RSS-IDCO Help

 Introduction
 What tasks can I perform using RSS-IDCO?
 What are the benefits of using RSS-IDCO?
 System Requirements
 Performing CAC Functions
 Performing Sponsor/Dependent Functions
 Reference        

Introduction

The RAPIDS Self-Service (RSS)-ID Card Office Online (IDCO) application allows Sponsors to perform several actions relating to themselves and their dependents. These capabilities include:

  • Updating contact information for themselves and their dependents
  • Nominating dependents for addition to the Defense Enrollment Eligibility Reporting System (DEERS). Sponsors may also update and remove existing nominations.
  • Generating a DD Form 1172-2 for those dependents in need of a new identification (ID) card
  • Generating and printing a family list (i.e., a copy of the DD Form 1172-2 not usable for ID card purposes) to be used for housing requests or other personnel actions

In addition, the following Common Access Card (CAC) maintenance actions, previously available through the User Maintenance Portal (UMP), are available:

  • Add/Change email address to receive initial or new Email Signature and Email Encryption Certificates
  • Add a Personnel Category Code (PCC) to the User Principal Name (UPN) of the Email Signature Certificate
  • Activate the Personal Identity Verification (PIV) Authentication application
  • Add the Joint Data Model (JDM) applet to the CAC

What tasks can I perform using RSS-IDCO?

Using her/his CAC, a Sponsor can complete the following tasks using RSS-IDCO:

  • Generate and sign a DD Form 1172-2, Application for Identification Card/DEERS Enrollment, which reduces the need to accompany the family member to receive his or her replacement ID card
  • Update Sponsor and/or Sponsor family members’ contact information (e.g., address, email, phone number)
  • Request that a family member be added to her/his DEERS record (e.g., child, spouse, parent/parent-in-law)
  • Activate CAC certificates
  • Add a Personnel Category Code (PCC) to her/his CAC
  • Download applets to her/his CAC

Using a DS LOGON (userid and password), a Sponsor can complete the following tasks using RSS-IDCO:

  • Generate and sign a DD Form 1172-2, Application for Identification Card/DEERS Enrollment, which reduces the need to accompany the family member to receive his or her replacement ID card
  • Update Sponsor and/or Sponsor family members’ contact information (e.g., address, email, phone number)
  • Request that a family member be added to their DEERS record (e.g., child, spouse, parent/parent-in-law)

What are the benefits of using RSS-IDCO?

RAPIDS Self Service – ID Card Office Online (RSS-IDCO) is designed to save time for Sponsors and family members by allowing the Sponsor to complete tasks online using her/his CAC or DS LOGON instead of in-person at an ID card office.

For example, Sponsors can make simple updates to their CACs from any CAC-enabled computer. In addition, they can sign the DD Form 1172-2 online, reducing the need to accompany family members when they need to obtain a replacement ID card.

System Requirements

The System Requirements section includes the following topics:

Minimum System Requirements - a description of the required software / configuration for your computer to run RSS-IDCO.

Adding RSS-IDCO as a Trusted Site - how to add RSS-IDCO as a trusted site via the Java Runtime Environment (JRE) or Internet Explorer (IE).

Verifying Versions of IE, JRE, and ActivClient - how to confirm that your computer is running the appropriate release versions of IE, JRE, and ActivClient for RSS-IDCO.

Verifying Bit Versions of IE, JRE, and ActivClient - how to confirm that your computer is using the correct bit versions of IE, the JRE, and ActivClient.

Minimum System Requirements

To take advantage of the time-saving benefits that RSS-IDCO provides to Sponsors and family members, your computer must meet the following minimum system requirements:

  • Installed Browser and Programs: Your computer must have Internet Explorer (IE) 7 or higher, Java Runtime Environment (JRE) 1.7.151- b33, or JRE 1.8.144 or higher, and ActivClient installed to run RSS-IDCO. See Verifying Versions of IE, JRE, and ActivClient to determine which versions are installed on your computer.  
  • Bit Versions: IE, JRE, and ActivClient must be the same bit version (all 32-bit or all 64-bit) so that you can perform CAC updates successfully on your computer. See Verifying Bit Versions of IE, JRE, and ActivClient to determine the bit version.
  • Trusted Site: RSS-IDCO must be listed as a Trusted Site so that you can perform CAC transactions online. See Adding RSS-IDCO as a Trusted Site for instructions.

STOP: If you do not have sufficient permissions to verify or make configuration changes on your computer, please contact your organization’s System Administrator for assistance.  

Adding RSS-IDCO as a Trusted Site

RSS-IDCO can be added as a Trusted Site via Java Runtime Environment (JRE) or Internet Explorer (IE). After adding RSS-IDCO as a Trusted Site, you will need to add the DoD certificate to IE’s Certificate Trust Store.

Adding RSS-IDCO as a Trusted Site

Option 1: Adding RSS-IDCO as a Trusted Site via JRE

Note: You will not need to do this step if you are using JRE versions prior to Version 7 Update 51. See Verifying Versions of IE, JRE, and ActivClient to determine which JRE version is installed on your computer.

To add RSS-IDCO as a Trusted Site via JRE:

  1. Click Start Windows Start button and select Control Panel.

  2. In the upper-right corner, select Small icons in the View by: drop-down menu.

  3. Click Java.

  4. In the "Java Control Panel" dialog box, select the Security tab and click Edit Site List…

  5. In the "Exception Site List" dialog box, add the following websites and click OK.

https://www.dmdc.osd.mil/

https://pki.dmdc.osd.mil/

Exception Site List dialog box

 

Option 2: Adding RSS-IDCO as a Trusted Site via IE

Note: You will not need to do this step if you are using IE 7. See Verifying Versions of IE, JRE, and ActivClient to determine which version is installed on your computer.

To add RSS-IDCO as a Trusted Site via IE:

  1. Open IE.

  2. Press Alt+T on your keyboard and select Internet Options.

  3. In the "Internet Options" dialog box, select the Security tab.

  4. Select the Trusted Sites icon as a zone, then click Sites.

Internet Options Trusted Sites

  1. In the "Trusted Sites" dialog box, enter “*dmdc.osd.mil” in the field.

Trusted Sites dialog

  1. Click Add.

  2. Click Close.

 

Adding DoD Certificates to the Certificate Trust Store

To add the DoD certificates used by DMDC to IE’s Certificate Trust Store:

Verifying Versions of IE, JRE, and ActivClient

Internet Explorer (IE)

To verify the IE version:

  • Press Alt+H on your keyboard and click About Internet Explorer. The version number appears beside “Internet Explorer.”

About Internet Explorer dialog box

 

Java Runtime Environment (JRE)

To verify the JRE version:

  1. Click Start Windows Start button and select Control Panel.

  2. In the upper-right corner, select Small icons in the View by: drop-down menu.

  3. Click Java.

  4. Under the General tab, click About. The version number displays in the “About Java” window.

About Java dialog box

 

ActivClient

To verify the ActivClient version:

  1. Click Start Windows Start button and select All Programs.

  2. Navigate to the ActivIdentity>ActivClient and select User Console.

  3. In the "ActivClient" window, click Help and select About ActivClient. The version number displays in the "Major Version" section.

About ActivClient dialog box

 

 

Verifying Bit Versions of IE, JRE, and ActivClient

Internet Explorer (IE)

To verify the bit version of IE:

  1. Press Ctrl+Alt+Delete on your keyboard.

  2. Click Start Task Manager.

  3. In the "Task Manager" window, click the Processes tab.

  4. Locate “iexplore.exe” in the Image Name column. The 64-bit version of IE will appear as iexplore.exe; the 32-bit version of IE will appear as iexplore.exe *32.

Windows Task Manager dialog box

 

Java Runtime Environment (JRE)

To verify the bit version of JRE:

  1. Click Start Windows Start button and select Control Panel.

  2. In the upper-right corner, select Small icons in the View by: drop-down menu.

  3. Locate "Java". The number that appears indicates the bit version.

Windows Control Panel dialog box

 

ActivClient

To verify the bit version of ActivClient:

  1. Click Start Windows Start button and select All Programs.

  2. Navigate to the ActivIdentity>ActivClient and select User Console.

  3. In the "ActivClient" window, click Help and select About ActivClient. The 64-bit version of ActivClient will appear as x64; the 32-bit version of ActivClient will appear as ().

Performing CAC Functions

The Performing CAC Functions section includes the following topics:

Updating Email Encryption and Signing Certificates - how to add or change your email address and request new or updated Email Encryption and Signing Certificates.

Activating a PIV Authentication Certificate - how to activate your Personal Identity Verification (PIV) certificate.

Downloading Applications - how to download applications on the CAC for your DoD membership.

Add PCC on UPN - how to modify your User Principal Name (UPN) to add a Personnel Category Code (PCC) to your CAC email signature certificate.

Updating Email Encryption and Signing Certificates

To add or change your email address and request new or updated Email Encryption and Signing Certificates:

  1. On the “Home” page, click Change CAC Email.

Note: If you have more than one CAC (i.e., Civil Service and Reserve), multiple CAC information boxes will display. Click the action in the box associated with the CAC that you want to update.

  1. Click Proceed to continue updating the email address associated with your CAC.

  2. Enter your new email address in the provided text box.

  3. Confirm your email address.

  4. You have the option to check Add PCC on UPN. Selecting this option will modify your User Principal Name (UPN) to add a Personnel Category Code (PCC) to your email signature certificate. This option should be used if you have multiple CACs.

  5. Click Next.

  6. Click Yes to continue. The progress of your task is displayed.

  7. Once IDCO has completed processing, the screen will notify you of successful completion. Click Home to perform additional tasks or log off the application.

Activating a PIV Authentication Certificate

To activate your Personal Identity Verification (PIV) certificate:

  1. On the “Home” page, click Activate PIV Certificate.

Note: If you have more than one CAC (i.e., Civil Service and Reserve), multiple CAC information boxes will display. Click the action in the box associated with the CAC that you want to update.

  1. Click Proceed to continue activating the PIV Authentication certificate associated with your CAC.

  2. Click Update CAC. The progress of your task is displayed.

  3. Once IDCO has completed processing, the screen will notify you of successful completion. Click Home to perform additional tasks or log off the application.

Downloading Applications

To download applications on the CAC for your DoD membership:

  1. On the “Home” page, click Download Applications.

Note: If you have more than one CAC (i.e., Civil Service and Reserve), multiple CAC information boxes will display. Click the action in the box associated with the CAC that you want to update.

  1. Click Proceed to continue downloading applications to your CAC. The progress of your task is displayed.

  2. In the “Install Applications” section, click the check box to select the applications that you want to install on your CAC. A list of applications currently installed on your CAC is displayed in the “Currently Installed” section.

  3. Click Update CAC.

  1. Click Yes to confirm that you want to install the selected application(s). The progress of your task is displayed.

  2. Once RSS has completed processing, the screen will notify you of successful completion. Click Home to perform additional tasks or log off the application.

Add PCC on UPN

To modify your User Principal Name (UPN) to add a Personnel Category Code (PCC) to your CAC email signature certificate:

  1. On the “Home” page, click Add PCC on UPN.

Note: If you have more than one CAC (i.e., Civil Service and Reserve), multiple CAC information boxes will display. Click the action in the box associated with the CAC that you want to update.

  1. Click Proceed to continue adding your PCC to your CAC. The progress of your task is displayed.

  2. Click Yes to confirm that you want to complete the certificate replacements and add your PCC. The progress of your task is displayed.

  3. Once IDCO has completed processing, the screen will notify you of successful completion. Click Home to perform additional tasks or log off the application.

Performing Sponsor/Dependent Functions

The Performing Sponsor/Dependent Functions section includes the following topics:

Updating Sponsor Information - how to update the Sponsor residence or mailing addresses, telephone numbers, or email address.

Updating Dependent Information - how to update dependent residence or mailing addresses, telephone numbers, or email address.

Print Family List - how to print a DD Form 1172-2 containing information for one or more dependents.

Adding a Family Member - how to request that a new family member be added to DEERS.

Updating Sponsor Information

To update the Sponsor residence or mailing addresses, telephone numbers, or email address:

  1. On the “Home” page, click Edit Contact Information. The “Contact Information” page is displayed.   

  1. You have the option to change the following fields in the “Residential Address” section:

    1. Country – Use the drop-down menu to select the country of your residence.

    2. Address 1 – Enter the first line of your residence address.

    3. Address 2 – Enter the second line of your residence address.

    4. City – Enter the city of your residence.

    5. State – Use the drop-down menu to select the state of your residence.

    6. Zip Code – Enter the zip code of your residence.

    7. Effective Date - Enter a date that the change became effective in a YYYYMMMDD format (1999Jan01), or use the calendar to select a date.

  2. You have the option to change the following fields in the “Mailing Address” section:

    1. If your mailing and residence addresses are the same, click the Same as Residential Address check box and continue to step 4.

    2. Country – Use the drop-down menu to select the country of your mailing address.

    3. Address 1 – Enter the first line of your mailing address.

    4. Address 2 – Enter the second line of your mailing address.

    5. City – Enter the city of your mailing address.

    6. State – Use the drop-down menu to select the state of your mailing address.

    7. Zip Code – Enter the zip code of your mailing address.

    8. Effective Date - Enter a date that the change became effective in a YYYYMMMDD format (1999Jan01), or use the calendar to select a date.

  3. You have the option to change the following fields in the “Telephone” section:

    1. Home – Enter your home telephone number.

    2. Mobile – Enter your mobile telephone number.

    3. Fax – Enter your fax number.

  4. You have the option to change the following fields in the “Personal Email” section:

    1. Personal – Enter your personal email address.

    2. Click the associated check box if you would like the DoD or VA to send email notifications to your personal email.

Note:  To update your work email address, follow the instructions in Updating Email Encryption and Signing Certificates.

  1. Click Save to save your changes or Cancel to return to the “Home” page without saving your changes.

  2. After saving your changes, click the Home Page link at the top of the page.

Updating Dependent Information

To update dependent residence or mailing addresses, telephone numbers, or email address:

  1. On the “Home” page, click the Edit Contact Information button in the box associated with the dependent whose information you want to update. The “Contact Information” page is displayed.  

  2. You have the option to change the following fields in the “Residential Address” section:

    1. Click the check box if the dependent’s residential address is the same as the Sponsor’s residential address and continue to step 3.

    2. Country – Use the drop-down menu to select the country of the dependent residence.

    3. Address 1 – Enter the first line of the dependent address.

    4. Address 2 – Enter the second line of the dependent address.

    5. City – Enter the city of the dependent residence.

    6. State – Enter the state of the dependent residence.

    7. Postal Code – Enter the zip code of the dependent residence.

    8. Effective Date - Enter a date that the change became effective in a YYYYMMMDD format (1999Jan01), or use the calendar to select a date.

  3. You have the option to change the following fields in the “Mailing Address” section:

    1. Click the check box if the dependent’s mailing address is the same as the dependent’s residential address and continue to step 4.

    2. Click the check box if the dependent’s mailing address is the same as the Sponsor’s mailing address and continue to step 4.

    3. Country – Use the drop-down menu to select the country of the dependent mailing address.

    4. Address 1 – Enter the first line of the dependent mailing address.

    5. Address 2 – Enter the second line of the dependent mailing address.

    6. City – Enter the city of the dependent mailing address.

    7. State – Enter the state of the dependent mailing address.

    8. Postal Code – Enter the zip code of the dependent mailing address.

    9. Effective Date - Enter a date that the change became effective in a YYYYMMMDD format (1999Jan01), or use the calendar to select a date.

  4. You have the option to change the following fields in the “Telephone” section:

    1. Home – Enter the dependent home telephone number.

    2. Mobile – Enter the dependent mobile telephone number.

    3. Fax – Enter the dependent fax number.

  5. To update the dependent personal email address, click Edit in the “Email Address” box. You have the option to change the following field in the “Personal Email” section:

    1. Personal – Enter the dependent personal email address.

  6. Click Save to save your changes or Cancel to return to the “Home” page without saving your changes.

  7. After saving your changes, click the Home Page link at the top of the page.

Print Family List

To print a DD Form 1172-2 containing information for one or more dependents:

  1. On the “Home” page, click Print Family List.  

  2. Verify the configuration of your system and click Proceed.

  3. Click check box next to the name of the dependent(s) for whom you want to request a DD Form 1172-2 and click Proceed.

  4. The “Privacy Act Statement” page will display. Read the Privacy Act statement and click I Agree.

  1. Review the information that you have entered. If the information is correct, click Proceed. Your CAC will be used to sign the DD Form 1172-2 and then be saved to the database for use when the family member ID card is created.

  2. Enter the Personal Identification Number (PIN) for your CAC and click OK.

Click Home to return to the “Home” page.

Note:   The printed copy of this DD Form 1172-2 is for informational purposes only and may not be used for ID card issuance.

Adding a Family Member

To request that a new family member be added to DEERS:

  1. On the “Home” page, click Add a Family Member.

  2. On the “Add a Family Member” page, click the type of relationship that you have with the family member that you would like to add to DEERS.

  3. Click Proceed to verify that your system is configured correctly to perform the Add a Family Member function.

Note:  Clicking skip check will allow you to continue to the “Identity Information” page without checking your system configuration. This option should only be used if you know that your system is configured with the specified components.

  1. On the “Identity Information” page, enter the following information and click Proceed.

    1. Last Name – Required field – Enter the family member’s last name.  

    2. First Name – Enter the family member’s first name.

    3. Middle Name – Enter the family member’s middle name.

    4. Suffix – Enter a suffix for family member, if necessary (i.e., Jr. or III)

    5. Personal Identifier Type – Required field – Select the type of identifier being provided for the family member. If you select None available, continue to step 3h.

    6. Personal Identifier Number – Required field – Enter the personal identifier for the type selected in step 3e.

    7. Confirm Personal Identifier Number – Required field – Re-enter the personal identifier for the type selected in step 3e.

    8. Date of Birth – Required field – Enter the family member’s date of birth using a MM/DD/YYYY or YYYYMMMDD format (i.e., 1999Jan01), or use the calendar to select a date.

    9. Gender – Required field – Select the family member’s gender.

  2. The following screens will vary, depending on the relationship type selected in step 2. Carefully answer the questions to correctly identify the relationship type. Click Proceed.

  3. Enter the association start date and the relationship document details. If the relationship type requires verification of multiple documents, you will be presented with additional screens for each required document. Click Proceed.

Note:  The family member must bring the documentation that you entered with them to a RAPIDS site for verification.

  1. Enter the family member’s contact information.

    1. Enter the Residential Address.

      1. If the family member resides with you, click the Same as Sponsor Residential Address check box and continue to step 7b.

      2. Country – Use the drop-down menu to select the country of the dependent residence.

      3. Address 1 – Enter the first line of the family member’s residence address.

      4. Address 2 – Enter the second line of the family member’s residence address.

      5. City – Enter the city of the family member’s residence address.

      6. State – Enter the state of the family member’s residence address.

      7. Postal Code – Enter the zip code of the family member’s residence address.

    2. Enter the Mailing Address.

      1. If you and the family member have the same mailing address but it is not their residence address, click the Same as Sponsor’s Mailing Address check box and continue to step 7c.

      2. If the family member’s mailing address and residence address are the same, click the Same as Residential Address check box and continue to step 7c.

      3. Country – Use the drop-down menu to select the country of the family member’s mailing address.

      4. Address 1 – Enter the first line of the family member’s mailing address.

      5. Address 2 – Enter the second line of the family member’s mailing address.

      6. City – Enter the city of the family member’s mailing address.

      7. State – Enter the state of the family member’s mailing address.

      8. Postal Code – Enter the zip code of the family member’s mailing address.

    3. Enter the Telephone information.

      1. Home – Enter the family member’s home telephone number.

      2. Mobile – Enter the family member’s mobile telephone number.

      3. Fax – Enter the family member’s fax number.

    4. Enter the Email Address.

      1. Personal – Enter the family member’s personal email address.

    5. Click Proceed.

  2. The “Privacy Act Statement” page will display. Read the Privacy Act statement and click I Agree. Your CAC will be used to sign the DD Form 1172-2 and then be saved to the database for use when the family member ID card is created.

  3. Read and verify the provided summary of entered information. Click Proceed if all of the information is correct, or click Back to change any information.

  4. Enter the PIN for your CAC and click OK.

  5. The “Confirmation – Add a Family Member” page lists the types of verification documents that you need to bring to a RAPIDS ID Card Office. Click ID Card Office to find a local RAPIDS ID card office. Click Display Form to view DD Form 1172-2 and digitally sign the form. Click Home to return to the home page.

  6. Click the Print icon to print the signed DD Form 1172-2. This signed form must be presented at a RAPIDS ID card facility before a dependent ID card can be issued.

Note:  The signature block may have a yellow question mark indicating that your computer does not have the root public key infrastructure (PKI) certificate to validate the signing certificate. This does not make the form invalid.

Reference

The Reference section includes the following topics:

Abbreviations, Acronyms, and Definitions - a description of the abbreviations, acronyms, and definitions used in RSS-IDCO.

Frequently Asked Questions (FAQ) - questions users frequently ask about RSS-IDCO.

Support Contact Information - who to contact if you need assistance using RSS-IDCO.

Abbreviations, Acronyms, and Definitions

The following abbreviations, acronyms, and definitions aid in the understanding of this document.

Abbreviations and Acronyms  

Description

CAC

Common Access Card – Identification and sometimes benefits and privilege card produced by the DoD, which contains an Integrated Circuit Chip (ICC) holding demographic data and digital certificates

DEERS

Defense Enrollment Eligibility Reporting System

DMDC

Defense Manpower Data Center

DNS

Domain Name System

DoD

Department of Defense

DSC

DMDC Support Center

DS LOGON

Unique Logon ID and Password given to DoD Beneficiaries to access DoD web applications in lieu of a CAC

IDCO

ID Card Office Online

JDM

Joint Data Model

JRE

Java Runtime Environment

PCC

Personnel Category Code

PIN

Personal Identification Number

PIV

Personal Identity Verification

RAPIDS

Real-time Automated Personnel Identification System – Application used to update data on the DEERS Person Data Repository (PDR) and create DoD Identification cards

UMP

User Maintenance Portal

UPN

User Principal Name

 

Frequently Asked Questions (FAQs)

Using RAPIDS Self Service - ID Card Office Online (RSS-IDCO)

What are the benefits of using RSS-IDCO?

What tasks can I perform using RSS-IDCO?

What are the minimum system requirements for using RSS-IDCO?

Performing CAC Functions

Handling Certificates

How can I find out what certificates are on my CAC?

How do I delete certificates?

What do I do if I cannot connect to the host or the connection is broken?

If my CAC has only the ID certificate, can I get the Signature and Encryption certificates?

If my CAC has only the ID and Signature certificates, can I get only the Encryption certificate?

If my CAC has only ID and Encryption certificates, can I get only the Signature certificate?

Is email encrypted with your original CAC PKI certificates accessible after you have changed the email address on your CAC?

Downloading Applications

How can I find out what applications are on my CAC?

Adding PCC to UPN

Who should add Personnel Category Code (PCC) to User Principal Name (UPN)?

Troubleshooting Error Messages

Why am I receiving an error message that my card platform does not support certificate issuance update?

Why am I receiving an IDCO error message regarding a compatibility conflict that exists between my 32-bit and 64-bit desktop installations?

Policy and Procedures

Why Can't I Remove my Family Member?

 

How do I delete certificates?

To delete certificates:

  1. Click Tools then Internet Options from the browser menu.

  2. Click the Content tab.

  3. Click Certificates.

  4. Select the certificates for your CAC (press and hold Ctrl on your keyboard to select multiple certificates), leaving only the Identity Certificate (circled in red below).

Internet Explorer Certificates dialog box

  1. Click Remove.

  2. Click Close.

  3. Click OK.

Return to Top

What do I do if I cannot connect to the host or the connection is broken?

If the server connection fails during the updating of email address and certificates or during the adding of certificates or applications, the DNS of the site may be unable to resolve the following names, in which case, you should take the following steps:

  1. Click Start then Run.

  2. Type cmd and click OK. A console window with a command prompt opens. It may look something like this:
    C:\>_

  3. At the command prompt, type ping ucups-ss.dmdc.osd.mil and press Enter.  

  4. If it returns the following message: “Ping request could not find host UCUPS.dmdc.osd.mil. Please check the name and try again,” the DNS is unable to resolve to the correct address. You will need to contact DMDC to get the IP address.

  5. Once you have the IP address, open the file: C:\WINNT\system32\drivers\etc\Hosts. Enter xx.xx.xx.xx ucups-ss.dmdc.osd.mil in the DNS address fields.

Note:  “xx.xx.xx.xx” will be replaced with the actual IP address that was provided by DMDC.   

  1. Repeat steps 1-3. If the DNS is still unable to resolve the DNS address, you will need to contact the DMDC to get the IP address and submit a request to have them add the site address. You will also need to verify that port 443 is open in the firewall.

If you are accessing IDCO from behind a proxy server, the synchronization step will fail. A rule must be added to the proxy server so that workstations using IDCO are allowed to connect directly to the URL:  https://ucups-ss.dmdc.osd.mil/services/tcd.

Return to Top

If my CAC has only the ID certificate, can I get the Signature and Encryption certificates?

Yes.

Return to Top

If my CAC has only the ID and Signature certificates, can I get only the Encryption certificate?

If the new email address is the same as the old one, the user will be presented with an option to change only the encryption certificate. However, if the email address is changing, both the encryption and the signature certificates are replaced with new ones.

Return to Top

If my CAC has only ID and Encryption certificates, can I get only the Signature certificate?

If the new email address is the same as the old one, the user will be presented with an option to change only the Signature certificate. However, if the email address is changing, both the Encryption and the Signature certificates are replaced with new ones.

Return to Top

Is email encrypted with your original CAC PKI certificates accessible after you have changed the email address on your CAC?

No, if you have encrypted email, you will need to gain access to the keys that you used to encrypt the email. See your facility Email Administrator for direction.

Return to Top

How can I find out what certificates are on my CAC?

Follow steps 1-4 in the section entitled Updating Email Encryption and Signing Certificates, to update your email encryption and signing certificates. The Certificate Information section of the “Update Certificates” page lists all certificates installed on your CAC.

Return to Top

How can I find out what applications are on my CAC?

Follow steps 1-2 in the section entitled Downloading Applications, to download applications. The Currently Installed Applications section of the “Download Applications” page lists all of the installed applications.

Return to Top

Who should add Personnel Category Code (PCC) to User Principal Name (UPN)?

Users with multiple CACs (Civilian/Reservist or Contractor/Reservist) and multiple accounts in the same Active Directory should add a PCC to their UPN. A PCC allows users to continue Smart Card Logon to a separate network account.

Return to Top

Why am I receiving an error message that my card platform does not support certificate issuance update?

Effective 2/12/11, DoD has implemented new requirements within the Federal PKI policy and are unable to issue 1024 PKI Certificates. The impact is that we are unable to update the PKI certificates on older versions of Common Access Cards (CAC) platforms.

To verify if your CAC is one of the impacted card platforms, look on the back of your CAC and review the card product name that is laser engraved above the magnetic stripe.

If your card product is listed below, IDCO is unable to add the PCC or update the PKI certificates on your CAC. You must first return to a RAPIDS location, obtain a new CAC, and then you can use IDCO to update your PKI Certificates or add a PCC.

  • Oberthur ID One v5.2a Dual

  • Gemalto GCX4 72k DI

  • Oberthur ID One v5.2a

  • Oberthur ID One v5.2

  • Gemalto Access 64KV2

  • Gemplus GXP3 64V2N

  • Axalto Access 64k

  • Gemplus 64kV2

  • Schlumberger 64k

Note: If you do not require new PKI certificates or the addition of the PCC on your CAC, please continue to use your card until its expiration date.

Return to Top

Why am I receiving an IDCO error message regarding a compatibility conflict that exists between my 32-bit and 64-bit desktop installations?

As more users upgrade their Operating System (OS) to 64-bit compatibility, issues may arise if you use bit versions of ActivClient, Internet Explorer (IE), and Java Runtime Environment (JRE) that are not the same. See Verifying Bit Versions of IE, JRE, and ActivClient to ensure that all are set to the same bit (i.e., ActivClient [32-bit], JRE [32-bit], and IE [32-bit]; OR ActivClient [64-bit], JRE [64-bit], and IE [64-bit]).

Any inconsistency among those three components means that you will not be able to access all RSS CAC enabled functions.

Return to Top

Why Can't I Remove my Family Member?

Some life events require a visit to a RAPIDS office to verify documentation. The action to terminate benefits for a family member is one example. A RAPIDS Verifying Official reviews and verifies eligibility documentation such as birth and death certificates, marriage and divorce decrees, or other documents that may affect the eligibility of your family members. Find a RAPIDS site here.

Support Contact Information

If you need help with the IDCO application, contact the DMDC Support Center (DSC) help desk. Customer Service Representatives are available 24x7 at:

  • Worldwide: 1-800-3RAPIDS (372-7437)

  • DSN: 312-435-9000 (CONUS/OCONUS)

If you require DoD Beneficiary information or assistance with your personnel record, contact the DMDC/DEERS Support Office. Customer Service Representatives are available Monday-Friday (excluding U. S. federal holidays) 6:00A.M. to 3:30 P.M. (PST) at:

  • Worldwide: 1-800-538-9552 or TTY/TDD: 1-866-363-2883

  • Germany: (0800) 101-3161

  • Italy: (800) 783-784

  • United Kingdom: (0800) 587-1594

  • Korea: (00798) 1-4800-5570

  • Philippines: (1800) 1-114-1235

  • Japan: (0053) 112-0731