GSA issues every TTS employee a badge, laptop, and phone. Your MacBook should be ready before your first day, but your phone may not be. The Operations Team submits phone requests to IT on your behalf, and you’ll receive a confirmation email within a few weeks when your phone is ready for pickup.
Badges are shipped to your local GSA office. You will receive an email once your badge has been shipped. At that point, you can make an appointment to pick it up. Your badge may be available during your orientation – send an email to firstname.lastname@example.org to save yourself a trip. You may also ask your orientation leader to show you where to pick it up.
Most TTS employees are issued an Apple MacBook Air/Pro computer. Note that this is not the norm for GSA. See information about using PIV card readers.
Your laptop will come preloaded with the latest, GSA-approved/supported Mac operating system. Please wait to do any operating system upgrades (including patches) until notified by GSA IT.
Lock your computer before leaving it. Press the Control + Shift + Power keys on newer MacBooks or Control + Shift + Eject on older MacBooks with optical drives. If you use Alfred, you can open Alfred and type lock.
Encrypt all portable media that will connect to any TTS system. You can apply FileVault encryption to removable USB drives and external hard drives by right-clicking the drive on your desktop and clicking Encrypt. You must choose a strong password you can remember, as your drive will require the password to mount and retrieve data once encrypted.
GSA IT manages software updates. You should not install updates or major version upgrades yourself. You are responsible for applying updates and restarting only when a GSA notification appears on your device.
Bring Your Own Device (BYOD)
GSA has implemented a BYOD policy that allows users to connect their non-GSA procured mobile devices, which have been previously approved by IT security, to GSA resources in a native fashion, utilizing the GSA network. Please note, only approved smartphones and tablets can be connected to the GSA network. Personal laptops cannot be connected directly to the GSA network at any GSA facility. For more information, please reference Section 4.2 of the IT Security Procedural Guide.
For users who work on a FISMA system that wish to use their personal laptop/computer (at a non-GSA facility), the assigned ISSO/ISSM for the application must accept the associated risk(s), obtain approval from the Authorizing Official, and document the use of the personally owned computer within the System Security Plan (SSP).
For users who do not work directly on a FISMA system who wish to use their personal machine (at a non-GSA facility), please consult with email@example.com to review the BYOD policy with regards to your specific needs and use cases. You can also post geneeral questions in the AskIT Chatter Page.
Controlled Unclassified Information (CUI) can never be stored on a personal machine. Utilize Government Furnished Equipment (GFE) to the maximum extent possible.
GSA IT does not currently have a Mac Loaner Program, but can provide loaners for exceptional cases like needing a machine for a Third-Party Assessment Organization (3PAO) that needs to match the machines of developers on the team.
- Open a service now ticket requesting
GSA Hardware Request - Loaner.
Provide rationale for request. Example:
ProjectX.gov needs a GSA hardened with the latest approved MacOSX with TTS users permission for 3PAO penetration testing. This is part of an (annual) assessment for FedRAMP Low/Moderate/High FISMA A&A…
- Include the contact and shipping information.
- Provide a user name on the device. Example:
- Help desk will create a shipping label and mail out loaner to the receiving party.
If GSA IT doesn’t have any availble inventory to issue a loaner, please contact the Tech Portfolio and they will work with you to determine a suitable alternative.
See the procedures to request admin rights.
If you are getting a prompt to upgrade desktop software (
<software> wants to make changes), try reinstalling the given piece of software through Self Service. If not available there or if not related to updating software, contact the GSA IT Service Desk.
XCode command line tools
XCode command line tools can be installed or upgraded through Self Service. If already installed and up to date, it won’t show up. Note this doesn’t install the XCode application.
TTS employees are issued an Apple iPhone. The TTS Talent Team will already have submitted a request to GSA IT for your work phone before you join TTS. Within a few weeks of starting at TTS, you should receive a confirmation email letting you know that your phone is ready for pickup. If you work in an office besides D.C. or are remote, please contact the Talent Team when you receive this email and a team member have your phone mailed to you.
GSA IT will ask for your Apple ID and password. Do not send your personal Apple ID or password to IT. Ask them to set up a new Apple ID with your GSA email address, or set one up for yourself and use Google Hangouts to send them your password. (Never share passwords over email.)
Change the phone’s passcode. The new code should be known only to you.
You are responsible for applying software updates. When you receive a notification that an update is available, you should apply the update as soon as possible.
After GSA IT provisions your phone, set up two-factor verification:
- If you don’t have access to HR Links, email firstname.lastname@example.org and ask them to add your work cell phone number (which you may or may not have) and your personal cell phone number to your GSA Credential and Identity Management System (GCIMS) profile.
- Once you have access to HR Links, you can update your contact information there. You’ll find it under Navigator > Employee Self Service > View/Update My Personal Info > Phone Number Change (USF); make sure to set the phone type as “Business Mobile” so it correctly populates in the GCIMS and works for 2FA.
- You can learn more about using your phone for two-factor authentication in our Slack, GitHub, and Gmail guides. For two-factor authentication with these applications, you can use SMS, Authy, or Google Authenticator.
- You can use your phone to access your email. You should be prompted to sign in with your ENT username and password. Note that the GSA IT Service Desk does not support this connection, so please do not ask them about it as they will reject your request.
- You can tether to your laptop to iPhone for internet access when you’re on the go.
- If you can’t send email with your new work iPhone, create a new email and check the From field. If it’s a jumble of letters and numbers
@secure.mass360.com, tap on it to change it to your
@gsa.govemail address. Then go Settings > Mail > Default Account > GSA Account to switch the default address.
- If you stop getting email on your phone and can’t log into your account, contact the Service Desk.
- To reduce waste, GSA IT will disable mobile service for inactive accounts. The consumed minutes is the metric used to determine activity, so if you only use the phone for data, you’ll still need to make an occasional call on your mobile phone to prevent the account from going inactive.
- If you need help with your phone, contact the GSA IT Service Desk.
- For information on which mobile phones are available on GSA’s current contract, employee discounts, voicemail setup, commonly used apps to install, mobile security, traveling with your smartphone, the GSA smartphone replacement process, and more, see Mobile Devices.
See the software page.
If you are based in an office, you can check out mice, keyboards, and trackpads to assist you in your work. They are already available, so there is no need to make a purchase request. Ask in the Slack channel corresponding to your office.
GSA IT will provide peripherals such as: Wired keyboard, Wired mouse, and monitors ONLY if the users are using them in the office. Note: GSA IT does not provide wireless peripherals. Wireless peripherals can be purchased by the business unit.
In order to obtain standard issued hardware, the requestor must contact the IT Service Desk or open a ServiceNow ticket. For non-standard IT equipment, requestors must complete and submit an Exception Waiver for review and approval.
GSA IT will NOT provide peripherals to telework users that are using them at home or at a remote location. However, the users can purchase that on their own or provided by the business unit. There are no specific brands that GSA recommends.
If you need wireless peripherals for the office or your business unit is willing to pay for peripherals, submit a micropurchase request and it will be reviewed by the TTS purchase card holder. Please note that you will need to make a copy of this Section 889 Open Market Justification, fill it out, and attach the link to the micropurchase request form.
If you need to setup a printer follow the instructions here.
Equipment to accommodate disability
GSA provides equipment to accommodate an injury or disability under these conditions:
- You have supporting medical documentation for the need for a certain piece of equipment.
- You only need the equipment to do your work.
For issues with any GSA-provided hardware (such as laptops or phones), contact the GSA IT Service Desk.
Lost or stolen equipment
If TTS-issued equipment is lost or stolen, follow these mandatory steps. Employees must follow the GSA procedures for lost or stolen equipment or missing PIV cards, and alert TTS in #equipment:
See InSite page.
For lost work laptops, phones, etc., do the following as quickly as possible:
- Follow the GSA-wide steps.
- Inform your team.
- Your access to various systems may need to be temporarily removed.
- Inform #equipment.
If your equipment is returned to you, it may have been tampered with and should not be used. Return the equipment to GSA IT so they can inspect it, and if necessary, re-image it.
Requirements for passwords
Read the guide on setting and managing passwords.