ADHA to set up SHA-2 readiness register

The Australian Digital Health Agency (ADHA) is setting up a readiness register of clinical software products that are compatible with the move to new SHA-2 security and authentication certificates, which will affect the National Authentication Service for Health (NASH) certificate renewal process.

SHA-1 PKI certificates will no longer be issued after March 13, 2022 due to known vulnerabilities. ADHA plans to begin the move to SHA-2 for NASH certificates this September, affecting all software that connects to the Healthcare Identifiers (HI) Service, the My Health Record system, electronic prescribing and secure messaging.