1 Health and Social Care Encryption Guide for Contractors Section Page 1. Introduction 1 2. Pre-requisites 2 3. Caveats 2 4. Recipient registering with the HSC Secure Service 3 5. Recipient setting their password 4 6. Registration confirmation 4 7. Recipient receiving the encrypted Recipient receiving the encrypted filed 6 9. Recipient accesses the decrypted Recipient replies with an encrypted Recipient composing reply Recipient adding attachments Recipient sending the encrypted reply Recipient receives sent confirmation Sender receives reply from recipient Recipient resetting the password Recipient recovering the password Expiration dates for s and accounts Who to contact for queries or problems Subsequent actions 13 * NOTE - When accessing the digital version of this file, click on the page number to skip to that section of the document. 1. Introduction This document provides guidance on how contractors can send encrypted replies to HSC staff. In this guide, contractors are referred to as Recipients as they must receive an from a member of HSC staff before they can send encrypted information in reply. Encryption must be applied to any content that is deemed sensitive orcontains patient information.examples of sensitive and personal information include but are not limited to: copies or extracts of data from clinical systems; commercially sensitive information; contracts under consideration; budgets; staff reports; appointments actual or potential not yet announced; disciplinary or criminal investigations.
2 Personal information is further defined by the Data Protection Act (1998). 2. Pre-requisites a) The Recipient s organisation must allow encrypted attachmentsthrough their quarantine procedures. b) The Recipient requires Adobe Reader V9 or later to open the PDF filesthat are encrypted. Other PDF readers may work but are not supported. c) Procedures should be agreed between the Sender and Recipient onhow the service should be used i.e.: Test the process is working as expected before sending the firstsensitive/personal data. All sensitive/personal data to be in an attachment rather than thebody of the . Acknowledgement of receipt. 3. Caveats a) An encrypted exchange must be initiated from within the HSC. b) It will not encrypt between HSC organisations including GPs(hscni.net and n-i.nhs.uk addresses). c) The following domains are not routed through this service andtherefore not encrypted by it: Mail domain n-i.nhs.uk cjsm.net @sportscouncil-ni.org.uk Description HSC legacy mail domains and GPs Mainland NHS organisations NHS mail Criminal Justice Secure Mail Northern Ireland Government Departments Northern Ireland Government Departments Council for the Curriculum, Examinations and Assessment Historical Institutional Abuse Inquiry Sports Council NI d) The password applied to an encrypted will always remain the onethe Recipient had set at the time the was sent. Therefore if arecipient resets their HSC Encrypted Service password theymust use their old password to open old encrypted s. If therecipient forgets their password they will not be able to access oldencrypted s.
3 e) Certain file types cannot be opened by Adobe Reader when attachedto encrypted SPX messages. These file types include but are notlimited to:.exe executable files.zip compressed files.bat batch files.dll dynamic libraries.class java class f) The size of attachments is restricted to 10Mb for all HSC organisations. 4. Recipient registering with the HSC Secure Service a) You will first be required to mail and head your subject line request for registration for encrypt service. A member of staff will then send you an to begin the encryption registration process. b) The first time the Recipient is sent an encrypted from an HSC address using this service, the Recipient must register their address with the HSC Encryption Server. To do this, the Recipient will receive an with contents similar to the figure below. c) To register with the service, click on the here link, circled in red.if the program does not support active links, then copy and paste thelink circled in greeninto your internet browser. NOTE 1: A Registration Reminder will be issued after 5 days ifregistration has not taken place.
4 NOTE 2: After 10 days the Recipient will not be able to register to receive the , the will be deleted and the Sender notified. NOTE 3: The Sender is notified when the Recipient has successfully registered. 5. Recipient setting their password a) This will open the default internet browser, i.e. Internet Explorer, on therecipient s PC and the figure below is displayed. b) The Recipient then completes the Password and Confirm Password fields.the complexity of the password required is displayed in the PasswordRequirements box.note: The changes to a when the password meets the passwordrequirement. All three need to change to before the Recipient can proceed. c) The Recipient must then select 3 questions from the drop down list in thepassword Reset/Recovery section and enter 3 answers. This will allow therecipient to reset or recover their password if required at a later date withouthaving to contact the BSO Service Desk. d) When all fields are completed the Recipient can then click on the Registerbutton to complete the process. 6. Registration confirmation When the registration has been successfully completed, the Recipient will receive a notification as in the figure below.this internet browser window can be closed.
5 7. Recipient receiving the encrypted a) The Recipient will now receive another which contains the original content from the Sender - see the figure below. b) To access that content, the Recipient should click on the PDF logo at the bottom of the message, circled in red.
6 8. Recipient receiving the encrypted file a) The Recipient will then see a File Download window on their screen see in the figure below. Click the Open or Save button to progress. b) The Recipient enters the password they registered in Section 5 above, in thepassword window see the figure below. Then click the OK button. 9. Recipient accesses the decrypted Attachments may be found at the bottom of the PDF or in a column to the left of the content, depending on the version of Adobe Reader used see in the figure below. NOTE: To remove the need to constantly re-enter the password for the PDF, the attachments can be saved to the Recipient s file store. As a further test the initial document sent will always be this guide. Once you have downloaded the attachment and confirmed that it is this guide you will then be free to use the reply service to send encrypted attachment to the LES mailbox.
7 10. Recipient replies with an encrypted a) The Recipient clicks on the Reply button and the figure belowmay be displayed, depending on the security settings within the Recipient s organisation. b) Click on the Allow button to progress. NOTE: By ticking the Remember my action for this site box, this action will not be required for further s from this service. NOTE: The Reply functionality to a particular is limited to 30 days from the date of issue. Please request another secure from the Sender if it is beyond the 30 days and your response contains sensitive information. It is the responsibility of the sender to ensure the reply is in date as any transmission of data via insecure means will result in an information governance breach. 11. Recipient composing reply Enter the content of the reply as normal see the figure below.
8 12. Recipient adding attachments a) To add an attachment (your test form), click on the Browse button and navigate to the file to be attached as per the normal operating system browsing method. b) Once selected, click the Upload button. This will display the uploaded file in the Attachments column see the figure below. c) Repeat this process for all files that need to be attached. Attached files can be removed by clicking the tick box beside the relevant file and clicking Delete to remove the attachment. Click the Done button to return to Recipient sending the encrypted reply The attachment(s) added from Section 12 is displayed.click on the Send button.unselect the Send me a secure copy if a copy is not required. NOTE: This service does not save a copy to the Sent Items folder, therefore if confirmation that the was sent is required, this box should be left ticked.
9 14. Recipient receives sent confirmation The Recipient will receive a confirmation window if the message is sent successfully. 15. Sender receives reply from recipient Replies received from the Recipient will be decrypted automatically by the HSC Encrypted Service and then forwarded into the Sender s mailbox see figure below. 16. Recipient resetting the password a) If a Recipient believes their password to be compromised they can reset their password using the appropriate link from a previously received encrypted from the HSC Secure Service. The links are found in the body of see figure below. NOTE: The Recipient can only use an sent to them as the links contain references to their address. NOTE: All previous encrypted s will still require the old password to open.
10 b) To change the password, click the appropriate link, enter the Current password, and then the new password in the Password and Confirm Password fields see figure below. c) Once the password criteria are meet i.e. all have a against them, click the Change Password button to complete the process. The Recipient can also update the password change/recovery questions by ticking the box see figure below. d) The Change Password button will remain greyed out until all 3 answers are entered. NOTE: The previous answers can be re-entered. Notification will be displayed when the password has been successfully changed see figure below.
11 17. Recipient recovering the password a) If a Recipient forgets their password they can recover it by using the appropriate link from a previously received encrypted from the HSC Secure Service. The links are found in the body of see figure below. NOTE: The Recipient can only use an sent to them as the links containreferences to their address. b) The following window will open in the default internet browser see figure below. c) Click on the Send password Question(s) button to send them to your address. On successful completion a notification will be displayed in the internet browser see figure below. d) The Recipient will receive an with a link to preset questions see figure below.
12 e) A new internet browser window will open to allow entry of the answers to the preselected questions and the option to recover or reset the password. Enter the 3 answers, select Recover my password and click the Submitbutton. NOTE: When an answer is entered incorrectly, the screen will be reset and Invalid answer will be displayed in place of Answer the password question(s) to reset or recover your password. f) The screen will display a temporary one time password (circled in red) that therecipient will need to use to open a new encrypted that will contain theirpassword see figure below. g) The Recipient must now open the with a subject title - SPX Password Recovery Request Information from Health Social Care (NorthernIreland). h) Open the attached PDF attachment see Section 7 for further details if required. The PDF will contain their password.note: It is recommended that this message is deleted immediately after thepassword has been confirmed.
13 18. Expiration dates for s and accounts After 30 days unused Recipient accounts/passwords will be deleted. TheRecipient will need to register again for any new they receive.after 30 days the Recipient will not be able to make a secure response. A newencrypted will need to be sent from the Sender.After 10 days the will be deleted if the Recipient has not registered. Anotification is forwarded to the Sender informing them of this. A newencrypted will need to be sent from the Sender if needed. 19. Who to contact for queries and problems If you are experiencing issues or have any queries about the HSC Secure Service you should make contact in the first instance via the LES mailbox and mark your mail for the attention of the Dental and Ophthalmic Manager. 20. Subsequent actions Once your test forms have been received they will be processed by the BSO and once validated sent for payment as agreed within the LES.
Citi Secure Email Program Receiving Secure Email from Citi For External Customers and Business Partners Protecting the privacy and security of client information is a top priority at Citi. Citi s Secure
If you are navigating using only the keyboard or using an assistive device and need help, visit our Navigation Instructional page for alternative views and navigation. Warning: If you select this link,
Cox Business Premium Online Backup USER'S GUIDE Cox Business VERSION 1.0 Table of Contents ABOUT THIS GUIDE... 4 DOWNLOADING COX BUSINESS PREMIUM ONLINE BACKUP... 5 INSTALLING COX BUSINESS PREMIUM ONLINE
Erasmus Charter for Higher Education How to complete and submit an application for accreditation Version 1 2 March 2015 TABLE OF CONTENTS Technical requirements... 3 Overview of the application process...
Help Documents 15R1 Enterprise Email Integration and Functionality The integration of email within Enterprise allows Enterprise users to mirror their Microsoft Outlook. or other SMTP or IMAP email, including
Ohio Responds Volunteer Registry Message Guide Copyright 2012 All Rights Reserved. Ohio Department of Health Bureau of Health Preparedness All Rights Reserved. 35 E. Chestnut, 7 th Floor Columbus, OH 43215
IceWarp Unified Communications IceWarp Outlook Sync User Guide Version 10.5 Printed on 20 December, 2012 Contents IceWarp Outlook Sync User Guide 1 Installation... 2 Installation Pre-requisites... 3 Installation
PowerSchool 7.x Student Information System Released December 2011 Document Owner: Documentation Services This edition applies to Release 7.1 of the [product name] software and to all subsequent releases
XPRESSIONS USER GUIDE 1 WHAT IS XPRESSIONS? A voicemail system that enables access via the telephone or by PC/MAC. NOTE: Siemens no longer supports the current PhoneMail system. Xpressions is the replacement.
Outlook: Storing Email Academic Computing Services www.ku.edu/acs Abstract: Use AutoArchive to move items to an archive file (.pst). Archiving copies items to the archive file and then removes them from
Powered by Table of Contents Web Mail Guide... Error! Bookmark not defined. 1 Introduction to Web Mail... 4 1.1 Requirements... 4 1.2 Recommendations for using Web Mail... 4 1.3 Accessing your Web Mail...
Programme: Programme Director: Owner: Author: Tracking Database GPSOC-R CALL-OFF AGREEMENT AND SCHEDULE A MAINTENANCE CONFIGURATION ITEM NO Tracking Database Rob Shaw Kim Hobday Kim Hobday DOC-00568 Version:
Service Desk Plus: User Guide Introduction ManageEngine ServiceDesk Plus is comprehensive help desk and asset management software that provides help desk agents and IT managers, an integrated console to
DocuSign Quick Start Guide Using Templates Overview This guide provides an overview of how to use a template when creating and sending an envelope. Templates help streamline the sending process when you
June 17, 2013 Web Mail Guide Version 5.0.1 Client Services Table of Contents 1 Introduction to Web Mail... 4 1.1 Requirements... 4 1.2 Recommendations for using Web Mail... 4 1.3 Accessing your Web Mail...
Guidance for using the East Sussex County Council Secure Email system ESCC February 2010 Using the ESCC SecureMail system The ESCC SecureMail system is an email system that provides a high level of security
Cisco Registered Envelope Service 4.4 Recipient Guide March 21, 2015 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800
About (EAS) Archived Email Service Information Services is implementing an email archiving on the staff email system in order to save space on the main email system which is reaching full capacity. Emails
4. Client-Level Administration Introduction to Client Usage The Client Home Page Overview Managing Your Client Account o Editing Your Client Record View Account Status Report Domain Administration Page
End User s Guide Electronic Filing Rev: August 2014 This end user s guide has been skillfully created by smartech.net through meetings with the Clerk of the Circuit Court of Cook County and Online Information
B a r r a c u d a M e s s a g e A r c h i v e r O u t l o o k A d d - I n U s e r G u i d e V e r si on 3. 1 Barracuda Networks, Inc. 3175 S. Winchester Blvd Campbell, CA 95008 http://www.barracuda.com
Trust Library Services http://www.mtwlibrary.nhs.uk http://mtwweb/cgt/library/default.htm http://mtwlibrary.blogspot.com KNOW HOW: Outlook Using Microsoft Outlook Guide for using E-mail, Contacts, Personal
Web Portal User Guide Version 6.0 2013 Pitney Bowes Software Inc. All rights reserved. This document may contain confidential and proprietary information belonging to Pitney Bowes Inc. and/or its subsidiaries