Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal Government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a Federal Government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

GSA Certificate Profile Conformance Tool

Last Update: November 30, 2022

The Certificate Profile Conformance Tool (CPCT) is an application that supports FPKI annual reviews and compliance by analyzing public X.509 certificates for conformance to a specified FPKI profile:

  • Common Policy SSP Program
  • FPKI/Federal Bridge
  • PIV-Interoperable (PIV-I)

CPCT use can enhance detection of certificate profile issues during FPKI development and maintenance phases.

In conjunction with the Card Conformance Tool (CCT), the CPCT Tool enables FPKI stakeholders to perform remote testing. To request an official report on your CPCT and CCT results, fill out the Annual PIV Credential Issuer (PCI) Testing Application Form and send it with outputs and testing artifacts to fips201ep at gsa.gov.

Accessing the CPCT Application

To better serve the FPKI community, the CPCT was transitioned from an online application to an application that is hosted and run from the user’s workstation. Users can now access the CPCT application directly from their local hard drive using Docker Desktop, as indicated in the instructions below. It is a one-time download that users can bookmark for future use.

Note

Users who do not possess Administrative Privileges for their device will require IT support from within their organization to perform the Docker Desktop download and subsequent install.

Attention:

Agencies may need to obtain a license for Docker Desktop for each employee or contractor using the application. Appropriate agency personnel should review the information on the following page and make a determination: https://www.docker.com/pricing/faq/#subscriptionandlicensing

Step-by-step Instructions

Note

If you are an existing user of the CPCT Tool and have not used it in a while or you were sent here to reinstall the CPCT Tool, we advise that you first remove the previously installed Docker CPCT Tool container and image from Docker Desktop before downloading and installing a new version of the CPCT Tool.

  1. Go to Docker Desktop. Download and install the version compatible with your device (MacOS, Windows or Linux).

    Docker.com Website

  2. Once Docker Desktop has been installed successfully, it will continue to run in the background on most systems. If you see that Docker is not running, please make sure it is running before installing the CPCT Tool in the next step.

    Docker Desktop

  3. Next, click the link below or copy and paste it into your web browser to visit the releases page.

  4. To download the latest release, click the Source code (zip) link at the bottom of the page, then save to download the zip file.

    Source Zip

  5. Go to the location you downloaded the cpct-tool-1.x.x.zip (your version number may be different) file and copy it to your Desktop. Then, extract the folder to your Desktop for ease of use.

    Zipped CPCT Folder

  6. Open the cpct-tool-1.x.x folder and double click the start.exe file. Refer to the screenshot below.

    CPCT Folder Unzipped

  7. The following window may appear, based on the device’s user settings. Click on “More info”.

    More Info

  8. The following window will then appear on your screen. Select the “Run anyway” icon.

    Run Anyway

  9. A Command line prompt window will open and ask whether you would like to continue, as shown in the screenshot below.

    Start of Install

  10. If you are ready for the CPCT to build, type “y” and hit enter at the blinking cursor. Allow the program to fully execute the build of the CPCT image in Docker Desktop. Once complete, the status message shown below will appear.

    End of Install

  11. To confirm that your image is running, check Docker Desktop to make sure you see the cpct-tool:latest running

    cpct-tool:latest running

  12. Arrive at the CPCT landing page. Use the CPCT application as in the past. Remember to bookmark this page for future use.

    The CPCT Tool Running Locally

Resources

Links to the CPCT Tool and associated support pages:

IDManagement.gov

An official website of the U.S. General Services Administration

Looking for U.S. government information and services?
Visit USA.gov

This site is a collaboration between GSA and the Federal CIO Council. It is managed by the Identity Assurance and Trusted Access Division in the GSA Office of Government-wide Policy.

Edit this page