SAM.gov Cautions Contractors on OpenSSL Heartbleed Vulnerability
As a result of the newly discovered security bug, Heartbleed, the Department of Homeland Security is working with other agencies to investigate the potential impacts. The security flaw could allow hackers access to sensitive online information, such as usernames and passwords. The recent panic has also driven the System for Award Management (SAM) to send out emails urging contractors to change their Marketing Partner Identification Number (MPIN). The MPIN is a nine character password that is mandatory for each SAM.gov registration.
To update your MPIN, please follow the instructions below:
1. Go to the SAM Homepage: www.SAM.gov.
2. Enter your user ID and password and click the “Log In” button.
3. Select “Register/Update Entity” from the left navigation menu.
4. Select “Complete Registrations” if your registration is active; “Incomplete Registrations” if you are in the process of updating it; or “Inactive Registrations” if your registration has expired.
5. Select your entity’s name from the list or search for it by DUNS number.
6. Select the “Update” button.
7. If you are only updating your MPIN, select “All sections applicable to the registration besides the Purpose of Registration” from the drop down list.
8. Review each page, selecting “Save and Continue” at the bottom until you reach the Business Information page. Here you will see your MPIN, which can be changed by clicking in the MPIN field and updating the value. Select “Save and Continue” to complete.
9. On the IRS consent page, delete and re-enter the taxpayer name so that MPIN field unlocks. When the MPIN field unlocks, enter the updated MPIN information and click “Save and Continue.”
10. Continue through the registration reviewing each page to make sure nothing else needs updated.
11. Please be sure to select “SUBMIT” at the very end of the registration.
12. Your registration update will go to the IRS for Taxpayer Identification Number validation. If you updated other information, it may go to the CAGE Code system as well for validation.
13. When your update becomes active in SAM.gov, you will receive a confirmation e-mail.