Access Requirements: In order to access the Concise DFARS / DFARS 252 CS and the NIST SP 800-171 Questionnaire in Partner Information Manager (PIM), you must receive an invitation for an Exostar Managed Access Gateway (MAG) account, as well as purchase and set-up a Phone One Time Password (OTP) without Proofing credential. Please see the entire process outlined below.
Step 1. Register
In order to access the PIM application, you must receive an email invitation from HII. Locate that email to begin the account registration process.
2. Your browser displays a Get started with Exostar dialogue box. Click the Get Started button.
3. On the Complete the following information page, review the data for accuracy and input any missing fields. Select your Organization Headquarters Location from the country drop-down menu. Click Next.
A confirmation message displays account registration details and further instructions to be on the look-out for an account activation email.
Step 2. Activate Account
Once Exostar approves your organization registration, you receive an account activation email. Please review all information provided in the email, paying special attention to your Account Details and User ID.
IMPORTANT: Since you received and accepted the invitation, you are automatically designated as the Organization Administrator for your company. For more information on your administrative responsibilities, please see the MAG Organization Administrator page.
Exostar offers a monthly MAG Administration Webinar that provides information and instructions on administrative responsibilities. Please see the MAG Webinars page for available dates and registration information.
2. Review the Password Policy. Input and confirm your permanent Password. Click Next.
NOTE: Your Email Address or User ID and Password are used for all subsequent MAG logins.
3. Review the information on the screen concerning your security questions. Select and answer your Security Questions. Click Next to open the MAG Dashboard.
Step 3. Accept Terms and Conditions
Once you successfully activate your MAG account, you must accept the PIM Terms and Conditions. To accept the PIM Terms and Conditions, you must have the Organization Administrator or PIM Application Administrator role. Access to PIM is not possible for any users in your organization until Terms and Conditions are accepted.
NOTE: If the tile says Pending Terms, an Organization Administrator or PIM Application Administrator must accept terms.
2. Click Continue to view the PIM Terms and Conditions.
3. Review the Terms and Conditions. Check the box for I have read and agree to these terms and conditions. Click Next to complete the process.
Step 4. Purchase
To access PIM, you must purchase a Phone One Time Password (OTP) without Proofing credential from Exostar’s Web Store.
2. Click the Get 2FA button from the My 2FA Credentials section on the MAG Dashboard.
3. Select HII from the Partner drop-down menu to display a list of acceptable credentials.
4. Select the radio button for the Phone One Time Password (OTP) (Without Proofing) (1 Year) option. Click Next.
5. Review and input any missing information in the Primary Information, Billing Address, and Shipping Address sections. Click Next.
6. Select your Payment Method (credit or invoice). Input payment details, if paying by credit. Click Submit.
NOTE: If you pay by invoice, you must make full payment prior to receiving the hardware token.
A confirmation screen displays and you receive a confirmation email, containing the license key required for the activation process. You can activate directly from the confirmation screen, or later via your MAG user account and the My 2FA Credentials section.
Step 5. Activate and Register
You must activate your Phone OTP token using the license key received via email or at the end of the purchase process. After entering the license key, you will be prompted to register your phone. Exostar recommends you register at least two phones, but you can register up to three.
2. In the My 2FA Credentials section on the MAG Dashboard, click the Enter it here link, under Have a License Key?
3. Enter the license key you received via email in the field provided. Click Submit.
4. Confirm your profile and select your country from the dropdown list. Click Next.
5. Click the Activate button to conclude this process.
6. On the Register page, select the desired delivery method. Select your country from the dropdown provided, and enter your phone number. Click Register.
7. An activation code is sent to your phone via the delivery method selected, and a verification code field displays on the screen. Enter the code. Click Continue.
A confirmation page displays. Click Register Another Credential to proceed through the steps again to register an additional phone, which we recommend. To complete the activation, click I’m done, go to dashboard.
Step 6. Access Application
Once you register your Phone OTP credential, you can access PIM via Exostar’s MAG.
2. Locate the Partner Information Manager (PIM) tile. Click Launch.
3. Select Phone and Delivery Method. Click Send.
NOTE: The OTP Code expires two minutes after clicking Send.
4. You will receive the OTP code via your selected delivery method. Enter the OTP Code in the OTP Code field. Click Submit to open the application.
Step 7. Form Preparation
In preparation to complete the necessary form, download blank versions so you can prepare appropriate answers to the questions:
- Concise DFARS Blank Form
- DFARS, NIST, and Incident Reporting
- NIST SP 800-171 Controls Information
- NIST Blank Form
Step 8. Form Completion
You can start the form, save and complete at a later time, resubmit the form and delete suppliers or contacts from the form. For additional information, please view the Supplier Information page, as well as the Form Resources page.