What form does a Trusted Agent complete and verify for all issuance and re-issuance of PKI tokens and certificates?

• A. DD Form 2842
• B. DA Form 31
• C. SF 86
• D. DD Form 214

Answer: (A)

Documenting PKI token issuance and reissuance hinges on a dedicated enrollment form that captures identity verification, authorization, and the token/certificate details. The trusted agent completes DD Form 2842—the DoD PKI Enrollment Form—when enrolling a user for a PKI token or renewing a certificate. This form collects the user’s identity information, organization, and reason for issuance, along with fields for the token or certificate serial data, and it includes the signatures of the user and the trusted agent to authenticate the transaction. Keeping this form creates an auditable trail for every issuance or renewal, and it supports future revocation, re-keying, or replacement if the token is lost or compromised. Other listed forms are for unrelated tasks—leave requests, security background investigations, or personnel separations—and do not document PKI enrollment.