
The start of 2024 has been busy with the expiry of NASH (National Authentication Service for Health) certificates for many general practices, specialists, pharmacies and allied health providers.
Many of these organisations would have received an email from SWSPHN a month before their certificates expired, reminding them to renew and offering assistance with downloading and installing their certificates.
What is NASH?
NASH was introduced in 2012 and is a Public Key Infrastructure (PKI) solution used to access digital health services such as:
- Electronic prescribing
- My Health Record
- Secure messaging
- Healthcare Identifiers (HI) Service
Why is it used?
NASH is used by healthcare provider organisations and supporting organisations to:
- authenticate and securely access digital health services
- digitally sign documents and other transactions
- encrypt health information for secure exchange

On 24 March, access to the HI Service and My Health Record using the Medicare PKI Certificate was switched off. Now, the only way to access these services is by updating to the NASH SHA-2 certificate.
Sites which are still using the Medicare PKI Certificate to access the HI Service will get a reminder email from the Australian Digital Health Agency (ADHA) informing them to update to NASH SHA-2.
For sites which have already updated to NASH SHA-2 and are still getting a reminder email, please check with your software provider to ensure your NASH certificate has been updated and installed correctly.
Most software vendors will have updated their software, so the only certificate required is the NASH certificate.
For more information click on the link below or if you have any questions, please reach out to the SWSPHN Digital Health Team at digitalhealth@swsphn.com.au
National Authentication Service for Health (NASH) – (digitalhealth.gov.au)
National Authentication Service for Health – Services Australia