Credentialing Units and Activation Kits

The following equipment is available as part of the USAccess service:

  • Fixed Credentialing Units (FCUs)
  • Mobile Credentialing Units (MCUs)
  • Light Activation Kits (LA Kits)

Both the Mobile and Fixed Credentialing Units provide the capability to complete both activations and enrollments; while the Light Activation Kit provides the capability of activation completion and other card actions, but not enrollments. Descriptions of the equipment are below.

Fixed Credentialing Units

Fixed Credentialing Units (FCUs) are pre-configured, combined enrollment and activation, workstations that contain all software and hardware peripherals needed to enroll applicants and activate credentials. FCUs, including VPN hardware, are managed by the MSO Core Services Contractor and connect to the USAccess system through a VPN router. The MSO Core Services Contractor manages the operating system, antivirus, drivers, system and application updates on these workstations.FCU & VPN stations cannot be relocated by customer agencies without prior notification and approval from USAccess MSO team.

FCU Contents

FCUs provide agencies with all the hardware and software required to conduct enrollments and activations. Once the equipment is set up properly and a certification call is completed with the MSO Core Services contractor, a role holder who holds both the registrar and activator role can enroll applicants and activate USAccess PIV credentials using this single workstation.

Sites will receive the following equipment as part of the FCUs:

  • One laptop
  • One Suprema fingerprint reader
  • One document scanner
  • One camera
  • One camera adapter
  • One camera mini tripod
  • Two external smart card readers
  • USB hub
  • Light blue backdrop (no stand included)
  • Surge protector
  • USB extension cable for the camera
  • Ethernet cable
  • USB number key pad
  • One VPN router

Mobile Credentialing Units

Mobile Credentialing Units (MCUs) are mobile combined enrollment and activation workstations that contain all software and hardware peripherals needed to enroll applications and activate credentials within a portable Pelican travel case. Unlike FCUs, MCUs are managed by the Agency. MCUs ship with the USAccess image which the agency can reconfigure as needed to include enabling PIV log-in on the device. The agency is responsible for pushing all software updates including operating system patches, drivers, anti-virus and applicable software updates. MCUs are shipped within a Pelican travel case. 

MCUs address the challenge many agencies face today with credentialing a diverse workforce that is located across the country, often in remote locations that are not located near existing “fixed” USAccess Credentialing Centers. Since MCUs can be moved and shipped easily between locations using the included Pelican travel case, agencies can ship and set up MCUs that are located closer to their applicants. The included Pelican travel case will allow applicants to spend less time traveling to enrollment and activation appointments, and as a result, agencies will see reduced travel expenses. MCUs empower agencies to put full credentialing capability where they need it, when they need it.

MCU Contents

MCUs provide agencies with all the hardware and software required to conduct enrollments and activations. After receiving the MCU equipment, agencies must install their own anti-virus software and connect the device to their network. Once the equipment is set up properly a role holder who holds both the registrar and activator role can enroll applicants and activate USAccess PIV credentials using this single workstation.

Sites will receive the following equipment as part of the MCUs:

  • One laptop
  • One Suprema fingerprint reader
  • One document scanner
  • One camera
  • One camera adapter
  • One camera mini tripod
  • Two external smart card readers
  • USB hub
  • Light blue backdrop (no stand included)
  • Surge protector
  • USB extension cable for the camera
  • Ethernet cable
  • USB number key pad
  • Pelican travel case with padlock

Differences Between Mobile and Fixed CUs

The differences between the Fixed and Mobile credentialing units are listed in the table below.

 

Fixed CU

Mobile CU

Connection

Hardware VPN

Internet. No hardware or software VPN required.

Managed By

MSO Core Services Contractor

Agency

Updates

Updates pushed automatically

CU installer file and instructions provided on the SFTP site. Agency responsible for updating machine when required to support USAccess applications on Mobile CUs.

Security Scans

Fixed CUs will be included in the security scans performed by the MSO Core Services Contractor

Mobile CUs will NOT be included in security scans

Virus Software

Fixed CUs include virus protection

MCUs do not include anti-virus software. Agency will need to install as the unit will connect via their network

Encryption

Full Disk Encryption (FDE) enabled

Full Disk Encryption (FDE) enabled

Support

Fixed CUs include full Help Desk support and troubleshooting, and will require a certification call with the USAccess deployment team to bring the units online.

The MSO Core Services Contractor provides Help Desk support for USAccess related issues including hardware and software support but will not troubleshoot connection, proxy, or agency configuration issues with Mobile CUs.

Light Activation Kits (LAK)

GSA developed Light Activation Kits (LAK) for USAccess customers to achieve a higher rate of active credentials with minimal equipment requirements. The Light Activation capability enables USAccess credentials to be activated, and post issuance activities to be performed from an Internet Web portal. The proper installation of the Light Activation Kit is critical to delivering this capability.

LA Kit Contents

LA Kit contents are designed to work with an agency-provided workstations or laptops. Sites will receive the following equipment as part of the LA Kits:

  • Two Omnikey Cardman 3x21 card readers
  • One Suprema fingerprint reader

LA software is available for download from a secure server once the equipment has been delivered. Contact the MSO (hspd12@gsa.gov) for access to the server.

Email This Link