Important changes to your clinical information software you need to be aware of

16 Sep 2021

The Australian Digital Health Agency (the Agency) is upgrading the National Authentication Service for Health (NASH) authentication system to strengthen security when accessing digital health services.

These upgrades will provide enhanced security protection of healthcare information and ensure Australians can continue accessing digital health services safely and securely. 

Organisations should upgrade their software to a NASH SHA-2 ready product by 13 March 2022 to continue to connect to the following digital health services: 

  • My Health Record 
  • Healthcare Identifiers (HI) Service 
  • Electronic Prescribing 
  • Secure Messaging 

The Agency has been working with software providers since 2018 to establish their software readiness for NASH SHA-2 certificates. Some software providers will be ready in September 2021, others will need more time.  Your software provider will communicate with you shortly about their software readiness for NASH SHA-2. 

Next steps for clinicians and practice managers 

  • ask your software provider when will they have a NASH SHA-2 ready software available 
  • if necessary, upgrade your software to the SHA-2 ready version 
  • if your NASH PKI Certificate comes up for renewal and you have not yet upgraded your software to a NASH SHA-2 ready version, then you must renew your NASH SHA-1 certificate to maintain access to digital health services.  
  • Upgrade to a NASH SHA-2 certificate when your software product is ready 


If you have any questions or need help installing your NASH SHA-2 certificate you can: 

  • Talk to your software provider; or 
  • Contact your Primary Healthcare Network who have been trained to help you through this process 

Contact if you have questions about: 

  • Managing your NASH PKI certificates 
  • Locating lost or forgotten passwords 


For more background information go to the ADHA website page National Authentication Services for Health (NASH)