What does the Common Access Card $($GAC$)$ contain?

Passwords

Data for two$-$factor authentication, including Personal Identification Number $($PIN$)$ and biometrics

SIPRNat tokens

Certificates for identification, encryption, and digital signature