Checking NHS Certificates

It is the responsibility of the local IT to ensure the NHS certificates are kept up to date.

The 2 NHS certificates are:-

• NHS Root Authority G2 (Trusted Root)

• NHS Authentication G2 (Intermediate/Subordinate)

Checking NHS Certificates

• Within the Windows search type certmgr.msc and press enter

Check NHS Root Authority G2

• One the left menu browse to : Trusted Root Certification Authorities > Certificates

  • Double click NHS Root Authority G2

Open

• If the certificate is valid you’ll see a certificate status of ‘This certificate is OK’

• If you see invalid you need to follow the Update NHS Certificates below

Open

Check NHS Authentication G2

• One the left menu browse to : Intermediate Certification Authorities > Certificates

  • Double click NHS Authentication G2

• If the certificate is valid you’ll see a certificate status of ‘This certificate is OK’

• If you see invalid you need to follow the Update NHS Certificates below

Update NHS Certificates

Certificate download location:

https://digital.nhs.uk/services/spine/updating-nhs-public-key-infrastructure-certificates/g2-certificate-technical-implementation

• Download the:-

  • NHS Root Authority G2 (Trusted Root)

  • NHS Authentication G2 (Intermediate/Subordinate)

• Browse to the folder where the certificates have been downloaded

• Right click the NHSauthG2.crt

  • Install Certificate > Open

  • Select Local machine > Next

• Select local machine >Next

• Click on Next

• Click on ‘Place all certificates in the following store’

• Browse and select Trusted Root Certification Authorities

• Click on OK

• Click on Next

• Click on Finish

• Right click the NHSRootAuthorityG2.crt

  • Install Certificate > Open

  • Select Local machine > Next

• Select local machine >Next

• Click on Next

• Click on ‘Place all certificates in the following store’

• Browse and select Intermediate Certification Authorities

• Click on OK

• Click on Next

• Click on Finish