Page | 1

RAPIDS Self Service UserGuide

Page | 1

Introduction

TheRAPIDS SelfService(RSS)application provides sponsors withthecapabilityto generate aDD Form 1172-2for dependentsinneedofanewidentification(ID)card andadddependentdata totheDefenseEnrollmentEligibilityReportingSystem (DEERS). Inaddition,thefollowingCommonAccess Card (CAC)maintenance actions, previouslyavailablethrough theUser MaintenancePortal (UMP), areavailable:

Add/Changeemailaddress toreceiveinitial or newEmailSignatureandEmail

EncryptionCertificates

AddaPersonnel CategoryCode(PCC) totheUser PrincipleName(UPN)ofthe

EmailSignature Certificate

Activate thePersonal IdentityVerification(PIV) Authenticationapplication

AddtheJointDataModel (JDM) applettotheCAC

Page | 1

Table of Contents

Log into RAPIDSSelf Service4

LogoffRAPIDSSelfService5

Updating EmailEncryptionandSigningCertificates5

ActivatingaPIVAuthentication Certificate10

Downloading Applications13

Updating Sponsor Information17

Updating Dependent Information21

Requesting FormDD 1172-224

Abbreviations,Acronyms,and Definitions29

FrequentlyAskedQuestions(FAQs)30

Support Contact Information33

System Requirements33

Page | 1

1. Log intoRAPIDS SelfService-OpenInternetExplorerand deleteyourcertificates from the browser(see FrequentlyAskedQuestionsforinstructionsonhow to delete certificates).

2. InsertyourCAC intothecardreader.

3. ClickSignOnat thetoprightcorner or inthemiddle ofthescreen.

Note: Click theFacility linksforassistancefinding yourlocal DEERS/RAPIDS ID Card facilities.

4. Read thetermsandclickOKonthe“Self-Service Consent to Monitor”page.

5. Onthe“My Access Center” page,clickLogin.

Note: You havethe options torequest andmanagea DS Logonaccount,butdonot have the option tolog in using anymethod other thanCACauthentication.

Page | 1

6. SelectyourIdentity Certificate(thiscertificate isNOTlistedas anEmail Certificate)and clickOK.

7. EnterthePINforyourCAC and clickOK.

8.SelectyourIdentity Certificate andclickOK.

LoggingOff

To logoff RSS,click LogOffinthetoprightcornerofthescreen.

UpdatingEmailEncryption andSigning Certificates

Toadd orchange youremailaddressandrequestneworupdatedEmailEncryption and

Signing Certificates:

1. Onthe“Home”page, clickUpdate Email.

Page | 1

2. Asecuritywarningwillopen.Clickthecheckboxto“Alwaystrustcontentfrom thispublisher”and

click Yestocontinue.

3. SelectyourIdentity Certificate(thiscertificate isNOTlistedas anEmail Certificate)and clickOK.

Page | 1

4. A securitywarning will open.Clickthe checkbox to “Always trust content fromthis publisher”andclickRunto continue.

The“Update Certificates” tab opensand displaysthe progressof thetask.

Page | 1

5. Enteryour newemail addressintheprovided textbox.

6. Confirm youremail address.

7. You have the optionto checkAdd PCC on UPN.Selecting thisoptionwillmodifyyour UserPrinciple Name(UPN)toadd a PersonnelCategory Code (PCC) to youremail signaturecertificate. Thisoption shouldbe usedif you have multiple CACs.

8. ClickUpdate.

9. ClickYestocontinue.

Page | 1

Theprogressofyour taskisdisplayed.

10.Once RSS hascompleted processing, thescreenwill notifyyou ofsuccessful completion. Click theHometab orBackTo Homelink toperformadditional tasksor log offtheapplication.

Page | 1

Activatinga PIVAuthenticationCertificate

ToactivateyourPersonal IdentityVerification(PIV)certificate:

1. Onthe“Home”page, clickActivatePIV.

2. SelectyourIdentity Certificate(thiscertificate isNOTlistedas anEmail Certificate)and clickOK.

Page | 1

3. A securitywarning will open.Clickthe checkbox to “Always trust content fromthis

publisher”andclickRunto continue.

4. The“PIVUpdate”screendisplays.ClickUpdateCAC.

Page | 1

5. ClickYestoconfirm that you wantto activatethePIV Authentication Certificate.

Theprogressofyour taskisdisplayed.

Page | 1

6. Once RSS hascompleted processing, thescreenwill notifyyou ofsuccessful completion. Click theHometabto perform additional tasksor log off theapplication.

DownloadingApplications

Todownload applicationsonthe CACforyourDoD membership:

1. Onthe“Home”page, clickDownloadApplets.

Page | 1

2. SelectyourIdentity Certificate(thiscertificate isNOTlistedas anEmail Certificate)and

clickOK.

Theprogressofyour taskisdisplayed.

3. The“CurrentlyInstalledApplications”section will displaythenamesand versions ofall applications currently installed on yourCAC.The“Install Applications”section will listall applications that are available fordownload to yourCAC. Click thenameofthe application that you would liketoinstall and clickMoveorclickMove allto add all available applications tothe list ofselectedapplications.

Note: Clickan application nameandthenRemoveto remove it from the listof applications that you would liketo install orclick Remove all toclear the list.

Page | 1

4. ClickUpdateCAC.

5. ClickYestoconfirm that you wantto install theselectedapplication(s).

Page | 1

Theprogressofyour taskisdisplayed.

6. Once RSS hascompleted processing, thescreenwill notifyyou ofsuccessful completion. Click theHometabto perform additional tasksor log off theapplication.

Page | 1

UpdatingSponsor Information

Toupdatethesponsor residence, mailing, orworkaddresses;telephonenumber;oremail address:

1. Onthe“Home”page, click the Contact Informationtab.

Note: You alsohave theoptiontoclick the ContactInfolink in the“Actions”column of the SponsorCurrentIDCardstable or click theView/ Update Contactlinkbelowthe “MailingAddress”box.

The“Contact Information”pageisdisplayed.

2. Toupdate yourresidence address, clickEditinthe “Residence Address” box.You have

the option tochangethefollowing fields:

Page | 1

a. Country–Use the drop-down menu toselectthecountryofyour residence. b. Address 1–Enter thefirstline ofyour residenceaddress.

c. Address 2–Enter the second line ofyourresidence address. d. City–Enter thecityofyour residence.

e. State– Usethedrop-down menu toselectthestateofyour residence. f.ZipCode–Enter the zip code ofyour residence.

g. ClickSavetosave your changesor Cancel toreturntothe“Contact Information”

pagewithoutsavingyour changes.

Page | 1

3. Toupdate your mailingaddress,clickEdit in the “MailingAddress”box.You have the

option tochangethefollowing fields:

a. Country–Use the drop-down menu toselectthecountryofyour mailing address.

b. Address 1–Enter thefirstline ofyour mailingaddress.

c. Address 2–Enter the second line ofyourmailing address. d. City–Enter thecityofyour mailingaddress.

e. State– Usethedrop-down menu toselectthestateofyour mailingaddress. f.ZipCode–Enter the zip code ofyour mailing address.

g. Ifyourmailing andresidence addresses are thesame, click theSameas

ResidenceAddresscheckbox.

h. ClickSavetosave your changesor Cancel toreturntothe“Contact Information”

pagewithoutsavingyour changes.

4. Toupdate yourworkaddress,clickEdit in the“WorkAddress”box.Youhave the option to changethefollowing fields:

Page | 1

a. Country–Use the drop-down menu toselectthecountryofyourworkaddress. b. Address 1–Enter thefirstline ofyourworkaddress.

c. Address 2–Enter the second line ofyourworkaddress. d. City–Enter thecityofyourworkaddress.

e. State– Usethedrop-down menu toselectthestateofyourworkaddress. f.ZipCode–Enter the zip code ofyour workaddress.

g. ClickSavetosave your changesor Cancel toreturntothe“Contact Information”

pagewithoutsavingyour changes.

5. Toupdate yourphonenumbers, clickEditinthe“Telephone”box.Youhave the option

to changethefollowing fields:

a. Home–Enteryourhome telephone number.

b. Mobile–Enteryour mobile telephone number. c. Work– Enteryour worktelephone number.

d. Fax–Enteryour faxnumber.

e. ClickSavetosave your changesor Cancel toreturntothe“Contact Information”

pagewithoutsavingyour changes.

6. Toupdate yourpersonalemail address, clickEdit in the“Email Address”box.You have the option tochangethefollowing field:

a. Personal–Enteryourpersonal email address.

b. ClickSavetosave your changesor Cancel toreturntothe“Contact Information”

pagewithoutsavingyour changes.

Note:To update yourworkemail address,follow theinstructionsin UpdatingEmail

Encryption and SigningCertificates.

Page | 1

UpdatingDependentInformation

Toupdatedependent residence, mailing, or workaddresses; telephone number;oremail address:

1. Onthe“Home”page, click the FamilyMembers tab.

2. Inthe“FamilyMember(s)Details” box,click the nameof the dependent whose

information you wanttoupdate.

Note:

Clicking the sponsor’s namewill displaythe sponsor’s residence andmailing addresses.

Toupdatethis information, followthe instructions in Updating SponsorInformation.

Page | 1

Theselectedfamilymember’scarddetails; residence andmailingaddresses; telephone

numbers;

3.Toupdatethedependent residence address,clickEditinthe“ResidenceAddress”box.

You have the optionto changethefollowing fields:

a. Country–Use the drop-down menu toselectthecountryof the dependent residence.

b. Address 1–Enter thefirstline of the dependent address.

c. Address 2–Enter the second line ofthedependentaddress. d. City–Enter thecityofthe dependent residence.

e. State– Enter thestate of the dependent residence.

f.PostalCode –Enterthe zip code ofthedependent residence.

Page | 1

4. ClickSavetosave your changesor Cancel toreturntothe“FamilyMemberScreen” withoutsaving yourchanges.Toupdatethedependent mailingaddress,clickEditinthe “MailingAddress”box. You have the optionto changethefollowing fields:

a. Country–Use the drop-down menu toselectthecountryof the dependent mailingaddress.

b. Address 1–Enter thefirstline of the dependent mailingaddress.

c. Address 2–Enter the second line ofthedependent mailingaddress. d. City–Enter thecityofthe dependent mailing address.

e. State– Enter thestate of the dependent mailing address.

f.PostalCode –Enterthe zip code ofthedependent mailingaddress.

g. ClickSavetosave your changesor Cancel toreturntothe“FamilyMember

Screen”withoutsavingyourchanges.

5. Toupdatethedependentphonenumbers,clickEdit in the “Telephone” box.You have

the option tochangethefollowing fields:

a. Home–Enterthedependenthometelephone number.

Page | 1

b. Mobile–Enter the dependent mobile telephonenumber. c. Work– Enter the dependentwork telephone number.

d. Fax–Enter thedependent faxnumber.

e. ClickSavetosave your changesor Cancel toreturntothe“FamilyMember

Screen”withoutsavingyourchanges.

6. Toupdatethedependentpersonal email address,clickEdit in the“EmailAddress”box.

You have the optionto changethefollowing field:

a. Personal–Enter the dependentpersonal email address.

b. ClickSavetosave your changesor Cancel toreturntothe“FamilyMember

Screen”withoutsavingyourchanges.

RequestingForm DD-1172-2

TorequestFormDD-1172-2foradependent:

1. Onthe“Home”page,clicktheFamilyMemberstab.

Page | 1

2. Inthe“FamilyMember(s)Details” box,click the nameof the dependentforwhomyou

wantto request a FormDD-1172-2.

Theselectedfamilymember’scarddetails;residence andmailingaddresses; telephone numbers;andemail address information will display.

3. Inthe Card Detailstable,clickRequest1172-2. The “Request ID CardIssuance”page

isdisplayed.

4. Read and verifytheeligibilityrequirements. Ifyou agree,select the Iagree and confirm the above iscorrect.option and clickI Certify.Continue to step 5.

Page | 1

a. Ifyou do not agreeor the informationisincorrect,select theIdon’t agree.Some

informationisincorrect.option andclickIdon’t agree.

b. You will be advised that you mustgoto a RAPIDS ID Card issuing facility with the appropriatedocumentationforrecordchanges.ClicktheHometabto return tothe homescreen.

Note: ClickingCancel will return youtothe“FamilyMemberScreen”.

5. The“PrivacyActStatement” page will display.Selectyour Identity Certificate(this

certificate isNOT listed asan Email Certificate)and clickOK.

6. Enter thePersonalIdentification Number (PIN) foryourCAC and clickOK.

Page | 1

7. Read the PrivacyActstatementandclickIAgree.Your CAC will be used to signthe Form DD-1172-2andthen besavedtothe databaseforusewhen thefamilymemberID cardiscreated.

8. Enter thePINforyourCAC and clickOK.

9. ClickthePrint icon()toprint thesignedFormDD-1172-2.Thissignedform must be presented ataRAPIDS ID cardfacilitybeforea dependent IDcardcanbe issued.

Page | 1

Note: Click theBack To Homelink toreturntothe “Home”page.

Page | 1

Abbreviations,Acronyms, andDefinitions

Thefollowingabbreviations,acronyms,anddefinitionsaidintheunderstandingof thisdocument.

Abbreviationsand
Acronyms / Description
CAC / CommonAccessCard–Identificationandsometimesbenefitsandprivilegecard producedbytheDoD,whichcontainsanIntegratedCircuitChip(ICC)holding demographicdataanddigitalcertificates
DMDC / DefenseManpowerDataCenter
DNS / DomainNameSystem
DoD / Departmentof Defense
DSC / DMDCSupportCenter
DSLogon / UniqueLogonID andPasswordgiventoDoDBeneficiariestoaccessDoD web applicationsin lieuofaCAC
JDM / JointDataModel
JRE / JavaRuntimeEnvironment
PCC / PersonnelCategoryCode
PIN / PersonalIdentificationNumber
PIV / PersonalIdentityVerification
RAPIDS / Real-timeAutomatedPersonnelIdentificationSystem–Applicationusedto updatedataontheDEERSPersonDataRepository(PDR)andcreateDoD Identificationcards
RSS / RAPIDSSelf Service
UMP / UserMaintenancePortal
UPN / UserPrincipleName

Page | 1

FrequentlyAskedQuestions(FAQs)

HowdoIdeletecertificates?

WhatdoIdoif Icannotconnecttothehostortheconnectionisbroken?

IfmyCAChasonlytheIDcertificate,canI gettheSignatureandEncryptioncertificates?

IfmyCAChasonlytheIDandSignaturecertificates,canIgetonlytheEncryptioncertificate?IfmyCAChasonlyIDandEncryptioncertificates,canI getonlytheSignaturecertificate?

IsemailencryptedwithyouroriginalCACPKIcertificatesaccessibleafteryouhavechangedtheemailaddressonyourCAC?

HowcanIfindoutwhatcertificatesareonmyCAC?HowcanIfindoutwhatapplicationsareonmyCAC?

WhoshouldaddPersonnelCategoryCode(PCC)toUserPrincipalName(UPN)?

WhyamIreceivinganerrormessagethatmycardplatformdoesnotsupportcertificateissuanceupdate?WhyamIreceivinganRSSerrormessageregardingacompatibilityconflictthatexistsbetweenmy32-bit

and64-bitdesktopinstallations?

HowdoI delete certificates?

Todeletecertificates:

1. ClickToolsthenInternetOptionsfrom thebrowsermenu.

2. ClicktheContenttab.

3. ClickCertificates.

4. Selectthecertificatesfor yourCAC(pressandholdCtrlonyourkeyboardtoselectmultiple certificates),leavingonlytheIdentityCertificate(circledin redbelow).

Page | 1

5. ClickRemove.

6. ClickClose.

7. ClickOK.

WhatdoIdoif Icannot connect tothehostorthe connectionisbroken?

Iftheserverconnectionfailsduringtheupdatingofemailaddressandcertificatesorduringtheaddingof certificatesorapplications,theDNSofthesitemaybeunabletoresolvethefollowingnames,inwhich case, youshouldtakethefollowingsteps:

1. ClickStartthenRun.

2. TypecmdandclickOK.Aconsolewindowwithacommandpromptopens.Itmaylook somethinglikethis:

C:\>_

3. Atthecommandprompt,typepingucups-ss.dmdc.osd.milandpressEnter.

4. Ifitreturnsthefollowingmessage:“PingrequestcouldnotfindhostUCUPS.dmdc.osd.mil.

Pleasecheckthenameandtryagain,”theDNSis unabletoresolvetothecorrectaddress.You willneedtocontactDMDCtogettheIPaddress.

5. Once youhavetheIPaddress,openthefile:C:\WINNT\system32\drivers\etc\Hosts.Enter

xx.xx.xx.xxucups-ss.dmdc.osd.milintheDNSaddressfields.

Note:“xx.xx.xx.xx”willbereplacedwiththeactualIPaddressthatwasprovidedbyDMDC.

6. Repeatsteps1-3.IftheDNSis stillunabletoresolvetheDNSaddress,youwillneedtocontact theDMDCtogettheIPaddressandsubmitarequesttohavethem addthesiteaddress.Youwill alsoneedtoverifythatport443is openinthefirewall.

IfyouareaccessingRSSfrom behinda proxyserver,thesynchronizationstepwillfail.Arulemustbe addedto theproxyserversothatworkstationsusingRSSareallowedtoconnectdirectlytotheURL:

If my CAC has onlytheID certificate,canI get theSignatureandEncryptioncertificates?

Yes.

If my CAC has onlytheID andSignaturecertificates,canIget onlythe Encryption certificate?

Ifthenewemailaddressisthesameastheoldone,theuser willbepresentedwithanoptiontochange onlytheencryptioncertificate.However,iftheemailaddressis changing,boththeencryptionandthe signaturecertificatesarereplacedwithnewones.

If my CAC has onlyIDand Encryption certificates, canIgetonlytheSignature certificate?

Ifthenewemailaddressisthesameastheoldone,theuser willbepresentedwithanoptiontochange onlytheSignaturecertificate.However,iftheemailaddressis changing,boththeEncryptionandthe Signaturecertificatesarereplacedwithnewones.

Is emailencryptedwithyouroriginal CAC PKI certificates accessibleafteryou have changed theemail address on yourCAC?

No,ifyouhaveencryptedemail,you willneedtogainaccesstothekeysthatyouusedtoencryptthe email.See yourfacilityEmailAdministratorfordirection.

Page | 1

HowcanI find out whatcertificatesareonmy CAC?

Followsteps1-4inthesectionentitledUpdatingEmailEncryptionandSigningCertificates,toupdate youremailencryptionandsigningcertificates.The CertificateInformationsectionof the“Update Certificates”pagelistsallcertificatesinstalledonyourCAC.

HowcanI find out whatapplicationsareon my CAC?

Followsteps1-2inthesectionentitled DownloadingApplications,todownloadapplications.The CurrentlyInstalledApplicationssectionof the“DownloadApplications”pagelistsalloftheinstalled applications.

Who should addPersonnelCategoryCode(PCC) to UserPrincipal Name(UPN)?

UserswithmultipleCACs(Civilian/ReservistorContractor/Reservist)andmultipleaccountsinthesame ActiveDirectoryshouldaddaPCCtotheirUPN.APCCallowsuserstocontinueSmartCardLogontoa separatenetworkaccount.

Why amIreceiving anerrormessagethat mycardplatform does not supportcertificate issuance update?

Effective2/12/11,DoDimplementednewrequirementswithintheFederalPKIpolicyandareunable toissue1024PKICertificates.Theimpactis thatweareunableto updatethePKIcertificatesonolder versionsofCommonAccessCards(CAC)platforms.

To verifyifyourCACisoneoftheimpactedcardplatforms,lookonthebackofyourCACandreviewthe cardproductnamethat is laserengravedabovethemagneticstripe.

Ifyourcardproductis listedbelow,RSSis unabletoaddthePCCor updatethePKIcertificatesonyour CAC.YoumustfirstreturntoaRAPIDSlocation,obtainanewCAC,andthen youcanuseRSSto updateyourPKICertificatesoraddaPCC.

OberthurID Onev5.2aDual

GemaltoGCX472k DI

OberthurID Onev5.2a

OberthurID Onev5.2

GemaltoAccess64KV2

GemplusGXP364V2N

AxaltoAccess64k

Gemplus64kV2

Schlumberger64k

Note:IfyoudonotrequirenewPKIcertificatesortheadditionofthePCConyourCAC,pleasecontinue touseyourcarduntilitsexpirationdate.

Why amIreceiving anRSS errormessageregarding acompatibilityconflictthatexists betweenmy32-bit and64-bitdesktopinstallations?

AsmoreusersupgradetheirOperatingSystem(OS)to64-bitcompatibility,issuesmayariseifusing ActivClient,InternetExplorer(orotherbrowsers),andJREversionsthatarenotthesame.Pleaseconfirm thatyourActivClientMiddleware,JRE,andbrowser(InternetExploreroranalternative)areallsettothe samebit:

ActivClient(32-bit),JRE(32-bit),andInternetExplorer(32-bit)orActivClient(64-bit),JRE(64-bit),and

InternetExplorer(64-bit)

Anyinconsistencyamongthosethreecomponentsmeansthatyouwillnotbeableto useRSSand/or othersmartcard-enabledapplications.

Page | 1

Support ContactInformation

IfyouneedhelpwiththeRSSapplication,contacttheDMDCSupportCenter(DSC)helpdesk.Customer

ServiceRepresentativesareavailable24x7at:

Worldwide:1-800-477-8227

CONUS–DSN:698-5000

OCONUS–DSN:312-698-5000

IfyourequireDoDBeneficiaryinformationorassistancewith yourpersonnelrecord,contactthe DMDC/DEERSSupportOffice.CustomerServiceRepresentativesareavailableMonday-Friday (excludingU. S.federalholidays) 0600to1530Pacific Timeat:

Worldwide:1-800-538-9552orTTY/TDD:1-866-363-2883

Germany:(0800)101-3161

Italy:(800)783-784

UnitedKingdom:(0800)587-1594

Korea:(00798)1-4800-5570

Philippines:(1800)1-114-1235

Japan:(0053)112-0731

System Requirements

Thefollowingcomponentsarerequiredonyour workstationinorderto useRSS:

MiddlewareconformingtoNISTInterAgencyReporting(NISTR)6887

SunJavaRuntimeEnvironment(JRE)withthefollowingJREversions:

oIfusingJRE1.5x,thenJRE1.5.0_22orhigher

oandJRE1.6orhigher

UpdatedDomainNameSystem(DNS)information(seeAppendixB:FrequentlyAskedQuestions forinstructionsonwhattodo ifyoucannotconnecttothehostor yourconnectionis broken)

Internetbrowser(MicrosoftInternetExplorer6.0orhigher/Netscape6.2orhigher)

WindowsXP/Vista/Windows7

Ifanyofthesecomponentsarenotinstalled,or ifyouareunsure,contact yourSystemAdministratorfor assistance.