NASH PKI certificate change is coming

NASH PKI testing window is closing

We emailed you on 16 June 2026 advising the testing window was open.

All healthcare organisations will commence transitioning to the new NASH PKI certificate from 13 August 2026, as their certificates are renewed.

What you need to know

Before certificates become available in production from 13 August 2026, you’ll need to test the new NASH PKI certificate with your software to identify any compatibility issues.

The testing window will close on 3 August 2026. If you haven’t already completed your testing, this is now urgent. 

What you need to do

If you haven’t already done so, please request your new test NASH PKI certificates by emailing developerliaison@servicesaustralia.gov.au.

In response to your request, we’ll provide you with a new test certificate with new identifiers. Please note, if you require your current test certificate to be renewed under the new Chain of Trust instead of receiving new identifiers, please include your:

• current test HPI-O or CSP identifier
• test SHA-2 NASH PKI Certificate RA Number

 You must complete your testing by 3 August 2026 to ensure your customers can transition to a new NASH PKI certificate. 

We want you to tell us about any impacts to you, your software products and your customer base when transitioning to the new NASH PKI certificate. If you have any questions, please email pki.business.team@servicesaustralia.gov.au.

Date: 20 July 2026

Testing is open for new NASH PKI certificates

The testing window is now open for: 

• HI Service
• My Health Record
• National Prescription Delivery Service.

If you have requested your test certificate and haven’t received it, expect it to arrive soon. If you have not requested your test certificate, you need to do this now.

All Healthcare organisations will commence transitioning to the new NASH PKI certificate from August 2026, as their certificates are renewed.

What you need to know

There is a new Chain of Trust which includes the creation of:

Before certificates become available in production from 13 August 2026, you need to test the new NASH PKI certificate with your software to identify any compatibility issues. 

What you need to do 

If you haven’t already done so, please request your new test NASH PKI certificates by emailing developerliaison@servicesaustralia.gov.au. 

In response to your request, we will provide you with a new test certificate with new identifiers. Please note, if you require your current test certificate to be renewed under the new Chain of Trust instead of receiving new identifiers, please include your:

• Current test HPI-O identifier
• Test SHA-2 NASH PKI Certificate RA Number

You must complete your testing by 3 August 2026 to ensure your customers can transition to a new NASH PKI certificate. 

We want you to tell us about any impacts to you, your software products and your customer base when transitioning to the new NASH PKI certificate. If you have any questions, please email pki.business.team@servicesaustralia.gov.au.

Date: 10 July 2026

Serial number length of new test NASH PKI certificates 

Thank you to everyone that provided feedback regarding the new test NASH PKI certificate. 

We have noted that the serial number field of the new test NASH PKI certificate has changed. Previously, it used to be 6 characters, it is now set to 40 characters. This may cause issues for software products that store certificate details in a database with a defined character length. 

The standard, RFC 5280 defines the maximum length of 20 octets, which equates to 40 hexadecimal characters. We have updated the serial number field to the minimum recommended length of 16 hexadecimal characters (8 octets). We have updated the certificate profile to reflect this rule. 

From Monday 13th July, all test NASH PKI certificates will now be issued with a serial number field of 16 hexadecimal characters. All previously issued test certificates may still be used for testing. 

Please note this change does not affect the new test Services Australia Root Certificate Authority or Organisational Certificate Authority certificates. It only impacts the new test NASH PKI certificate. 

If you would like to request new test certificates due to this adjustment, please email developer.liaison@servicesaustalia.gov.au with your test certificate details.

Date: 7 July 2026 

Accenture SVT NASH deployment

The My Health Record System Operator advises that there will be a planned maintenance to the My Health Record system Software Vendor Test (SVT) environment from 7:00 PM Friday, 3rd July – 8:30 AM Monday, 6th July (AEST). There will be an outage to the SVT environment during this time. 

This environment upgrade is outside of the advertised available hours for the SVT environment. 

The System Operator apologises for any inconvenience this may cause. 

Contact developerliaison@servicesaustralia.gov.au for further advice about this message if necessary. 

For technical support please contact: healthAPIGatewaySVT@deloitte.com.au.

Date: 3 July 2026 (Ref: CHG0049611)

Testing window is open to test new NASH PKI

We emailed you on 4 June 2026 inviting you to request your new test NASH PKI certificate. 

The testing window is now open. If you have already requested your test certificate, expect it to arrive soon. If you have not requested your test certificate, you need to do this now.

All Healthcare organisations will commence transitioning to the new NASH PKI certificate from August 2026, as their certificates are renewed.

What you need to know

The testing window is now open.

There is a new Chain of Trust which includes the creation of:

Prior to certificates becoming available in production in August 2026, you will need to test the new NASH PKI certificate with your software to identify any compatibility issues.

Testing will be available in a two phased approach:

• HI Service can be tested from 16 June 2026.
• My Health Record and National Prescription Delivery Service can be tested from 10 July 2026.

What you need to do

If you haven’t already done so, please request your new test NASH PKI certificates by emailing developerliaison@servicesaustralia.gov.au.

If you require your current test certificate to be renewed under the new Chain of Trust, please include your:

• current test HPI-O and/or CSP identifier
• test SHA-2 NASH PKI Certificate RA Number

If you do not include this information in your request, we will provide you with a new test certificate with new identifiers.

You must complete your testing by August 2026 to ensure your customers can transition to a new NASH PKI certificate. 

We want you to tell us about any impacts to you, your software products and your customer base when transitioning to the new NASH PKI certificate. If you have any questions, please email pki.business.team@servicesaustralia.gov.au.

Date: 16 June 2026

Invitation to request test NASH PKI certificate

We emailed you on 26 May 2026, advising of the changes to the NASH PKI certificate. 

We’re now ready for you to request a new test NASH PKI certificate. 

All Healthcare Organisations will commence transitioning to the new NASH PKI certificate from August 2026. 

What you need to know

There’ll be a new Chain of Trust which includes the creation of:

You’ll need to test the new NASH PKI certificate with your software to identify any compatibility issues before certificates are available in production. 

The testing window opens from 15 June 2026. 

Testing is in 2 phases:

• The HI Service can be tested from 15 June 2026.
• The My Health Record and National Prescription Delivery Service can be tested from 10 July 2026.

Your current test NASH PKI certificate will remain valid for testing in all test environments.

What you need to do 

To be prepared, request your new test NASH PKI certificate early.

To request your new test NASH PKI certificate, please email developerliaison@servicesaustralia.gov.au.

Please include your:

• current test HPI-O identifier
• test SHA-2 NASH PKI Certificate RA Number.

You must complete your testing by August 2026 to ensure your customers can transition to a new NASH PKI certificate. 

We want you to tell us about any impacts to you, your software products and your customer base when transitioning to the new NASH PKI certificate. If you have any questions, please email pki.business.team@servicesaustralia.gov.au.

Date: 4 June 2026

NASH PKI certificate change is coming

Services Australia is required to make updates to the NASH PKI certificate. Details of the changes to NASH PKI certificates are below. 

A new Chain of Trust will be created and commence issuing updated NASH PKI certificates from August 2026 onwards.

All Healthcare organisations can transition to the new NASH PKI certificate from August.

Why is this change happening?

The change is required to move to a new managed service arrangement that meets current security standards and supports future needs.

What you need to do

All Software Developers will need to test the new NASH PKI certificate with their software to identify any compatibility issues before the certificates are made available in production.

We cannot accommodate schedule changes or delays in testing/releases and need to ensure everyone is ready by August 2026. As a result, we need you to tell us if your transition to the new NASH PKI certificate causes any impacts to you, your software products or customer base. You can email us at pki.business.team@servicesaustralia.gov.au.

The testing window will open on 15 June 2026.  You will receive another email soon detailing what to do.

Details of the changes

The planned updates to the NASH PKI certificates include:

• Issuer Organisation Unit (OU) – Change from Medicare Australia to Services Australia
• Issuer Common Name (CN) - Change from Medicare Australia Organisation Certification Authority to Services Australia Organisation Certificate Authority
• Root Certificate Authority (RCA) - Change from Medicare Australia Root Certification Authority to Services Australia Root Certification Authority
• New URL for Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP)
• Authority Information Access field – New addition to the Authority Information Access field 

Date: 26 May 2026