This article explains how to record your HPI-O and HPI-I numbers in Bp Premier and import the site and NASH certificates required to connect to the My Health Record system.
Discontinuation of NASH certificate CDs
From 07 November 2018, Medicare no longer issue NASH certificates as physical CDs. Organisation Maintenance Officers can now securely download digital NASH Organisation PKI certificates via HPOS (Healthcare Provider Online Services). Organisations whose existing NASH Public Key Infrastructure certificates expire after 07 November will no longer automatically receive a CD in the mail. Instead, you will be sent a letter approximately 60 days before the certificate expires notifying you of the expiry date and directing you to download a new certificate through HPOS.
NASH certificates expire after two years and need to be regularly renewed to ensure ongoing connectivity. Check the expiry dates of your imported NASH Organisation KPI certificates in Bp Premier and note when you will need to import new certificates. See Check Medicare certificates for expiry for more information.
Information on applying for a NASH certificate through HPOS is provided in the Department of Human Services website.
The process to import digital certificates downloaded through HPOS is the same as importing a certificate from a physical CD.
Can I install multiple NASH certificates?
Bp Premier sites are able to register and claim against multiple Minor IDs in the software. Each Minor ID will require a matching Medicare Site certificate to enable Medicare online claiming.
However, the NASH certificate (or eHealth Record Site Certificate), which is the certificate used to identify the practice to My Health Record online, is independent of the Minor ID. Your practice does not need to install multiple NASH certificates based on the number of Minor IDs registered in the software.
You only need to update your NASH certificate if your practice changes the HPI-O number (Setup > Practice Details > Change > Health Identifier) or the certificate is about to expire. See Check Medicare certificates for expiry for more information.
NASH certificates and practice incentives
There is no incentive benefit to a practice for installing more than one NASH certificate. A NASH certificate applies only to accessing My Health Record online and secure messaging. NASH certificates have no effect on how Medicare calculates Standardised Whole Patient Equivalent (SWPE) values for a practice.
For more information on practice incentives, refer to the Department of Human Services website.
Before you begin
Note the following before you start configuration:
- Make sure you have obtained: a HPI-O number for your practice; the HPI-I numbers for each provider in your practice; and your Medicare Location (site) and NASH PKI certificates.
- When performing all procedures below, log in to Windows on the Bp Premier server as an administrator user.
- Enable UAC (User Access Control) in Windows on the Bp Premier server, if your version of Windows enables UAC. UAC is required to grant permissions to the user to install certificates to the Windows certificate store.
Enter HPI-I and HPI-O numbers into Bp Premier
HPI-O (Organisation)
- From the main screen of Bp Premier, select Setup > Practice Details and click Change. The Practice Details screen will appear.
- Check that the correct practice name is displayed at the top of the screen.
- Enter the HPI-O into Health Identifier and click Save.
HPI-I (Individual)
Each provider who wishes to utilise the My Health Record service requires a health identifier (HPI-I) entered in their user details.
- From the main screen of Bp Premier, select Setup > Users.
- Highlight the user and click the Edit button.
- Enter the HPI-I into the Health Identifier field and click Save.
Import certificates
To import the certificates, you will need:
- Your Medicare Site Certificate CD. This is the CD originally used to set up Medicare Online. This certificate allows you to access the Health Identifiers (HI) registry of eHealth.
- Your NASH Certificate CD (received prior to 07 November 2018), or your digital NASH PKI certificate downloaded through HPOS. The CD may also be labelled 'e-Health Record Site Certificate'. This certificate allows you to access the My Health Record component of eHealth.
- NASH certificate passphrase. This is the PIC code provided by Medicare when you apply for your NASH certificate. The PIC code will either be provided with your physical CD in a separate letter, or sent by SMS to the phone number registered through HPOS.
Perform the following procedures on the Bp Premier server only.
IMPORTANT If you are prompted for the Windows Administrator password when importing certificates, you may need your IT technician or a Windows Administrator to import the certificates.
Import the Site Certificate
- Insert the Medicare Site certificate CD into the server.
- Log in to the Bp Premier server and go to Setup > Configuration > General tab. Click Import Certificates.
- If prompted by Windows, select Yes to Do you want to allow this app to make changes to your device?.
- Log in to certificate manager using your Bp Premier username and password. The BP eHealth Certificate Import Tool screen will appear.
- Click on the File Explorer icon and browse to the Medicare Site certificate CD you inserted.
- Select the Practice Certificate (FAC_Sign.p12) and click Open.
- Type your Certificate Passphrase in. This is the PIC code provided to the practice by Medicare with your Medicare Site certificate.
- Select the Health Identifier radio button.
- Click Import.
- If the import was successful, a message The eHealth certificate has been successfully imported will be displayed.
Import the NASH Certificate
- If your practice still has a physical NASH certificate CD that has not expired, insert the NASH certificate CD into the Bp Premier server.
- Log in to the Bp Premier server and go to Setup > Configuration > General tab. Click Import Certificates.
- If prompted by Windows, select Yes to Do you want to allow this app to make changes to your device?.
- Log in using your Bp Premier username and password.
- The BP eHealth Certificate Import Tool screen will appear.
- Click on the open folder icon and browse to the NASH (My Health Record) certificate on CD or file.
- Select the Practice Certificate (Sign3.p12) and click Open.
- Type your Certificate Passphrase in. This is the PIC code that is provided to the practice by Medicare when you applied for your NASH certificate.
- Select the My Health Record radio button.
- Click Import. A popup will inform you of the success or failure of the certificate import.
If you downloaded a digital NASH certificate through HPOS, copy the file to the Bp Premier server, or insert the memory stick that contains the certificate file.
Confirm the NASH certificate has been imported
If the NASH certificate has been imported correctly, you will find that you have a new My Health Record menu item when viewing a patient record.
If the My Health Record menu is not visible, check:
- the logged-in user has an HPI-I number entered in their user record
- the user has permission to access My Health Record.
Import certificates on workstations
You do not have to take any action to import certificates on Bp Premier workstations.
After you have confirmed that the server is working correctly for both HI lookups and My Health Record access, each time someone logs in on a workstation, Bp Premier will automatically import the certificates required for HI and My Health Record.
However, if you are using terminal servers for workstations in your network, you must log in as each Windows user so that the system can import the certificates into the current user’s certificate store in Windows.
Set user access and preferences for My Health Record
Perform the following steps for each Bp Premier user who requires access to My Health Record for patients.
- Select Setup > Users from the main Bp Premier screen.
- Select the user who you wish to update and click Edit. The Edit User Details screen will appear.
- Enter the user's HPI-I number into the Health Identifier field, if you haven't already done so.
- Click the Set Permissions button in the bottom left of the screen.
- If the user must be able to upload or download a patient's My Health Record information, set My Health Record Access to Allowed. The user would usually be a Health Practitioner.
- If the user is only permitted to assist patients with their My Health Record registration process, set My Health Record Registration to Allowed.
Set User Preferences
For users who have My Health Record access, settings in the Setup > User preferences > Clinical screen control how the user is prompted for information.
- Display a My Health Record prompt in the Reminders box prompts the user to include Reminder information in the patient's Shared Health Summary.
- Mark new PMH to be included in Shared Health Summaries will automatically display new part medical history items when creating a Shared Heath Summary.
User configuration is complete.
Patient registration
Patients will need to register for a My Health Record before providers can upload clinical details. Patients can register themselves and their children at myhealthrecord.gov.au/for-you-your-family/howtos/register-for-my-health-record.
Or providers can assist patients with registration. See Assist a patient with My Health Record registration for more information.
Disable My Health Record access
If a user no longer requires access to My Health Record, set the My Health Record Access in the Set Permissions screen of their user properties to Not Allowed. The user will no longer see the My Health Record button on the patient record screen.
The user must log out and back in to Bp Premier for this change to take effect.
