Reference & AI

DAFMAN 17-1304

Air Force

Identity, Credential and Access Management (ICAM)

Reviewed by Guilherme Correia, active-duty U.S. Air Force

DAFMAN 17-1304, "Identity, Credential and Access Management (ICAM)", is a Department of the Air Force publication, dated August 18, 2021.

Published

August 18, 2021

OPR

SAF/CN

Headquarters, Department of the Air Force

Official document

Open the PDF

on static.e-publishing.af.mil

DAFMAN 17-1304 — index record

NumberDAFMAN 17-1304
TitleIdentity, Credential and Access Management (ICAM)
PublishedAugust 18, 2021
Certified currentAugust 18, 2021
Office of primary responsibilitySAF/CN
Issued byHeadquarters, Department of the Air Force
Status on the indexCurrent
Source indexAir Force e-Publishing
Index last readOctober 20, 2026

Copied from Air Force e-Publishing (index). The publication itself is the authority; this page does not summarize or interpret it. Verify the current edition on the index before acting.

From the publication itself

Text below is lifted mechanically from the official PDF (30 pages, read October 20, 2026) with no editing or interpretation. Quote the document, not this page.

Purpose, in the publication’s words

This manual applies to all civilian employees and uniformed members of the Department of the Air Force (DAF), Air Force Reserve (AFR), Air National Guard (ANG), and those with contractual obligation to comply with DAF publications, regardless of Air Force specialty code, who develop, acquire, deliver, use, operate, or manage ICAM for DAF organizations. Ensure all records generated as a result of processes prescribed in this publication adhere to AFI 33-322, Records Management and Information Governance Program, and are disposed in accordance with the Air Force records disposition schedule located in the Air Force Records Information Management System. Refer recommended changes and questions about this publication to the Office of Primary Responsibility (OPR) using the AF Form 847, Recommendation for Change of Publication; route AF Forms 847 from the field through the appropriate functional chain of command. This DAFMAN may be supplemented but all

Contents

  1. Chapter 1—INTRODUCTIONp. 5
  2. Chapter 2—ROLES AND RESPONSIBILITIESp. 8
  3. Chapter 3—IDENTITY MANAGEMENTp. 15
  4. Chapter 4—CREDENTIAL MANAGEMENTp. 17
  5. Chapter 5—ACCESS MANAGEMENTp. 24
  6. Chapter 6—CERTIFICATE MANAGEMENTp. 35
  7. Chapter 7—AIR FORCE DIRECTORY SERVICESp. 39
  8. Chapter 9—AUDIT CHECKLISTp. 46
  9. Attachment 1—GLOSSARY OF REFERENCES AND SUPPORTING INFORMATIONp. 47
All 64 contents entries
  1. Chapter 1—INTRODUCTIONp. 5
  2. 1.1. Overviewp. 5
  3. 1.2. Objectivep. 6
  4. 1.3. Applicabilityp. 6
  5. Chapter 2—ROLES AND RESPONSIBILITIESp. 8
  6. 2.1. Secretary of the Air Force, DAF Chief Information Officer (SAF/CN)p. 8
  7. 2.2. Air Force Chief Information Security Officer (SAF/CNZ CISO)p. 8
  8. 2.3. Air Force Chief Technology Officer (SAF/CN CTO)p. 8
  9. 2.4. Air Combat Command (ACC) A6p. 8
  10. 2.5. Authorizing officials (AOs)p. 9
  11. 2.8. Cyberspace Capabilities Center (CCC)p. 9
  12. 2.9. Air Force Life Cycle Management Center (AFLCMC/HNID)p. 10
  13. 2.10. Information System Owner (ISO)p. 10
  14. 2.11. Information System Security Officer (ISSO)p. 11
  15. 2.12. Information System Security Manager (ISSM)p. 11
  16. 2.13. Wing Cybersecurity Office (WCO)p. 11
  17. 2.14. Commanders Support Staff (CSS)p. 12
  18. 2.15. Communications Unitp. 12
  19. 2.16. Certification Authorities (CAs)p. 12
  20. 2.17. AF PKI Registration Authority (RA)p. 12
  21. 2.18. Local Registration Authority (LRA)p. 13
  22. 2.19. Trusted Agentp. 14
  23. Chapter 3—IDENTITY MANAGEMENTp. 15
  24. 3.1. Introductionp. 15
  25. 3.2. Identityp. 15
  26. 3.3. Identity Proofingp. 16
  27. 3.4. Attributesp. 16
  28. Chapter 4—CREDENTIAL MANAGEMENTp. 17
  29. 4.1. Introductionp. 17
  30. 4.2. Credentialingp. 17
  31. 4.3. Credential Life Cyclep. 18
  32. 4.4. Types of Tokensp. 18
  33. 4.5. CAC token managementp. 19
  34. 4.6. SIPRNET token managementp. 20
  35. 4.7. Virtual Smart Card (VSC)p. 21
  36. 4.8. NIPRNET Enterprise Alternate Token System (NEATS)p. 21
  37. 4.9. Role Based Attribute Authority (RBAAp. 22
  38. 4.10. PKI Sponsorsp. 22
  39. Chapter 5—ACCESS MANAGEMENTp. 24
  40. 5.1. Introductionp. 24
  41. 5.2. Authenticationp. 25
  42. 5.3. IS Accessp. 25
  43. 5.4. Authorizationp. 27
  44. 5.5. Account Managementp. 29
  45. 5.6. Account Life Cyclep. 32
  46. 5.7. Access Controlp. 33
  47. 5.8. Accountabilityp. 34
  48. Chapter 6—CERTIFICATE MANAGEMENTp. 35
  49. 6.1. Introductionp. 35
  50. 6.2. Identity credential strength determinationp. 35
  51. 6.3. Type of certificatesp. 35
  52. 6.4. Online certificate status protocol (OCSP)p. 36
  53. 6.5. Certificate reissuance prior to expirationp. 36
  54. 6.6. Certificate Revocationp. 36
  55. 6.7. Revocation Repositoriesp. 36
  56. 6.8. Certificate management on Mobile Technologyp. 36
  57. Chapter 7—AIR FORCE DIRECTORY SERVICESp. 39
  58. 7.1. Air Force Directory Services (AFDS)p. 39
  59. 7.2. Operational Use of Identity Attributesp. 40
  60. 8.1. PKI/PKEp. 42
  61. Chapter 9—AUDIT CHECKLISTp. 46
  62. 9.1. Auditingp. 46
  63. 9.2. Compliance Auditsp. 46
  64. Attachment 1—GLOSSARY OF REFERENCES AND SUPPORTING INFORMATIONp. 47

Other DAFMAN publications nearby in the series

204 DAFMAN records on the Air Force index. Search the full index.

Works of the United States Government are not subject to copyright (17 U.S.C. § 105). This site is not affiliated with the Department of the Air Force or any government agency.

Air Force index

REF: DAFMAN 17-1304, effective August 18, 2021

Air Force e-Publishing — DAFMAN 17-1304

This is an index record, not the publication. The official PDF is the authority; verify the current edition before acting.

Reviewed by Guilherme Correia · Military Toolkit editorial

Open the official PDF