Who can enroll an Initial Issue Token on SIPR (a subscriber's first token)?

• A. Any Trusted Agent
• B. The DEERS office
• C. The RA or LRA office
• D. The CAC office

Answer: (C)

The key idea is that initial enrollment of a SIPR token requires formal identity proofing and authorization, which is performed by the Registration Authority (RA) or Local Registration Authority (LRA). They verify the subscriber’s identity against official records (such as DEERS) and confirm eligibility to access SIPR, then issue and bind the first token to that person. This ensures the token is tied to a verified DoD identity and proper entitlement from the outset.

Trusted Agents can manage tokens later, but they don’t perform the initial enrollment. The DEERS office handles eligibility data, not the actual issuance of the first token. The CAC office deals with physical smart cards, not the SIPR initial token issuance. Therefore, the RA or LRA is the correct entity to enroll the subscriber’s initial SIPR token.