Services Australia advice: SHA-2 OCA renewal release
Added: 24 October, 2024
We’ve scheduled the Secure Hash Algorithm (SHA)-2 Organisation Certificate Authority (OCA) renewal release for 2 November 2024, which will run for approximately 24-48 hours.
To ensure you have a smooth transition, you need to complete your compatibility testing by 1 November 2024 prior to the release.
What you need to know
In October 2026, the SHA-2 OCA used to issue NASH SHA-2 PKI certificates will expire.
- We’re renewing the SHA-2 OCA and will be deploying it in the production environment 2 November 2024.
- A test NASH SHA-2 PKI certificate has been made available in the vendor test environment to provide all software vendors the opportunity to undertake compatibility testing.
- All software must support NASH SHA-2 PKI certificates issued by both the expiring and the new SHA-2 OCA.
- Software vendors are not required to undertake a new Notice of Connection test.
NASH chain of trust rollout
From 2 November 2024, an updated chain of trust will be bundled with all NASH SHA-2 PKI certificates issued. This bundle will include both the old and the new SHA-2 OCA certificates. Most software will automatically install the new chain of trust when installing a new NASH SHA-2 PKI certificate.
For software systems that don’t automatically install the chain of trust from the NASH SHA-2 PKI certificate bundle, we recommend manually rolling out the chain of trust to your sites. From 2 November 2024, the updated chain of trust will be available as a separate download on the Certificates Australia website www.certificates-australia.com.au. Due to technical constraints, we’re unable to provide the updated chain of trust prior to commencing production use of the new OCA.
We’ll send our next update on 1 November 2024.
Services Australia advice: HI Service licensed material updates
Added: 16 October, 2024
On 1 June 2024, the Healthcare Identifier (HI) Service enhanced the functionality of Search IHI and Update IHI web services.
The WSDLs have now been updated and are available for download from the Healthcare Identifiers Service tile in the Health Systems Developer Portal.
Additionally, further changes have been made to the HI Service - Services Catalogue.
The additional changes can be found in Appendix 4 – B2B Authentication Requirements by Role
Added: 24 September, 2024
On 1 June 2024, the Healthcare Identifier (HI) Service enhanced the functionality of Search IHI and Update IHI web services.
- Search IHI web services (TECH.SIS.HI.06, 12 & 30) were updated to include search by Mobile Number or Email Address.
- Update IHI web service (TECH.SIS.HI.05) was updated to include Update IHI for Additional Name, Alternate Date of Birth and Electronic Communications.
The following HI Service guides were updated as part of the June release:
- HI Service- Change Guide
- HI Service - Developers Guide
- HI Service - IHI Searching Guide
- HI Service - Services Catalogue
In September 2024, a change was made to a country code.
- TECH.SIS.HI.02 was updated to reflect the change of country code 4202 from Gaza Strip and West Bank to Occupied Palestinian Territories.
- The HI Service Change Guide was also updated.
HI Service software developers do not need to make changes to their products as a result of these updates. There is no requirement to undertake NOC or conformance testing as a result of these updates.
Please access the HI Services licensed material via the Health Systems Developer Portal for more information.
When logging in to the Services Australia portal on or after Sunday 12 May 2024, all users will be required to:
All portal users will be required to accept the Terms and Conditions for use of the Portal when logging in to the portal for the first time on or after Sunday 12 May 2024. If your organisation details are not displayed when logging in to the portal for the first time on or after Sunday 12 May 2024, logging out and logging back in again should resolve this issue.
When logging in to the portal on or after Sunday 12 May 2024, all users will be required to:
- Reset their password using the ‘Forgot Password’ link.
- Accept the Terms and Conditions for use of the Portal.
If your organisation details are not displayed when logging in to the portal for the first time on or after Sunday 12 May 2024, logging out and logging back in again should resolve this issue.
We apologise for any inconvenience this may cause.
Should you have any questions about this advice please contact the Developer Liaison team at [email protected].