I have received a CD from Medicare labelled SHA2

From December 2016, Medicare has modified the certificates used to access HPOS as a result of changes in browser specifications. The old certificates used a technology called SHA1, while the new certificates use SHA2. The SHA1 certificates will cease allowing access to HPOS from the end of January 2017, and installation of a SHA2 certificate will be necessary. Medicare has sent SHA2 certificates to practices which it has identified as using the HPOS system.

The SHA2 certificate is not for use with Eclipse, and should not be installed with the PKI Certificate manager.

If you have received one of these, follow the steps below.

To install the SHA2 certificates

1.	Insert the CD and view it's contents in Window Explorer.

2.	Double click on the file fac_encrypt.p12.

3.	Follow the prompts to install the certificate, accepting the default options.

4.	When prompted for the password, enter the PIC provided by Medicare. This usually arrives in a separate mailing to the CD.

5.	Complete steps 2-4 again using the file fac_sign.p12.

To log onto HPOS

1.	Go to http://www.humanservices.gov.au/

2.	Click <Health professionals>

3.	Click <Logon>

4.	Click <PKI certificates>

5.	Select the new certificate. It will have 2 year validity range.

6.	Click <OK>.

To remove old certificates

Although not necessary, you can remove old certificates as follows..

For Internet Explorer

1.	Click the 'Gear' icon in the toolbar.

2.	Select Internet Options > Content > Certificates

3.	Click the 'Personal' tab.

4.	Select each of the 2 older certificates, and click <Remove>.

For Google Chrome

1.	Click the Menu button in the toolbar (3 vertical dots).

2.	Select > Settings > Show Advanced Settings > HTTPS/SSL > Manage Certificates

3.	Click the 'Personal' tab.

4.	Select each of the 2 older certificates, and click <Remove>.