GEOAxIS

This is a GEOAxIS-protected resource.

U.S. Government Warning

This is a United States Government Computer System. Use of this U.S. Government system, authorized or unauthorized, constitutes consent to monitoring of this system.

Authenticate using one of the credentials below.

Certificate Login

Identity Login

This is a GEOAxIS-protected resource.

U.S. Government Warning

This is a United States Government Computer System. Use of this U.S. Government system, authorized or unauthorized, constitutes consent to monitoring of this system.

For technical assistance, please contact the NGA Enterprise Service Center: 1-800-455-0899 (Commercial), 578-5555 (Secure)

You are accessing a U.S. Government (USG) Information System (IS) provided for authorized use only.

By using this IS (and any device attached to this IS), you consent to the following conditions:

DEPARTMENT OF DEFENSE AND
NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY
INFORMATION TECHNOLOGY SYSTEMS USER AGREEMENT
STANDARD MANDATORY NOTICE AND CONSENT PROVISION
FOR ALL DOD INFORMATION SYSTEMS USER AGREEMENTS

By consenting to this document, you acknowledge and consent that when you access Department of Defense (DoD) information systems:

You are accessing a U.S. Government (USG) information system (IS) which is provided for USG-authorized use only.

By using this IS (which includes any device attached to this Is), you consent to the following conditions:

The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, communications security (COMSEC) monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.

At any time, the USG may inspect and seize data stored on this IS.

Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.

This IS includes security measures (for example, authentication and access controls) to protect USG interests–not for your benefit or privacy.

Notwithstanding the above, using an IS does not constitute consent to PM, LE, or CI investigative searching or monitoring of the content of privileged communications or data (including work product) that are related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Under these circumstances, such communications and work product are private and confidential, as further explained below:

Nothing in this User Agreement shall be interpreted to limit the user’s consent to, or in any other way restrict or affect, any USG actions for purposes of network administration, operation, protection, or defense, or for communications security. This includes all communications and data on an IS, regardless of any applicable privilege or confidentiality.

The user consents to interception or capture and seizure of all communications and data for any authorized purpose (including PM, LE, or CI investigation). However, consent to interception or capture, or seizure of communications and data is not consent to the use of privileged communications or data for PM, LE, or CI investigation against any party and does not negate any applicable privilege or confidentiality that otherwise applies.

Whether any particular communication or data qualifies for the protection of a privilege, or is covered by a duty of confidentiality, is determined in accordance with established legal standards and DoD policy. Users are strongly encouraged to seek personal legal counsel on such matters prior to using an IS if the user intends to rely on the protections of a privilege or confidentiality.

Users should take reasonable steps to identify such communications or data that the user asserts are protected by any such privilege or confidentiality. However, the user’s identification or assertion of a privilege or confidentiality is not sufficient to create such protection where none exists under established legal standards and DoD policy.

A user’s failure to take a reasonable steps to identify such communications or data as privileged or confidential does not waive the privilege or confidentiality if such protections otherwise exist under established legal standards and DoD policy. However, in such cases the USG is authorized to take reasonable actions to identify such communications or data as being subject to a privilege or confidentiality, and such actions do not negate any applicable privilege or confidentiality.

These conditions preserve the confidentiality of the communications or data, and the legal protections regarding the use and disclosure of privileged information, and thus such communications or data are private and confidential. Further, the USG shall take all reasonable measures to protect the content of captured or seized privileged communications or data to ensure they are appropriately protected.

In cases when the user has consented to content searching or monitoring of communications or data for PM, LE, or CI investigative searching, (such as for all communications or data other than the privileged communications or data that are related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants), the USG may, solely at its discretion and in accordance with DoD policy, elect to apply a privilege or other restriction on the USG’s otherwise-authorized use or disclosure of such information.

All of the above conditions apply regardless of whether the access or use of an IS includes the display of a Notice and Consent Banner (“banner”). When a banner is used, the banner functions to remind the user of the conditions that are set forth in this User Agreement, regardless of whether the banner describes these conditions in full detail or provide a summary of such conditions, and regardless of whether the banner expressly references this User Agreement.

Which Credentials Should I Use?

Users issued Public Key Infrastructure (PKI) soft certificates, National Security System (NSS) hard tokens, Common Access Card (CAC) hard tokens, External Certification Authority (ECA) hard tokens, or Personal Identity Verification (PIV) hard tokens

Authentication FAQs

If you are experiencing issues accessing a GEOAxIS protected operational (i.e., production) application(s), an incident / ticket must be created. If you are aware of multiple users at your site or in your group are experiencing the same or similar access related issues, please include this information in the ticket.

NGA personnel may submit incident tickets themselves via the Enterprise Service Plus incident reporting system (https://serviceplus.nga.ic.gov/).

NGA and Non-NGA personnel who are unable to access Service Plus should contact the Enterprise Service Center (ESC) to request an incident is created on their behalf. Please provide issue observables to include but not limited to error messages, number of affected users, endpoints attempted to access and mission impacts. When calling the unclassified phone number, the user must be discrete on the information provided on an open line.

Voice

Toll Free: 1-800-455-0899
DSN: 312-547-5555
Secure: 578-5555

Email

EnterpriseServiceCenter@nga.mil

Once the incident is submitted, if you would like to follow-up with the GEOAxIS Operations Support, please send an email to the appropriate distribution list below. Please include the incident number in the subject of the email.

GEOAxISOpsSupport@nga.mil

If unable to contact the NGA ESC, then you may contact the GEOAxIS Operations Service Desk as following:

Voice

Toll Free: 1-833-436-2947
Secure: 576-1717

Email

GEOAxISOpsSupport@nga.mil

If you choose to email, please leverage the following template:

To: Please refer to the Gx Ops Email Distributions table below

Subject: EXTERNAL: Unable to Access Gx Protected Resource or Service

Message:

What application(s) are you unable to access?
Provide the application(s) URL(s)
What credential(s) are you using to access the application? (Example: PKI Certificate, Disadvantaged user, ID.me)
If using PKI Certificate credentials:

Open a new browser window
Select the appropriate URL from the list below

On-Prem: https://gxisaccess.nga.mil/certcheck?savecerts
Cloud: https://gxisaccess.gs.mil/certcheck?savecerts

Take a screenshot and attach the output results

What browser(s) are you using to access the application(s)?
Provide a description of the problem.
If the problem can be reproduced, please list the steps you took to recreate it. If the problem cannot be reproduced (occurs sporadically or inconsistently), describe the circumstances in which it occurred, and the symptoms observed.
If the problem causes error messages, provide the exact text that is displayed.
Include all supporting documentation, such as screen prints or any other helpful information. The supporting documents you provide help the Gx O&S Team to analyze the problem and present a solution.
Is anyone else experiencing this issue?
Have you had this problem before? If so, when?
Do you experience this issue on another computer, device, or network?
What impact does this issue have on you, your team or your organization?
Provide your home agency and your contact information – phone and email

Personal Identification Verification (PIV), PIV-I and ECA Cards may be issued by a Certificate Authority (CA) that is not supported by an authoritative attribute source for user attributes. PIV, PIV-I and ECA card holders must register their identity with GEOAxIS in order to enable access to protected resources. Registration is only required one time. The registration process is as following:

Navigate to the GEOAxIS portal at https://portal.geoaxis.gs.mil/
GEOAxIS Authentication page is displayed
Select the "PKI Certificate" option. A prompt to choose a certificate is displayed. Select the appropriate certificate.
A pop-up notification is displayed noting that certificate was not recognized
After a few seconds, the message disappears and the User Certificate Registration form is displayed
All fields are required and must be populated:

Enter First Name / Last Name
Enter Organization
Enter Email Address / Confirm Email Address

Click "Register Certificate"
If successful, the user will be redirected to the GEOAxIS portal. If unsuccessful, please submit/request an incident be created for GEOAxIS to investigate and assist further.

NOTE: This registration process only enables authentication via GEOAxIS, and does not guarantee access to all GEOAxIS protected resources. Access to many protected resources is based on specific user attributes (e.g., citizenship or clearance) and PIV, PIV-I and ECAs do not always store these resource specific attributes. If access is denied to a protected resource following the PIV registration, users should coordinate with representatives of the protected resource to be granted access.

GEOAxIS does not issue or maintain PKI certificates. If you need a new certificate, please submit a new request to your home agency.

NGA personnel should contact Workforce Support Center via

Email

East: WorkforceSupportCentereast@nga.mil
West: WorkforceSupportCenterWest@nga.mil

Phone

East: 571-557-1111
West: 314-676-3350

NGA personnel may submit incident tickets themselves via the Enterprise Service Plus incident reporting system (https://serviceplus.nga.ic.gov/).

Voice

Toll Free: 1-800-455-0899
DSN: 312-547-5555
Secure: 578-5555

Email

EnterpriseServiceCenter@nga.mil

GEOAxISOpsSupport@nga.mil

If unable to contact the NGA ESC, then you may contact the GEOAxIS Operations Service Desk as following:

Voice

Toll Free: 1-833-436-2947
Secure: 576-1717

Email

GEOAxISOpsSupport@nga.mil

If you choose to email, please leverage the following template:

To: Please refer to the Gx Ops Email Distributions table below

Subject: EXTERNAL: Unable to Access Gx Protected Resource or Service

Message:

What application(s) are you unable to access?
Provide the application(s) URL(s)
What credential(s) are you using to access the application? (Example: PKI Certificate, Disadvantaged user, ID.me)
If using PKI Certificate credentials:

Open a new browser window
Select the appropriate URL from the list below

On-Prem: https://gxisaccess.nga.mil/certcheck?savecerts
Cloud: https://gxisaccess.gs.mil/certcheck?savecerts

Take a screenshot and attach the output results

What browser(s) are you using to access the application(s)?
Provide a description of the problem.
If the problem can be reproduced, please list the steps you took to recreate it. If the problem cannot be reproduced (occurs sporadically or inconsistently), describe the circumstances in which it occurred, and the symptoms observed.
If the problem causes error messages, provide the exact text that is displayed.
Include all supporting documentation, such as screen prints or any other helpful information. The supporting documents you provide help the Gx O&S Team to analyze the problem and present a solution.
Is anyone else experiencing this issue?
Have you had this problem before? If so, when?
Do you experience this issue on another computer, device, or network?
What impact does this issue have on you, your team or your organization?
Provide your home agency and your contact information – phone and email

Navigate to the GEOAxIS portal at https://portal.geoaxis.gs.mil/
GEOAxIS Authentication page is displayed
Select the "PKI Certificate" option. A prompt to choose a certificate is displayed. Select the appropriate certificate.
A pop-up notification is displayed noting that certificate was not recognized
After a few seconds, the message disappears and the User Certificate Registration form is displayed
All fields are required and must be populated:

Enter First Name / Last Name
Enter Organization
Enter Email Address / Confirm Email Address

Click "Register Certificate"
If successful, the user will be redirected to the GEOAxIS portal. If unsuccessful, please submit/request an incident be created for GEOAxIS to investigate and assist further.

To inquire about the status of an existing ticket, please contact the GEOAxIS Operations Support team

Voice

Toll Free: 1-833-436-2947
Secure: 576-1717

Email

GEOAxISOpsSupport@nga.mil

To learn how to integrate with GEOAxIS, please contact the GEOAxIS Consumer Integration team

Email

ngaGEOAxISintegrate@nga.mil

To contact the GEOAxIS Program Management Office (PMO), please contact the following

Email

GEOAxISPMO@nga.mil

To authenticate via a Certificate-Linked Authentication User Account (CLA Account) you must have a valid PKI certificate and CLA account.
Failure to authenticate with a CLA account may be due to:
- An expired CLA account. CLA accounts are valid for up to 6 months. To renew your CLA account, you must authenticate with a valid certificate and complete the CLA account registration form.
- An expired or invalid PKI certificate. Please coordinate with your respective authority for distribution of PKI certificates.

GEOAxIS Certificate-linked Authentication (CLA) account serves as a secondary Authentication method (e.g. for access on mobile devices without card readers) associated with your PKI credentials.

Secure Login

Log in

Username Username Required.

Password Password Required.

Show Password

Forgot your password?

GEOAxIS Certificate-linked Authentication (CLA) account serves as a secondary Authentication method (e.g. for access on mobile devices without card readers) associated with your PKI credentials.

Create a CLA Account

You must have a CAC/NSS Token to register
Go back to the landing page
Log into the GEOAxIS Portal using your PKI certificate
Once authenticated, you may create a CLA account from your user profile

NOTE: You may still register for a CLA account if your CAC/NSS Token has been issued but is currently on hold. Use the Certificate-Linked Authentication option with the username/password associated with your SBU/SECNet workstation credentials.

Your location is currently in a disconnected network state. Authentication into this resource is limited to DDIL credentials only.

Request DDIL account access by contacting your local TX

Disconnected, Denied, Intermittent or with Limited bandwidth (DDIL) service provides applications owners the ability to manage group and role entitlements which grant access to GEOAxIS protected resources.

NOTE: Once your site has returned to a connected state, DDIL accounts cannot be leveraged for authenticating into this protected resource.

Secure Login

Multi-factor Authentication

OTP Enter pin OTP Required.

Multi-factor Authentication (MFA) Notice:

All Certificate-linked Authentication access now requires MFA via an emailed One Time Pin (OTP) sent to your registered CLA email address.

The pin will expire in 15 minutes from the time it was received.

For technical assistance please contact the NGA Enterprise Service Center:

1-800-455-0899 (Commercial)

578-5555 (Secure)

Your certificate must be registered with GEOAxIS prior to use.

PIV

User Certificate Registration

First Name First Name Required.

Last Name Last Name Required.

Organization Organization Required.

Email Address Email Address Required. Email Address is Invalid.

Confirm Email Address Confirm your Email Address. Email Addresses do not match.

Your certificate must be registered with GEOAxIS prior to use.

For technical assistance please contact the NGA Enterprise Service Center:

1-800-455-0899 (Commercial)

578-5555 (Secure)

Secure Login

Update Password

New Password Password Required.

Show Password

Confirm Password Confirm your Password. Passwords do not match.

Show Confirm Password

For technical assistance please contact the NGA Enterprise Service Center:

1-800-455-0899 (Commercial)

578-5555 (Secure)