabachiisuu (Sa’aatii 24 Keessatti): Ibsa kakaa sirnaa poolisii waraanaa dhaabbii ykn seera kabachiisuu siiviilii naannoo waliin guutuu.

Hatattamaan gabaasuun seeraan si eega. Namni dhuunfaa hayyama hin qabne tokko ragaa hatame kee fayyadamee karra bu’uuraa cabsuu yoo yaale ykn seensa neetworkii jalqabsiise, chaappaan yeroo idilee beeksisa nageenyaa jalqabaa kee irratti kaardii sun to’annaa kee ala akka ture mirkaneessa, kunis shakkii hirmaannaa kee irraa si eega.

Karaa waraanaa fi karaa siiviiliitiin gabaasuu¶

Bakki gabaasa qabeenya jalqabaa kee itti galchitu bakka teessuma lafaa kasaaraa irratti hundaa’a: * Kasaaraa Bu’uura Irratti: Kaardii mooraa waraanaa, gamoo iskuwaadroonii, bakka dooniin itti dhaabbatu, bakka nyaataa, ykn jiminaaziyeemii bu’uuraa keessa yoo dogoggoraan kaa’atte, kallattiin kutaa nageenya dhaabbiidhaaf gabaasa. Saajin deeskii ibsa kakaa keessan fudhata, galmee taatee blotter bana, gabaasa poolisii waraanaa ofiisaa ni kenna. * Kasaaraa Bu’uura Alaa: Yoo boorsaan ykn boorsaan keessan buufata xiyyaaraa siiviilii, mana nyaataa, galma daldalaa, ykn hoteela keessatti hatame, gabaasa yakka ofiisaa kutaa poolisii bulchiinsa magaalaa bakka sana irratti aangoo qabuutti galmeessaa. Gabaasa poolisii idilee, maxxanfame kan maqaa qondaala qorataa, lakkoofsa baajii, lakkoofsa bilbilaa naannoo, fi lakkoofsa wabii taatee ofiisaa of keessaa qabu gaafachuu. * Kasaaraa Imala Biyya Alaa: Boqonnaa dhuunfaa ykn bobba’iinsa ofiisaa biyya alaa keessatti osoo jirtuu ragaa waraanaa yoo dhabde, Waajjira Ittisaa Yunaayitid Isteetis naannoo keetii ykn kutaa Eegdota Nageenyaa Imbaasii Marine Corps imbaasii dhiyoo jirutti hatattamaan beeksisi, wiirtuu hojii kutaa mana keetii cinatti.

Dirqama gabaasa kontiraaktara ittisaa¶

Kontiraaktaroota ittisaa Maanu’alii Hojii Sagantaa Nageenya Industirii Biyyaalessaa (NISPOM / 32 CFR Kutaa 117) jalatti hojjetan ulaagaalee seeraa ciccimoo jalatti hojjetu. Hojjetaan kontiraaktara ittisaa qulqullaa’ee fi Kaardii Dhaqqabummaa Waliigalaa ykn baajii nageenya dhaabbataa dhabe: 1. Hatattamaan Ofisara Nageenya Dhaabbataa (FSO) dhaabbata isaanii beeksisuu. 2. Gabaasa taatee nageenya dhaabbataa keessoo daataa dhokataa ykn abbaa qabeenyummaa maaltu karaa ragaatiin argamuu akka danda’u bal’inaan ibsu guutuu. 3. Qondaalli Nageenya Dhaabbatichaa taatee nageenyaa kana gara Sirna Odeeffannoo Ittisaa Nageenyaaf gabaasee Bakka Bu’aa Ofisarri Kontiraataa mootummaa ni beeksisa. 4. Failure by a defense contractor to report lost credentials promptly can result in contractual cure notices, corporate security rating downgrades, or suspension of facility security clearances.

Digital revocation: neutralizing PKI certificates and network tokens¶

Physical credentials cannot be recovered remotely, but their digital capabilities can be terminated within minutes through defense IT enterprise networks.

Contacting the Information Assurance Manager and IT help desk¶

Every military command and defense installation maintains an Information Assurance Manager (IAM), Cybersecurity Service Provider (CSSP), or local Network Enterprise Center (NEC). Contact your local or enterprise service desk immediately to initiate cryptographic de-authorization: * Provide the technician with your full legal name, DoD Identification Number (the ten-digit Electronic Data Interchange Personal Identifier printed on the back of your card), and your assigned unit organization. * Explicitly state: "I am reporting a lost or stolen Common Access Card. I request an immediate emergency revocation of all associated Public Key Infrastructure certificates." * The technician contacts an authorized Registration Authority (RA) or Trusted Agent (TA) who queries the DoD Public Key Infrastructure database and transitions your digital certificates into Revoked status.

Certificate Revocation Lists and Online Certificate Status Protocol¶

When an authorized administrator revokes your certificates, the action propagates across defense servers through two technical mechanisms: * Certificate Revocation Lists (CRLs): The DoD Certification Authority compiles and publishes digitally signed lists of revoked serial numbers at scheduled intervals. All network domains download these lists to verify that certificates presented during login attempts remain valid. * Online Certificate Status Protocol (OCSP): Modern defense networks use real-time OCSP validation responders. When someone inserts a card into a smart card reader and enters a PIN, the local workstation queries an OCSP server across the network. If the certificate is marked revoked, the server rejects authentication in milliseconds, terminating access before an unauthorized user can browse network shares or launch applications.

Revoking auxiliary tokens and mobile authenticator profiles¶

If your missing card was used to authenticate secondary enterprise tools, inform the IT support technician so they can purge associated access privileges: * Disconnect all active Virtual Private Network (VPN) tunnels linked to your user account. * Revoke purebred or derived credential profiles installed on government-furnished smartphones, tablets, or secure laptop hardware. * Invalidate active single sign-on (SSO) session cookies across defense web portals like Defense Travel System (DTS), MyPay, and enterprise email web access portals.

Physical installation access and DBIDS de-authorization¶

Terminating network privileges protects electronic records, but installation security forces must also neutralize the card physical utility at base boundary gates.

Defense Biometric Identification System flagging¶

The Defense Biometric Identification System (DBIDS) manages physical access for personnel entering military installations worldwide. When you scan your card at a base gate, the optical scanner reads the barcode or contactless smart card chip, cross-references the internal database, and displays your photograph, clearance level, and installation access privileges on the sentry handheld terminal.

To flag a missing card in DBIDS: 1. Visit or call the installation Pass and Identification Office or Visitor Control Center. 2. Provide your DoD Identification Number and the circumstances of the loss. 3. The security clerk accesses the DBIDS administrative terminal and changes your card status to "Lost/Stolen - Confiscate." 4. If an individual attempts to present your physical card at any participating military installation gate, the handheld scanner sounds an audible alarm, flashes red, and prompts sentries to detain the individual and confiscate the credential immediately.

Physical Access Control Systems and facility security badges¶

In addition to primary installation gates, specialized command buildings, Sensitive Compartmented Information Facilities (SCIFs), and laboratory complexes operate local Physical Access Control Systems (PACS). These systems use proximity RFID chips embedded within Common Access Cards or specialized proximity badges: * Notify your building security manager or facility custodian immediately. * The facility custodian accesses the local building access control software and purges your card unique electronic badge number from the electronic door strike controllers. * Purging the badge serial number prevents an intruder from using the physical card to unlock outer perimeter turnstiles, biometric mantraps, or vault doors.

Base access procedures without a Common Access Card¶

Being stranded outside a military installation gate without an identification card creates an immediate practical hurdle. Sentries are armed, trained to challenge unauthorized entry attempts, and bound by strict force protection conditions.

Approaching the Visitor Control Center¶

Never attempt to drive through a military installation gate without an ID, hoping a friendly sentry will recognize you and wave you through. Doing so violates base security directives, causes gate closures, and can result in armed felony detention.

Follow this standard procedure to enter an installation when your ID is missing: 1. Pull your vehicle into the designated Visitor Control Center parking area located outside the installation perimeter fence before reaching the sentry guard shack. 2. Enter the Visitor Control Center and approach the intake counter. 3. State calmly that you are an active-duty service member, civilian employee, or contractor assigned to an installation tenant unit whose identification card was lost or stolen. 4. Present secondary unexpired government photo identification, such as a state driver license or civilian passport. 5. Galmee konkolaataa keessanii, ragaa inshuraansii konkolaataa seera qabeessa ta’e, fi odeeffannoo quunnamtii yuunitii ramadameef kenni.

Dabarsa yeroof dhaabuu fi ulaagaa eegduu¶

Haala Eegumsa Humnaa (FPCON) ammaa fi imaammata ajaja fe'iinsa naannoo irratti hundaa'uun, Giddu-galli To'annoo Daawwattootaa sanada yeroof qaqqabummaa ni kenna: * Dabarsa Waraqaa Yeroo (DoD Form 2883 ykn Base Pass): Barreessaan nageenyaa haala sochii kee DEERS keessatti mirkaneessee dabarsoo waraqaa sa’aatii digdamii afur hanga torbaatamii lamaaf seera qabeessa ta’e kenna. Dabarsi sun suuraa kee, maqaa seera qabeessaa fi hayyama seensa karra addaa of keessaa qaba. * Ulaagaalee Eegduu Ispoonsara: Haala eegumsa humnaa olka’aa (kan akka FPCON Charlie ykn Delta) jalatti, barreessitoonni nageenyaa dabarsoo daawwattootaa nama waliin hin deemne kennuu hin danda’an. Qaamaan gara Giddugala To’annoo Daawwattootaatti konkolaataa oofuun qondaala dirqama kutaa keessanii, qondaala xiqqaa olaanaa dursaa, ykn saajin jalqabaa qunnamuu qabdu. Ispoonsarri kee hayyama eegduu ofiisaa mallatteessee qaamaan karra keessaa si waliin deemuu qaba. * Mirga Imaltuu Amanamaa Dhaabuu: Yeroo ragaa ofiisaa dhabdu, mirga Imaltuu Amanamaa ni dhabda. Imaltoota biroo gara dhaabbii sanaatti eegduu hin dandeessu, namni dhuunfaa konkolaataa keessan keessa jiru hundi Giddugala To’annoo Daawwattootaa keessatti of danda’ee qulqullaa’uu qaba.

Hojimaata bakka bu’iinsa RAPIDS fi DEERS¶

Beeksisni nageenyaa hatattamaa erga xumuramee booda, karaa buufata hojii Sirna Adda Baafannaa Hojjetoota Ofiin Yeroo Dhugaa (RAPIDS) tiin ragaa bakka bu’aa argachuu qabda. Tarminaalonni RAPIDS kallattiin kuusdeetaa Sirna Gabaasa Ulaagaa Galmee Ittisaa (DEERS) waliin walqabsiifamu.

Tarree sakatta’iinsa sanadoota barbaachisan¶

RAPIDS verifying officials operate under strict federal identity proofing guidelines established by Homeland Security Presidential Directive 12 (HSPD-12) and Federal Information Processing Standard 201 (FIPS 201). You cannot receive a replacement credential based on verbal vouching.

You must present the following mandatory documentation at the RAPIDS workstation: * The Signed Command Lost Card Memorandum: An official memorandum on command letterhead signed by your unit commanding officer, executive officer, security manager, or corporate Facility Security Officer. The memorandum must describe the circumstances of the loss and authorize reissuance. * The Formal Police Incident Report: A signed, stamped copy of the military police report or civilian municipal police theft report. * Two Forms of Unexpired Identity Documentation: You must present two original, unexpired forms of government identification listed on the federal Form I-9 list. One document must be an unexpired state or federal government photo ID (such as a state driver license or civilian passport). The second document can be a certified birth certificate, Social Security card, voter registration card, or foreign passport. * Department of Defense Form 1172-2: An approved Application for Identification Card/DEERS Enrollment. If your sponsor is not physically present, the form must be signed digitally via the online RAPIDS Self-Service portal or notarized.

Accessing the RAPIDS appointment system¶

Military installations experience heavy demand for ID card services. To obtain an appointment: 1. Access the official DoD ID Card Office Online (RAPIDS Appointment Scheduler) from a personal computer, smartphone, or sponsor workstation. 2. Search for all RAPIDS facilities within a fifty-mile radius. In addition to primary active-duty installations, look for National Guard armories, reserve training centers, and military recruitment stations that house certified RAPIDS workstations. 3. If online appointment calendars are fully booked for weeks, locate an installation that operates a standby walk-in queue. 4. Arrive at the walk-in facility at least forty-five minutes before doors open, bringing your complete documentation dossier. Explain to the intake clerk that you are in a duty-critical status requiring emergency same-day card re-encoding.

Card re-encoding and biometric capture¶

At the RAPIDS terminal, the verifying official walks through a structured enrollment process: * The official scans and uploads your two primary identification documents into the DEERS database. * You place your fingers on an optical biometric scanner to capture and verify digital fingerprints against your historical DEERS record. * A high-resolution digital photograph is taken against a neutral background. * The operator inserts a blank smart card into the desktop encoding machine. The system writes your demographic profile, burns digital cryptographic keys into the microchip, and prints physical visual text and barcodes onto the card exterior. * You insert the newly minted card into a keypad reader and establish a fresh six-to-eight-digit PIN.

Comparison of military credential types and replacement protocols¶

Different defense credentials carry distinct administrative authority, replacement documentation rules, and network privileges. The following comparison table provides an operational summary of primary Department of Defense identification credentials.

Counterintelligence, OPSEC, and espionage considerations¶

In the modern threat environment, foreign intelligence services, terrorist organizations, and organized cyber syndicates actively target military identification credentials. A Common Access Card is a valuable human intelligence asset.

The intelligence value of a military credential¶

Hostile intelligence operatives seek authentic military credentials for several operational objectives: * Perimeter Reconnaissance and Infiltration: An authentic card facilitates unauthorized physical access to military installations, permitting surveillance of weapon storage areas, command headquarters, and defense research laboratories. * Social Engineering and Impersonation: Possessing an authentic credential allows a hostile agent to pose convincingly as a military officer or defense technician when conducting phone-based or in-person social engineering attacks against military units or defense contractors. * Synthetic Identity Fabrication: Data harvested from the magnetic stripe, PDF417 barcode, and integrated circuit chip can be cloned or incorporated into counterfeit documentation used in espionage operations.

High-risk loss indicators and CI reporting¶

You must report the loss directly to military counterintelligence authorities (such as the Army Counterintelligence Command, Naval Criminal Investigative Service, or Air Force Office of Special Investigations) if any of the following high-risk indicators are present: * The loss occurred during personal or official travel in a foreign country designated as a high-threat counterintelligence environment. * The card disappeared under suspicious circumstances, such as an unauthorized room entry where high-value electronics and cash were left untouched while only the military ID was taken. * You are approached by unfamiliar individuals asking detailed questions about your security clearance, your military duties, or your access to classified networks following the loss. * You observe unauthorized electronic login attempts or password reset notices triggered against your government email or defense web accounts.

Protecting operational security (OPSEC)¶

When discussing the loss of your credential, maintain operational security: * Waa'ee kaardii bade kanaa waltajjiiwwan miidiyaa hawaasaa ykn waltajjii ummataa irratti gonkumaa hin maxxansinaa. Baajii kee akka dhabde beeksisuun ykn hayyama qaqqabummaa yuunitii addaa kee ibsuun mormitoota marsariitii hawaasaa hordofaniif odeeffannoo gatii guddaa qabu kenna. * Qorannoo nageenya ajajaa ykn saaxilamummaa yeroof dhaabuu ilaalchisee bal’inaan karaa qunnamtii siiviilii icciitii hin taane irratti hin mari’inaa. * Qunnamtiin taatee kana ilaalchisee taasifamu hunda iimeelii waraanaa ofiisaa, telekoomii nageenya qabu, ykn ibsa ajaja dhuunfaa qaamaan kennamu qofa irratti daangeessuu.

Bu’aa bulchiinsaa fi qulqullina nageenyaa keessan eeguu¶

Hojjettoota ragaa dhabaniif yaaddoo guddaa kan ta’e tokko hojii waraanaa isaanii, madaallii raawwii hojii, fi ulaagaa qulqullina nageenyaa irratti dhiibbaa geessisuu danda’uudha.

Garaagarummaa naamusaa: dagannoon fi hanna hin oolle¶

Hoggansi waraanaa fi abbootiin taayitaa murtii nageenyaa miidhamuu yakkaa hin oolle fi dagannoon itti gaafatamummaa hin qabne gidduutti garaagarummaa cimaa kaa’u: * Miidhaa Yakkaa Hin Oolamne: Yeroo saamicha hidhannoo, mana jireenyaa sanaan cabsuu, ykn konkolaataa cabsuun bakka boorsaan sun baankii cufame keessatti dhokate yoo hatame, ati miidhamtuu yakkaa ta’uu kee. Hanga kasaaraa daftee gabaastutti, gabaasa poolisii sirrii ta’e galmeessitee, qondaaltota nageenyaa waliin iftoominaan tumsitutti, yeroo muraasaaf adabbiin naamusaa si mudata. * Of eeggannoo dhabuu Dagannoon: Qorannoon tokko kaardii keessan bakka hojii ummataa keessaa kiiboordii kompiitaraa keessatti osoo hin eegin dhiiftan, mana dhugaatii bu'uura ala ta'etti machaa'aa osoo jirtuu kaardii akka dhabdan, ykn guyyoota hedduudhaaf dhabamuu isaanii gabaasuu dhabuu keessan yoo agarsiise, bu'aa bulchiinsaa isin mudata. Bu’aan kunniin xalayaa of eeggannoo adabbii hin qabne, ibsa gorsaa idilee, mirga darbiinsa dhabuu, ykn adabbii abbaa seerummaa hin taane bu’uura seera haqaa waraanaa walfakkaataa keewwata 92 (Ajaja ykn Dambii tokkoof Abboomamuu Dhabuu) kan dabalatu ta’uu danda’a.

Dhiibbaa qulqullina nageenyaa fi Madaallii Itti Fufiinsa Qabu¶

Qulqullinni nageenya biyyaalessaa Qajeelfama Bakka Bu’aa Hojii Raawwachiiftuu Nageenyaa 4 (SEAD 4) Qajeelfama Murtii Nageenya Biyyaalessaatiin kan bulfamudha. Qajeelfamni K (Odeeffannoo Eegumsa Qabu qabachuu) fi Qajeelfamni E (Amala Dhuunfaa) amanamummaa, amanamummaa fi seera nageenyaa hordofuu nama dhuunfaa madaalu.

Qulqullina nageenyaa keessan eeguuf: * Atattamaan Gabaasa: Tarkaanfiin tokkichi miidhaa geessisu namni dhuunfaa tokko fudhachuu danda'u kasaaraa dhoksuudha. Yeroo kaardii hin gabaafamne eegdota karra ykn bulchitoota neetworkiin alaabaa itti godhamu, hogganaan nageenyaa gabaasa taatee nageenyaa hamaa Sirna Odeeffannoo Ittisaa Nageenyaaf (DISS) keessatti galmeessuu qaba, kunis addaan cituu qulqulleessuu kakaasuu danda’a. * Document Salphisuu: Gabaasa poolisii, lakkoofsa tikkeettii IT, fi sanada bakka bu’iinsaa hogganaa nageenya yuunitii keessaniif dhiyeessuun itti gaafatamummaa dhuunfaa agarsiisi. Proactive remediation qajeelfama nageenyaa eeguu agarsiisa. * Ulaagaa Madaallii Itti Fufiinsa Qabu: Abbootiin qulqullina federaalaa ammayyaa hordoffii ofumaan Madaallii Walitti Fufaa (CE) keessatti galmaa’u. Taateewwan nageenyaa Ejensii Faallaa Basaasaa fi Nageenyaa Ittisaa (DCSA)tiin walitti fufiinsaan ilaalama. Gabaasni iftoomina qabu taatee sun akka akkaataa nageenyaa hin kabajne osoo hin taane akka taatee bulchiinsaa adda baafameetti bulchiinsaan akka furmaata argatu wabii ta’a.

Nageenya ragaa dhuunfaa gara fuula duraatiif jabeessuu¶

Jeeqamni ragaa waraanaa bade mudachuun barbaachisummaa amala kunuunsa qaamaa cimaa ta’e cimsa. Tarkaanfiiwwan nageenyaa guyyaa guyyaa kana hojiirra oolchuun ragaalee keessan eeguu:

Eegumsa qaamaa fi naamusa qaxxaamuraa¶

Treat your Common Access Card with the same level of security discipline applied to sensitive military hardware: * The Removal Habit: Never leave your card inserted in a keyboard or smart card reader when stepping away from your desk, even for thirty seconds. Lock your workstation screen and place the card in your pocket or around your neck every time you stand up. * Concealment Off-Base: When traveling outside military installations, remove your card from exterior lanyards or visible badge reels. Displaying a military credential in civilian spaces makes you an identifiable target for pickpockets and intelligence collectors. * Dedicated Interior Storage: Store your credential inside a dedicated, zippered interior pocket of your jacket or bag, separate from routine credit cards and transit passes. Separating your military ID from everyday cash reduces the risk that the card will accidentally slip out when paying for retail purchases.

Using RFID-shielding sleeves and secure holders¶

Smart cards containing contactless integrated circuits broadcast identification signals when exposed to radio frequency interrogation fields. Protect your card from electronic harvesting: * Store your credential inside an electromagnetically opaque RFID-shielding sleeve or a rigid, FIPS 201-approved dual-sided badge holder. * An approved shielding sleeve blocks unauthorized contactless card skimmers from reading unencrypted electronic chips while you travel through public transit terminals, airports, or crowded civilian spaces. * Inspect physical badge holders regularly for cracks or weak plastic clips that could allow the card to detach unnoticed during daily movement.

Gaaffiiwwan yeroo baay’ee gaafataman¶

Will I be disciplined under the UCMJ for losing my military CAC?¶

Losing a Common Access Card is not an automatic UCMJ violation, but service members can face non-judicial punishment under Article 92 if the loss resulted from gross negligence, leaving the card unattended in a secure facility, or intentionally failing to report the loss immediately to their chain of command.

How can I get on base if I lose my CAC on a weekend?¶

Pull into the installation Visitor Control Center parking area before the gate sentry post, present secondary unexpired government photo identification like a driver license or passport, and have your unit duty officer or a designated sponsor meet you to sign an official temporary escort pass.

Can someone use my lost CAC to access classified computer networks?¶

An unauthorized individual cannot access classified networks like SIPRNet with a lost card alone because authentication requires a cryptographically validated smart card PIN, but immediate reporting is necessary so Information Assurance Managers can revoke Public Key Infrastructure certificates before adversaries can attempt bypass attacks.

What two forms of ID do I need to bring to the RAPIDS office for a replacement CAC?¶

You must present two original, unexpired forms of identification from the federal Form I-9 list, with at least one being a primary state or federal photo identification like a state driver license or civilian passport, accompanied by a secondary document such as a Social Security card or certified birth certificate.

What is a Lost CAC Memorandum and who has the authority to sign it?¶

A Lost CAC Memorandum is an official administrative document on command letterhead describing the date, location, and circumstances of the card loss, which must be signed by the service member commanding officer, executive officer, unit security manager, or authorized contractor Facility Security Officer before a RAPIDS workstation can issue a replacement card.

Qajeelfamoota walqabatan¶

• Lost or Stolen Wallet Recovery and Card Freezing Procedures
• Replacing Lost or Stolen Birth Certificates and Identity Documents
• Enterprise Data Breach Response and Password Leak Mitigation
• Session Cookie Hijacking and Credential Revocation Procedures
• Tajaajila Balaa Tasaa Idil-addunyaa fi Lakkoofsa Bilbila Addunyaa