PFRDA circular PFRDA/2024/06/Sup-CRA/03 · 15 Mar 2024
Official title
Mandatory Two - Factor Aadhaar Authentication for CRA System Access w.e.f. 1 st April 2024
Summary
Check the official recordThe Pension Fund Regulatory and Development Authority (PFRDA) has mandated the implementation of 2-Factor Aadhaar-based authentication for all password-based users accessing the Central Recordkeeping Agency (CRA) system. This security measure applies to Government and Corporate Nodal offices, including PrAO, DTA, PAO, DTO, and DDO, as well as Autonomous Bodies. Users must link their Aadhaar numbers with their respective CRA User IDs to enable Aadhaar OTP-based login. Oversight offices are required to initiate the mapping process for their underlying offices. This initiative aims to enhance the security of National Pension System (NPS) transactions and protect stakeholder interests. Affected entities must establish the necessary framework to ensure compliance and seamless execution of NPS activities effective from 1st April 2024.
What you must do
Key dates
Who is affected
Circular
Circular No: PFRDA/2024/06/Sup-CRA/03
15th Mar 2024
To All NPS Stake Holders
Subject: Mandatory 2 - Factor Aadhaar Authentication for CRA System Access w.e.f. 1st April 2024
Government and Corporate Nodal offices, including PrAO/DTA/PAO/DTO/DDO, are granted with access to the Central Recordkeeping Agency (CRA) system for conducting National Pension System (NPS) related tasks, perform activities and generate various reports. The additional security layer, 2-Factor Aadhaar-based authentication, is being compulsorily implemented for all password-based users logging into the CRA system, effective from 1st April 2024 as communicated vide our earlier Circular dt 20th Feb 2024.
i. Increased Security: The two-factor approach significantly reduces the risk of unauthorized access to the CRA system.
ii. Enhanced Protection: This additional layer safeguards NPS transactions and protects the interests of both subscribers and stakeholders.
Additional Security Feature: Currently, Nodal Offices under Central and State Governments, including their underlying Autonomous bodies, use a password-based login to access the CRA for NPS transactions. To bolster security features and protect the interests of Subscribers and Stakeholders, it has been decided to introduce additional security features through Aadhaar-based authentication for login to the CRA system. This Aadhaar-based login authentication will be integrated with the current User ID and Password-based login process, enabling 2-Factor Authentication for accessing the CRA system.
Aadhaar Mapping: User IDs of Nodal offices under the Government Sector (Central/State/CAB/SAB) shall be permitted to login to the CRA system (CRA & NPSCAN) using 2-Factor Authentication through Aadhaar OTP (One-time password). The Oversight office (PrAO/DTA) must initially link their Aadhaar with their respective CRA User ID, enabling underlying users to initiate Aadhaar Mapping. Similarly, PAO/DTO must link their Aadhaar with their respective CRA User ID, allowing underlying DDOs to initiate Aadhaar linking.
Performance of NPS Activities: All offices under the Government Sector and Autonomous Bodies are required to implement the necessary framework for the additional feature of Aadhaar-based login and authentication in the CRA system to carry out all NPS related activities.
Page 1 of 2
i. One-time registration of Aadhaar number against Nodal Office User ID ii. Authentication of Aadhaar Mapping to Nodal Office User ID iii. Status view for Aadhaar Mapping iv. Procedure for regular (Aadhaar-based) access to CRA system
Government and Corporate Nodal Offices, along with Autonomous Bodies, are requested to implement the necessary framework for the new Aadhaar-based login and authentication and ensure seamless execution of all NPS-related activities.
Yours sincerely,
Digitally signed by K MOHAN GANDHI Chief General Manager
Page 2 of 2
