Guide To LMCO MyTimecard In 2026: Login, DCAA Compliance, And Remote Access Protocols

Disambiguation Note: This technical guide refers exclusively to the labor tracking system used by Lockheed Martin Corporation (LMCO) and its subsidiaries. It does not address consumer-facing retail or healthcare timecard platforms.

Accurate labor accounting is the operational backbone of defense contracting. For Lockheed Martin (LMCO) employees, contractors, and external partners, the proprietary MyTimecard application—accessible primarily through the LMPeople portal—is the central platform for tracking and reporting hours.

Because Lockheed Martin operates under strict federal regulations, logging hours is not merely an administrative chore; it is a legally binding statement of contract execution. In 2026, with the full enforcement of Cybersecurity Maturity Model Certification (CMMC 2.0) and revised Defense Contract Audit Agency (DCAA) guidelines, accessing and updating your MyTimecard requires adherence to rigorous security and compliance frameworks.

The Lockheed Martin Timekeeping Architecture: LMPeople and MyTimecard

The LMCO timekeeping ecosystem is hosted within a highly secure corporate network, utilizing FedRAMP High cloud systems and localized physical servers. MyTimecard is integrated directly into LMPeople, the master human capital management and enterprise resource planning (ERP) system.

Enterprise Directory -> MFA Challenge (PingID/Smart Card) -> LMPeople Portal -> MyTimecard Module

This integration ensures that every hour logged is instantly mapped to specific Work Breakdown Structure (WBS) elements, control accounts, and contract line item numbers (CLINs).

For security reasons, access controls vary depending on whether you are an on-site employee, a remote worker, or an external subcontractor. The platform utilizes identity provider (IdP) federation to authenticate users across different security enclaves, ensuring that classified program information remains isolated while labor charging flows seamlessly to corporate finance.

Authentication and Access Channels

Accessing the LMCO MyTimecard portal requires specific credentials depending on your employment status and physical location. In 2026, single-factor authentication (passwords alone) is completely deprecated across all Lockheed Martin networks in compliance with NIST SP 800-171 Revision 3.

1. Internal Network Access (LMC Intranet)

When working from a Lockheed Martin facility or connected via the corporate Virtual Private Network (VPN), access is streamlined. Employees use their physical LMC Smart Card (also referred to as a badge or PIV card) inserted into a certified smart card reader, combined with a personal identification number (PIN).

2. External Access via LMPeople Portal

For remote employees logging hours from non-LMCO networks, access must be routed through the external LMPeople portal. This channel mandates the use of PingID multi-factor authentication (MFA). Users can configure the PingID app on an approved mobile device, receive an SMS one-time passcode (OTP), or utilize an approved hardware token (such as a YubiKey).

3. Subcontractor and Partner Access (Exostar MAG)

Subcontractors do not typically receive direct corporate LMC credentials. Instead, they must authenticate through the Exostar Managed Access Gateway (MAG). Exostar serves as the trusted secure portal connecting external vendors to Lockheed Martin's internal applications. Subcontractors must maintain active Exostar credentials and complete the required organizational proofing to access the MyTimecard module.

DCAA Compliance and Strict Timekeeping Rules

As a premier defense contractor, Lockheed Martin is subject to regular audits by the Defense Contract Audit Agency (DCAA). Compliance violations can result in severe financial penalties, contract termination, or even debarment from bidding on future federal programs. Every individual logging hours in MyTimecard must adhere to the following operational mandates.

Daily Labor Recording

DCAA rules dictate that labor must be recorded on a daily basis. You must log your hours in MyTimecard at the end of each shift to ensure real-time accuracy. Backdating entries or waiting until the end of the pay period to fill out your timesheet is a direct compliance violation.

Proper Allocation of Charge Numbers

Hours must be charged to the exact WBS element associated with the work performed. You are legally forbidden from "mishandling" hours—such as charging hours worked on an over-budget project to an under-budget contract, or charging direct labor to an indirect/overhead account. If you are unsure of the correct charge code, you must consult your Control Account Manager (CAM) or supervisor before saving your timecard.

Electronic Signatures and Approvals

At the end of each weekly tracking period, you must digitally sign and submit your timecard. Your signature is a legal certification that the hours recorded are true and accurate. Following employee submission, supervisors must review and approve the timecard.

Important Compliance Directive on Labor Modifications

Under DCAA audit guidelines, any change made to a submitted timecard requires a documented audit trail. If a correction is necessary after submission, the system will prompt you for a detailed reason code. Both the employee and the supervisor must re-sign the corrected card. Verbal agreements to alter timesheets without updating the official system of record are strictly prohibited and constitute labor fraud under federal law.

Step-by-Step Guide: Accessing and Submitting Your MyTimecard

To ensure a seamless, error-free login and submission process, follow these structured procedures.

Phase 1: Navigating to the Portal

1. Ensure your authentication device (LMC Smart Card or PingID app) is active and nearby.
2. Open an approved browser (Microsoft Edge in secure enterprise mode is recommended) and navigate to the official LMPeople login gateway.
3. If logging in externally, select the "External Access" link and enter your Lockheed Martin enterprise identifier (NTID) and password.
4. Complete the MFA prompt on your PingID mobile application or enter the code generated by your hardware token.

Phase 2: Recording Daily Hours

1. Once inside the LMPeople dashboard, locate and select the "MyTimecard" tile.
2. Verify that the current pay period displayed at the top of the screen matches the active work week.
3. Review your active charge codes. If a new project code has been assigned to you, click "Add Row" and input the alpha-numeric charge code provided by your program administrator.
4. Input the exact hours worked for each day in the corresponding cells. Round your hours to the nearest tenth of an hour (e.g., 6 minutes equals 0.1 hours), in accordance with standard corporate policy.
5. Click "Save" to commit your daily entries to the database.

Phase 3: Weekly Submission

1. On the final working day of your pay cycle (typically Friday, unless operating on an alternate work schedule like a 4/10 or 9/80), perform a final review of all logged hours.
2. Ensure that direct, indirect, and paid time off (PTO) allocations are correct.
3. Click the "Submit" or "Sign Timecard" button.
4. Read the legal certification prompt and click "Agree" to apply your digital signature.

Troubleshooting Common Login and Sync Errors

Given the highly secure nature of the LMCO network infrastructure, users frequently encounter access hurdles. Here is how to resolve the most common system errors.

1. PingID Authentication Loop or Desynchronization

• Symptom: You approve the PingID request on your phone, but the browser remains stuck on the authentication screen or displays an "MFA Timeout" message.
• Resolution: Ensure your mobile device has a stable network connection and that the device time is set to update automatically. A time drift of even 15 seconds between your phone and the LMCO servers will cause authentication tokens to expire. If the issue persists, open the PingID app, select "Settings," and choose "Sync App."

2. Smart Card Certificate Errors (Error 403 / Forbidden)

• Symptom: Your browser displays a generic "403 Forbidden" page when you attempt to access MyTimecard using your physical badge.
• Resolution: Verify that your smart card is fully inserted into the reader and that the reader's indicator light is green. Clear your browser's SSL state by navigating to Windows Internet Options -> Content Tab -> Clear SSL State. If using Microsoft Edge, restart the browser in a private window to force a fresh certificate request.

3. Locked Account or Expired Credentials

• Symptom: The portal displays an "Account Locked" notification after multiple failed attempts.
• Resolution: Under corporate cybersecurity policy, accounts are locked after three consecutive incorrect password or PIN entries. You must contact the LMCO Employee Service Center (ESC) or the Enterprise Service Desk at 1-800-435-7063 to initiate an identity verification check and password reset.

Frequently Asked Questions

How do I access LMCO MyTimecard from my personal home computer?

To access the timecard platform from a personal device, you must navigate to the external LMPeople web address and authenticate using your LMC username, password, and the PingID application. Some contracts may require a secure virtual desktop (VDI) environment to log hours, so consult your direct manager regarding project-specific remote access policies.

What is the strict deadline for submitting my weekly timesheet?

Timesheets must be finalized and signed by the employee no later than 10:00 PM Eastern Time on the final working day of your pay cycle. This is usually Friday, but may vary if you are on an approved alternate work schedule (AWS) or working overtime during weekend shifts.

What should I do if my assigned charge number is not appearing in MyTimecard?

If a required charge code is missing from your profile, do not attempt to charge hours to a generic or unrelated code. Contact your Control Account Manager (CAM) or program finance representative immediately to have your employee profile mapped to the correct charge authorization in the ERP database.

Can a supervisor change my timecard if I am out of the office?

A supervisor can make administrative corrections or log hours on your behalf only in situations where you are physically unable to do so (such as an unexpected medical leave). Any such entry must be accompanied by a written justification and signed off by the supervisor, creating a transparent audit trail for future DCAA reviews.

What happens if I submit my timecard late?

Submitting your timecard after the deadline disrupts the labor distribution process and can cause project billing delays. Repeated late submissions or failure to log hours daily will trigger internal compliance reviews, escalation to senior management, and potential disciplinary action.

Optimizing Your Daily Labor Management Workflow

Achieving compliance in defense contracting requires personal discipline and a systematic approach to administrative duties. To eliminate errors and maintain flawless compliance records, build a habit of updating your MyTimecard at a fixed time every day, such as the final ten minutes of your shift. Avoid waiting until Monday morning to log Friday’s hours, as memory lapses lead to charging errors.

If you manage a team or oversee a subcontracting agreement, establish clear communication channels regarding charge code allocations. Ensuring your team has access to the correct, approved numbers before work begins prevents retroactive adjustments and safeguards your program against audit findings.