How To Install Medicare PKI Certificates - Medilink To Install Medicare PKI Certificates.pdf · How...

MEDILINKesi 2008+ (R1.01) How To Install Medicare PKI Certificates

Patrick Sims

Developer - APS Medilink 2009/01/23


2009/01/23 Page ii

Table Of Contents Table Of Contents ...................................................................................... ii Introduction............................................................................................... 1

Start Point ................................................................................................. 2

Install PKI Certificate Manager .................................................................... 2

Store Setup Wizard .................................................................................... 4

Create A New Store .................................................................................... 6

Update An Existing Store ............................................................................ 9

Installing Certificates ................................................................................ 12

Change Store Password ............................................................................ 18

Test Your Certificate................................................................................. 18

Medilink HIC Online .............................................................................. 19

API Checker ......................................................................................... 21

Multiple Workstation Installations .............................................................. 24

Common Problems ................................................................................... 24

Java ..................................................................................................... 24

Incorrect Location Pointing .................................................................... 25

General Failure ..................................................................................... 26

Log Files .............................................................................................. 26


2009/01/23 Page 1

Introduction This document was written by Patrick Sims to help users of Medilink install their PKI certificates from Medicare. Medilink has historically provided tools to do this, but at this stage, we prefer that users instead use the tools provided by Medicare, as they are regularly updated, more suited to the job at hand, and will be better supported by both Medicare and Medilink. Please note that Medilink refers to Medicare Australia Online as HIC Online in a variety of locations. For continuity sake, this also occurs in this document. They are interchangeable terms in the context of this document. The screenshots taken in this help guide were taken from a development machine and may differ slightly to those of a typical workstation.


2009/01/23 Page 2

Start Point You will need to have a recent CD from Medicare Australia and the accompanying letter. Please ensure that this CD is in your CD drive. Your first step should be ‘Install PKI Certificate Manager’. If you’ve already had HIC Online working on the workstation that you’re on, then you will need to ‘Update An Existing Store’. Otherwise, you will likely have to ‘Create A New Store’. In the case of the former, you will need to know the current store password, (the password you use to log in to HIC Online from Medilink).

Install PKI Certificate Manager Download from Medicare’s website, or find on the Medicare provided CD, the PKI Certificate Manager installer, (a download will get the latest version, but this is not likely to be imperative).

Run this file and ‘Agree’ to and ‘Install’ the software.


2009/01/23 Page 3

You will see the following upon successful installation.

You now need to run this; you can either go to your Control Panel and select ‘PKI Certificate Manager’.


2009/01/23 Page 4

Or press ‘Flag+R’ and type in ‘PsiApplet.cpl’.

Store Setup Wizard When you run the PKI Certificate Manager for the first time you will be prompted with the following screen.


2009/01/23 Page 5

From this screen you can create a new store or use an existing store. If you do not see this screen on startup and instead see something more like the following.


2009/01/23 Page 6

Click the ‘Setup...’ button in the top right hand corner of the screen.

Create A New Store From the ‘Store Setup Screen’, (see the previous section), select the ‘Create a New Store’ option.


2009/01/23 Page 7

This will default to a location that looks like ‘C:\Documents and Settings\User Name\hic.psi’. By default, Medilink uses the location ‘C:\Program Files\HICOnline\hic.psi’, so either type that in exactly or alternatively use the ‘...’ button to navigate to this location, manually type in ‘hic.psi’ in the ‘File name:’ section and then press ‘Open’.


2009/01/23 Page 8

Press ‘Next’ once you have the store’s file path entered correctly.


2009/01/23 Page 9

You must now create a password for this store. You will need this password when you log in to HIC Online from within Medilink. While you may need to tell this password to other people in your organisation, you should not tell this password to anyone outside of your organisation. Enter in a suitable password twice and press ‘Finish’.

You will now be in the main PKI Certificate Manager screen. From this point you will need to install the certificates. Please read the ‘Installing Certificates’ section of this document to complete this process. If you have received multiple CDs from Medicare over a period of years, you may first need to install the certificates that you received on the disk you initially received from Medicare, (the author did, but this was for a testing environment and may not apply to all). If this is the case, please follow the ‘Installing Certificates’ section twice, first using the original CD and then the most recent one.

Update An Existing Store From the ‘Store Setup Screen’, (refer to this section in this document), select ‘Use an Existing Store’.


2009/01/23 Page 10

This will default to a location that looks like ‘C:\Documents and Settings\User Name\hic.psi’. By default, Medilink uses the location ‘C:\Program Files\HICOnline\hic.psi’, so either type that in exactly, or use the ‘...’ button to navigate to this location.


2009/01/23 Page 11

If you do not have a hic.psi file in this location, chances are that you do not have a store already on this computer and that you should be creating a new store rather than updating an existing store, (please see the ‘Create A New Store’ section of this document). Press ‘Finish’.


2009/01/23 Page 12

Please read the following section ‘Installing Certificates’ to complete this process.

Installing Certificates You should now be in the main PKI Certificate Manager screen. Press the ‘Install’ button in the top right hand corner.


2009/01/23 Page 13

You will be prompted to enter the store’s password. This is the password that someone in your organisation has applied to this store when it was originally created, (although it is possible that it has been changed by someone else in your organisation since then). Basically, it is the password you use when logging in to HIC Online in Medilink. Please be aware that Medilink and Medicare do not know what this password is and are unlikely to be able to help if you’ve lost it. If you cannot find this at all, you may have to create a new store, (please see the ‘Create A New Store’ section of this document). Enter the password and press ‘Next’.


2009/01/23 Page 14

You will now be prompted with the following.

You need to choose the location of the certificates that Medicare has sent you. This will likely be the ‘D:\’ or ‘E:\’ drive, (i.e., your CD drive). The default


2009/01/23 Page 15

drive of ‘A:\’ is a throwback to when certificates were sent out on floppy disks, which is no longer the case. You can press the ‘...’ to help you navigate to this drive, or press the down arrow, or just type the drive letter etc. in.

You will now be asked for the PIC. This is on the letter that Medicare has sent you with this letter. Please note that Medilink has no knowledge of this password and while Medicare are likely aware of it in some capacity, they will not provide this over the phone, (basically, you need the letter).


2009/01/23 Page 16

Enter the PIC (password) and press ‘Next’.

You will now see a list of certificates to be imported.


2009/01/23 Page 17

You will now see the main PKI Certificate Manager screen again.

Press the ‘X’ button in the top right hand corner to close.


2009/01/23 Page 18

Change Store Password From the main PKI Certificate Manager screen, press the ‘Store’->’Change Password...’ button.

From there you need to put in your current password, and your new password twice, then press ‘OK’.

Test Your Certificate


2009/01/23 Page 19

Medilink HIC Online The easiest way to test these certificates for Medilink users is to run HIC Online. Start Medilink and when prompted, run HIC Online at startup.

Enter your password.

If you look closely, you will see the amount of days that you have remaining.

Then, bring up a patient who has a Medicare card number, go to the ‘PVM Medicare’ section and press ‘PVM Medicare’ again.


2009/01/23 Page 20


2009/01/23 Page 21

If they are eligible for Medicare, (or you get a non-system error message stating that they do not have a current Medicare card or their name is different etc.), then your new certificates are working correctly.

API Checker Run the ‘APIChecker.exe’ executable that may be on the Medicare provided CD or provided to you.


2009/01/23 Page 22

Enter your store password in to the ‘HCL Passphrase:’ section. Check that the ‘Location of crypto / PSI store (HCL)’, i.e., the ‘hic.psi’ store’s folder, is correct, (just the folder is sufficient). Then press ‘LoadEasyClaim’ and ‘createSessionEasyclaim’.


2009/01/23 Page 23

Then, try and ‘Authorise stored PC claim’.

These tasks should all complete successfully. Then click on ‘destroySessionEasyclaim’ and ‘UnloadEasyclaim’ to finish.


2009/01/23 Page 24

If everything succeeds here, your certificates should be fine.

Multiple Workstation Installations If you have HIC Online on more than one Medilink workstation, instead of doing this whole procedure on each workstation, simply copy across the ‘C:\Program Files\HICOnline\hic.psi’ file from one workstation to the other. This file contains all of your PKI certificates and is all that you need to copy. This workstation will have had to have had HIC Online previously installed, if it is not, then you can do this from the ‘Utilities’ section, an icon for which is installed on the desktop by default.

Common Problems

Java The most common problem that occurs is that Java 6 or 1.6.x, (infact, these are the same version), is installed. Medicare Online requires JRE 1.5.x, (i.e., Java 5, JRE stands for Java Runtime Environment). Medicare Australia infact only officially supports JRE 1.4.2, but JRE 1.5.x has been thoroughly tested and works.


2009/01/23 Page 25

Incorrect Location Pointing Medilink stores the location that it looks for the ‘hic.psi’ and ‘EasyclaimC.dll’ files in an ini file, (a file that stores settings), called ‘hic.ini’. This is found in the ‘medilink32bnt\bin’ folder.

When you open this file, look for the ‘[easyclaim]’ section, and the ‘easyclaimDLLPath’ and ‘HCLCertificationLocation’ lines. They typically will be ‘C:\Program Files\HICOnline\Bin’ and ‘C:\Program Files\HICOnline’ respectively.


2009/01/23 Page 26

General Failure You should be aware that very occasionally the PKI certificates that you have been sent will not work for whatever reason. If this is the case and you are positive that you have followed correct procedures, (and not received any erroneous error messages in the process), please contact Medicare Australia.

Log Files Medilink stores a log called ‘HICOnline.log’ in the ‘medilink32bnt\bin’ folder. Medicare produce a log called ‘easyclaim.log’ which goes on the current path, which, when running Medilink will also be ‘medilink32bnt\bin’. If requested, please provide these logs to help pinpoint problems.

How To Install Medicare PKI Certificates - Medilink To Install Medicare PKI Certificates.pdf · How...

Documents

Transcript of How To Install Medicare PKI Certificates - Medilink To Install Medicare PKI Certificates.pdf · How...