Request, link or revoke your NASH or PKI certificate

How to use HPOS to link or revoke National Authentication Service for Health (NASH) and Public Key Infrastructure (PKI) certificates.

You need a Provider Digital Access (PRODA) account to access Health Professional Online Services (HPOS). If you don’t have one, register for a PRODA account and link the service.

You can also access some Medicare programs through HPOS using a Medicare PKI certificate.

Only organisation maintenance officers (OMOs) can request and link NASH and PKI certificates.

We’re upgrading our authentication systems to strengthen security when you access digital health services. We’ll no longer issue NASH SHA-1 PKI certificates from 14 March 2022. Read more about the authentication system upgrade.

Request and link NASH and PKI certificates

A Medicare PKI site certificate can be used to access the Healthcare Identifiers Service (HI Service). A NASH certificate can be used to access both the HI Service and My Health Record system.

  • request NASH PKI organisation certificates and new Medicare PKI site certificates
  • check your NASH PKI certificate expiry date
  • link existing Medicare PKI site certificates and PBS site certificates.

If you’re a pharmacy OMO, you can link your existing Medicare PKI or PBS site certificate to access the HI Service.

To link an existing certificate you need your certificate registration authority (RA) number. You can find your RA number printed on the certificate CD, or by contacting your software vendor.

You need to log on to your PRODA account, then select:

  1. Go to service on the HPOS tile
  2. My programs
  3. Healthcare Identifiers and My Health Record
  4. Healthcare Identifiers - Manage existing records
  5. the required organisation record
  6. the Certificates tab.

When selecting the required organisation record, you may need to navigate to the correct record. Refer to view the organisation's network map, manage HPI-O details and manage your OMO procedures.

To request a NASH certificate:

  1. select Request a NASH PKI site certificate
  2. select either the Software Product or I cannot select a product because
  3. enter a mobile number
  4. tick the check box to confirm you have read and understood the terms and conditions
  5. save changes and submit.

When your certificate is ready for downloading, your Personal Identification Code (PIC) will be sent in a text message. You need the code to activate the certificate.

  1. select the Link existing PKI certificate link
  2. enter in the RA number of the certificate you want to link
  3. save changes and submit.

Revoke NASH PKI certificates

You can ask us to revoke NASH PKI organisation certificates.

You need to log on to your PRODA account, then select:

  1. Go to service on the HPOS tile
  2. My programs
  3. Healthcare Identifiers and My Health Record
  4. Healthcare Identifiers - Manage existing records
  5. the required organisation record
  6. the Certificates
  7. the relevant hyperlink and complete the required fields.

When selecting the required organisation record, you may need to navigate to the correct record. Refer to view the organisation's network map, manage HPI-O details and manage your OMO procedures.

We’ll cancel your certificate in 72 business hours and send an email notification. You can then request a new certificate in HPOS.

Page last updated: 20 September 2021