NASA Procedural Requirements

NPR 1600.4B Effective Date: August 03, 2025 Expiration Date: August 03, 2030

Subject: Identity and Credential Management

Responsible Office: Office of Protective Services

Table of Contents

Preface

P.1 Purpose
P.2 Applicability
P.3 Authority
P.4 Applicable Documents and Forms
P.5 Measurement/Verification
P.6 Cancellation

Chapter 1. Introduction

1.1 Overview
1.2 Scope
1.3 Waivers and Exceptions

Chapter 2. Roles and Responsibilities

2.1 Overview
2.2 Agency Roles and Responsibilities
2.3 Credential Issuance Roles and Responsibilities
2.4 Separation of Duties
2.5 Training
2.6 Privacy
2.7 Events and Tours

Chapter 3. Enrollment and Credential Issuance

3.1 Overview
3.2 Applicant Categories
3.3 Enrollment and Issuance Procedures
3.4 Visitor Enrollment and Issuance Procedures
3.5 Remote Enrollment Procedures
3.6 Remote Issuance Procedures
3.7 Identity Proofing and Vetting Requirem
ents
3.8 Trusted Partnerships and Federation

Chapter 4. Foreign Nationals

4.1 Overview
4.2 NASA Foreign National Access Policy and Related Requirements
4.3 Enrollment and Issuance Procedures for Foreign Nationals
4.4 Enrollment and Issuance Procedures for Foreign National Visitors
4.5 Remote Enrollment and Issuance Procedures for Foreign Nationals
4.6 Implementation
4.7 Identity Proofing and Vetting Requirements for Foreign Nationals
4.8 Foreign National Escort Requirements
4.9 Requirements for Visas
4.10 Requirements Based on Affiliation
4.11 Requirements Based on Visitor Attributes
4.12 Requirements Based on Credential Type
4.13 Access Control Plans, Technology Transfer Control Plans, and Access Provisioning
4.14 Onsite, Offsite, and Virtual Meetings
4.15 Visiting Center Request
4.16 Annual Review
4.17 Requirements for Logical Access

Chapter 5. NASA Credentials

5.1 Types of NASA Credentials
5.2 NASA PIV Smartcard
5.3 Agency Smart Badge
5.4 Center-Specific Badges
5.5 Visitor Passes
5.6 Derived PIV Credentials
5.7 Additional Characteristics
5.8 Digital Characteristics
5.9 The Uniform Universal Personal Identification Code (UUPIC)

Chapter 6. Credential Lifecycle Management

6.1 General Credential Management
6.2 Credential Inventory, Storage and Handling
6.3 Credentialing Determinations
6.4 Credential Usage: Display, Protection, and Proper Usage
6.5 Credential Renewal
6.6 Credential Re-issuance
6.7 Credential PIN Reset
6.8 Credential Revocation
6.9 Lost and Stolen Credentials
6.10 Forgotten Credentials
6.11 Credential Suspension
6.12 Credential Return
6.13 Credential Termination
6.14 Credential Destruction

Appendix A: Definitions
Appendix B: Acronyms
Appendix C: References

DISTRIBUTION:
NODIS

This document does not bind the public, except as authorized by law or as incorporated into a contract. This document is uncontrolled when printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: https://nodis3.gsfc.nasa.gov.