Welch Allyn RetinaVue Network

Transcription

1 Welch Allyn RetinaVue Network EMR Deployment guide Software version 1.X

2 2017 Welch Allyn. All rights are reserved. To support the intended use of the product described in this publication, the purchaser of the product is permitted to copy this publication, for internal distribution only, from the media provided by Welch Allyn. No other use, reproduction, or distribution of this publication, or any part of it, is permitted without written permission from Welch Allyn. Welch Allyn assumes no responsibility for any injury to anyone, or for any illegal or improper use of the product, that may result from failure to use this product in accordance with the instructions, cautions, warnings, or statement of intended use published in this manual. Software in this product is Copyright 2017 Welch Allyn or its vendors. All rights are reserved. The software is protected by United States of America copyright laws and international treaty provisions applicable worldwide. Under such laws, the licensee is entitled to use the copy of the software incorporated with this instrument as intended in the operation of the product in which it is embedded. The software may not be copied, decompiled, reverseengineered, disassembled, or otherwise reduced to human-perceivable form. This is not a sale of the software or any copy of the software; all right, title, and ownership of the software remain with Welch Allyn or its vendors. For information about any Welch Allyn product, contact Welch Allyn Technical Support: support. DIR Ver. B Welch Allyn, Inc State Street Road Skaneateles Falls, NY USA This manual applies to the PACS MEDICAL IMAGE SYSTEM Revision date:

3 iii Contents About this guide... 1 RetinaVue architecture... 2 RetinaVue EMR connected workflow... 3 RetinaVue EMR connectivity project overview... 3 Using the EMR Deployment Portal... 7 Features of the RetinaVue Network EMR Deployment Portal... 7 Log in to the RetinaVue Network EMR Deployment Portal... 9 Configure the EMR information Update Deployment Troubleshooting Appendix Sandbox servers Production servers Configure the RetinaVue Client Application to connect to the RetinaVue Sandbox Server Certificate export and installation for server and client authentication... 29

4 iv Contents Welch Allyn RetinaVue Network

5 1 About this guide This EMR Deployment guide is for RetinaVue Network system Administrators or other IT professionals involved in: setting up the EMR Server Application to connect with the RetinaVue Server installing server certificates configuring the RetinaVue Network to connect to an EMR (or similiar system) managing a RetinaVue Network EMR connection (or similiar system) troubleshooting a RetinaVue Network EMR deployment Related documents When using this manual, refer to the following: Welch Allyn RetinaVue 100 Imager Directions for use Welch Allyn RetinaVue Network Network guide RetinaVue Network Software installation instructions Welch Allyn RetinaVue website: For information on clinical use or using the device that connects to the RetinaVue Network system, consult the Directions for use that came with the device.

6 2 About this guide Welch Allyn RetinaVue Network RetinaVue architecture The RetinaVue architecture diagram shows the relationship between the RetinaVue Server, the RetinaVue Client Application, the EMR Server Application, and the over-read Physician's Portal. The RetinaVue architecture diagram also depicts the 10 interactions of the workflow: 1. Provider enters an order. 2. EMR Client Application sends order to the EMR Server Application. 3. EMR Server Application sends an HL7 compliant order, or multiple orders, (via HTTPS TLS1.2) to the RetinaVue Server. 4. RetinaVue Server sends an order, or multiple orders, to the RetinaVue Client Application (via HTTPS TLS1.2). 5. An order, or multiple orders, appear as a patient list in the camera. 6. Clinician takes an eye exam. 7. Exam data is sent from the camera to the RetinaVue Client Application. 8. Exam data is sent (via HTTPS TLS1.2) from the RetinaVue Client Application to the RetinaVue Server.

7 EMR Deployment guide About this guide 3 9. A board-certified ophthalmologist performs an over-read through the Physician's Portal. 10. Test results (report or images) are sent to the EMR Server Application (via HTTPS TLS1.2). RetinaVue EMR connected workflow The RetinaVue EMR Connected Workflow diagram shows the interaction between the referring provider, the clinician, and the board-certified ophthalmologist (specialist) working in an EMR-connected environment. RetinaVue EMR connectivity project overview Prerequisites The Implementation tasks table outlines the specific tasks for each phase of the deployment and the table highlights the responsible party involved in each phase of connecting to the RetinaVue Network. The seven phases of connecting to the RetinaVue Network include: completing the pre-sales activities completing the RetinaVue connectivity configuration completing the interface development confirming the workflow testing training moving to a production server to go live 1. The customer account and clinics must be set up in the RetinaVue Network. 2. If your organization requires a security questionnaire for solutions connecting to the EMR, that questionnaire must be completed before the EMR deployment starts. 3. An outgoing port must be established to send orders to the RetinaVue Network.

8 4 About this guide Welch Allyn RetinaVue Network Implementation tasks 4. An incoming listening port must be opened to receive results from the RetinaVue Network. Task Responsibility Comment Pre-Sales Review RetinaVue EMR connected workflow Welch Allyn and Customer Confirm orders can be sent to a server hosted by RetinaVue. Customer Connection initiated by the customer server, using TLS 1.2 with client / server certificates. Confirm a server hosted by RetinaVue can send a RetinaVue result to the customer server. Customer Connection initiated by the RetinaVue Server, using TLS 1.2 with client / server certificates. Review Welch Allyn HL7 Customer Interface Design Specification and confirm the requirements & interface can be accomplished by the customer interface team. Optional for HL7 interfaces only. Confirm the following fields can be sent with the order message to RetinaVue: a. First Name b. Last Name c. MRN / Patient ID d. Birth date e. Gender f. Referring Physician g. Location / Department h. *Diabetes Type i. *Year Diagnosed j. *Medication / Treatment * Extra order questions. If they are part of the order entry screen they do not need to be filled in by the person taking the exam. Customer Confirm the diagnostic retinopathy order code is: Customer RetinaVue connectivity configuration Configure the RetinaVue connection to the EMR Customer Using Welch Allyn EMR Deployment Portal EMR Type

9 EMR Deployment guide About this guide 5 Task Responsibility Comment Send Orders Port Number Customer server IP address Receive Results Port Number Configure mapping from the EMR Clinic Name to the RetinaVue Clinic ID Customer Using Welch Allyn EMR Deployment Portal Associate the RetinaVue Clinic ID to the EMR Clinic Name Create x.509 certificates Customer Using Welch Allyn EMR Deployment Portal Create the certificates for the EMR and RetinaVue. Interface development Develop preliminary order in customer software Confirm sample orders meet requirements of RetinaVue HL7 interface Build required Order inputs in EMR for order messages Configure EMR Server Application to receive results Establish connectivity between EMR test servers and RetinaVue test servers Welch Allyn RetinaVue Client software installed at customer site and configured to connect to Welch Allyn RetinaVue test server Confirming the workflow Customer Customer Customer Customer Customer Customer Optional for HL7 interfaces only. Follow the instructions in the Certificate export and installation for server and client authentication and the Configure the RetinaVue client software to connect to the RetinaVue sandbox server topics. Follow the steps in the RetinaVue EMR Connected Workflow diagram Testing Create mapping test plan (department, discrete data fields, etc.) Create integration test plan Execute mapping testing Execute integration testing Customer Customer Customer Customer

10 6 About this guide Welch Allyn RetinaVue Network Task Responsibility Comment Training Perform camera and RetinaVue Network system training Customer / Welch Allyn Move to Production Coordinate activity to create interface in production environment. Assure the proper connection from RetinaVue Network server to EMR server. Final confirmation of IP(s) and Port(s). Go Live Customer Customer Go live complete Customer + ~ 5 days from Go Live Project Closure; sign off and transition to technical support Customer + ~ 5 days from Go Live complete

11 7 Using the EMR Deployment Portal The EMR Deployment Portal assists users in configuring the EMR Server Application to connect with the RetinaVue Server. For a successful deployment, follow these steps to set up the EMR Deployment Portal: confirm the RetinaVue Network company contact information select the EMR type enter the port to send orders enter the IP address and port for the RetinaVue Server to send results enter the EMR Clinic ID for each RetinaVue clinic create client and server certificates install the client and server certificates Three additional steps are required to confirm that the EMR is properly connected to the RetinaVue Network server. These steps are completed outside of the RetinaVue Network EMR Deployment Portal and include: downloading the RetinaVue Network client software application performing and submitting an exam with the camera viewing the exam results within the EMR Features of the RetinaVue Network EMR Deployment Portal The following features are available on RetinaVue Network EMR Deployment Portal: Company Information About Logout EMR Information EMR Clinic Information Certificates EMR Deployment Portal Version Deployment and Certificate status Grey - information is still required and certificate signing requests need to be uploaded Red - waiting for certificates to be signed

12 8 Using the EMR Deployment Portal Welch Allyn RetinaVue Network Yellow - certificates are ready (signed) and deployment is ready to be enabled once the appropriate certificates are uploaded Green - deployment is enabled and certificates are deployed RetinaVue Network Company Information From the RetinaVue Network EMR Deployment Portal Company Information screen company administrators with administrative rights can: View Company Information View Deployment status Lock or unlock asset Update EMR: contact send order port number receive results port number Update Clinics: update EMR Clinic Name mapping Update Certificates: request new certificates About the EMR Deployment software version Click About to view the EMR Deployment software version.

13 EMR Deployment guide Using the EMR Deployment Portal 9 Log in to the RetinaVue Network EMR Deployment Portal Note The EMR Deployment Portal is designed for use by EMR company administrators with administrative rights. 1. Use a web browser to navigate to the Welch Allyn RetinaVue Network EMR Deployment Portal at: 2. Enter your User Name and Password and click Log In. The RetinaVue Network Company Information screen appears.

14 10 Using the EMR Deployment Portal Welch Allyn RetinaVue Network Configure the EMR information This section describes how to configure the EMR information for connection to the RetinaVue Network including: selecting an EMR type Step 1 set up EMR updating EMR Clinic Name mapping creating client and server certificate requests installing and activating client and server certificates Running the Create Certificate Requests.bat file creates the Client and Server Request.inf.csr certificate files needed to submit to the certificate authority. These certificates are needed for EMR security and instructions are provided in the topic: Step 4 CSR signing. This section describes: selecting the EMR type adding or updating contact selecting Domain Name, results, and order ports 1. From the RetinaVue Network Company Information screen, use the drop-down menu to select the EMR type. Note For help tips, hover the mouse over the?. 2. Enter at least one contact address. For multiple addresses, separate with a semicolon (;). Note The Welch Allyn RetinaVue Network Server Domain Name/IP Address is preset. 3. Enter the Send Orders Port Number.

15 EMR Deployment guide Using the EMR Deployment Portal 11 Note The EMR Deployment Portal only accepts one unique send port per RetinaVue company. If the "Send Orders Port Number is in use. Please select a new port." message appears, select another port that is not currently in use. 4. Enter the Domain Name/IP Address. Note This is the location that results will be sent to. For help tips, hover the mouse over the?. 5. Enter the Receive Results Port Number. Note The EMR Deployment Portal only accepts one unique receive results port per RetinaVue company. If the "Receive Results Port Number is in use. Please select a new port." message appears, select another port that is not currently in use. 6. When you have completed the EMR information, click Next. The Step 2. Clinics screen appears. Step 2 set up Clinics When orders are submitted to the RetinaVue Network for each clinic, an EMR Clinic ID needs to be present in the order. Note Click + to show the instructions. 1. Confirm any existing company information at the Step 2. Clinics screen and begin entering your EMR ID for any new clinics. 2. Enter the EMR Clinic ID for each clinic. Note For help tips, hover the mouse over the?. 3. When you have completed the EMR Clinic ID for each clinic, click Next. Step 3 Submit Certificate Signing Requests (CSRs) The RetinaVue Network requires secure communication with the EMR using TLS 1.2.

16 12 Using the EMR Deployment Portal Welch Allyn RetinaVue Network TLS 1.2 uses X509 certificates when creating secure communication channels. To establish secure communication with the EMR a set of certificates must be created and installed on the EMR server. The following steps facilitate certificate creation: Follow the Certificate Signing Request (CSR) process steps. Follow the Active Client Certificate process steps. Download the CSR Generation Scripts for the EMR. Unzip and upload the Client CSR Certificate file into the EMR server. Upload the Server CSR Certificate file into the EMR server. Download the Active Client Certificate files for the EMR. Unzip and self-sign the certificate by entering a password that you control. Upload the Client and Server Active Certificate files into the EMR server. Note If using a PC other than the EMR server, the Active Certificate Client and Server files need to be transferred to the EMR server. (See the Certificate export and installation for server and client authentication topic for further information.) Client and Server Certificate Signing Requests (CSR) 1. On the Step 3. Submit CSRs screen, begin the process of downloading the Certificate Signing Request (CSR) Generation Scripts for your EMR. Note Click + to show the instructions. For help tips, hover the mouse over the?. 2. Click Download CSR Generation Scripts. 3. Open and extract the zip file from the location that you selected when you downloaded the certificates in step 2. The file name contains a title: "EMR Deployment Portal_CreateCertificateRequests". 4. Right-click on the Create Certificate Requests.bat file and select Run as administrator.

17 EMR Deployment guide Using the EMR Deployment Portal From the EMR Deployment Portal Certificates tab (Upload Client Certificate Signing Request.csr) click Browse. From the file folder location that you selected to extract the files, select the Client Certificate Request.inf.csr file and click Open. 6. From the EMR Deployment Portal Certificates tab (Upload Client Certificate Signing Request.csr) click Upload. A message appears that the upload succeeded. 7. From the EMR Deployment Portal Certificates tab (Upload Server Certificate Signing Request.csr) click Browse. From the file folder location that you selected to extract the files, select the Server Certificate Request.inf.csr file and click Open.

18 14 Using the EMR Deployment Portal Welch Allyn RetinaVue Network 8. From the EMR Deployment Portal Certificates tab (Upload Server Certificate Signing Request.csr) click Upload. A message appears that the upload succeeded. 9. When you have uploaded both the client and server certificates, click Next. Note When the status turns from grey to red, the deployment is in process until the certificates are accepted. Step 4 Complete the Certificate Signing Requests (CSRs) Note The newly uploaded certificate signing requests typically take a few minutes to be signed by the certificate authority. Click Refresh to change the certificate status from red to yellow. (When the certificates are ready, the certificate status will only change by clicking Refresh.)

19 EMR Deployment guide Using the EMR Deployment Portal 15 Step 5 Accept and Finish 1. Once the certificate status changes from red to yellow on the Step 5. Accept and Finish screen, click Download New Certificates. 2. Open and extract the zip file from the location that you selected when you downloaded the certificates in step 1. The file name contains a title: "EMR Deployment Portal_Certificates". 3. Right-click on the Accept Certificates.bat file and select Run as administrator. 4. Once the file is open and the Windows System 32 command prompt appears, enter a new password and then confirm your password. Make a note of this password because it will be used when uploading the certificates into the EMR Deployment Portal. 5. From the EMR Deployment Portal Certificates tab (Upload Client Certificate and supply password.pfx) click Browse. From the file folder location that you selected to extract the files, select the Client Certificate.cer.pfx file and click Open.

20 16 Using the EMR Deployment Portal Welch Allyn RetinaVue Network 6. From the EMR Deployment Portal Certificates tab (Upload Client Certificate and supply password.pfx) click Upload and enter the password that you used at the Windows System 32 command prompt. A message appears that the upload succeeded. 7. From the EMR Deployment Portal Certificates tab (Upload Self Signed Client Certificate.cer) click Browse. From the file folder location that you selected to extract the files, select the Self Signed Client Certificate Request.inf.cer file and click Open. 8. From the EMR Deployment Portal Certificates tab (Upload Self Signed Client Certificate.cer) click Upload.

21 EMR Deployment guide Using the EMR Deployment Portal On the Step 5. Accept and Finish screen, click Finish. A message appears that the deployment was successfully created for your company and the EMR deployment indicator transitions from yellow to green.

22 18 Using the EMR Deployment Portal Welch Allyn RetinaVue Network Update Deployment Returning EMR company administrators with administrative rights may need to: update EMR Clinic ID mapping update EMR port numbers update certificates or refresh the certificate status delete and create a new deployment after a server change Note New client and server certificates need to be signed by a certificate authority. This process typically takes a few minutes. Click the refresh button to refresh the RetinaVue Network Company Information screen. From the RetinaVue Network Company Information screen, click Refresh to refresh the RetinaVue Network Company Information screen. The status of the deployment is indicated by the grey, red, yellow, or green status indicator icon located in the upper-right corner of the RetinaVue Network Company Information screen. Note When the status turns green, the deployment is complete. Update Clinic IDs

23 EMR Deployment guide Using the EMR Deployment Portal Enter the revised EMR ID for a clinic. The changes are saved as the changes are made. 2. When you have completed the clinic EMR ID change, click Next if you need to update the certificates. Update Certificates (Optional) Follow the steps in the Client and Server Certificate Signing Requests (CSR) topic to download and update the Client and Server certificates. Delete Deployment (Optional) 1. Click Delete Deployment. 2. At the dialogue box "Are you sure you want to delete the deployment?", click OK. The RetinaVue Network Company Information screen appears.

24 20 Using the EMR Deployment Portal Welch Allyn RetinaVue Network

25 21 Troubleshooting This section presents a table of problem descriptions, possible causes, and suggested actions that can resolve the issue. Symptom Possible cause Suggested action The EMR does not have internet connectivity The RetinaVue EMR Server Application is not listening on the correct port Unable to send orders from the EMR Server Application to the RetinaVue Network The RetinaVue EMR Server is not targeting the correct RetinaVue EMR Server Application IP Address/Port The RetinaVue EMR Server Application is down The Order is invalid Establish internet connectivity for the EMR. Use the EMR Deployment Portal to verify that the Orders port is configured correctly and correct if needed. Redeploy integration. Use the EMR Deployment Portal to verify that the Orders port is configured correctly and correct if needed. Redeploy integration. Contact Welch Allyn technical support. Use the RetinaVue Deployment Portal to check the RetinaVue EMR Server Application message logs for more information. The EMR received a NACK from the RetinaVue EMR Server Application The site is unable to activate the RetinaVue Client Application The EMR is not using the correct Client certificate The EMR Server Application is not using correct Client certificate Use the EMR Deployment Portal to verify the certificates are deployed correctly. Verify the certificates created in the RetinaVue EMR Deployment Portal have been deployed in the EMR Server. If needed, create new certificates and follow the instructions to redeploy certificates on the RetinaVue Server and the EMR Server Application. Use the EMR Deployment Portal to verify the certificates are deployed correctly. Verify the certificates created in the RetinaVue EMR Deployment Portal have been deployed in the EMR Server Application. If needed, create new certificates and follow the instructions to redeploy certificates on the RetinaVue server and the EMR server. See the topic Install the RetinaVue Network software in the Welch Allyn RetinaVue Network Network guide.

26 22 Troubleshooting Welch Allyn RetinaVue Network Symptom Possible cause Suggested action The site does not have internet connectivity available for the RetinaVue Client Application Establish internet connectivity. The RetinaVue Client Application is not configured correctly to connect to the RetinaVue Server The RetinaVue Client Application is not showing pending exams In the test environment: See the topic Configure the RetinaVue Client Application to connect to the RetinaVue Sandbox Server in the appendix. In the production environment: See the topic Step 2 set up Clinics in the section Configure the EMR information. See the topic Finding exams topic in the Troubleshooting section of the Network Guide. The camera's patient list is not being updated with pending exams The RetinaVue Server is down The site IT infrastructure is blocking access to the RetinaVue Server The camera is not connected to the RetinaVue Client Application PC The RetinaVue Client Application is not recognizing the connected camera The camera is not docked correctly The RetinaVue Client Application is not configured for the camera being used The camera is not connected to the RetinaVue Client Application PC Contact Welch Allyn technical support. Ensure that the RetinaVue Server is accessible. (Use port number 443.) Connect the camera to the RetinaVue Client Application PC. Ensure that the camera is powered on and not in sleep mode. Ensure that the camera is docked correctly such that the communication pins are securely aligned. See the View or change the Camera Settings topic in the Network Guide. Connect the camera to the RetinaVue Client Application PC. The RetinaVue Client Application is not The site's RetinaVue Client recognizing a connected camera Application pending exams list is not being updated when The camera is not docked correctly exams are submitted Unable to submit an exam for over-read from the RetinaVue Client Application The RetinaVue Client Application is not configured for the camera being used The site does not have internet connectivity Ensure that the camera is powered on and not in sleep mode. Ensure that the camera is docked correctly such that the communication pins are securely aligned. See the View or change the Camera Settings topic in the Network Guide. Establish internet connectivity.

27 EMR Deployment guide Troubleshooting 23 Symptom Possible cause Suggested action The site IT infrastructure is blocking access from the RetinaVue Client Application to the RetinaVue Server The RetinaVue Server is down The RetinaVue EMR Server Application has not polled for results since the overread result has been completed The RetinaVue EMR Server Application is down Ensure that the RetinaVue Server is accessible. (Use port 443.) Contact Welch Allyn technical support. Wait for the polling to occur. (Polling occurs every 20 minutes.) Contact Welch Allyn technical support. The EMR is unable to receive results from the RetinaVue EMR Server Application The EMR Server is not targeting the Use the EMR Deployment Portal to verify the correct RetinaVue EMR Server Application correct IP/Ports are being used. If needed, IP Address/Port update the deployment. Redeploy integration. The RetinaVue EMR Server Application received a NACK from the EMR upon sending a result Site is not listening on the correct port The EMR does not have internet connectivity Result is invalid Update the EMR configuration to listen for completed results on the correct port. Contact Welch Allyn technical support. Using the EMR Deployment Portal, check the EMR Server Application logs for more information. The result will continue to be sent every 20 minutes until the issue is resolved. The deployment status remains red The deployment has not completed Follow the deployment configuration steps to ensure that the status change from red to green. Additionally, click Refresh to change the certificate status from red to yellow. (When the certificates are ready, the certificate status will only change by clicking Refresh.) Note The newly uploaded certificate signing requests typically take a few minutes to be signed by the certificate authority.

28 24 Troubleshooting Welch Allyn RetinaVue Network

29 25 Appendix Sandbox servers This section provides the links to the RetinaVue Network Customer Portal and EMR Deployment Sandbox Servers. The Customer Portal (RetinaVue Network Sandbox Server) address is: The EMR Deployment Portal (RetinaVue Network Sandbox Server) address is: Production servers This section provides the links to the RetinaVue Network Customer Portal and EMR Deployment Production Servers. The Customer Portal (RetinaVue Network Production Server) address is: The EMR Deployment Portal (RetinaVue Network Production Server) address is: Configure the RetinaVue Client Application to connect to the RetinaVue Sandbox Server These instructions explain how to connect to a test server to check the complete process of sending orders and receiving results. Connect to the RetinaVue Sandbox Server Log in to the RetinaVue Network Customer Portal Sandbox Server using the User Name and Password that you entered during the initial account set up. (For additional information, see the topics: Set up process and First time set up of the company in the Network Guide.) Install and configure the latest version of the RetinaVue Network software application to connect to the Sandbox Server.

30 26 Appendix Welch Allyn RetinaVue Network a. Run Internet Explorer as an administrator and navigate to sandbox.retinavue.net/rn_customerportal. b. Log in with your User Name and Password credentials that you entered during the initial account set up. c. Click Installers. d. Click RetinaVue Network Software Download and the save the.exe file to the desktop. e. After the RetinaVueNetworkSetup.exe file finishes downloading, open Windows Explorer to locate the RetinaVueNetworkSetup.exe file. Right-click on the executable file and select Run as administrator. f. Click Install. g. In the RetinaVue Network window, click Exit. h. Using Windows Explorer, navigate to C:\RetinaVue Network\Client. i. Make a backup of the RetinaVue Network.exe.config file. j. Right-click on the RetinaVue Network.exe.config file -> Open With -> Notepad. k. Update the <configuration><system.servicemodel><client><endpoint address= > value from: to:

31 EMR Deployment guide Appendix 27 l. Close and save the RetinaVue Network.exe.config file. m. On the desktop, double click the RetinaVue Network shortcut that was created during the installation process. n. Enter your RetinaVue Network Software Activation Key from the RetinaVue Network Customer Portal Installers page into the RetinaVue Network software and click Next. (See example screens from the Customer Portal Installers page and the RetinaVue Network software.)

32 28 Appendix Welch Allyn RetinaVue Network o. If your clinic is using a fundus camera other than the RetinaVue 100 Imager, select the camera from the drop-down menu. p. Select your clinic where you will be using the software by highlighting the clinic. q. Select the state where the exams will take place. Note If the exams take place in the same state as the clinic, click Yes and proceed to the next step. If the exams do not take place in the same state as the clinic, click No and use the drop-down menu to choose your state. r. Click Next to restart the software with the new settings. Click OK.

33 EMR Deployment guide Appendix 29 Certificate export and installation for server and client authentication RetinaVue Network EMR Deployment certificate export and usage instructions Overview These instructions explain how to export the certificates that were generated during the EMR Deployment certificate creation process for use with EMR connectivity applications. Once the certificates required for connectivity with the RetinaVue Network have been created they will likely need to be moved to their point of use. The location where each certificate will be used will depend on the application that is used to connect to the RetinaVue Network. These instructions are provided as a convenience with the intent to guide the exporting of certificates created through the EMR Deployment process. Access the Certificate Snap-in within the Microsoft Management Console 1. From the Windows taskbar, click Run..., type MMC, and then click OK to launch the Microsoft Management Console. 2. From the Microsoft Management Console, select File -> Add/Remove Snap-in. 3. From the Available Snap-ins menu, select Certificates, and click Add >.

34 30 Appendix Welch Allyn RetinaVue Network 4. From the Certificates Snap-in menu, select Computer Account and click Next >. 5. From the Select Computer menu, choose Local computer: (the computer this console is running on) and then click Finish. 6. From the Available Snap-ins menu,click OK. 7. From the Console Root menu select, Certificates (Local Computer) -> Personal -> Certificates. Export client certificate These instructions provide the details on how to export the client certificate needed to send encrypted RetinaVue Network order messages. 1. In the Console window, right click on <CompanyID>rvn.xxx.local, (where <CompanyID> is your RetinaVue Network Company s ID). 2. From the Action menu, select All Tasks -> Export...

35 EMR Deployment guide Appendix From the Certificate Export Wizard window, click Next >. 4. Select Yes, export the private key and then click Next >. 5. Select Personal Information Exchange -PKCS #12 (>PFX), Include all certificates in the certification path if possible, and then click Next >. 6. Create your password and click Next >. Note Ensure that your password is managed per appropriate security policy and store it in a safe place. 7. Click Browse, provide a file name, and click Save.

36 32 Appendix Welch Allyn RetinaVue Network 8. Click Next and Finish. Export server certificate From the Certificate Export Wizard pop up window, click OK. This certificate is now stored and password protected for later use. These instructions provide the details on how to export the server certificate needed to receive encrypted RetinaVue Network result messages. 1. In the Console window, right click on <CompanyID>rvn.xxx.local, (where <CompanyID> is your RetinaVue Network Company s ID). 2. From the Action menu, select All Tasks -> Export.

37 EMR Deployment guide Appendix From the Certificate Export Wizard window, click Next >. 4. Select Yes, export the private key and then click Next >. 5. Select Personal Information Exchange -PKCS #12 (>PFX), Include all certificates in the certification path if possible, and then click Next >. 6. Create your password and click Next >. Note Ensure that your password is managed per appropriate security policy and store it in a safe place. 7. Click Browse, provide a file name, and click Save. 8. Click Next and Finish.

38 34 Appendix Welch Allyn RetinaVue Network From the Certificate Export Wizard pop up window, click OK. This certificate is now stored and password protected for later use. Welch Allyn Server Certificate The Welch Allyn Server Certificate was downloaded as part of the EMR Deployment Certificate Creation process. It s named hrcroot.cer and must be TRUSTED on the system that is used to send encrypted RetinaVue Network orders messages. This certificate must also be exported and installed on the systems that will be communicating with the RetinaVue Network as a Trusted Root Certificate.