Skip to main content

Smartcards that authenticate via the internet

Information about smartcards that authenticate via the internet, without the need for a Health and Social Care Network (HSCN) connection.

Page contents

Existing Oberthur (series 8) and PIV (series 9) smartcards can authenticate without an HSCN connection, using the Smartcard Connect authentication client. Smartcard Connect allows existing series 8 and series 9 smartcards to authenticate over both HSCN and non-HSCN internet connections.

Smartcard Connect comes bundled as part of a new version of NHS Credential Management.

Smartcard Connect will replace the existing NHS England Identity Agent software. It will become the default client for all smartcard authentications from September 2026, in line with the deprecation and retirement of the existing CIS1 authentication software.

Organisations and users that currently access systems supported by CIS2 authentication can use Smartcard Connect now.

Convenient

Benefits for users
  • Users can share desktops/laptops and authenticate with their own individual smartcard
  • Enables secure authentication to national clinical information systems over the internet
Choosing smartcards

Choosing smartcards

Users tend to find authenticating with smartcards works well when they:

  • already have a smartcard
  • access multiple machines
  • are quite mobile, working in different buildings/offices

Secure

NHS England security standards require smartcards to meet the following criteria:

  • cryptographic
  • uses PKIs
  • certificates updated every 3 years

Live environment smartcards

The following smartcards have been assessed against the above criteria and tested with CIS2 Authentication:

  • series 8 (Oberthur)
  • series 9 (PIV)

Reliable

NHS CIS2 Authentication is a platinum service, supported 24 hours a day, 7 days a week.

See our latest availability statistics.

Considerations for organisations providing IT Support

Benefits to organisations providing IT Support
  • Lots of health and care professionals already have a smartcard
  • No additional hardware is needed as it uses the existing cards and readers

Registering devices to users

Each user must have their own smartcard.

Smartcards are managed by a Registration Authority (RA). They are responsible for issuing and printing smartcards.

Smartcard certificates must be renewed every 3 years.

Installing Smartcard Connect

Smartcard Connect comes bundled as part of a new version of NHS Credential Management. Download this version here.

The package includes:

  • an updated version of NHS Credential Management
  • the Smartcard Connect authentication client
  • an installation guide

Please note, before running the installer you must remove existing NHS Identity Agent and NHS Credential Management software.

Network configuration and support is available in the installation guide.

Support

You can get support by going to the National Service Desk Customer Portal or emailing [email protected]

Last edited: 12 June 2025 3:24 pm