
We are incredibly excited to announce CAC/PIV Smart Card Signer Authentication in Box Sign, available for customers on Enterprise Plus and Enterprise Advanced plans! This new authentication feature enables U.S. Federal Government customers to authenticate their signers by requiring them to use their common access cards (CAC) or personal identity verification cards (PIV).
U.S. Government agencies and contractors require additional security measures to safeguard critical information and data. Common Access Cards, or CAC cards, are identification cards that are issued to U.S. Department of Defense personnel. They enable physical access to buildings and provide access to DoD computer networks and systems. While CAC cards are the primary identification cards for DoD personnel, Personal Identification Verification cards, or PIV cards, are smart cards used by other branches of the U.S. Federal Government that contain a certificate and a private key to gain access to computers, networks, and online resources.

With Box Sign, U.S. Federal Government agencies and contractors can leverage the following capabilities:
- Enable and require recipients to authenticate themselves using their CAC or PIV smart cards before gaining access to sign the Box Sign signature request.
- Admins can configure their enablement settings to toggle CAC/PIV signer authentication on or off for specific users or groups.
- Senders can configure the the CAC/PIV signer authentication setting when initiating and sending a signature request.
Signers are prompted to insert their CAC or PIV smart card into their smart card readers, enter their pin number successfully, and apply their signature to complete the request. Signers and senders do not need to configure additional settings and preferences to leverage this authentication capability.

Signers can authenticate themselves via their CAC/PIV smart cards on Windows devices only. Additionally, Box Tools must be installed on the Windows device for each user receiving signature requests requiring CAC/PIV authentication. CAC/PIV smart card authentication is only available for single signers within a signature request.
You can learn more about CAC/PIV Smart Card Signer Authentication in Box Sign by checking out our Box brings Intelligent Content Management to Federal markets with major Box Sign enhancements blog or by leveraging the resources below: