Additional information for GP practice managers – October 2023

If your smartcard is locked, you can now use an online unlock tool instead of unlocking in person. All you need a is valid email address on the Care Identity Service.

To use the tool, make sure your smartcard is inserted into the smartcard reader, visit https://digital.nhs.uk/unlock and get an email with a security code.

Find out more about the tool and view a step-by-step guide on how to use it.

Use our promotional pack to tell your patients about how they can order a repeat prescription on the NHS App, which includes a step-by-step guide on how to use the feature.

Using the NHS App for repeat prescriptions helps reduce the number of phone calls to your practice and allows you to manage prescription approvals at a time that suits you.

You can now access the first batch of topics for the Digital Primary Care: The Good Practice Guidelines for electronic patient records (version 5). These guidelines give you the latest information about how to use digital tools and services effectively, safely and in accordance with the law and other national standards.

Cyber security threats are increasing in the NHS. This October we are sharing cyber security tips, training opportunities and resources to help us to defend as one against them.

We’re developing a new way to search for information about the national digital products and services we provide, such as the NHS App, NHS e-Referral Service and Care Identity Service.

We have started by adding filters and an in-page search to the new Service catalogue, to help you quickly find what is relevant to you and your needs.

Take a look at the Service catalogue and please let us know if you have any comments or suggestions at who.doeswhat@nhs.net.

/by
Registration Authority newsletter October 2023

Self-service smartcard unlock

The new self-service smartcard unlock application is now available to all smartcard holders: https://digital.nhs.uk/unlock

Smartcard holders can automatically use the new application if they have a valid email address on their Care Identity profile. This means:

  • there's no need to register
  • there are no security questions to remember
  • nobody needs to take their card to a Registration Authority to have it unlocked
  • everyone can access the application using a regular internet connection

When a user locks their smartcard, the existing link on NHS Identity Agent will redirect to the new application.

RAs should direct smartcard holders to the new service now. You should also check and add users' email addresses to allow more people to use self-unlock.

For full details of the new application, read our guidance on the new self-service smartcard unlock.

Update NHS Credential Management now, to prepare for series 9 smartcards

Series 9 smartcards will be introduced next month and will require additional software components for their rollout. These components and guides are available below:

  • NHS Credential Management 1.3.1.0
  • PIV Minidriver (to be deployed on all systems using series 9 smartcards)

You can download the software and installation guides from the DIR downloads site (needs HSCN connection).

We have also released NHS Identity Agent 2.4.5.0 (utilising security update TLS 1.2) which includes the new self-service unlock link.

A broadcast event was held 22 September 2023 to outline the documentation, installation and support processes. A video of this event is available here.

Apply for Care ID

The Apply for Care ID service provides a remote way of carrying out an ID check without the need for a face-to-face appointment. If you have an RA manager, agent or sponsor role, you can use this service straight away.

To find out more and get started, view our Apply for Care ID web pages.

Apply for Care ID have recently released:

  • a smartcard photo upload feature for applicants
  • a smartcard photo cropping tool for ID checkers to ensure that images are the right ratio, size and orientation for smartcard printing

In the next quarter we’ll be:

  • introducing a ‘mark as done’ feature so that you can keep track of the authenticators you’ve issued in CIS/CIM for approved applications
  • introducing a route for applicants who do not pass the online address check, to provide additional evidence to prevent rejection by our ID checkers
  • making applications raised by sponsors more visible to associated RAs
  • linking to Care Identity Management
  • making continuous improvements based on data and feedback

Care Identity Management

iPads

You can now issue an iPad as an authenticator, in place of a smartcard.

Please note that if a user already uses an iPad to authenticate and you want to issue a new one, you must first remove the old iPad using the legacy Care Identity Service application. We will add this action to Care Identity Management in a future release.

https://digital.nhs.uk/services/care-identity-service/applications-and-services/care-identity-management/user-guides/issue-an-ipad-as-an-authenticator

You will be able to add other types of non-smartcard authenticator in the future.

Smartcard passcode validation changes

Passcodes for all smartcards must now be in a 6 to 8 digit format. This change was made so that Care Identity Management will be able to support series 9 smartcards.

Access for local smartcard administrators

From October 3rd, local smartcard administrators (unlockers) will be able to perform their full unlocker role in Care Identity Management, including:

  • searching for and viewing user profiles
  • unlocking a smartcard
  • renewing a smartcard, if the card is within its certificate renewal period

Unlockers should stop using the Care Identity Service application and start using Care Identity Management instead.

Access for Registration Authorities

Registration Authorities have the same access as before and should adopt Care Identity Management for their day-to-day work wherever possible.

Prepare for the new Cervical Screening Management System (CSMS)

A letter was issued on 18th September 2023, which outlined the actions providers need to take to ensure an effective transition to the new Cervical Screening Management System (CSMS). The new system will go live by the end of 2023/24. Additional resources are available here:

If you have any queries that are not addressed on the CSMS website, or can’t complete actions in the timeframe stated, please email screening.implementation@nhs.net so we can work with you to make sure that the actions are completed.

Registration Authority Roadshow, coming in the next month

The next virtual roadshow will take place soon. We will send out an invitation to all RA managers closer to the date.

For more information on our work please visit our website or email IAMplatforms@nhs.net.

/by
NHS wireless tech trials: apply now for funding this financial year

Funding and support is available for NHS organisations that are implementing innovative WiFi solutions to address healthcare’s connectivity challenges.

If you would like to apply for funding this financial year (2023/24), you will need to complete a short application form and submit it to nhsdigital.future.connectivity@nhs.net by Friday 6 October.

We will continue to accept applications after this date for organisations who do not require funding until the following financial year.

Find out more about the trials and request an application form.

/by
For information: Multifactor authentication (MFA) to be enabled for new NHSmail users

From 2 October 2023, new NHSmail users (excluding pharmacy, optometry, dentistry and social care users) will have MFA applied to their NHSmail account by default.

We recommend you update any local guidance for new starters to include MFA registration as part of setting up their account.

These changes are being implemented to improve cyber security across the NHS. Industry research suggests that MFA can prevent 99.9% of attacks on user accounts.

More information can be found on the NHSmail support site.

/by
Self-service smartcard unlock – migration to new application complete

The migration from the old, registration-based self-unlock process to the new, faster system is now complete.

The final steps of the migration are now in place:

  • the old service URL now redirects to the new application
  • the link from Identity Agent when a smartcard is locked now points to the new application

You can no longer access the old service and should let staff know that they should use the new application to unlock their smartcard. They will still need to take their card to a Registration Authority or unlocker if:

  • they do not have a valid email address on their profile
  • their certificates have expired

The short URL for the new application is digital.nhs.uk/unlock

For full details of the new application, read our guidance on the new self-service smartcard unlock.

/by
Recording of the series 9 smartcard broadcast event

NHS England held a 1-hour broadcast event on 21 September 2023. You can view a recording of the event here.

The main focus was on new software required across the entire health and care network, including:

  • NHS Credential Manager 1.3.1.0
  • Identity Agent 2.4.5.0

It also covered timings and what is required to update the software, followed by a Q&A session.

    For more information on the new smartcards, email iamplatforms@nhs.net

    /by
    Event: A unified approach to nursing and midwifery documentation webinar

    Towards a unified vision of nursing and midwifery documentation is now available. This guidance outlines principles to reduce the burden of documentation and support its digitisation.

    Join our webinar on Monday 2 October from 4pm to 5pm to learn more about the guidance and get further advice on implementing the principles in your area.

    Find out more and register to attend.

    /by
    Final reminder: Summary Care Record application is closing on 29 September 2023

    Please ensure that your organisation and your staff have prepared for the switch from the Summary Care Record application (SCRa) to the National Care Records Service (NCRS) before 29 September 2023.

    If you do not, users will automatically be redirected to the NCRS after this date to ensure they do not lose access to national patient services. This does not apply to users of the ‘Chargeable Status’ tab.

    Read more about the NCRS.

    /by
    For action: switching on access to online GP records

    The information below for EMIS practices is out of date. If you did not submit a form to add your practice to the list, it may still be possible to secure a slot once existing requests have been processed by emailing us. Please include your practice name, ODS code and your request to bulk enable access and we will work to support you.

    The updated GP contract requires all practices to provide their patients with online access to new (prospective) health information in their GP records (unless exceptions apply) by 31 October 2023. Please see the GP readiness checklist. 

    You can request EMIS to automatically enable your patients access to their records. Additional sessions are available in October where EMIS is running these ‘bulk enablement’ processes for participating practices. To add your practice to the list, please book a slot by 19 September. 

    You can follow this user guide (FutureNHS login required) to update your system yourself before the deadline of 31 October. Practices that have already switched on access to online GP records have found the process easy to follow.  

    Practices should not bulk-apply the SNOMED code ‘1364731000000104 Enhanced review indicated before granting access to your own health record’ to their patients. Changes to the GP contract 2023/24 only allow for people to be excluded from online record access if they are individually identified as at-risk or individually decide to opt-out. 

    If you have bulk-applied the SNOMED code ‘1364731000000104 Enhanced review indicated before granting access to your own health record’ to large cohorts of patients, you should ensure that individuals who are not individually at risk have a SNOMED code ‘1364751000000106 Enhanced review not indicated before granting access to your own health record’ applied before your bulk enablement processes are run.  

    When considering safeguarding issues, it is important to remember that patients will only be able to see new information as it is saved in their health record after the practice go-live date. Read more about safeguarding your patients during these changes. 

    More information about enabling access can be found on the NHS Digital website. If you need any help or advice, you can contact our dedicated support team.  

    /by
    Event: Medicines Interoperability webinar

    Our Digital Medicines programme is looking for partner organisations and suppliers to work on a collaborative project in secondary care to accelerate the development of medicines reconciliation and develop and deploy the Electronic Prescription Service (EPS).

    You may already be working towards these deliverables or be interested in understanding more. If so, please join us for a webinar on Wednesday 4 October 2023 from 1pm to 2pm.

    Find out more and register to attend.

    /by