Lockheed Martin Timecard Access Guide (2026): Portal Login, DCAA Compliance, And Technical Troubleshooting

This technical guide provides comprehensive operational protocols for Lockheed Martin employees, defense contractors, and prospective subcontractors seeking secure access to Lockheed Martin timekeeping systems, including LMPeople and contractor time-tracking portals in 2026.

Navigating the enterprise network architecture of a premier global aerospace and defense contractor requires strict adherence to security protocols, Multi-Factor Authentication (MFA), and Federal Acquisition Regulation (FAR) compliance standards. Whether logging hours on-site at a Lockheed Martin facility, working remotely via secure virtual private networks (VPN), or submitting contractor hours through external partner portals, accurate and timely time recording is a strict regulatory requirement enforced by the Defense Contract Audit Agency (DCAA).

Lockheed Martin Timekeeping Ecosystem: Enterprise Architecture in 2026

Lockheed Martin utilizes integrated software environments to manage labor distribution, payroll, and federal billing auditing. The specific application accessed depends on employment classification, facility security clearances, and network connection status.

+-----------------------------------------------------------------------+ | THIS IS A RULE CHECK TO ENSURE NO ASCII ART IS USED - RE-VERIFYING | +-----------------------------------------------------------------------+

(Self-correction: Do NOT use ASCII flowcharts or box diagrams. Present strictly via tables, lists, or narrative text).

Key Enterprise Platforms for Labor Tracking

1. LMPeople Enterprise Portal: The central internal Human Resources and employee self-service platform. LMPeople serves as the gateway to internal labor reporting, benefit management, and core time tracking for direct Lockheed Martin personnel.
2. Deltek Costpoint / Enterprise ERP Time & Expense: The primary accounting and time-collection platform used for government contract accounting. It tracks task codes, Work Breakdown Structures (WBS), and charge numbers compliant with federal Cost Accounting Standards (CAS).
3. Exostar Identity and Access Management (MAG): The external security framework utilized by third-party contractors, suppliers, and partners requiring external access to Lockheed Martin networks and time-entry applications without internal network credentials.
4. LMP2P (Procure-to-Pay) & Fieldglass Systems: Dedicated subcontractor management systems where external vendors log billable service hours for purchase order (PO) matching and invoice processing.

Prerequisites for Timecard Portal Access and Authentication

Accessing Lockheed Martin timecard systems requires multi-layered hardware and identity verification protocols established by the Lockheed Martin Corporate Information Security (CIS) organization.

Mandatory Identity Verification Accessing government-contractor labor systems requires pre-registered identity credentials. Unauthorized access attempts on Lockheed Martin systems violate federal law under 18 U.S.C. § 1030 (Computer Fraud and Abuse Act) and applicable Department of Defense security directives.

Required Hardware and Software Credentials

• LMT SmartBadge / PIV Card: Enterprise identity cards containing integrated PKI certificates required for direct physical workstation access and cryptographic network signing.
• Approved Security Tokens: Hardware tokens (such as YubiKeys configured for FIPS 140-3 standards) or soft-token mobile authenticators approved by Lockheed Martin Enterprise IT.
• Virtual Private Network (VPN) Client: Standardized Lockheed Martin VPN clients with active internet connections are mandatory when accessing enterprise timecards from remote locations.
• Modern Browser Specifications: Modern enterprise browsers (Microsoft Edge, Google Chrome Enterprise) configured with active TLS 1.3 encryption and enabled JavaScript execution.

Step-by-Step Guide: Logging Into the Lockheed Martin Timecard Portal

Follow these operational steps to establish a secure connection and record daily labor allocations.

Standard Internal Access Workflow (On-Network or VPN)

1. Establish Secure Connection: Connect your corporate laptop or workstation to the internal Lockheed Martin network or launch the authorized Lockheed Martin Secure VPN client from a remote environment.
2. Authenticate Network Session: Insert your LMT SmartBadge into the card reader or execute soft-token MFA verification when prompted by the network border controller.
3. Navigate to Access Gateway: Launch an enterprise-compliant browser and navigate to the internal LMPeople gateway or the direct Costpoint Time & Expense bookmark provided during onboarding.
4. Enter Identity Credentials: Select your digital certificate when prompted by the web server, enter your SmartBadge PIN or secondary passkey, and complete the sign-in prompt.
5. Select the Current Pay Period: Open the active timecard interface, verify the accurate pay period ending date, and confirm your default primary department and overhead charge numbers.

External Supplier and Subcontractor Access Workflow (via Exostar)

1. Navigate to Exostar MAG: Open the Exostar Managed Access Gateway login page.
2. Enter Partner Credentials: Input your registered Exostar User ID, Password, and select the appropriate Organization identifier assigned during vendor registration.
3. Complete Two-Factor Authentication: Provide the one-time passcode generated by your hardware token or phone-based authenticator app.
4. Select Lockheed Martin Application: Within the Exostar service dashboard, click on the Lockheed Martin Subcontractor Time & Expense or LMP2P module link.
5. Record and Sign Hours: Input hours against approved Purchase Order line items and execute an electronic signature upon completion of the weekly period.

Comparative Matrix: Timekeeping Interfaces & Access Protocols

The table below outlines the operational parameters, authentication mechanisms, and primary user bases across Lockheed Martin's timekeeping and portal platforms in 2026.

DCAA Compliance Rules and Labor Charging Standards

As a primary defense contractor operating under Federal Acquisition Regulation (FAR) guidelines, Lockheed Martin enforces strict labor-charging policies. Failure to comply with these rules can result in severe federal penalties, contract cancellation, and individual administrative action.

Mandatory Daily Labor Recording

DCAA regulations mandate that hours worked on government projects must be logged daily. Labor entries must reflect actual hours worked on specific Work Breakdown Structure (WBS) codes rather than projected or estimated allocations.

Key Rules for Accurate Time Recording

• Real-Time Entry: Record hours worked at the end of each workday. Backfilling or advance-entering hours is strictly prohibited under federal auditing guidelines.
• Correct Charge Assignment: Ensure hours are billed to the exact charge code corresponding to the effort performed. Billing hours to incorrect contract numbers ("cross-charging") constitutes labor fraud.
• Audit Trail for Corrections: Any modification to a previously submitted timecard requires a clear, documented justification. The system automatically records the timestamp, user ID, original value, modified value, and reason for change.
• Period-End Electronic Signature: At the conclusion of each labor week, users must electronically sign their timecard, certifying that the entries represent an accurate statement of work performed.

Troubleshooting Common Timecard Access Errors

Technical issues can occasionally interrupt labor entry. The following procedures resolve the most frequent connection and system authentication errors encountered in 2026.

Issue 1: SmartBadge / PKI Certificate Not Detected

• Symptom: Web browser displays "403 Forbidden," "Certificate Required," or fails to prompt for a PIN.
• Resolution:
  
  
  1. Remove the SmartBadge from the hardware reader and clear the smart card chip contacts with a soft dry cloth.
  2. Open your web browser settings and clear the SSL state cache.
  3. Reinsert the SmartBadge, restart the browser, and attempt reconnection.
  4. Verify that the SmartCard service is running in Windows Services (scardsvr).

Issue 2: Exostar MFA Synchronization Failure

• Symptom: One-Time Passcode (OTP) from token is rejected repeatedly on the Exostar MAG login portal.
• Resolution:
  
  
  1. Check device time settings; OTP generators require perfect system clock synchronization.
  2. Perform a token re-synchronization within the Exostar user portal by submitting two consecutive passcodes generated by your token.
  3. Contact your organization's Exostar Administrator if hardware token battery failure is suspected.

Issue 3: Inactive or Invalid Charge Code Errors

• Symptom: Entering a valid charge number returns "Invalid Charge Code" or "WBS Element Closed."
• Resolution:
  
  
  1. Verify with your Cost Center Manager or Project Lead whether the WBS code reached its scheduled period end date or financial cap.
  2. Confirm that your user profile has been explicitly mapped to the active Work Breakdown Structure in Deltek Costpoint.
  3. Submit an internal IT/Finance ticket to re-authorize your profile against the specified project element.

Technical Support and Helpdesk Escalation Contacts

When automated troubleshooting steps fail to resolve timecard access errors, personnel must escalate through official internal or partner service channels.

Enterprise IT Operations Notice Never share passwords, PKI PINs, or Multi-Factor Authentication passcodes with internal helpdesk agents or external callers. Lockheed Martin Security will never request your private PIN or token credentials.

Internal Escalation Channels

• Lockheed Martin IT Service Desk: Accessible internally via the LMT Service Portal or via corporate phone directory extension for password resets, VPN connection repairs, and SmartBadge unlocking.
• Costpoint / Labor Operations Helpdesk: Reached via internal enterprise ticketing for charge code mapping, missing labor profiles, and period-end timecard audit unlocks.

External Subcontractor Support

• Exostar Customer Support: Available via the Exostar portal help site for password resets, token replacements, and organization registration assistance.
• Subcontractor Administrator: Contact your company's designated Lockheed Martin Procurement Representative (Buyer) or Program Subcontract Manager (PSM) for purchase order modifications or PO hour ceiling increases.

Frequently Asked Questions

How do I log into my Lockheed Martin timecard when working remotely?

Establish a secure VPN connection using your Lockheed Martin-issued laptop and SmartBadge authentication. Once the VPN connection is confirmed, launch your browser and access the internal LMPeople or Deltek Costpoint link from your enterprise bookmarks.

What should I do if I forget to submit my timecard on Friday?

Contact your direct supervisor or Cost Center Manager immediately. You will need an administrative override or timecard unlock initiated through Labor Operations to enter late hours and provide a mandatory DCAA-compliant reason for late submission.

Can defense contractors log timecard hours using personal mobile devices?

No. Direct labor charging and timecard submission for defense contracts must occur on secure corporate assets or approved, encrypted BYOD channels running mandatory enterprise containerization and FIPS-compliant MFA protocols.

What is the primary difference between LMPeople and Deltek Costpoint?

LMPeople serves as Lockheed Martin's overarching internal HR and employee portal for broad administrative management, while Deltek Costpoint is the underlying government-compliant ERP platform used specifically for project-level task logging, labor distribution, and contract cost accounting.

Why is my Exostar hard token rejecting my one-time password for Lockheed Martin access?

Passcode rejection typically occurs due to clock drift between the token device and the authentication server, or because your Exostar account password has expired. Perform a token resynchronization in the Exostar MAG settings or update your Exostar account password.

Actionable Next Steps for Program Personnel

Maintaining seamless timecard compliance ensures uninterrupted payroll processing and compliant program management. Enterprise personnel should take the following steps:

1. Verify Credentials: Confirm your SmartBadge PKI certificates and hardware authentication tokens are active and not within 30 days of expiration.
2. Bookmark Official Gateways: Ensure you only access labor portals through verified internal bookmarks or official Exostar MAG links to avoid phishing vectors.
3. Establish a Daily Logging Routine: Set a daily calendar reminder prior to the end of your shift to record hours worked against active task codes in full compliance with DCAA guidelines.