Introduction: The recent Circular No: PFRDA/2024/05/Sup-CRA/02, dated 20th Feb 2024, highlights a significant development in the security measures for accessing the Central Recordkeeping Agency (CRA) for NPS transactions by Central and State Government Nodal Offices. The move involves introducing Aadhaar-based authentication in addition to the existing password-based login process. This proactive step aims to fortify the authentication and login framework, ensuring a secure environment for all NPS activities carried out by Government Offices and Autonomous Bodies.
Detailed Analysis: The current practice of utilizing a password-based login system for accessing the CRA system is set to undergo a transformation. The integration of Aadhaar-based authentication with the current user id and password-based login process establishes a robust two-factor authentication, enhancing the overall security of the CRA system. The initiative addresses concerns related to subscriber and stakeholder interests, making NPS transactions more secure.
The development of this new login framework with enhanced features is currently underway and is expected to go live on 1st April 2024. The Circular emphasizes the dissemination of a detailed Standard Operating Procedure (SOP) and process flow by CRAs to Government Nodal Offices. The objective is to engage extensively with Nodal Officers, ensuring they are well-informed about the upcoming changes. The SOP will guide offices in implementing the additional feature of Aadhaar-based login and authentication in the CRA system for all NPS-related activities.
Conclusion: In conclusion, the Circular signifies a pivotal move towards strengthening the security architecture surrounding NPS transactions in the Government sector. The integration of Aadhaar-based authentication is a proactive measure, aligning with the evolving technological landscape. The expected go-live date of 1st April 2024 indicates a prompt implementation timeline. Government Nodal Offices and Autonomous Bodies are advised to prepare for this transition by putting in place the necessary framework for the seamless adoption of Aadhaar-based login and authentication in the CRA system. This step ensures a secure and efficient environment for all NPS-related activities, prioritizing the interests of subscribers and stakeholders. The proactive approach taken by the authorities reflects a commitment to safeguarding sensitive financial transactions and data in the realm of National Pension System activities. Stay informed, stay secure.
***
Pension Fund Regulatory and Development Authority
Circular No: PFRDA/2024/05/Sup-CRA/02 Dated: 20th Feb 2024
To
All Central and State Government Nodal Offices, CABs and SABs
Subject: Securing NPS transactions through Aadhaar-based access of CRA system under the Government sector
The Nodal Offices under Central and State Governments including their associated Autonomous Bodies currently utilize a password-based login to access the Central Recordkeeping Agency (CRA) for NPS transactions.
2. To enhance the security measures in accessing the CRA system and safeguard the interests of subscribers and stakeholders, it has been decided to bring in additional security features through Aadhaar-based authentication for login to the CRA system. The Aadhaar-based login authentication will be integrated with the current user id and password-based login process so as to make the CRA system accessible through 2 Factor Authentication.
3. The integration of Aadhaar-based login authentication is a proactive step to fortify the overall authentication and login framework. This initiative is designed to create a secure environment for all NPS activities carried out by Government Offices and Autonomous Bodies.
4. The development of the new system of login framework with these enhanced features is currently underway by the CRAs and is anticipated to go-live on 1st April 2024.
5. CRAs will disseminate a detailed Standard Operating Procedure (SOP) along with the process flow to Government Nodal Offices and engage extensively with Nodal Officers to make them aware of the changes thereby ensuring a seamless transition.
6. All offices under Government Sector and Autonomous Bodies are advised to note the same and put in place the necessary framework for implementation of the additional feature of Aadhaar-based login and authentication in CRA system to perform all NPS-related activities.
Yours sincerely,
Mohan Gandhi
(Chief General Manager)
