GSA safe requirements come from 32 CFR 2001.43 and a set of federal specifications that govern the container’s construction, its lock, how it’s bought, how it’s inspected, and how it’s eventually retired. Since October 1, 2012, all classified national security information must be stored in a GSA-approved security container, a Federal Standard 832 vault, or an approved open storage area.1General Services Administration. Security Containers Meeting the standard is not just about buying the right cabinet. It’s about matching the container to the classification level, verifying the label and lock, sourcing it through the correct channel, and maintaining it under federal rules for the rest of its service life.
Which Classification Levels Require a GSA Container
The federal rule at 32 CFR 2001.43 sets storage requirements by classification level. Top Secret, Secret, and Confidential material all must be stored in a GSA-approved security container, a Federal Standard 832 vault, or an approved open storage area. Since October 2012, non-GSA containers are no longer permitted for Secret storage.
Top Secret and Secret material stored in a GSA container also require supplemental controls. Confidential does not. For Top Secret specifically, the supplemental controls give you three options: a Secret-cleared employee physically checking the container every two hours, an intrusion detection system with a 15-minute response time, or placement in a Security-In-Depth area with a lock meeting Federal Specification FF-L-2740.2eCFR. 32 CFR 2001.43 – Storage Smaller facilities without an alarm budget often default to the two-hour check, which is labor-intensive but valid.
Security Classes and Resistance Ratings
Two container classes are still manufactured: Class 5 and Class 6. The Department of Defense Lock Program publishes their resistance ratings.
A Class 5 filing cabinet, map and plan, or IPS container must resist forced entry for 10 minutes, covert entry for 30 minutes, and surreptitious entry for 20 hours. Class 5 weapons storage containers carry the 10-minute forced-entry requirement only. Class 6 containers have no forced-entry requirement but must resist covert entry for 30 minutes and surreptitious entry for 20 hours.3Department of Defense Lock Program. GSA Approved Security Containers
The construction difference is substantial. A four-drawer Class 5 cabinet weighs around 800 pounds; a comparable Class 6 unit weighs closer to 450. That matters for floor loading and delivery logistics, so confirm your classification requirement before ordering. If the material is not subject to a forced-entry threat model, Class 6 saves weight and cost. If it is, Class 5 is the only correct choice.
How to Read the GSA Label
Every approved container carries a label on the front of the door, the top drawer, or the control drawer. The color of the lettering identifies both the class and the era.
- Red lettering on silver: Class 5 and Class 6 containers manufactured after October 1990. This is the current standard.
- Black lettering on silver: containers manufactured before October 1990. Black label containers cannot be recertified or relabeled, and GSA has rescinded approval for all of them under a phaseout plan.
- Green lettering: Class 7 containers, no longer manufactured.
- Blue lettering: Information Processing System containers designed to protect computers.3Department of Defense Lock Program. GSA Approved Security Containers
A container with no GSA label is not approved for classified storage, even if it looks identical to an approved model.1General Services Administration. Security Containers Facilities that inherit older equipment sometimes discover unlabeled or black label units in service. Pull them from classified use immediately and contact a GSA-authorized inspector about recertification or replacement.
Lock Requirement
Locks on GSA containers must meet Federal Specification FF-L-2740B, “Locks, Combination, Electromechanical.” Purely mechanical locks cannot satisfy this specification, which is why every currently qualified lock is electromechanical.4Department of Defense (DoD) Lock Program. Security Facts – Issue 27 These locks resist manipulation better than older designs and can record access attempts electronically.
FF-L-2740B locks are sold only to the federal government, authorized government contractors, or organizations specifically required by the government to use them.5Naval Facilities Engineering Systems Command. FF-L-2740B – Locks, Combination, Electromechanical Two lock styles are qualified, and agencies choose between them based on the operating environment, since battery-operated systems can carry restrictions in some settings.6U.S. General Services Administration. Frequently Asked Questions for Security Containers
Where to Buy a GSA Container
GSA-approved containers cannot be purchased from third-party vendors, refurbishers, or resale platforms. All purchases must go through GSA Global Supply.7National Archives. GSA Containers and Security ISOO Notice 2014-02 made GSA Global Supply the mandatory procurement channel for all GSA-approved containers and vault doors.8Department of Defense Lock Program. GSA Approved Container Order Info The single exception is a special-size IPS configuration that GSA Global Supply does not stock, which may be ordered directly from the manufacturer.
Before ordering, confirm the classification level of the material (which drives the Class 5 versus Class 6 decision), the drawer configuration (filing, map and plan, or weapons storage), and the physical dimensions of the space. Government employees follow GSA’s ordering guidelines. Contractors follow a separate procurement process document available through the DoD Lock Program site.
Combination Management
Every GSA container in service must have an SF-700 (Security Container Information) form. Part 1 attaches inside the container. Part 2A holds the actual combination and is sealed in an envelope marked with the highest classification level stored in that container. The form records who changed the combination and when, along with the full turn sequence.
Change the combination when someone with access leaves the organization, when someone who knows it loses their clearance, or when compromise is suspected. Once filled in, the SF-700 itself is classified at the level of the material inside. That detail gets missed often. Handle sealed SF-700 envelopes with the same protections as the contents of the safe.
Inspection and Recertification
GSA containers must be periodically inspected for tampering, forced entry, and covert entry on every surface, inside and out. Only a GSA-authorized inspector can perform these evaluations and recertify a container. Authorized inspectors include GSA Certified Safe and Vault Technicians, manufacturer-certified technicians, and government-trained personnel.9General Services Administration. FED-STD-809E – Inspection, Maintenance, Neutralization and Repair of GSA Approved Containers, Lock Extensions and Vault Doors All inspection personnel must be U.S. citizens overseas, or U.S. persons subject to U.S. law.
The inspection checks for broken or cracked welds, loose or misaligned panels, camouflaged repairs, proper boltwork linkage, and correct function of the detent mechanism. External markings that indicate the classification level of the contents must be removed, because those markings tell an adversary exactly how valuable the contents are. A container that passes gets a GSA recertification label.10Department of Defense Lock Program. GSA-Approved Security Equipment Inspection Training
A container that fails cannot store classified material until the deficiency is corrected and a new inspection is completed. Label removal on a failed inspection is not automatic; the inspector removes it only if authorized to do so by the facility security officer.10Department of Defense Lock Program. GSA-Approved Security Equipment Inspection Training Containers must also be painted in one of the original manufacturer colors (black, grey, or parchment), and the exterior must be a single color.
Disposal and Neutralization
A GSA container at end of life cannot simply be surplused or sold. The GSA label must be removed before disposal.11Department of Defense Lock Program. Security – Volume 8-1 Disposal decisions are made by the command or organization security officer.
Neutralization means permanently voiding the container’s security integrity. Any hole drilled in the body, or any welding to any part of the body, permanently compromises the container. The only exceptions are authorized repairs that meet Federal Standard 809.11Department of Defense Lock Program. Security – Volume 8-1 Agencies and commands may impose disposal rules stricter than the DoD Lock Program baseline, so check local policy first.6U.S. General Services Administration. Frequently Asked Questions for Security Containers Before scrapping old locks, ask your local agency; some retain decommissioned locks for authorized parts use.
Consequences of Noncompliance
Storing classified material in a non-approved container violates 32 CFR 2001.43 and triggers a security incident at most agencies.2eCFR. 32 CFR 2001.43 – Storage Administrative consequences include loss of security clearance, termination, and facility-wide reviews. Federal law separately makes it a crime to knowingly remove classified documents and retain them at an unauthorized location, punishable by up to five years in prison, a fine, or both.12Office of the Law Revision Counsel. 18 USC 1924 – Unauthorized Removal and Retention of Classified Documents or Material That statute targets removal and retention rather than container choice, but the two questions tend to arrive together. Classified material found outside an approved container prompts questions about how it got there in the first place.