Login Help – FAQs

Click below for responses to frequently asked questions. Contact the USA Performance Help Desk for additional information.

Smart Card Sign-In

Use these initial troubleshooting steps first to resolve your issue

Only Microsoft Edge and Google Chrome browsers are supported and compatible for use with USA Performance.

Only permanent smart cards can be used to sign in with the smart card logon feature. Please note that you may not use temporary or derived access credential smart cards (DAC) to sign into USA Performance. Temporary cards do not contain the unique card holder identifiers necessary to sign in.

First, verify that your computer is actively reading your smart card. If you need assistance, please contact your agency IT representative.

Second, your card certificate selection and PIN are stored in your browser for a specific period. Sometimes this causes an issue if the wrong certificate was selected, or the wrong PIN was entered. This can be corrected by clearing the certificate memory. Please refer to the article How do I clear my stored certificate memory?

Third, verify that you are selecting the Authentication certificate. Please see the article How do I know which certificate to select? to learn about certificate types.

How do I register or link my smart card to my USA Performance account?

Insert your smart card into a card reader and then navigate to the sign-in page: https://usaperformance.opm.gov/Login.aspx
Click Sign in with smart card.
A modal will appear prompting you to select a certificate. Select the Authentication certification and click OK.
Another modal will appear prompting you to enter your PIN. Enter your PIN and then click OK.
The Verify Your Identity page appears. Enter the email address associated with your USA Performance account and click Submit.
The page will then ask you to verify your identity with the one-time password (OTP) sent to your email inbox.
Check your email inbox to retrieve the OTP provided by office@usaperformance.opm.gov. The OTP will expire after 20 minutes.
Enter your OTP into the OTP Code field and click Verify Code.
Once the correct OTP has been entered, you will receive confirmation your identify has been verified.
Click Return to Login.
The system will navigate you back to the sign-in page. Click Sign in with smart card to access USA Performance.

How do I sign in with my temporary smart card?

Please note that you may not use temporary smart or derived access credential cards (DAC) to sign into USA Performance. These types of cards do not contain the unique card holder identifiers necessary to sign in.

If you do not have a permanent smart card, please use Login.gov to sign into USA Performance.

Why can I not see my certificates?

If you receive a prompt to select a certificate, and there are no certificates listed, this indicates that your smart card certificates have not been installed on your computer. Please contact your agency’s help desk to install your card certificates onto your computer. Your agency’s help desk will have the permissions and ability to install your certificates.

Why do I see only one or no certificates? Why am I missing or do not see certificates?

Your card should have at least one certificate on it. Please see the article How do I verify the certificates on my smart card? to view your card.

If your Authentication certificate does not appear or no certificates are listed in the certificate selection prompt, this likely means that your certificates have not been installed on your computer. This can occur when you receive a new card or when your card has been updated.

Your agency’s computer support help desk will have the permissions and ability to install your certificates.

Why do I not see the certificate selection prompt?

When you click Sign in with smart card, you should receive a prompt that requests you to select a certificate. If you do not see this prompt, your last certificate selection was stored in memory. You can follow the article How do I clear my stored certificate memory? to resolve.

Why do I receive a message that my agency is not PIV enabled?

This message indicates that your agency has not enabled smart card logon for accessing USA Performance. Please contact your agency performance management representative for assistance.

Why do I receive a message that I selected the wrong certificate?

You may only use the Authentication certification to sign into USA Performance. This certificate may have the purpose listed as Smart Card Logon or Client Authentication. If your certificate is not listed in the certificate selection prompt with these values, you can find the type of certificate by looking at the properties of the card. The purpose type may be listed under the General tab or be shown in the Details tab under the Enhanced Key Usage field. You can find more information in the article How do I know which certificate to select?

Most Federal employees will have multiple certificates on their smart cards. These certificates are usually named according to their purpose: authentication, digital signature, encryption. The Authentication certificate’s purpose is for use in secure access to websites and secure systems. This certificate contains identifying information that uniquely identifies the card holder. The other certificates on a card are for other purposes and do not contain the same information.

How do I know which certificate to select?

Only the Authentication certificate will allow you to access USA Performance. Certificates other than the Authentication certificate will not allow you to access USA Performance and will display a message indicating that you selected the wrong certificate. To determine which certificate is the Authentication certificate, please follow the steps below when signing into USA Performance from Google Chrome or Microsoft Edge.

Click Sign in with smart card button.
The browser will prompt you to select from a list of certificates. Close and reopen the browser if you do not see the prompt.
If a list does not appear, please contact your agency’s technical support to load your certificates onto your computer.
Select your personal Smart Card Logon information or Authentication certificate with your name to sign in. If you cannot identify your certificates by the displayed name, please follow the steps below.

Note: The certificate order in the list may change from one sign in to the next. Identify and select the correct certificate for each sign in based on the certificate name or the details of the certificate as explained below.
To determine the correct certificate, select one of the certificates, and then click Certificate Information to view certificate properties.
Click on the Details tab. Make sure the Show dropdown displays All.
Look for Enhanced Key Usage with a value of Client Authentication or Smart Card Logon. This is the certificate you need to access USA Performance. If you cannot find Enhanced Key Usage, you may have selected the incorrect certificate. The key usage with a value of Digital Signature is the Signature certificate for use in digitally signing documents. Certificates other than the Authentication certificate will not allow you to access USA Performance and will display a message indicating you selected the wrong certificate.
If the Authentication certificate was not found, click OK. Then repeat the previous steps.
Once you have identified the correct certificate, continue by selecting it to sign in.

Note: Do not select the Signature certificate. This will generate a certificate error. If you receive a certificate error, this means the incorrect certificate was selected. Close your browser and repeat the sign in steps.
Enter your PIN when prompted. The browser stores this information for a certain time, and you may not be asked to enter your PIN.
Once the pin has been accepted, you will be able to access USA Performance with your smart card.

If you experience issues during the smart card sign in process, please email the USA Performance Help Desk.

How do I clear my stored certificate memory?

Close and reopen your browser.
Try to access USA Performance.
If that doesn't work, follow these steps:
1. Open the Start menu on your computer.
2. Search for and open Internet Options.
3. In the dialog box that appears, select the Content tab.
4. Click Clear SSL State.
5. Reopen browser and attempt to access USA Performance.

What if none of these suggestions work?

Most smart card issues are related to the card, your browser, or your computer. We can provide suggestions, but in most cases, USA Performance may be unable to correct the issue. Please contact your agency’s smart card help desk or computer support help desk. They can ensure that your smart card and the related hardware are working. Your agency’s credentialling site or card reset office can assist you with your certificates and PIN issues.

We recommend that your agency’s help desk checks the following:

Your certificate(s) are not expired and not revoked.
Your card is the correct version for your agency.
Your certificate(s) are stored in your computer’s browser store/cache.
Your certificate’s Certification Path is correct.
The correct intermediate and root certificate(s) are installed and the version of these are correct.
Certificates can be sent from the browser and there are no blocks.

You may need to create or use a Login.gov account while your agency works to resolve these issues.

Please reach out to the USA Performance Help Desk if you require further assistance.

Login.gov

What is Login.gov and why do I have to create an account?

What is Login.gov?

Login.gov is a service that offers secure and private online access to government programs, such as federal benefits, services and applications. With a Login.gov account, you can sign into multiple government websites with the same email address and password.

Why is USA Performance using Login.gov?

Login.gov uses two-factor authentication and stronger passwords that meet new National Institute of Standards and Technology requirements for secure validation and verification. By using Login.gov, you will have an extra layer of security to help protect your USA Performance account against password compromises.

Do I need an account?

Login.gov is one of the two authentication methods you can use to access USA Performance. You will only be required to sign in with Login.gov if you are unable to use the smart card sign in option.

How do I create a Login.gov account?

To create an account, please follow the steps below.

Navigate to Login.gov.
Enter an email address.
Create a new password.
Select your first method of authentication. Having another way to sign in keeps your account more secure than using only a password. You can choose between text messages, phone calls, an authentication application, a security key, backup codes or smart card.
Select a backup method of authentication. You need to select a backup method in case you don’t have access to your first choice (for example you don’t have access to your phone).
Once you create a Login.gov account, you’ll come back to USA Performance to link to your existing profile. You only need to create your account and link it once. Get step by step instructions on creating an account at Login.gov.

What if I already have a Login.gov account?

If you already have a Login.gov account, you don’t need to create a second one. Use your Login.gov email address, password, plus one of the two-factor authentication methods you set up.

What email address do I use to create a Login.gov account?

Can I use my old USA Performance username and password to sign into Login.gov?

You cannot sign into Login.gov using your prior USA Performance username and password. If you haven’t already done so, you must create a new account with Login.gov.

You only need to create a Login.gov account once. Login.gov will direct you through each step to create your account.

How do I change the phone number I use to sign in?

To change the phone number where you get your security code, you need to update it in your Login.gov account. Reference Change the phone number associated with your account at Login.gov.

Will updating my phone number in my Login.gov account also update the phone number in my USA Performance profile?

No. The phone number you have in your USA Performance account is separate from the phone number you have in your Login.gov account. Please contact your agency administrator to change your phone number if needed.

Do I have to create a Login.gov account every time I want to sign into USA Performance?

No. You only need to create a Login.gov account and link it to your USA Performance profile once. Once that’s done, you use the same Login.gov email address and password, plus one of the two-factor authentication methods you set up, every time you sign into USA Performance.

How do I enter an international phone number when creating my Login.gov account?

When you create a Login.gov account, you’ll be asked to enter a phone number where you can receive a security code. For international phone numbers, Login.gov can only send the security code by SMS (text message). If you want to use an international number it needs to be a mobile number. Reference International phone number support at Login.gov.

If you have issues using an international phone number, because of limited access or cell service, you can use an authentication application .

How do I update my Login.gov account?

You can make changes to your account at Login.gov. Reference instructions to Manage your Account at Login.gov.

How do I update my primary email address?

To change your email address, reference Change the email address associated with your account at Login.gov.

If the above answers do not solve your issue or you need support, please contact the USA Performance® Help Desk for additional assistance. The Help Desk can be reached by sending an email to usaphelp@opm.gov. The Help Desk will respond to emails within one business day.