Four agencies achieve interoperable PKI

Four agencies achieve interoperable PKI

After five years of work, the General Services Administration’s Federal Bridge Certification Authority has made the public-key infrastructures of four agencies interoperable. For the first time in history, federal agencies will accept each other’s digital certificates through the bridge.

“That is where the rubber meets the road,” said Judith Spencer, chairwoman of the Federal PKI Steering Committee. “They can communicate in a trusted fashion, verify each other’s credentials in different trusted domains.”

The bridge, part of the PKI Steering Committee and the Federal PKI Policy Authority, is a collection of hardware, software, policies and procedures that help make federal PKIs interoperable.

The Defense and Treasury departments, NASA and the Agriculture Department’s National Finance Center are the first four agencies to cross-certify and accept one another’s digital certificates.

“In a way, we’ve only just begun,” Sandra Bates, commissioner of GSA’s Federal Technology Service, said at the FBCA Cross Certification Ceremony today at the White House Conference Center.

It has been difficult getting consensus within DOD to do this, said R. Michael Green, director of DOD’s Public-Key Infrastructure Program Management Office.

“We are honored to be amongst the four members in the bridge,” he said.

“It’s the end of the beginning,” Spencer said. “We will cross-certify with other entities.”

So far, the GSA’s Access Certificates for Electronic Services is set to become part of the bridge. “That will automatically bring in the Social Security Administration, the Environmental Protection Agency and the Federal Emergency Management Agency” because those agencies use ACES certificates, Spencer said.

The state of Illinois is finalizing its policy to become part of the bridge.

“We are excited about Illinois,” said Mayi Canales, Treasury’s acting CIO and assistant deputy secretary for information systems. “Treasury touches every citizen, business and government around.”

There are other agencies that would like to be part of the bridge but don’t yet qualify, Spencer said. The Health and Human Services, Labor and Veterans Affairs departments, Patent and Trademark Office and National Institute of Standards and Technology are among them.

About the Author

Connect with the GCN staff on Twitter @GCNtech.

Featured

  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.