Home

Client Certificate Management – Client Application User Guide

image

Contents

1. SCOTLAND L teow _Festre aiii Remsen Sue ested Ded Th Requires Replacement 4 21 2006 4 21 2006 4 Request Cert You are currently logged on as epoc 99100052 NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 21 of 34 PFOO1 v3 NHSScotland ePharmacy Delivery See section 3 4 for details of downloading and installing the new Certificate The status of the Request will change to Replaced ePharmacy Certificate Manager About NHS ePharmacy Certificate Manager vamin Refresh Downloaded and Installed 4 21 2006 4 21 2006 Replaced 4 21 2006 4 21 2006 You are currently logged on as epoc 99100052 Note The original EPOC certificate is not removed from the Client machine 3 6 Removing a Revoked Certificate Revoked Certificates are detected by the eCM Client Application Updater which runs automatically when the eCM Client Application is launched See Section 4 3 Restoring a Certificate from local backup copy Note it is NOT necessary to log on to the eCM Client Application in order to restore a Certificate from local backup copy 3 1 Restoring a previously backed up certificate Click on the Restore button on the Welcome or Main Menu Window The following Windows Dialog is displayed Import Certificate This screen is used to restore a certificate
2. Whoever actually performs the tasks must have specific rights and privileges on the necessary computer s as detailed in Section 5 2 1 3 ePharmacy Certificate Manager Overview 1 3 1 Installing the ePharmacy Certificate Manager application 1 3 1 1 Initial installation of the application Before it can be used to manage Certificates the Client Certificate Manager application must itself be installed on at least one computer at each location This is typically the computer that has ePharmacy adapter software installed See section 2 1 2 1 for details of installing the application from the Internet or section 2 1 2 2 has details of installing the application from CD 1 3 1 2 Updates to the application Each time the application is started it checks for updates available from a dedicated ePharmacy web service This includes checks for a new version of the application itself and for new or revoked Certificates See section 4 for details of this automatic update process 1 3 2 Using the ePharmacy Certificate Manager application The application can be used to assist in the following activities during the lifetime of a certificate 1 3 2 1 Requesting a certificate Before accessing the ePharmacy system the Responsible Person for each Message End Point must initially request a certificate from the ePharmacy Certification Authority CA Section 3 2 has details of how to Request a Certificate 1 3 2 2 Checking the Status of a Ce
3. NHS ePharmacy Certificate Manager come SCOTLAND nanan Request ID Status NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 20 of 34 PF001 v3 NHSScotland ePharmacy Delivery 3 5 Renewing a Certificate All EPOC Certificate requests made through the eCM Client application have their status shown in the Main Menu window of the eCM Client Application When an EPOC Certificate is about to expire its status will be shown as Requires Replacement At this time a letter will be sent to the Responsible Person advising that the Certificate is due for replacement and which will include a new PIN Number ePharmacy Certificate Manager About NHS ePharmacy Certificate Manager SCOTLAND San MENG RequestID Status Created Issued JL Rereh 43 Requires Replacement 4 21 2006 4 21 2006 4 Request Cert You are currently logged on as epoc 99100052 Click on the appropriate Request entry in the Main Menu list to highlight that request and enable the Request Cert button ePharmacy Certificate Manager About NHS ePharmacy Certificate Manager ee eas imed Requires Replacement 4 21 2006 4 21 2006 4 You are currently logged on as epoc 99100052 Click on the Request Cert button ePharmacy Certificate Manager About NHS ePharmacy Certificate Manager
4. NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide EPD US UG UG003 Version 1 Final 15 9 2006 NSS ISD 2006 This document either in whole or in part must not be modified reproduced disclosed or disseminated to others or used for purposes other than that for which it is supplied without the prior written permission of NHS National Services Scotland NHSScotland ePharmacy Delivery Contents 1 Introduction 1 1 Document Purpose 1 2 Overview of Certificates within the ePharmacy system 1 2 1 What are Certificates and why are they needed 1 2 2 Who needs a Certificate 1 2 3 Who is Responsible for a Certificate 1 2 4 Who issues a Certificate 1 2 5 How do I contact the Certification Authority 1 2 6 How long does a Certificate last 1 2 7 What is involved in managing a Certificate 1 2 8 Who manages the Certificate 1 3 ePharmacy Certificate Manager Overview 1 3 1 Installing the ePharmacy Certificate Manager application 1 3 2 Using the ePharmacy Certificate Manager application 2 Installing the eCM application 2 1 Installation 2 1 1 Accessing the setup wizard 2 1 2 Launching the setup wizard 2 1 3 Setup Wizard Welcome Screen 2 1 4 Selecting the Installation Folder 2 1 5 Confirming Installation 2 1 6 Completing Installation 3 Using the eCM application 3 1 Starting the eCM application 3 1 1 Update Status Checking for updates 3 1 2 The Welcome screen
5. 3 1 3 Logging In 3 2 Creating a Certificate Request 3 2 1 Requesting a Certificate NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Ref EPD US UG UG003 Page 2 of 34 N NNN DOD DO 1 A OF oO oO A De ee ee ee ee Se Ce Ce MN NO O O O O O cr Ce ee ae Ee Cee Com ow A OO WwW WwW W Version 1 Final Date 15 9 2006 NHSScotland ePharmacy Delivery 3 2 2 CA Response to a Certificate Request 16 33 Downloading a Certificate 17 3 4 Installing a Certificate 18 3 4 1 Select the Certificate File location 18 3 5 Renewing a Certificate 21 3 6 Removing a Revoked Certificate 22 3 7 Restoring a Certificate from local backup copy 22 3 7 1 Restoring a previously backed up certificate 22 3 8 Reinstalling a Certificate from a CA Archive copy 23 3 9 Certifcate Lost and not Archived with ePharmacy CA 23 4 eCM Updater 24 4 1 New Application version is available 24 4 1 1 Downloading and installing a new version of the eCM Client Application 24 4 1 2 Skipping download and using existing application functionality 25 4 2 New Root Certificate s available for download and installation 25 4 2 1 Installing a new certificate 25 4 2 2 Skipping new certificate installation 25 4 3 Revoked Root Certificates 25 4 3 1 Removing a revoked Certificate 26 4 3 2 Leaving a Revoked Certificate in place 26 5 Reference 27 5 1 eCM Product Support 27 5 1 1 Contact Details 27 5 1 2 eCM Application Download 27 5 1 3 Supplied Doc
6. A PIN is only valid for a single EPOC Contact the PSD Helpdesk for further EPOC valid individually but assistance see section 5 1 1 1 for contact details are not together PIN is Invalid The PIN does not Check that the PIN number is correct as detailed in the supplied eCM exist within the eCM_ documentation system or the PIN If the PIN number previously entered is not the PIN number on the has been locked documentation click on the OK button to return to the Login screen and enter the correct PIN number If the PIN entered does match the documentation but is not accepted contact the PSD Helpdesk to have the PIN included unlocked see section 5 1 1 1 for contact details Otherwise contact the PSD Helpdesk for further assistance see section 5 1 1 1 for contact details NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 32 of 34 PF001 v3 NHSScotland ePharmacy Delivery 5 4 2 3 Network error 5 4 2 3 1 Context While a User is attempting to complete an action accessing the eCM Web Server the following dialog box is displayed 5 4 2 3 2 Possible causes Error Cause Resolution Network unavailable Momentary network Press Retry failure slow network connection Network unavailable More permanent Press Cancel Contact the System Administrator ISP who supports the network failure Users system 5 4
7. PF001 v3 NHSScotland ePharmacy Delivery i Client Certificate Management Welcome to the Client Certificate Management Setup Wizard The installer will guide you through the steps required to install Client Certificate Management on your computer WARNING This computer program is protected by copyright law and international treaties Unauthorized duplication or distribution of this program or any portion of it may result in severe civil or criminal penalties and will be prosecuted to the maximum extent possible under the law Cancel Click on the Next gt button to proceed with the installation lf for some reason you do not wish to continue with the installation click the Cancel button to abandon installation 2 1 4 Selecting the Installation Folder The following Windows dialog box is displayed i Client Certificate Management Select Installation Folder The installer will install Client Certificate Management to the following folder To install in this folder click Next To install to a different folder enter it below or click Browse Folder CAProgram Files Atos Origini Client Certificate Management Install Client Cerificate Management for yourself or for anyone who uses this computer Click on the Next gt button to accept the default installation directory recommended or follow the instructions on the dialog box to specify an alternative installation directory before clicking
8. should be the same person who requested the Certificate and should be logged onto the local system using the same Windows Account i e Windows Username that was being used when the Certificate request was made This person should have Administrator Privileges on the local machine NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 17 of 34 PFOO1 v3 NHSScotland ePharmacy Delivery If a certificate request has a status of Available for Download it can be downloaded Click on the relevant entry in the Request Status table to highlight the entry for the Certificate to be downloaded as follows amp ePharmacy Certificate Manager SER About NHS ePharmacy Certificate Manager SCOTLAND Gi me fi 43 Available for Download i You are curently lagged on as epoc 99100052 Be sure to click on the correct request line in the status pane there may be more than one entry in the request list Click on the Download button 3 4 Installing a Certificate When the Download button has been clicked for an Available for Download certificate request the Backup Certificate dialog box will be displayed as follows Backup Certificate Certificate File Password 3 4 1 Select the Certificate File location Click on the ellipsis button A windows Open dialog box will appear
9. the Next gt button Alternatively click on the lt Back button to return to the previous screen or click on the Cancel button to abandon installation NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 11 of 34 PF001 v3 NHSScotland ePharmacy Delivery 2 1 5 Confirming Installation The following Windows dialog box is displayed i Client Certificate Management Confirm Installation The mlale os achy bo malal Cnet Csthcabe Hanat on you coernpulir Dick Meet to start the inctadletion Click on the Next gt button to continue the installation Alternatively click on the lt Back button to return to the previous screen or click on the Cancel button to abandon installation 2 1 6 Completing Installation On successful completion of the installation the following Windows dialog box is displayed if Client Certificate Management Installation Complete Chen Certicnte Hlanagenenthas been successtulhy installed Dck Cleric ben drl Fieete use Windows Update to check for any critical updates to the MET Framework Close Click on the Close button to complete the installation and begin using the eCM Client Application NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page
10. 12 of 34 PF001 v3 NHSScotland ePharmacy Delivery 3 Using the eCM application 3 1 Starting the eCM application Once the application has been installed on the Windows Start menu select All Programs gt ePharmacy Certificate Manager gt ePharmacy Certificate Manager The following splash screen will appear and the eCM updater will attempt to contact the eCM Web Service el S ePharmacy Certificate Manager ote SCOTLAND Version 1 0 2263 18196 Update Status Checking for updates Note the version number may be different lf for any reason the eCM Updater cannot contact the eCM Web Service an error message will be displayed see 5 4 1 for more details Otherwise the eCM Updater will begin checking for any available updates for the Application itself or any new or revoked Certificates 3 1 1 Update Status Checking for updates At launch the application will contact the Certificate Management Web Service to check if there are any available updates regarding the application itself or ePharmacy related Certificates Should any updates be available information detailing the type of update and the available user options regarding the update will be displayed See section 4 for further details of the update process 3 1 2 The Welcome screen Once the eCM application has started the following Windows dialog box is displayed NHSScotland ePharmacy Delivery ePharmacy Certificate Manage
11. 2 4 Server Error 5 4 2 4 1 Context While a User is attempting to complete an action accessing the eCM Web Server the following dialog box is displayed NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 33 of 34 PFOO1 v3 NHSScotland ePharmacy Delivery x An error occurred on the server You may retry this operation Cancel 5 4 2 4 2 Possible causes Error Cause Resolution Process execution Failure within the Press Retry failure eCM Web Service If the error persists contact the PSD help desk see 5 1 1 1 for contact details with details of the circumstances at the time the error occurred NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 34 of 34 PF001 v3
12. Use the Look in drop down control to browse to an appropriate location to save the backup file to as shown in the following diagram NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 18 of 34 PFOO1 v3 NHSScotland ePharmacy Delivery Lookin Certificate Backups lt e maa L My Recent Documents 4 Desktop My Recent rm My Documents Documents admin ODB Altova Projects O Certificate Backups Desktop Development D docs B My Music E My Pictures My Documents E My Videos OB My Virtual Machines O test Activator Createlnstance Visual Studio Projects DB VMWare My Computer H 3 4 Floppy A My Network s Local Disk C Places Documents and Settings ei CK ak My Computer Cancel Enter an appropriate name for the file in the File name box The application will automatically add the pfx file extension See below Lookin Certificate Backups a m c Ev 5 EdePs Certificate pfx My Recent Documents 2 Desktop My Documents My Computer _ My Network Places File name ePs Certificate pfx v Files of type Personal Information Exchange pfx v Cancel Click on the Open button to set the path and filename for the certificate backup File The Backup Certificate dialog box will reappear with confirmation of the path and fil
13. armacy services applications An organisation may nominate a Responsible User who will act on its behalf to ensure this requirement is diligently upheld 2 Organisations may only interact with ePharmacy services applications provided centrally by the ePharmacy infrastructure using an approved ePharmacy client application All messages sentto the ePharmacy infrastructure must include the details of the approved client application in use Archive Private Key If the requested certificate is to have the private key archived then ensure the Archive Private Key box is checked By checking the Archive Private Key the eCM user is requesting that the ePharmacy CA makes a copy of the Certificate and stores this copy on the CA computer on behalf of the user This would allow the user to request retrieval of this copy at some time in the future should the original Certificate be lost as opposed to requesting a new replacement Certificate The CA archived copy cannot be used to replace a Certificate that has expired or otherwise become invalid Click on the f accept button Section 5 2 has details of obligations accepted by clicking on this button 3 2 2 CA Response to a Certificate Request 3 2 2 1 Request Pending A request that has been submitted but not yet authorised by the CA will be shown with a status of Under Submission in the Main Menu window status pane 3 2 2 2 Certificate Request Authorised Onc
14. ators Status Meaning Incomplete Request did not complete for some reason on the CA Server rors tersonepant ames ramen Error Error Occurred Creating request Peete tae meme The administrator of the CA denied the request a User may submit another request nsta client Issued And Downloaded Request has been accepted downloaded but the install failed or a failure occurred in the transmission of the ePharmacy system message Contact the PSD Help desk see 5 1 1 1 for contact details Issued And Installed Request has been accepted and installed by the client Issued Out Of Band Contact the PSD Help desk see 5 1 1 1 for contact details Under Submission The request has been submitted by the Client and is on the CA awaiting approval by administrator Revoked The request has been accepted and then revoked by the Certificate Authority Requires Replacement The certificate is reaching its expiry date and should be replaced Replaced The certificate has been replaced by another certificate NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 29 of 34 PF001 v3 NHSScotland ePharmacy Delivery 5 4 Error Messages 5 4 1eCM Web Service unavailable 5 4 1 1 Context If when the eCM client Application is launched the eCM Updater cannot contact the eCM Web Server the following Windows dialog will be displayed X Warning Cou
15. be copied on to any other computers that require it In addition the Responsible Person may wish to have a local copy of a Certificate as part of their local computer maintenance policy Section 3 4 covers copying a Certificate within the local computer environment 1 3 2 6 Restoring a Certificate If the eCM application has been used to make a local copy of a Certificate the application can be subsequenily used to restore the Certificate from the local copy Section 3 7 covers this restoring a Certificate from a local copy 1 3 2 7 Reinstalling a Certificate lf at the time of downloading a Certificate the Responsible Person requested that the CA stored a copy the Certificate the application can be used to reinstall a Certificate from this CA copy section 3 8 covers reinstalling a Certificate from a CA backup copy 1 3 2 8 Renewing a certificate Prior to a Certificate reaching its expiry date the Responsible Person will be sent a new PIN number Using this new PIN number the eCM application can be used to request a replacement certificate This renewal will occur before the existing Certificate expires Section 3 5 covers requesting that a Certificate may be NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 8 of 34 PF001 v3 NHSScotland ePharmacy Delivery renewed NHSScotland ePharmacy Delivery ePharmacy Certificate Manag
16. d p A new version of the Client Certificate Management application is available ad The currently installed version is no longer supported by the Client Certificate Management Web Service Do you wish to download and install the new version 4 1 1 Downloading and installing a new version of the eCM Client Application Click the Yes button on the Application Download dialog Microsoft Trust ChkTrust Utility Security Warning The publisher could not be verified Are you sure you want to run this software Name CertificateManagement Client exe Publisher Unknown Publisher This file does not have a valid digital signature that verifies its publisher You x should only run software from publishers you trust How can I decide what software to run Click the Run button to continue the download and installation Alternatively click on Don t Run to cancel the application download and proceed to step 4 1 2 The current version is closed down and the new version of the application is launched NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 24 of 34 PF001 v3 NHSScotland ePharmacy Delivery 4 1 2 Skipping download and using existing application functionality If the User clicked on the No button at step 4 1 1 the updater will proceed to check for Certificate updates being available from the eCM Web Se
17. dialog Invalid EPOC error The EPOC does not exist within the eCM system or the EPOC has expired or the EPOC has been locked NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Ref EPD US UG UG003 Page 31 of 34 PFOO1 v3 Click on the OK button to return to the login screen and to re enter the EPOC number Check that the EPOC number is correct as detailed in the supplied eCM documentation If the EPOC number previously entered does not match the number on the documentation click on the OK button to return to the Login screen and enter the correct EPOC number If the EPOC entered does match the documentation but is not accepted contact the PSD Helpdesk to have the EPOC included unlocked see section 5 1 1 1 for contact details Otherwise contact the PSD Helpdesk for further assistance see section 5 1 1 1 for contact details Version 1 Final Date 15 9 2006 NHSScotland ePharmacy Delivery 5 4 2 2 Account not valid 5 4 2 2 1 Context The EPOC number entered into the login screen 3 1 3 has not been accepted resulting in the following Windows dialog being displayed x The account specified is not valid 5 4 2 2 2 Possible causes Error Cause Resolution Data entry error The PIN number Click on the OK button to return to the login screen and to re enter the PIN was incorrectly number entered into the Login dialog PIN does not match PIN and EPOC are
18. e a Certificate Request has been authorised by the CA it will be shown in the status pane of the Main Menu window as Available for Download as shown below NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 16 of 34 PF001 v3 NHSScotland ePharmacy Delivery ePharmacy Certificate Manager SEE About NHS ePharmacy Certificate Manager SCOTLAND ARIN MENN enuen D Created Issued Available for Download 4 21 2006 4 21 2006 i T Pe A ere eke a a Hc ester E E hc FO i You are curently logged on as epoc 99100052 A Certificate request with a status of Available for Download may be downloaded using the steps detailed in section 3 3 3 2 2 3 Certificate Request denied In certain circumstances a Certificate Request may not be authorised by the CA If this is the case it will appear in the Status pane of the Main Menu window with a status of Denied as shown below ePharmacy Certificate Manager About NHS _ ePharmacy Certificate Manager SCOTLAND vane Created Lise ___ u Refresh Denied 42172006 472172006 4 Request Cert You are currently logged on as epoc 99100052 Should a request be denied users should contact the PSD helpdesk to resolve the situation see section 5 1 1 1 3 3 Downloading a Certificate Note The person who downloads the Certificate
19. ead sued fi Request Cert You are currently logged on as epoc 99100052 If there is a problem with the entered EPOC or PIN an error message will be displayed see section 5 4 2 for details of possible errors and their resolution 3 1 3 1 ePharmacy Certificate Manager Main Menu screen The Main Menu screen allows users to manage and review Certificate Requests f ePharmacy Certificate Manager Ioj x About NHS ePharmacy Certificate Manager SCOTLAND Sanwang Request Ss Joea Jeu fi You are currently logged on as epoc 99100052 The status pane of provides details of each request that has been submitted See section 5 3 for a list of possible status indicators together with an expanded explanation of each indicator 3 2 Creating a Certificate Request 3 2 1 Requesting a Certificate Click on the Request Cert button The following Dialog Box will appear NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 15 of 34 PF001 v3 NHSScotland ePharmacy Delivery S Request Certificate A Policy Statement on Acceptable use of Client Cerificate Management Service Clicking the I accept button declares that you hawe read understood and agree to comply with the acceptable use policy as stated below 1 All organisations using ePharmacy services must ensure the secure and proper use of ePh
20. ename in the Certificate File text box Backup Certificate Certificate File C Documents and Settings 95 E Enter a suitable password in the Password text box Note The password must e Be more than six characters long NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 19 of 34 PF001 v3 NHSScotland ePharmacy Delivery e Contain at least one upper case character A B C X Y Z at least one lower case character a b c X y Z and at least one numeric character 0 1 2 7 8 9 Backup Certificate Certificate File CADocuments and Settings 95 A Repeat Password As confirmation type exactly the same password in the Repeat Password textbox Note Safe and secure storage of the password is entirely the responsibility of the User The password is not stored elsewhere in the application and so cannot be recovered The certificate cannot be restored from this backup file without the password Backup Certificate Cerificate File CADocuments and Settings 95 A Backup Click on the Backup button to backup the certificate If successful the following dialog box will appear Click on the OK button to continue The Main Menu window will appear this time showing the status of the certificate as Downloaded and Installed ePharmacy Certificate Manager About
21. er Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 9 of 34 PF001 v3 NHSScotland ePharmacy Delivery 2 Installing the eCM application 2 1 Installation This section covers initial installation of the eCM application The installation programme uses a wizard i e a sequence of Windows dialog boxes to collect the information it needs and at the same time guide you through the installation Note A user must have the necessary access permissions to install the application see section 5 2 2 1 for details of the required permissions 2 1 1 Accessing the setup wizard The eCM Installer is available either e from the web See section 5 1 2 for details on how to obtain access e on CD See section 2 1 2 2 for details on how to obtain access 2 1 2 Launching the setup wizard 2 1 2 1 Launching from the web www eps nds scot nhs uk eCM CertificateManagement Setup msi see 2 1 3 to continue 2 1 2 2 Launching from CD Refer to your GP or Pharmacy System Software Supplier s documentation as appropriate to locate the eCM application installation program Double click on the CertificateManagement Setup msi Icon 2 1 3 Setup Wizard Welcome Screen When the wizard starts the following Windows dialog box will be displayed NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 10 of 34
22. eviously been archived with the ePharmacy CA 1 The Responsible Person phones the PSD Helpdesk advising that the ePharmacy system can no longer be accessed see section 5 1 1 1 The ePharmacy delivery team will re enable the account and send out a new PIN NOTE Delivery of the new PIN will take a minimum of 3 working days Once the new PIN has been received the Responsible Person logs into the eCM application The Responsible Person requests a new Certificate using the eCM application The Certificate request is authorised the Certificate is installed and the ePharmacy system can again be accessed NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 PF001 v3 Page 23 of 34 NHSScotland ePharmacy Delivery 4 eCM Updater At launch the eCM application checks the eCM Web Service for available updates There are three possible types of update e Updates to the eCM application itself see section 4 1 e New CA Root Certificates see section 4 2 e Revoked CA Root Certificates see section 4 3 Note more than one update may be detected at the same time 4 1 New Application version is available This dialog is displayed when a new version of the eCM Client application is available for download from the eCM Web Server and the currently installed version is no longer supported by the eCM Web Service Application Downloa
23. from a file that was previously backed up using the eCM Client application see section 3 4 Note The User must know the name and location of the backed up file and the back up Certificate password in order to use this functionality NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 22 of 34 PFOO1 v3 NHSScotland ePharmacy Delivery 3 8 Reinstalling a Certificate from a CA Archive copy The following procedure details the steps necessary to recover an ePharmacy account where the Certificate has been lost but has previously been archived with the ePharmacy CA ae The Responsible Person phones the PSD Helpdesk advising that the ePharmacy system can no longer be accessed see section 5 1 1 1 A new Certificate will be sent to the Responsible Person on a CD NOTE Delivery of a new Certificate will take a minimum of 3 working days The Responsible Person installs restores the CD file of the Certificate using the eCM application restore function section 3 7 At this time the Responsible Person phones the PSD helpdesk to request the Certificate password The Certificate is installed and the ePharmacy system can again be accessed 3 9 Certifcate Lost and not Archived with ePharmacy CA The following procedure details the steps necessary to recover an ePharmacy account where the Certificate has been lost but HAS NOT pr
24. lation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 5 of 34 PF001 v3 NHSScotland ePharmacy Delivery associated with ePharmacy system access and use 1 2 4 Who issues a Certificate A digital Certificate is issued by a Certification Authority CA The ePharmacy delivery team maintain a dedicated CA purely for use by the ePharmacy system In addition to the unique Certificate issued to the Responsible Person at each Message End Point the CA also issues a special shared Root Certificate which is used to identify the ePharmacy CA as the issuer of the unique Certificates 1 2 5 How do I contact the Certification Authority The Responsible Person for each Message End Point will be sent the necessary information and instructions including a unique identification number for that Message End Point In addition a secret PIN Number that is known only to the system and the recipient will be sent similar to the PIN number that is sent when a new credit card or bankcard is issued Note As with other systems that use PIN Numbers entering the PIN incorrectly three consecutive times will result in the account being locked out This will consequently require contact with the PSD helpdesk see section 5 1 1 1 for contact details to reopen the account 1 2 6 How long does a Certificate last A Certificate has an expiry date after which it must be renewed As with a credit or bankcard the te
25. ld not connect to the update web site Do you want to retry this operation 5 4 1 2 Possible causes Network connection problem Network problem or slow Click on the Yes button to attempt to re connect to the network connection eCM Web Service If the error re occurs contact your temporarily restricting access system administrator ISP to the eCM Web Service Web Service is not available Network connection and or Click on the No button to skip checking for updates from eCM Web Service the eCM Web Service and continue using the currently unavailable to eCM Client installed version of the eCM Client Application and Application Certificates The application will proceed to the Welcome screen see section 3 1 2 Web Service offline eCM Web Service is offline Contact PSD helpdesk for eCM Web Service status or otherwise unavailable information see section 5 1 1 1 for contact information NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 30 of 34 PF001 v3 5 4 2 Log On Failure 5 4 2 1 Invalid EPOC 5 4 2 1 1 Context NHSScotland ePharmacy Delivery The EPOC number entered into the login screen section 3 1 3 has not been accepted resulting in the following Windows dialog being displayed 5 4 2 1 2 Possible causes Error Cause Resolution Data entry error The EPOC number was incorrectly entered into the Login
26. m on the network Based on the identity of a given Certificate specific levels of access and authorisation are given to the computer when communicating with the ePharmacy system Note without a valid Certificate it is not possible to access the ePharmacy system 1 2 2 Who needs a Certificate Whereas passports and driving licences are issued to individuals digital certificates are issued to Message End Points usually a physical location such as an individual Practice or Pharmacy In some cases a Message End Point may correspond to an individual user with a single computer but in others several computers may form a single Message End Point Whether consisting of one or more computers each Message End Point accesses the ePharmacy system using the identity of a single Certificate This identity is associated with a unique number an EPOC Number that is contained as part of the certificate 1 2 3 Who is Responsible for a Certificate A parent can have their own passport but in the eyes of the law is also responsible for passports issued to their children Similarly each Message End Point has a designated Responsible Person who is in charge of managing the Certificate not only for their computer but also for Certificates on any other computers within their group The Responsible Person is also the point of contact for any correspondence NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Instal
27. ot nhs uk eCM CertificateManagement Setup msi 5 1 3 Supplied Documentation An introductory letter which will contain the PIN Number and be printed on secure paper will be sent to the Responsible Person 5 2 User Credentials and Authorisations 5 2 1ePharmacy Permissions The Responsible Person must have physical access to EPOC Number and associated PIN Number see section 0 5 2 2 Local Computer Permissions 5 2 2 1 Permissions required to install the eCM Application The User must have the following local Windows permissions on the computer that the eCM Application is to be installed onto e Windows Administrator rights 5 2 2 2 Permissions required to run the eCM Application The User must have the following local Windows permissions on the client system to install the eCM Application e Read permission NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 27 of 34 PF001 v3 NHSScotland ePharmacy Delivery e Write permission e Delete permission On the following Certificate Stores on the computer in question e Trusted Root Certificate Authorities e Personal store e Request store NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 28 of 34 PF001 v3 NHSScotland ePharmacy Delivery 5 3 Certificate Request Status Indic
28. r Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 13 of 34 PF001 v3 NHSScotland ePharmacy Delivery f ePharmacy Certificate Manager not logged in a oj xj About NHS ePharmacy Certificate Manager SCOTLAND Pecoma You are not logged in Note it is not necessary to log on to restore a previously saved Certificate using the eCM application see section 3 7 for details of the restore operation 3 1 3 Logging In Click on the Logon button on the Welcome Screen The following windows Dialog is displayed Type your EPOC number and the associated PIN into the appropriate boxes The EPOC Number and PIN are included in the Supplied Documentation to ePharmacy users see section 0 Click on the Submit button to access the eCM Client Application for the given EPOC Number Alternatively click the Cancel button to abandon logon and return to the Welcome Screen lf the EPOC and PIN are valid the Logon successful dialog box will be displayed i Logon Successful Click OK The main eCM application screen is displayed NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 14 of 34 PF001 v3 NHSScotland ePharmacy Delivery ePharmacy CertiicateManager iix About NHS ePharmacy Certificate Manager ee SCOTLAND Main Menu Request ID Stus C
29. rm renewed actually means a new item is created and issued to the user as a replacement for the original one The ePharmacy system still maintains information that the old Certificate existed and about how and when it was used but the original is now invalid 1 2 7 What is involved in managing a Certificate Over the life of a Certificate a number of events need to be managed As with passports and credit cards it is necessary to make a request before being issued with a Certificate Although it is a digital Certificate it does physically exist Accordingly it can be lost or damaged or even stolen or compromised in some way As its name implies the purpose of the ePharmacy Certificate Manager application is to assist a designated Responsible Person with all aspects of managing certificates This includes initially requesting a certificate installing it onto the computer s at a Message End Point keeping the Certificate secure and making any scheduled and unscheduled updates that are required NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 6 of 34 PF001 v3 NHSScotland ePharmacy Delivery 1 2 8 Who manages the Certificate The Responsible Person may choose to delegate the actual Certificate management tasks to someone else but cannot transfer the obligations and responsibilities associated with the role
30. rtificate Request Once a Certificate has been requested using the application the application will monitor the status of the Certificate throughout its lifetime showing whether the Certificate is pending approved installed or requires replacement Section 5 3 has a full list of all possible status messages NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 7 of 34 PF001 v3 NHSScotland ePharmacy Delivery Once logged in to the application the main Menu window shows the status of all Certificate Requests see section 3 1 3 1 1 3 2 3 Requesting that the CA makes a Certificate backup When a certificate is available for download users can request that the ePharmacy CA make a backup of their certificate This will allow a request for a replacement Certificate to be made should this become necessary for whatever reason e g replacement of PC disc crash etc 1 3 2 4 Installing a Certificate Once the Request has been received and subsequently authorised the Certificate may be downloaded from the CA The Certificate can then be installed onto each computer that will access the ePharmacy system Section 3 4 gives details of the installation procedure 1 3 2 5 Copying a Certificate All computers within a Message End Point share the same identity when accessing the ePharmacy system Accordingly the appropriate Certificate must
31. rvice Should one or more Certificate updates be available the appropriate dialog will appear see the subsequent sections of this chapter 4 2 New Root Certificate s available for download and installation The eCM Updater checks the web service for any newly available Root Certificate s If any are found the following Windows Dialog is presented ATE Plo dallel le Note The number of certificates found may vary Follow the instructions on the dialog to install the new version or continue using the current version Note this dialog will appear once for every new certificate 4 2 1 Installing a new certificate Click the Yes button on the Certificate Download Windows dialog section 4 2 above In the majority of cases the normal welcome screen is shown see 3 1 2 for details of operation from that point However if further certificate updates are also available one of the dialogs shown in subsequent sections of this chapter will be shown 4 2 2 Skipping new certificate installation Click the No button on the Certificate Download Windows dialog see section 4 2 Note It is recommended that any newly available Certificates should be installed at the first opportunity 4 3 Revoked Root Certificates The eCM Updater checks the web service for updated information regarding revoked Root Certificates If such information is presented by the Web Service NHSScotland ePharmacy Delivery ePharmac
32. umentation 27 5 2 User Credentials and Authorisations 27 5 2 1 ePharmacy Permissions 27 5 2 2 Local Computer Permissions 27 5 3 Certificate Request Status Indicators 29 5 4 Error Messages 30 5 4 1 eCM Web Service unavailable 30 NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Ref EPD US UG UG003 Version 1 Final Date 15 9 2006 Page 3 of 34 PFOO1 v3 NHSScotland ePharmacy Delivery 5 4 2 Log On Failure 31 NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 4 of 34 PF001 v3 NHSScotland ePharmacy Delivery 1 Introduction 1 1 Document Purpose This document describes how to install and use the ePharmacy Certificate Manager application It also acts as a How to guide to help you when you have a problem regarding certificates used for ePharmacy 1 2 Overview of Certificates within the ePharmacy system 1 2 1 What are Certificates and why are they needed In everyday life we are used to the idea of using a passport as a means of identification We also have credit cards that have spending limits and driving licences that specify the type of vehicle we are authorised to drive In the world of ePharmacy the task of establishing identity and authorisation is achieved using digital certificates These Certificates are installed onto individual computers and then used to identify the
33. y Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 25 of 34 PF001 v3 NHSScotland ePharmacy Delivery the following Windows Dialog is presented Certificate Revocation Root CA Public Certificate s have been revoked and are no longer valid Invalid Certificate s which are on this list can be removed from this machine Would you like to do this now Follow the instructions on the dialog to remove the old version or continue using the current version Note this dialog will appear once for every revoked certificate 4 3 1 Removing a revoked Certificate Click on the Yes button on the Certificate Revocation windows dialog 4 3 Revoking Root CA Certificate i Revoked Root CA Certificate sucessfully removed 4 3 2 Leaving a Revoked Certificate in place Click on the No button on the Certificate Revocation windows dialog see 4 3 Note It is recommended that any newly revoked Certificates should be removed from the local machine at the first opportunity NHSScotland ePharmacy Delivery ePharmacy Certificate Manager Installation User Guide Version 1 Final Ref EPD US UG UG003 Date 15 9 2006 Page 26 of 34 PF001 v3 NHSScotland ePharmacy Delivery 5 Reference 5 1 eCM Product Support 5 1 1 Contact Details 5 1 1 1 PSD Helpdesk Telephone 0131 275 6600 Email psdhelo psd csa scot nhs uk 5 1 2eCM Application Download www eps nds sc

Download Pdf Manuals

image

Related Search

Related Contents

LC-46X8E/S Operation-Manual ES  KJ71042BK 1987 - 1995 Jeep YJ 1997—2006 Jeep TJ  SANK。 TECHN。 m-,LTD  control remoto para el sistema de aire acondicionado aa  Philips Spiral 871829114611700  NORMAND LÉVESQUE  GE JBP45GR User's Manual  EXSYS PCI-Express 2S Serial RS-232 card  Operating instructions Stainless steel scale  Philips SpeechMike User Manual  

Copyright © All rights reserved.
Failed to retrieve file