NASA IdMAX Registration, Login, and PIV Card Requirements

NASA’s Identity Management and Account Exchange, known as IDMAX, is the single system NASA uses to verify who you are and control what NASA networks, applications, and buildings you can reach. If you are a civil servant, contractor, grantee, or partner who will use NASA resources for 30 or more days in a calendar year, you need an IDMAX identity record. Foreign nationals need one regardless of the length of their assignment.¹

IDMAX is not one screen. It bundles several tools: the NASA Access Management System (NAMS) for requesting access to specific applications, a PIV credential module, and a self-service portal for updating your profile.² Together they tie your verified identity to the specific permissions your role requires.

How to Get an IDMAX Account

You cannot register yourself. The process starts with a NASA sponsor, usually your government supervisor, technical representative, or a designated organizational point of contact. Your sponsor initiates the identity request in IDMAX and remains accountable for your access throughout your affiliation with NASA.

Once the request is open, you will provide personal information (name, contact details, citizenship, and your employment or contract information) and present two identity source documents. At least one must be a government-issued photo ID.³

The Background Investigation

Before NASA will issue your PIV credential, you have to clear a background investigation. The minimum is a Tier 1 investigation, which includes an FBI fingerprint-based National Criminal History Check. A favorable result is required before your PIV card can be issued.³ Higher-risk or national security roles carry more extensive investigations, with position risk levels running from Low-Risk through High-Risk and sensitivity levels reaching Special-Sensitive.⁴

PIV Card Issuance

After a favorable determination, you are enrolled for your PIV card. Enrollment collects your fingerprints and photograph and programs the card’s chip with digital certificates that link back to your IDMAX identity. The card is your primary credential for both physical building access and computer login. Federal standards cap PIV validity at six years, but your card’s actual expiration may be shorter, tied to your contract or appointment term.⁵

Logging In to NASA Systems

Day-to-day access runs through the NASA Access Launchpad at launchpad.nasa.gov. NASA requires multifactor authentication for all system access: something you have and something you know.

The default method is your PIV card. Insert it into a reader attached to your workstation and enter your PIN when prompted. The Launchpad checks the certificates on the card against your IDMAX record and lets you through.⁶

If you cannot use a PIV reader (working remotely without government-furnished equipment, for example) NASA provides RSA SecurID tokens as an alternative. You can use a hardware fob that displays a rotating code, or a software token app on your phone. With a hardware fob, your passcode is your PIN plus the code on the device. With a software token, you enter your PIN in the app to generate the code, then enter that code on the Launchpad login screen.⁶ Your center’s IT security office issues RSA tokens if your role requires one.⁷

Requesting Access to Specific Systems Through NAMS

An IDMAX identity and a PIV card get you through the door. Access to individual NASA applications and datasets is a separate request handled through the NASA Access Management System (NAMS). Log in at idmax.nasa.gov, click “Your NAMS Requests” to see your existing permissions, and submit new ones from there. Each request routes through your sponsor and the system owners for review.²

Search for the system you need, complete the access request form with your justification and the type of access required, and submit. Contractors also enter their company name, contract number, and contract expiration date. Approvals involve multiple reviewers, so submit early. Waiting until your first day on a project usually means waiting several more days after that.

Guest Accounts Are Not IDMAX

If you are an external collaborator who only needs limited access to specific NASA web-based tools, you do not need a full IDMAX identity or a PIV card. NASA offers a separate Guest Account system at guest.nasa.gov that uses Login.gov for authentication and requires only your name, email, and citizenship at registration.⁸

Guest accounts are narrow. They will not get you into NASA buildings or onto the internal network. For researchers or academic partners who need to work in specific web tools, a guest account avoids the months-long process of full identity vetting. Existing guest users now sign in through Login.gov using the same email tied to their account.⁸

Keeping Your Account and Card Active

Profile Updates

You are expected to keep your IDMAX profile current: phone number, email address, organizational details, and, importantly, your sponsor. Updates go through the self-service portal. A stale profile, especially an outdated sponsor, can lead to disrupted access or a suspended account.

PIV Card Renewal

IDMAX starts sending expiration warnings 60 days before your PIV card certificates expire.⁹ Do not ignore them. Renewal has to happen before the card expires and requires your sponsor to confirm your personnel records are accurate. You will visit your center’s badging office, where your existing fingerprints are matched before new ones are collected. Your old card is collected and destroyed when the new one is issued.¹⁰

Renewal is lighter than the original enrollment. But if you let the card lapse, you may have to go through the fuller reissuance process, which is essentially starting over. Begin as soon as that 60-day notice arrives.¹⁰

Lost or Stolen Cards

If your PIV card goes missing, report it to your center’s Personal Identity and Verification Facility (PIF) Manager as soon as you notice. If the card is not reported found within 24 hours, it will be revoked and disabled, and you will need a completely new one issued. After the report, you have three business days to appear in person at the badging office for a replacement. Your center may issue a temporary building pass in the meantime.¹⁰

When You Leave NASA

When your affiliation ends, whether by resignation, retirement, contract completion, or termination, you must surrender your PIV credential no later than your last day. NASA explicitly prohibits keeping credentials as souvenirs. Once separation is reported, the credential and its identity record are deactivated within 18 hours, and all data, certificates, and privileges on the card are invalidated.¹⁰

Additional Requirements for Foreign Nationals

If you are not a U.S. citizen, expect additional steps and longer lead times. Nondesignated foreign nationals need to begin the process at least 14 calendar days before their visit or assignment start date. Designated foreign nationals need at least 30 calendar days.¹¹

Vetting includes checks against export control lists, denied persons lists, specially designated nationals, and the terrorist screening database. If you will work on-site in the U.S., you must provide a valid visa and admission documentation, and NASA runs a SAVE (Systematic Alien Verification for Entitlements) check to confirm your immigration status. The SAVE check must be completed within five days of the start of your assignment.¹¹

A foreign national who needs a PIV card must have at least three years of U.S. residency and meet the eligibility requirements for a Tier 1 or higher background investigation. Those who do not may receive a limited-access badge that restricts where and when they can be on-site without an escort.¹¹ Under standard processing, identity creation through credential issuance takes about 9 to 14 days, with expedited processing compressing that to 3 to 4 days in urgent cases.¹²

Common Problems and Where to Get Help

Most IDMAX headaches come from a small set of issues, and the fixes are usually simpler than they look.

PIV card reader not recognized. Update your card reader drivers and restart. On government-furnished equipment, driver updates may require IT assistance.
Account locked after failed PIN attempts. Multiple wrong PINs lock the card. Visit your badging office or contact your center’s IT support for a PIN reset. You cannot unlock it from the portal.
Access works in some systems but not others. Provisioning between IDMAX and the target application may still be synchronizing. Give it a few hours after a NAMS approval; if it persists, contact the Enterprise Service Desk.
Certificate errors during Launchpad login. Your PIV certificates may be near expiration even if the card is not. Check for a 60-day warning from IDMAX and start renewal if you received one.

For anything you cannot resolve through self-service or your local badging office, the NASA Enterprise Service Desk is the central support channel. Call 1-877-677-2123 (Option 2) or email nasa-esd@mail.nasa.gov.¹³

1
Federal Register. Name of Information Collection: Identity Management System (IdMAX) for Personal Identity Validation (PIV) for Routine and Intermittent Access to NASA Facilities, Sites, and Information Systems
2
National Aeronautics and Space Administration. Privacy Impact Assessment (PIA) – Identity Management and Account Exchange (IDMAX) Contains NASA Access Management System (NAMS)
3
Office of Personnel Management. Credentialing Standards Procedures for Issuing Personal Identity Verification (PIV) Cards
4
NASA. NPR 1600.3B – Chapter 2 – Personnel Security Background Investigations and Adjudications
5
CAC.mil. FIPS 201-2 – Personal Identity Verification (PIV) of Federal Employees and Contractors
6
NASA NAS. Authenticating to NASA’s Access Launchpad
7
NASA Center for Climate Simulation. RSA Tokens
8
NASA. NASA Guest Account
9
NASA. Smartcard Certificate Update and New Badge FAQ
10
NASA. NPR 1600.4B – Chapter 6 – Credential Lifecycle Management
11
NASA. NPR 1600.4B – Chapter 4 – Foreign Nationals
12
NASA. NAII 1600.4A – Foreign National Access Management (FNAM) Operations Manual
13
NASA. Guest Account Services Help