NASH PKI certificate change is coming

Testing window is open to test new NASH PKI

We emailed you on 4 June 2026 inviting you to request your new test NASH PKI certificate. 

The testing window is now open. If you have already requested your test certificate, expect it to arrive soon. If you have not requested your test certificate, you need to do this now.

All Healthcare organisations will commence transitioning to the new NASH PKI certificate from August 2026, as their certificates are renewed.

What you need to know

The testing window is now open.

There is a new Chain of Trust which includes the creation of:

Prior to certificates becoming available in production in August 2026, you will need to test the new NASH PKI certificate with your software to identify any compatibility issues.

Testing will be available in a two phased approach:

• HI Service can be tested from 16 June 2026.
• My Health Record and National Prescription Delivery Service can be tested from 10 July 2026.

What you need to do

If you haven’t already done so, please request your new test NASH PKI certificates by emailing developerliaison@servicesaustralia.gov.au.

If you require your current test certificate to be renewed under the new Chain of Trust, please include your:

• current test HPI-O and/or CSP identifier
• test SHA-2 NASH PKI Certificate RA Number

If you do not include this information in your request, we will provide you with a new test certificate with new identifiers.

You must complete your testing by August 2026 to ensure your customers can transition to a new NASH PKI certificate. 

We want you to tell us about any impacts to you, your software products and your customer base when transitioning to the new NASH PKI certificate. If you have any questions, please email pki.business.team@servicesaustralia.gov.au.

Date: 16 June 2026

Invitation to request test NASH PKI certificate

We emailed you on 26 May 2026, advising of the changes to the NASH PKI certificate. 

We’re now ready for you to request a new test NASH PKI certificate. 

All Healthcare Organisations will commence transitioning to the new NASH PKI certificate from August 2026. 

What you need to know

There’ll be a new Chain of Trust which includes the creation of:

You’ll need to test the new NASH PKI certificate with your software to identify any compatibility issues before certificates are available in production. 

The testing window opens from 15 June 2026. 

Testing is in 2 phases:

• The HI Service can be tested from 15 June 2026.
• The My Health Record and National Prescription Delivery Service can be tested from 10 July 2026.

Your current test NASH PKI certificate will remain valid for testing in all test environments.

What you need to do 

To be prepared, request your new test NASH PKI certificate early.

To request your new test NASH PKI certificate, please email developerliaison@servicesaustralia.gov.au.

Please include your:

• current test HPI-O identifier
• test SHA-2 NASH PKI Certificate RA Number.

You must complete your testing by August 2026 to ensure your customers can transition to a new NASH PKI certificate. 

We want you to tell us about any impacts to you, your software products and your customer base when transitioning to the new NASH PKI certificate. If you have any questions, please email pki.business.team@servicesaustralia.gov.au.

Date: 4 June 2026

NASH PKI certificate change is coming

Services Australia is required to make updates to the NASH PKI certificate. Details of the changes to NASH PKI certificates are below. 

A new Chain of Trust will be created and commence issuing updated NASH PKI certificates from August 2026 onwards.

All Healthcare organisations can transition to the new NASH PKI certificate from August.

Why is this change happening?

The change is required to move to a new managed service arrangement that meets current security standards and supports future needs.

What you need to do

All Software Developers will need to test the new NASH PKI certificate with their software to identify any compatibility issues before the certificates are made available in production.

We cannot accommodate schedule changes or delays in testing/releases and need to ensure everyone is ready by August 2026. As a result, we need you to tell us if your transition to the new NASH PKI certificate causes any impacts to you, your software products or customer base. You can email us at pki.business.team@servicesaustralia.gov.au.

The testing window will open on 15 June 2026.  You will receive another email soon detailing what to do.

Details of the changes

The planned updates to the NASH PKI certificates include:

• Issuer Organisation Unit (OU) – Change from Medicare Australia to Services Australia
• Issuer Common Name (CN) - Change from Medicare Australia Organisation Certification Authority to Services Australia Organisation Certificate Authority
• Root Certificate Authority (RCA) - Change from Medicare Australia Root Certification Authority to Services Australia Root Certification Authority
• New URL for Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP)
• Authority Information Access field – New addition to the Authority Information Access field 

Date: 26 May 2026