PKI Registration Guide
Version 1.4
Table of Contents
Section 1.0 Introduction.................................................................................................................................. 1
Section 2.0 Certificate Enrollment ................................................................................................................... 2
Section 3.0 Certificate Revocation .................................................................................................................. 5
nphies PKI Registration Guide Page | i
Version and Distribution History
Version # Date Brief Comments on Change Changes in Section No.s
1.0 10-Dec-20 Submitted the Document All Sections applicable
1.2 29-Dec-20 Updated to be used for client Removing admin sections
1.3 09-Feb-2021 Confirmation of Submission of request email Section 2 Certificate Enrollment
Statement added for clarity to ensure that
a separate enrollment is completed for Section 1
1.4 18-March-2021
each unique Entity Section 2: Step 1
nphies PKI Registration Guide Page | ii
SECTION 1.0 INTRODUCTION
A Public Key infrastructure (PKI) is a solution to protect and secure Nphies integration by
ensuring the authenticity of the integrators and protecting their data while it is exchanged with
the NPHIES platform.
This document will guide the end user and operators to generate and manage and certificate life
cycle.
The Public Key infrastructure (PKI) Certificate Enrollment Process must be completed for
each Entity that will be exchanging with the NPHIES platform.
IMPORTANT NOTE: A separate enrollment must be completed for each Entity, including
those who are part of a group with multiple branches.
nphies PKI Registration Guide Page | 1
SECTION 2.0 CERTIFICATE ENROLLMENT
The Certificate Enrollment Process will be initiated by calling the URL below:
https://one.digicert.com/mpki/web-enrollment/8089124e-c64a-479e-940d-fffb7f9c3589
Step 1
The User must fill the information below to be able to submit the request for approval:
▪ Email Address: The email to which the User wishes to receive the approved certificate
▪ Common Name: The unique common name of the party which must match with the
identified unique identified on Rhapsody Engine (Organization Unique ID will be
provided by nphies). For HCPs this will be the NHIC Organization ID, for HICs and
TPAs this will be the 700 number.
▪ Organization Name: The name of the Entity.
• NOTE: The maximum number of characters in this field should not exceed
64 characters and should not contain underscores (_). The field will accept
such values and will not return any error, however, there will be an error
when downloading the certificate. In this case, the Entity will need to
submit a new Certification request.
nphies PKI Registration Guide Page | 2
Step 2
Once the enrollment request is completed, the User must submit the form by clicking the
“Update” button and a notification will be sent to nphies Admin for approval.
After enrollment, a notification will be sent to the nphies Admin for verification and approval.
Step 4
Once the User submits the request , they must send a confirmation email stating that they have
submitted the PKI request, including the registered email and entity nphies ID to
[email protected]
Step 5
Upon approval, the User will receive a confirmation email from PKI with a URL link for
downloading the certificate as shown below:
nphies PKI Registration Guide Page | 3
Step 6
The User must use the link to download and import the certificate using the received URL /
password.
The downloaded file must be kept in secure location in password encrypted format to ensure
protection of the file from unauthorized access.
NOTE: The link is for one-time use and the password will be lost after installing the
certificate. Failure to save the password will result in the Entity being required to submit
a new certification request
nphies PKI Registration Guide Page | 4
SECTION 3.0 CERTIFICATE REVOCATION
If an Entity is suspecting of any compromising or sharing of the received PKI Certification key
with an unauthorized party, the Entity must report this to the nphies support team in order to
revoke the certificate immediately and request a new certificate.
By revoking the certificate, access to the nphies platform will be suspended until the new key is
shared with the Entity.
nphies PKI Registration Guide Page | 5
