July 23, 2024 – From the desk of Andrew Mahon

One of the most critical, or at least most visible elements of TWIC validation revolves around the TWIC Cancelled Card List (CCL), a CSV file published by the TSA daily that defines which TWIC credentials have been cancelled (lost/revoked/etc.) that should no longer be considered valid for use.  For the last several years, the CCL files have been made accessible via a legacy URL and a new URL, but as of the end of June, the legacy URL has finally been retired.   The contemporary URL for the TWIC CCL files can be found below:

https://tsaenrollmentbyidemia.tsa.dhs.gov/ccl/CCL.CSV (CCL)
https://tsaenrollmentbyidemia.tsa.dhs.gov/ccl/CCL.CSV.MD5 (CCL Integrity Hash)
https://tsaenrollmentbyidemia.tsa.dhs.gov/ccl/VCCL.CSV (Visual CCL)
https://tsaenrollmentbyidemia.tsa.dhs.gov/ccl/VCCL.CSV.MD5 (Visual CCL Integrity Hash)

For self-hosted FIPSlink sites you can confirm your system is using the correct URL by following the steps in this Knowledge Base article: Identity One Support Portal

For FIPSlink Cloud customers, this setting is managed for you and is already up-to-date.

About Identity One

Identity One builds on the FIPS 201 standard, creating innovative next generation face biometrics, mobile validation, temporary PIV card issuance and derived credentials for CAC, PIV and TWIC.  We register and verify identities for frictionless access and integration everywhere, protect identities from being impersonated, and secure intellectual property. We digitally verify identities for the physical and logical world. Identity One’s solutions serve physical access, logical access, IoT device management, gym & health club check-in and jail & prison biometric identity management solutions. Identity One is headquartered in Atlanta, Georgia, USA.