Downloads
Identity Agent
The identity agent is an installable component that resides on every device that acts as a point of access to Spine systems.
NHS Digital Identity Agent v2.4.6.0 is the preferred client as it compatible/warranted for support across the majority of current Operating Systems and components. See the Warranted Environment Specification for a comprehensive list.
Prior to installation, Trusts should check with their system suppliers to confirm that NHS Digital Identity Agent v2.4.6.0 is compatible with their products and services.
NHS England Identity Agent v2.4.6.0
Documentation update in progress (below documents will support v2.4.6.0)
- - Upgrade IA to target .NET 4.8 framework (.NET 4.8 is now a prerequisite to install the Identity Agent).
- - TLSv1.0 vulnerability removed. IA will use strongest version of TLS supported by Windows.
- - Nugget packages within the projects updates to latest versions.
- - PIN length is now set to a maximum of 8 numerical characters only.
- - Self Service Unlock is updated to a new URL via registry change.
NHS Digital Identity Agent v2.4.6.0 (NHS Digital IA v2.4.6.0) is now on general release and available for download
Note: NHS Digital IA v2.4.6.0 requires middleware to be installed separately.
- - NHS Digital IA v2.x FAQ
Answers to common questions on installation and user experience - - NHS Digital Identity Agent TLS 1.0 Configuration guide
Answers to questions on TLS 1.0 configuration - - NHS Digital RA System Configuration Guide
Answers to common questions related RA machine setup - - NHS England IA v2.4.6.0 (msi)
The NHS England IA v2.4.6.0 installer file - - NHS England IA v2.4.6.0 Supporting Documentation (ZIP)
Installation and User Guides
Release Notes (inc. ‘Known Issues’)
Administrators Guide (inc. ‘Troubleshooting’)
Other supporting components for Identity Agents
- - GenericSC (ZIP)
Digitally signed version of the generic card driver
If you experience any problems with the application, you can raise a ticket via NHS Digital Customer Portal or email ssd.nationalservicedesk@nhs.net
NHS Credential Management v1.4.2.0
NHS Credential Management is a component that needs to be installed on a desktop to take advantage of a range of enhanced functionality for CMS and other smartcard related actions.
- It allows RA staff to use modern browsers, specifically Edge (Chromium) and Chrome, to perform RA operations without tying the user to IE11 which is coming out of Microsoft support.
- It is required to use the new Magicard 300 printer. RA staff cannot use this printer without downloading NHS Credential Management.
- It is required for any application that wishes to use the Care Identity Authentication service of CIS2 (e.g., the National Cervical Screening Management System).
- As we move to next the generation of standards based Smartcards, NHS Credential management will be required to use smartcard functionality such as self-renewal and self-service, as well as next generation EPS and digital signing processes.
If there are any support issues, raise a ticket via the NHS Digital Customer Portal, email ssd.nationalservicedesk@nhs.net or contact 0300 303 5035
Middleware
Please use this link to download middleware components.
Smart Card Reader Drivers
- - Download the drivers here for the Omnikey 3121 USB Smartcard Reader marked ‘Made in Philippines’ on the rear label (or if the country of manufacture is not specified). Please install the BU component in the MSI only
- - Download the drivers for the Omnikey 3121 USB Smartcard Reader marked ‘Assembled in Mexico’ on the rear label here
- - Download the latest drivers for the Omnikey 5321CR Contactless Clean Room Reader here. Please install the RU component only.
- - Download the latest drivers for the Omnikey 5122 smartcard reader (used in the DoH V2 5122 Printer) here
- - Download the GEMPCTwin Smartcard Reader here. The reader located inside the Datacard SP35 Printer also uses this driver.
- - Download the HP KUS-0133 Keyboard Reader here
Users of Dell integrated keyboard smart card readers such as the RT7D60, SK-3205 and KB813 should use the latest driver [here]
Smart Card Printer Drivers
- - DataCard SP35
- Datacard SP35 User Guide - Start Menu > Datacard Card Printers > Info Central > Troubleshooting > Printer Maintenance
- - Magicard Smartcard Printer & User Guide
NHS Credential Management is required to use the Magicard 300 printer. RA staff cannot use this printer without downloading NHS Credential Management.
Smartcard Printer Diagnostic Tools
NHS England Diagnostic Tool (New***)
The NHS England Diagnostic Tool is designed to provide an easy method for support teams to get information regarding the configuration of a device where smartcards are used to access NHS Spine Services. The tool has been enhanced to self-diagnose issues that can occur on a day-to-day basis, allowing members of your IT teams to resolve any configurations that the tool detects.
The tool itself will show a true representation of a device's configuration. Once it has completed its scan of the system, it will then display an output of potential issues alongside resolutions, as well as issues for other internal teams to resolve, such as security and networking problems.
The log generated by the tool can be saved and shared with the National Service Desk if your local IT teams cannot resolve the issue or if it is a more complex problem requiring involvement from NHS England.
due to the ever-evolving nature of technology, the tool may not always detect everything, and some configurations may go undetected. However, during release cycles we would appreciate gathering your thoughts and feedback for future improvements.
The feedback form is open for now, and we'll keep you updated when it changes.
If you experience any issues with this application or simply need to output log file with us, please raise a ticket via the NHS England Customer Portal or email ssd.nationalservicedesk@nhs.net
IA Registry Editor Tool V2.1
The IA Registry Editor Tool is designed to provide a configurable, yet easy to use mechanism which allows users to switch the environment their Identity Agent will use for authentication. The tool can be configured to work with any variation of Identity Agent on any version of Windows. The link below downloads a single executable file which can be run directly from any location as an admin user
There is now only one tool which takes highest available rights from user and updates the registry, this tool require the Trust to have allowed the user to full control over the IA tree within the HKLM/HKCU or Policy area of the registry to function correctly.
If you experience any problems with the application, you can raise a ticket via NHS Digital Customer Portal or email ssd.nationalservicedesk@nhs.net
- • IA Registry Editor Tool Download here
- • IA Registry Editor Tool User Guide Download here
Series 8 Smart Card Cache Clearance
We are aware of intermittent issues when a user has had their Series 8 Smartcard renewed or repaired by an RA and then subsequently cannot read the card on their local machine. This issue only affects users with both Oberthur middleware and a Series 8 Smartcard.
The Cache Clearance Tool resets the Smartcard cache in the Oberthur middleware and should allow the user to be able to authenticate without needing a visit to their RA for a new Smartcard.
The Cache Clearance Tool is for use by end users and does not require Admin rights to run.
If you experience any problems with the application, you can raise a ticket via the NHS Digital Customer Portal or email ssd.nationalservicedesk@nhs.net
- • Cache Clearance Tool Download here
- • Cache Clearance Tool User Guide Download here
Sun Access Manager Library Files
As per the clarification from the STIF, below is the Sun Access Manager SDK fix for each Operating System. This is for impact assessment by suppliers to upgrade to the latest C API.