HHSIdentity Program

Software Certificate Issuance Training Materials

Department of Health & Human Services

Public Key Infrastructure (PKI)

![](media/image1.png){width="1.5729166666666667in"
height="1.4895833333333333in"}

Version 0.2

August 26, 2008

Authors

+---------------------------------+------------------------------------+
| Bobby Brown, Technology         | Kevin Brault, Senior Manager       |
| Architect                       |                                    |
|                                 | BearingPoint\                      |
| BearingPoint\                   | 6564 Loisdale Court\               |
| 6564 Loisdale Court\            | Springfield, VA 22150\             |
| Springfield, VA 22150\          | Tel: (703) 747 4029                |
| Tel: (703) 253 2598\            |                                    |
| E-mail:                         | E-mail:                            |
|                                 | [k                                 |
| [bobby.brown                    | evin.brault@bearingpoint.com](mail |
| \@bearingpoint.com](mailto: f   | to: kevin.brault@bearingpoint.com) |
| irst.lastname@bearingpoint.com) |                                    |
+---------------------------------+------------------------------------+

Version History

+---------------------+------+---------+--------+---------+----------+
|                     |      | Draft   |        | Final   |          |
+---------------------+------+---------+--------+---------+----------+
| Description         | Ver  | Draft   | Author | A       | Approver |
|                     | sion | Date    |        | pproval |          |
|                     |      |         |        | Date    |          |
+---------------------+------+---------+--------+---------+----------+
| >  Initial draft    | 0.1  | 8/      | > B.   |         |          |
|                     |      | 22/2008 | >      |         |          |
|                     |      |         |  Brown |         |          |
+---------------------+------+---------+--------+---------+----------+
| > Submission to HHS | 0.2  | 8/      | J. Key |         |          |
| > following         |      | 26/2008 |        |         |          |
| > formatting        |      |         |        |         |          |
| > updates           |      |         |        |         |          |
+---------------------+------+---------+--------+---------+----------+
|                     |      |         |        |         |          |
+---------------------+------+---------+--------+---------+----------+
|                     |      |         |        |         |          |
+---------------------+------+---------+--------+---------+----------+

This document is protected under the copyright laws of the United States
and/or other countries as an unpublished work. This document contains
information that is proprietary and confidential to BearingPoint, Inc.
and/or affiliates or its technical alliance partners, which shall not be
duplicated, used, or disclosed in whole or in part without
BearingPoint\'s express written permission.

© 2008 BearingPoint, Inc. and/or its affiliate(s) (Unpublished). All
rights reserved.

BearingPoint® is a registered trademark of BearingPoint, LLC, or its
affiliates, in the United States and other countries.

Table of Contents

[1. Introduction 1](#__RefHeading___Toc207515332)

[1.1 Purpose 1](#__RefHeading___Toc207515333)

[1.2 Scope 1](#__RefHeading___Toc207515334)

[**2. Software Certificate Sponsor Training
2**](#__RefHeading___Toc207515342)

2.1 Accessing the HHS Portal [2](#__RefHeading___Toc207515417)

2.1.1 Accessing the HHS Portal Using the PIV Card
[2](#__RefHeading___Toc207515418)

2.1.2 Accessing the HHS Portal Using a Soft Certificate
[4](#__RefHeading___Toc207515419)

2.2 Sponsoring an Employee for a Soft Certificate
[5](#__RefHeading___Toc207515420)

2.2.1 Completing the "HSPD12 Sponsor an Employee" Form
[6](#__RefHeading___Toc207515421)

[3. Software Certificate Subscriber Training
8](#__RefHeading___Toc207515335)

[3.1 Receiving Sponsorship Notification 8](#__RefHeading___Toc207515336)

[3.2 Accessing the HHS Portal 9](#__RefHeading___Toc207515337)

3.3 Completing the Subscriber Request Form
[10](#__RefHeading___Toc207515408)

3.3.1 Selecting a Secure Password [12](#__RefHeading___Toc207515409)

3.4 Submitting a Printed Copy of the Subscriber Request Form
[13](#__RefHeading___Toc207515410)

3.4.1 Viewing the Printed Subscriber Request Form
[14](#__RefHeading___Toc207515411)

3.5 Collecting the HHS Digital Certificates
[17](#__RefHeading___Toc207515412)

3.5.1 Accessing the HHS Portal [18](#__RefHeading___Toc207515413)

3.5.2 Downloading the Digital Certificates
[21](#__RefHeading___Toc207515414)

3.5.3 Installing the Digital Certificates
[26](#__RefHeading___Toc207515415)

3.6 Ensuring Proper Collection and Installation of the HHS Digital
Certificates [36](#__RefHeading___Toc207515416)[**4. Software
Certificate Registrar Training 37**](#__RefHeading___Toc207515345)

[4.1 Accessing the HHS Portal 37](#__RefHeading___Toc207515346)

4.1.1 Accessing the HHS Portal Using the PIV Card
[37](#__RefHeading___Toc207515423)

4.1.2 Accessing the HHS Portal Using a Soft Certificate
[39](#__RefHeading___Toc207515424)

[4.2 Processing a Certificate Request 40](#__RefHeading___Toc207515347)

1.  []{#__RefHeading___Toc207515332 .anchor}Introduction

During Phase I of PKI Software Certificate transition (i.e., the period
September 1, 2007 through March 31, 2008), an Analysis of Alternatives
(AoA) document was developed to address PKI Software Certificate use
cases.  Upon submission of the AoA in October 2007, an additional option
was requested to be investigated by the HHSIdentity Core Team members. 
As such, BearingPoint was asked to evaluate a possible transition of the
existing SRA Software Certificate Issuance infrastructure, currently
integrated with the IdenTrust Certificate Authority, to Cybertrust's
CA.  A detailed analysis was completed for this option and presented to
the PKI Transition Team and the Core Team.  A specific set of metrics
were compared in regards to maintaining the two environments (SRA
Software Certificate Issuance infrastructure and the HSPD-12
infrastructure) over the life of the program.  At the end of the
evaluation of this new option, the groups determined that the total cost
ownership was too high to continue managing both environments.  The
BearingPoint team was then directed to build the Software Certificate
functionality into the existing PIV-II infrastructure hosted at Qwest. 
A detailed PKI strategy and project plan (WBS) was developed supporting
the requirements gathered from the PKI stakeholders involved in the
process in Phase II, which spans the period 4/1/2008-9/30/2008. This PKI
strategy consists of three major stages. Stage I, as described below, is
included in the current phase through 9/30/2008.

**Stage I   --     Software Certificate Distribution**

-   Develop Non-PIV Software Certificate issuance that support local and
    antecedent enrollment process

-   Develop and Implement a Helpdesk functionality that would provide
    the ability for the users to request and receive Software
    Certificates

    1.  []{#__RefHeading___Toc207515333 .anchor}Purpose

This document was created to guide Sponsors, Applicants and Registrars
through the procedures that are necessary to complete the Software
Certificate request and collection processes. Step-by-step instructions
and relevant screenshots outline the actions that Sponsors, Applicants,
and Registrars must follow to complete these processes using the
HHSIdentity Portal.

2.  []{#__RefHeading___Toc207515334 .anchor}Scope

The scope of Software Certificate training materials falls within Stage
I of the PKI strategy, encompassing the period of 4/1/2008-9/30/2008.
These materials support the implementation of Software Certificate
distribution for Phase I by providing training materials for Software
Certificate Subscribers, Sponsors, and Registrars.

2.  []{#__RefHeading___Toc207515342 .anchor}Software Certificate Sponsor
    Training

This guide offers step-by-step instructions on the process that a
Sponsor using the Window operating system must complete in order to
sponsor an Applicant for Software Certificate request and collection.

1.  1.  []{#__RefHeading___Toc207515417 .anchor}Accessing the HHS Portal

There are two methods the Sponsor can use to access the IDMS Portal. The
Sponsor can log on to the portal by 1) using a PIV Card or 2) using a
Software Certificate.

1.  []{#__RefHeading___Toc207515418 .anchor}Accessing the HHS Portal
    Using the PIV Card

If accessing the Portal using the PIV Card, the Sponsor should follow
the steps listed below.

1)  Insert the PIV Card into the card reader.

2)  Open a browser window.

3)  Type <https://158.74.64.17/idms/portal> into the address bar.

4)  At the Portal Login screen click "**Portal Login**" on the left side
    of the screen. The Portal Login screen is displayed below.

![](media/image4.png){width="6.497916666666667in"
height="3.261111111111111in"}

5)  Choose a digital certificate and then click "**OK**".

![](media/image5.png){width="6.026388888888889in"
height="2.986111111111111in"}

6)  Enter the PIN to access the PIV Card and click "**OK**".

![](media/image6.png){width="5.4in" height="2.591666666666667in"}

1.  []{#__RefHeading___Toc207515419 .anchor}Accessing the HHS Portal
    Using a Soft Certificate

If using a Soft Certificate, the following window will be displayed. To
access the HHS Portal using a Soft Certificate, enter the Password for
the certificate and then click "**OK**".

![](media/image7.png){width="5.50625in" height="2.8159722222222223in"}

1.  []{#__RefHeading___Toc207515420 .anchor}Sponsoring an Employee for a
    Soft Certificate

Once a Software Certificate or PIV card is entered, select "**Sponsor
Employee for Soft Cert**" on the left side of the HHS Portal Screen,
which is displayed in the image below.

![](media/image8.png){width="6.488888888888889in"
height="3.361111111111111in"}

If the Sponsor receives the warning message displayed below, they have
not been granted rights to the Sponsorship Portal. Contact a local
helpdesk if this occurs.

![](media/image9.png){width="6.488888888888889in"
height="2.3722222222222222in"}

1.  1.  []{#__RefHeading___Toc207515421 .anchor}Completing the "HSPD12
        Sponsor an Employee" Form

All fields that are labeled in red are required fields and must be
filled out by the Sponsor. Once all of the required fields have been
completed, click "**Submit**".

***NOTE:** The Sponsor should validate the Applicant's email address
with the Applicant before filling out the "Primary SMTP E-Mail Address"
field. It is critical that the email address is correct. The email
address is used to send sponsorship information to the Applicant.*

![](media/image10.png){width="5.836111111111111in" height="3.1625in"}

When the Sponsor has successfully submitted the Sponsor an Employee
Form, they will see the screen shown below. This screen will display the
message: "The Applicant's information has been saved successfully. An
email has been sent to the certificate user to review his/her
information." Click "**Logout**".

![](media/image11.png){width="6.46875in" height="3.0590277777777777in"}

1.  []{#__RefHeading___Toc207515335 .anchor}Software Certificate
    Subscriber Training

This guide offers step-by-step instructions on the process that an
Applicant using the Window operating system must complete in order to
request and collect HSPD12 Software Certificates.

2.  1.  []{#__RefHeading___Toc207515336 .anchor}Receiving Sponsorship
        Notification

![This picture is described fully in the previous and subsequent
paragraphs.](media/image12.png){width="4.8125984251968505in"
height="3.116535433070866in"}![This picture is described fully in the
previous and subsequent
paragraphs.](media/image13.png){width="4.799212598425197in"
height="0.4984251968503937in"}![This picture is described fully in the
previous and subsequent
paragraphs.](media/image14.png){width="4.799212598425197in"
height="2.3783464566929133in"}The Sponsor begins the Software
Certificate Request process by accessing the HHSIdentity Portal.  Once
the Sponsor inputs the Applicant's name, credential category, and email
address and submits the information to the Portal, the Sponsorship
process is completed and an automated email is sent to the applicant to
inform them that the Sponsorship has occurred. When an Applicant
receives a HSPD12 Certificate Sponsorship email, they should read and
follow the instructions in the email to access the HHS Portal. The image
below shows a sample HSPD12 Certificate Sponsorship email.

2.  []{#__RefHeading___Toc207515337 .anchor}Accessing the HHS Portal

To access the HHS Portal, click the hyperlink located within the HSPD12
Certificate Sponsorship email. (**https://158.74.64.17/idms/portal**)

The URL provided in the email will be available for 72 hours from the
time the email was sent. If the Applicant receives the message displayed
in the figure below, they will have to be sponsored again.

![](media/image15.png){width="6.491666666666666in"
height="3.6756944444444444in"}

3.  []{#__RefHeading___Toc207515408 .anchor}Completing the Subscriber
    Request Form

Once the Applicant clicks the link in the HSPD12 Certificate Sponsorship
email, the PIV Portal opens to display the Applicant's information that
has been previously entered by the Sponsor. Below is an image of the PIV
Portal screen displaying the Subscriber Request Form.

![This picture is described in detailed in the previous and subsequent
paragraphs.](media/image16.png){width="0.7700787401574803in"
height="3.0866141732283463in"}![This picture is described in detailed in
the previous and subsequent
paragraphs.](media/image17.png){width="6.282677165354331in"
height="4.230708661417323in"}![This picture is described in detailed in
the previous and subsequent
paragraphs.](media/image16.png){width="6.279133858267716in"
height="3.4543307086614172in"}![This picture is described in detailed in
the previous and subsequent
paragraphs.](media/image16.png){width="0.8299212598425196in"
height="2.733464566929134in"}![This picture is described in detailed in
the previous and subsequent
paragraphs.](media/image18.png){width="1.0909448818897638in"
height="9.803149606299212e-2in"}

The Applicant should follow the steps outlined below to complete the
Subscriber Request Form:

1)  The Applicant must read the Subscriber Agreement and complete all
    red text fields.

2)  Click the check box next to "**I have read and accept the Subscriber
    Agreement**".

3)  Click the "**I Agree"** button.

4)  Once the Applicant has clicked the **"I Agree"** button on the
    Subscriber Agreement, the Employee Review screen is displayed. This
    screen allows the Applicant to check the accuracy of the information
    displayed on the screen. The Employee Review Screen is shown below.

```{=html}
<!-- -->
```
a)  If all of the information on the Employee Review screen is correct,
    click "**Submit**".

b)  If any information in the Subscriber Request Form is incorrect,
    correct the information and then click "**Submit**". Upon review, if
    the Applicant notices an error in information that is grayed out,
    click "**Cancel**". Clicking "**Cancel**" will return the Applicant
    back to the previous screen and allow them to correct the error.

> ![The picture is described in detail in the previous and subsequent
> paragraphs.](media/image19.png){width="6.359055118110236in"
> height="4.275196850393701in"}![The picture is described in detail in
> the previous and subsequent
> paragraphs.](media/image18.png){width="1.1074803149606298in"
> height="9.645669291338582e-2in"}

1.  []{#__RefHeading___Toc207515409 .anchor}Selecting a Secure Password

The system will not allow the Applicant to proceed in the request
process without a vaild username and a secure password.

A secure password must:

![](media/image20.png){width="3.7847222222222223in" height="1.84375in"}

1.  []{#__RefHeading___Toc207515410 .anchor}Submitting a Printed Copy of
    the Subscriber Request Form

Once the Applicant has clicked "**Submit"** on the Employee Review
screen, the Print Request Form screen will be displayed. Below is an
image of the Print Request Form screen. The Applicant should follow the
steps outlined below to print and submit the Subscriber Request Form,
which contains three pages: the instructions page, the Subscriber
Agreement, and the Certificate Request Form.

1)  Click the "**Click Here to View/Print Form**" link.

![](media/image21.png){width="6.50625in" height="4.479861111111111in"}

2)  Once the Subscriber Request Form has opened, use the menu bar at the
    top to print the Subscriber Request Form.

3)  Give the Registrar the printed copy of the Subscriber Request Form.

The instructions page is displayed below.

![](media/image22.png){width="6.50625in" height="5.013194444444444in"}

The Subscriber Agreement is displayed below.

![](media/image23.png){width="6.50625in" height="5.034027777777778in"}

The Certificate Request Form will have the applicant's information
prepopulated. The Certificate Request Form is displayed below.

![](media/image24.png){width="6.50625in" height="5.034027777777778in"}

1.  []{#__RefHeading___Toc207515412 .anchor}Collecting the HHS Digital
    Certificates

![](media/image25.png){width="5.6506944444444445in"
height="7.338888888888889in"}After the Registrar approves the
Applicant's certificate request, the Applicant will receive a HHS
Certificate Request Approved email directing them to download their
digital certificates. The Applicant should read and follow the steps
described in the HHS Certificate Request Approved email. The HHS
Certificate Request Approved email is shown in the image below.

The applicant should follow the steps oulined below to collect their
digital certificates.

1.  []{#__RefHeading___Toc207515413 .anchor}Accessing the HHS Portal

```{=html}
<!-- -->
```
1)  Click the link for the web browser given in step #2 in the email.
    ([**https://158.74.64.17/idms/portal**](https://158.74.64.17/idms/portal))

2)  A security alert is displayed, click "Yes".

![](media/image26.png){width="3.0104166666666665in" height="2.34375in"}

3)  The "Employee" tab is displayed on the navigation bar. Click "Portal
    Login" on the left side of the screen.

![](media/image27.png){width="6.497916666666667in"
height="3.3368055555555554in"}

4)  ![This picture is described in detail in the previous and subsequent
    paragraphs.](media/image28.png){width="6.080708661417323in"
    height="4.316535433070866in"}![This picture is described in detail
    in the previous and subsequent
    paragraphs.](media/image29.png){width="1.4165354330708662in"
    height="0.38543307086614176in"}The "Choose a digital certificate"
    window is displayed. Click **"Cancel".**

5)  Enter the User ID and Password created for the Subscriber Request
    Form and then click **"Login"**. The Applicant's user name is given
    in the HHS Certificate Request Approved email.

![](media/image30.png){width="6.016666666666667in"
height="2.8305555555555557in"}

6)  The Applicant is prompted to enter answers for challenge questions
    for future access to the Portal in case they forget their password.

    a.  Select two challenge questions and type in answers for each
        question.

    b.  Click "**Save**".

![](media/image31.png){width="6.497916666666667in"
height="3.0555555555555554in"}

7)  The Applicant will receive the message "Your challenge questions and
    answers are saved successfully". Click "**OK**".

![](media/image32.png){width="6.497916666666667in"
height="2.990972222222222in"}

1.  []{#__RefHeading___Toc207515414 .anchor}Downloading the Digital
    Certificates

```{=html}
<!-- -->
```
1)  The Applicant may now proceed to collect their certificates. Click
    "**PKI Certificate Collection**" on the left side of the screen.

![](media/image33.png){width="6.497916666666667in"
height="2.9993055555555554in"}

2)  Click "**Collect Certificates**" button.

![](media/image34.png){width="6.497916666666667in"
height="3.3368055555555554in"}

3)  Create and enter a passphrase to protect the Encryption Certificate
    in transit from the Certificate Authority (CA) to the Applicant. The
    Applicant will be required to enter this passphrase to retrieve
    their certificate. Click "**Submit**".

**NOTE:** *It is very important for the Applicant to remember their
passphrase. If the Applicant forgets their passphrase, they will be
required to start the process over from the beginning.*

![](media/image35.png){width="6.497916666666667in"
height="3.095833333333333in"}

4)  "Generate Private Key" screen is displayed. You are now ready to
    generate your Digital Signing Certificate Key Pairs. Click
    "**Submit**" to generate the certificate.

![](media/image36.png){width="6.497916666666667in"
height="3.152083333333333in"}

5)  A warning message is displayed to verify if the Applicant wants to
    request the certificate now. Click "**Yes**".

![](media/image37.png){width="6.493055555555555in" height="3.05in"}

6)  The following screen is displayed allowing the Applicant to select
    the security level for the Digital Signature Certificate. Click
    "**Set Security Level**".

![](media/image38.png){width="6.493055555555555in"
height="3.2847222222222223in"}

7)  Click "**High**" and then click "**Next**".

![](media/image39.png){width="4.65625in" height="3.40625in"}

8)  Create and enter a password to protect the Applicant's private key.
    Retype the password to confirm and then click "**Finish**".

**NOTE:** *It is very important for the Applicant to remember their
password. The Applicant will be required to enter this password whenever
they use the digital signing certificate in the future. The Applicant
will be unable to use the digital signing certificate if they cannot
remember this password.*

![](media/image40.png){width="4.479166666666667in"
height="3.147222222222222in"}

9)  Click "**OK**".

![](media/image41.png){width="4.03125in" height="2.8541666666666665in"}

10) The Applicant will now see a screen saying "Your Digital Signing
    Certificate is being generated. Please wait...." Wait for the
    Certificate Collection Screen to be displayed.

![](media/image42.png){width="6.493055555555555in"
height="2.847916666666667in"}

1.  []{#__RefHeading___Toc207515415 .anchor}Installing the Digital
    Certificates

```{=html}
<!-- -->
```
1)  Once the Certificate Collection screen is displayed, click "**Click
    here to install your signing Certificate**".

![](media/image43.png){width="6.497916666666667in"
height="3.665277777777778in"}

2)  ![](media/image44.png){width="6.5in" height="3.7291666666666665in"}A
    warning prompt is displayed to verify that the Applicant wants to
    add their certificate now. Click **"Yes".**

3)  ![](media/image45.png){width="6.489583333333333in"
    height="3.5833333333333335in"}The message "Your signing certificate
    has been installed successfully" is displayed. Click "**OK**".

4)  Click "**Click here to install your encryption certificate**".

![](media/image46.png){width="6.497916666666667in"
height="3.6743055555555557in"}

5)  Click "**Open**".

![](media/image47.png){width="4.208333333333333in" height="2.9375in"}

6)  The Certificate Import Wizard is opened. Click "**Next**".

![](media/image48.png){width="4.904166666666667in"
height="3.7631944444444443in"}

7)  The PKCS#12 file is already populated. Click "**Next**".

![](media/image49.png){width="4.678472222222222in"
height="3.5819444444444444in"}

8)  Type the passphrase previously created to protect the Applicant's
    private key in transit from the Certificate Authority (*see 3.5.2
    Downloading the Digital Certificates, step 3*).

![](media/image50.png){width="4.584027777777778in"
height="3.522222222222222in"}

9)  Click both check boxes shown below and then click "**Next**".

![](media/image51.png){width="4.647222222222222in"
height="3.5701388888888888in"}

10) Click "**Next**".

![](media/image52.png){width="4.552777777777778in" height="3.49375in"}

11) The Certificate Import Wizard is completed. Click "**Finish**".

![](media/image53.png){width="4.772916666666666in"
height="3.6666666666666665in"}

12) Click "**Set Security Level**" to set the security level for the
    Encryption Certificate.

![](media/image54.png){width="4.03125in" height="2.8541666666666665in"}

13) Click "**High**" and then click "**Next**".

![](media/image55.png){width="4.65625in" height="3.40625in"}

14) The Applicant should follow the steps outlined below to create a
    password that they will use every time they use their certificate.

    a.  Enter the chosen password in the "Password" field

    b.  Retype this password in the "Confirm" field.

    c.  Click "**Finish**".

***NOTE:*** *The Applicant will be unable to use the digital signing
certificates if they cannot remember this password.*

![](media/image56.png){width="4.65625in" height="3.40625in"}

15) Click "**OK**".

![](media/image57.png){width="4.03125in" height="2.8541666666666665in"}

16) Click "**OK**".

![](media/image58.png){width="2.125in" height="1.2395833333333333in"}

17) On the Certificate Collection screen, the Applicant will see two
    questions under the heading "Certificates Collection Results."

    a.  For both of these questions, click the button in front of the
        answer **"Yes".**

    b.  Click "**Submit**".

![](media/image59.png){width="6.497916666666667in"
height="3.665277777777778in"}

18) A screen will notify the Applicant that they have successfully
    collected their certificates.

![](media/image60.png){width="6.497916666666667in"
height="2.5590277777777777in"}

1.  []{#__RefHeading___Toc207515416 .anchor}Ensuring Proper Collection
    and Installation of the HHS Digital Certificates

The Applicant should follow the steps listed below to ensure that they
have properly collected and installed their certificates.

1)  Open an Internet Explorer Window.

2)  From the Internet Explorer tool bar, click **Tools**\>**Internet
    Options**.

3)  Click the "**Content"** tab and then "**Certificates"**. If the
    Applicant's certificates have been properly installed and collected,
    they should see the certificates that they have collected listed on
    the screen.

![This picture is described in detail in the previous and subsequent
paragraphs.](media/image61.png){width="4.840157480314961in"
height="0.6220472440944882in"}![This picture is described in detail in
the previous and subsequent
paragraphs.](media/image62.png){width="4.873622047244094in"
height="3.8846456692913387in"}

3.  []{#__RefHeading___Toc207515345 .anchor}Software Certificate
    Registrar Training

This guide offers step-by-step instructions on the process that a
Registrar using the Window operating system must complete in order to
approve an Applicant for Software Certificate request and collection.

3.  1.  []{#__RefHeading___Toc207515346 .anchor}Accessing the HHS Portal

There are two methods the Registrar can use to access the IDMS Portal.
The Registrar can log on to the portal 1) using a PIV Card or 2) using a
Software Certificate.

1.  []{#__RefHeading___Toc207515423 .anchor}Accessing the HHS Portal
    Using the PIV Card

If accessing the Portal using the PIV Card, follow the steps listed
below.

1)  Insert the PIV Card into the card reader.

2)  Open a browser window.

3)  Type <https://158.74.64.17/idms/portal> into the address bar.

4)  At the Portal Login screen, click "**Portal Login**" on the left
    side of the screen. The Portal Login screen is displayed below.

![](media/image63.png){width="6.488194444444445in"
height="2.9027777777777777in"}

5)  Select the digital certificate and then click "OK".

![](media/image64.png){width="6.5465277777777775in"
height="2.9916666666666667in"}

6)  Enter the PIN to access the PIV Card and click "**OK**".

![](media/image6.png){width="6.493055555555555in"
height="3.071527777777778in"}

1.  []{#__RefHeading___Toc207515424 .anchor}Accessing the HHS Portal
    Using a Soft Certificate

If using a Soft Certificate, the following window will be displayed. To
access the HHS Portal using a Soft Certificate, enter the Password for
the certificate and then click "**OK**".

![](media/image65.png){width="6.2131944444444445in"
height="3.0416666666666665in"}

1.  []{#__RefHeading___Toc207515347 .anchor}Processing a Certificate
    Request

Follow the steps outlined below to process a certificate request.

1)  The "Cert Registrar" tab will be displayed on the navigation bar of
    the HHS Portal Screen, which is displayed below. Click "Process
    Certificate Request" located on the left side of the screen.

![](media/image66.png){width="6.493055555555555in"
height="2.5597222222222222in"}

2)  The "Process Certificate Request" screen is displayed.

    a.  Enter the Barcode number. The barcode number can be found in the
        top right corner of the Certificate Request Form provided by the
        Applicant.

    b.  Click "Search".

![](media/image67.png){width="6.493055555555555in"
height="3.1145833333333335in"}

3)  The Applicant's information is displayed.

    a.  Verify the information on the Certificate Request Form and the
        identity of the requestor.

    b.  Click "Reject" or "Approve".

    c.  ![This picture is describe in detail in the previous and
        subsequent
        paragraphs.](media/image68.png){width="6.539763779527559in"
        height="1.9188976377952756in"}![This picture is describe in
        detail in the previous and subsequent
        paragraphs.](media/image69.png){width="6.539763779527559in"
        height="2.2255905511811025in"}Click "Sign".

```{=html}
<!-- -->
```
4)  The Registrar's digital signature is required. The Digital Signature
    page will indicate that the system is detecting readers, please
    wait.

![](media/image70.png){width="6.493055555555555in"
height="2.8583333333333334in"}

5)  The Registrar must now select the signing certificate location from
    the drop down menu in item number 1.

    a.  If the Registrar is using the PIV card, the PIN number must be
        entered in item number 2. Click **"Submit".**

![](media/image71.png){width="6.493055555555555in"
height="2.8159722222222223in"}

b.  If the Registrar is using the Software Certificate, select "Windows
    Container Store" from item number 1 and then click **"Submit".**

![](media/image72.png){width="6.493055555555555in"
height="2.8583333333333334in"}

6)  The Registrar will receive the message "The certificate request was
    successfully updated." Click "Logout" in the top right corner of the
    screen.

![](media/image73.png){width="6.493055555555555in"
height="3.0076388888888888in"}