Contractor CAC 101: Getting Your First DoD Smart Card

Your First DoD Smart Card: A Contractor’s CAC Guide

You’ve been awarded a contract requiring DoD system access, and now you need a CAC. Unlike military personnel who receive CACs as part of in-processing, contractors navigate a more complex path involving sponsorship, background investigations, and multiple offices. This guide maps out what to expect.

Understanding Contractor CAC Eligibility

Not every contractor automatically qualifies for a CAC. Eligibility typically requires:

• Active contract with a DoD organization
• Need for physical access to DoD installations for more than 6 months
• Need for logical access to DoD networks or systems
• Favorable background investigation (or investigation in progress)

Short-term contractors, infrequent visitors, or those without system access needs may receive visitor badges or alternative credentials instead of a CAC.

The Sponsorship Requirement

Contractors cannot request their own CAC. A government sponsor—typically your Contracting Officer Representative (COR) or government point of contact—must initiate the process.

Your sponsor will:

• Verify your contract authorizes CAC issuance
• Enter your information into the Trusted Associate Sponsorship System (TASS) or similar system
• Specify your required access levels
• Approve your CAC enrollment

The sponsor must have an active CAC themselves and appropriate authorization to sponsor contractors. If your point of contact can’t sponsor you, they’ll identify someone who can.

Background Investigation Requirements

CAC issuance requires at minimum a National Agency Check with Inquiries (NACI) or equivalent investigation. Higher-access CACs require Secret or Top Secret clearances.

If you’ve held a clearance previously, it may still be active or easily reactivated. The Defense Counterintelligence and Security Agency (DCSA) maintains clearance records—your sponsor can verify your status.

For new investigations:

• You’ll complete an SF-86 or SF-85P questionnaire (extensive personal history)
• Investigation timeline varies: weeks to months depending on complexity
• Interim access may be granted while investigation proceeds, depending on your contract requirements

DEERS Enrollment

After sponsorship, your information enters DEERS (Defense Enrollment Eligibility Reporting System). This database validates CAC eligibility across all DoD systems.

DEERS enrollment may take 24-48 hours after sponsor submission. Don’t visit the ID card office until your sponsor confirms your enrollment is complete—you’ll just be turned away.

Visiting the ID Card Office (RAPIDS)

Once enrolled in DEERS, visit a RAPIDS (Real-Time Automated Personnel Identification System) ID card office. These offices exist on most military installations and some government buildings.

You’ll need to bring:

• Two forms of ID from the acceptable list (typically driver’s license plus passport, birth certificate, or social security card)
• I-9 employment eligibility documentation requirements apply
• Your sponsor’s contact information (in case verification is needed)

Many RAPIDS offices require appointments. Search for your nearest office and check their scheduling requirements. Walk-in availability varies by location.

At the RAPIDS Office

The RAPIDS technician will:

• Verify your identity against DEERS
• Capture biometric data (photo, fingerprints)
• Have you set your initial PIN
• Print and issue your CAC

The entire process takes 15-30 minutes if your paperwork is in order. Common delays include:

• DEERS enrollment not yet complete
• Sponsor information missing or incorrect
• ID documents not acceptable
• Name mismatches between documents

Contractor CAC Differences

Contractor CACs look similar to military and civilian employee CACs but have distinguishing features:

• Color coding on the card edge indicates contractor status
• Expiration dates aligned with contract period of performance
• Access affiliations listed on the card

Contractor CACs may have different access permissions than employee CACs. Your sponsor defines what systems and facilities your CAC can access.

Initial Setup After Receiving Your CAC

With your new CAC in hand:

1. Obtain a CAC reader – Your organization may provide one, or you may need to purchase your own. SCR3310 and ACR39U models are reliable choices.

2. Install DoD certificates – Download and run InstallRoot from cyber.mil. This enables your computer to trust DoD certificate authorities.

3. Test basic access – Try accessing a DoD CAC-enabled site to verify your card works. MilConnect is a common test.

4. Configure email access – If your contract includes DoD email, work with your government IT support to configure Outlook.

Expiration and Renewal

Contractor CACs expire based on your contract period, typically not exceeding 3 years. Before expiration:

• Your sponsor must re-verify your continued eligibility
• Contract documentation must show active performance period
• Visit RAPIDS to receive a new card

Don’t let your CAC expire—renewal after expiration is more complicated than renewing beforehand.

When Contracts End

Your CAC access terminates when your contract ends. Return your CAC to your sponsor or shred it according to your organization’s procedures. Your DEERS enrollment will be terminated, deactivating the card.

If you move to a new contract with the same or different agency, the CAC process starts over with new sponsorship.

Getting your first contractor CAC takes coordination with your sponsor and patience with the bureaucratic process. Once issued, it provides the same technical capabilities as any other CAC—your challenge shifts to keeping it properly maintained and renewed throughout your contract.