Recertification & Password Process

Annual Recertification Process

CMS user IDs must be recertified electronically on an annual basis using CMS’ EUA system at https://eua.cms.gov. If you have difficulty with EUA or the CBT (including password issues), please contact the CMS IT Service Desk at 1-800-562-1963 or 410-786-2580 for assistance. If you do not complete the recertification in a timely manner, your CMS user ID will be revoked and you will have to re-apply as a new user.

Upon receipt of a recertification email notice from ess@cms.hhs.gov, you must follow Steps 1 AND 2 to complete the process:

Step 1: System Access Review

1. Log into the EUA System Access Certification page at https://eua.cms.gov/eurekify/portal/login using your HPMS credentials.
2. If you find a certification item on your home screen, select the “Certify” button to proceed. 
3. Select the check box that appears next to your name.  This action will automatically select the check boxes for all of your associated job codes.
4. Select the “Keep” button in order to retain access to the selected job codes. 
5. On the summary page, select the “Submit” button to continue.
6. On the confirmation pop-up window, select the “X” that appears in the upper right hand corner to complete the system access review step. 

Step 2: Security Training

1. Log into the CBT: https://www.cms.gov/cbt/login/
2. Enter your EUA username only into the CMS EUA user ID field. Type your password into the password field (Do not cut/copy and paste your password in the password field). 
3. Set up your Multi-Factor Authentication (MFA) – this will be different than the MFA you set up for HPMS access.
4. Agree to the Terms & Conditions and click on Sign In.
5. Select the Information Systems Security and Privacy Awareness Training link on your dashboard. 
6. Once on the course page, click on "Launch ISSPA Course", then select "Enter" to begin the ISSPA training course.
7. Once you have completed the training, sign and upload the Rules of Behavior to the "Rules of Behavior Upload" on the course page.
8. Once you have uploaded the Rules of Behavior, your status will be updated to completed and you will have access to the certificate of completion.

Password Maintenance

CMS passwords must be reset every 60 days using CMS’ EUA system at https://eua.cms.gov.  To change your password: 

1. Log into EUA https://eua.cms.gov using your 4 character CMS user ID, and associated password. 
2. Enter the MFA code set up to your preferred method.
3. From the top left hand navigation under home, select “Change my Password”
4. Follow the instructions for how to do this successfully on the page, and select “submit.”

For technical assistance with this process, please contact the CMS IT Service Desk at either 1-800-562-1963 or 410-786-2580.

If your account locks and your password must be reset by the CMS IT Service Desk, your password will be reset to the default (i.e., first letter of your last name in upper case, second letter of your last name in lower case, followed by the last six digits of your social security number).  You are required to change the default password within 48 hours via EUA.

If a user fails to keep their account in good standing, CMS will delete their account after 60 days of inactivity in EUA.