National Authentication Service for Health (NASH) Public Key Infrastructure (PKI) Certificate

Healthcare providers and healthcare organisations must have a National Authentication Service for Health (NASH) Public Key Infrastructure (PKI) certificate to access the My Health Record system and to send messages securely to other healthcare provider organisations. A NASH PKI certificate is a digital certificate that authenticates an individual provider or organisation whenever they access the My Health Record system and/or used to authenticate organisations when they use secure messaging.

There are two types of NASH PKI Certificates – Organisation and Individual. Only a NASH PKI Certificate for Organisations can be applied for using this online application tool.

Organisations need to have a NASH PKI Certificate policy which addresses a number of areas. More information can be found under Additional Information.

Conformant Clinical Software

If your organisation is accessing the My Health Record system via the organisation’s conformant clinical software, you will need to apply for the NASH PKI Certificate for Healthcare Provider Organisations. This can be done using this online application tool. This NASH PKI Certificate is also used for sending electronic messages securely to other healthcare organisations.

Accessing the My Health Record system via conformant clinical software enables healthcare providers to upload, view and download clinical documents from an individual’s My Health Record. See Additional Information below for a list of conformant clinical software products.

National Provider Portal

To view the information in an individual’s My Health Record without conformant clinical software, healthcare providers will need to access the My Health Record system using the Provider Portal. The Provider Portal is accessed through an internet browser on the My Health Record. Each healthcare provider at the organisation will need to obtain a NASH PKI Certificate for individuals and be authorised by their healthcare organisation to access the Provider Portal.

Once each Healthcare Provider has obtained a NASH PKI Certificate and installed this onto their computer, they will be able to view and download clinical documents from an individual’s My Health Record. They will not be able to upload information to the individual’s My Health Record as this can only be done using conformant clinical software.

The forms to request a NASH PKI Certificate for individuals and notify the System Operator of authorised healthcare providers cannot be completed using this online application tool. Healthcare providers can also be authorised by contacting the My Health Record system Enquiry line on 1800 723 471, or via Medicare Australia Health Professional Online Service (HPOS). You will find the links to these application forms in the Additional Information section.

Additional Resources


Provider Portal