Skip to main content

NHS Public Key Infrastructure - steps to be completed by urgent and emergency care services

Follow the instructions below to update your NHS Public Key Infrastructure (PKI) certificate by 31 December 2023. This will ensure encrypted patient data is transmitted securely using the Interoperability Toolkit (ITK) end points to send and receive NHS 111 messages.

Page contents

Every supplier that utilises 111 ITK Messaging APIs will need to complete two stages to successfully renew their NHS PKI certificates before the deadline to avoid loss of service. Stage 1 must be completed prior to Stage 2,  before a new certificate can be issued for each system endpoint. We also expect suppliers to complete the appropriate testing scenario(s) in Stage 1 ahead of full implementation in Stage 2.

Stage 1 - Supporting and accepting new G2 certificates

Please complete the steps below by 31 December 2023
  • Install a new G2 issuer certificate to your trust stores alongside any instances of the existing NHS Level 1C and NHS Root Authority.
  • Reconfigure your web server component to accept certificates from the G2 PKI in addition to the existing NHS PKI.
  • Contact our team to request detailed information on how to test this configuration by emailing [email protected]. NHS England will provide the test scenarios with test environments that use new G2 client certificates.
  • Start testing your system’s live endpoints against the new G2 certificates once you have access to the test environments.
  • Complete the testing phase to ensure all your live endpoints can trust new G2 certificates.

Stage 2 - Roll-out of new G2 certificates for all endpoints

When all all live endpoints can trust new G2 certificates, we will notify you that Stage 2 implementation can start.

Please follow the steps below
  • Renew your NHS system certificate using the standard process.
  • Upgrade live endpoints with your new G2 certificates.
  • Email [email protected] to confirm you have completed this work to all relevant locations and endpoints.

Contact us

For further support or if you have any queries, please contact [email protected].

Last edited: 1 September 2023 1:44 pm