Care Identity Service roadshow June 2023

Question

Answer

the 1 and 1 option is only available to the Apply for Care ID service, please confirm as we are about to start using it for our students

It is one photo and a digital proof of address, yes that is now available in AfCID - the digital proof of address does need to return two 'proofs' though

AfCID - are there any plans to introduce functionality to amend a identity e.g. name change, as the only option is a face to face meeting (as per policy) without ESR interface.

The challenge with this is that our service cannot easily verify documents such as deed poll name changes or other name change document. As technology improves we will revisit this in the future.

Sorry please can you share the email address again how to request access?

Access to the service is available from here: https://digital.nhs.uk/services/care-identity-service/applications-and-services/apply-for-care-id

Hi We have applied to start using apply for Care ID via email. How long does it normally take to hear back ?

Access to the service is available from here: https://digital.nhs.uk/services/care-identity-service/applications-and-services/apply-for-care-id

Why are the users not asked to input their legal name

Applicants are asked to put in the name that matches their photo ID as part of the duplicate check.

AfCID check - What is the current lead time for requests for additional email domains to be added?

For Apply for Care ID, an email domain can be added within 1-2 weeks, for addition to the CIS master list this can take several weeks.

Will there by guidance issued for organisations wishing to use the bulk AfCID for Junior Doctors?

Guidance is available on the Apply for Care ID website here https://digital.nhs.uk/services/care-identity-service/applications-and-services/apply-for-care-id/learn-how-to-use-apply-for-care-id

We are going to use Care ID Service for the first time for our Junior Doctor Intake for August. How long will it take the service to get the users registered for us?

NHS England ID checkers process applications within 24 hours if submitted during weekdays and after a weekend, we’ll process all applications that come in on the Monday that we return.
With junior doctors intake we will endeavour to create all identities with 24 hours.

how long does it take to get a profile set up?

NHS England ID checkers process applications within 24 hours. With junior doctors intake we will endeavour to create all identities with 24 hours.

AfCID Query - Can you pls advise on the acceptable email domains, and how gmail etc fit into knowing if the applicant has already had an ID check

The list of approved domains can be found here: https://digital.nhs.uk/services/care-identity-service/applications-and-services/apply-for-care-id/get-started-with-apply-for-care-id, we ensure that all applicants
complete a duplicate check using their name, national insurance number and date of birth to ensure that we are not creating duplicate profiles. We do accept some personal email domains, as listed the above link,

but do not include these in the newly created Care ID profile.

Is there any plan for 1 photo ID and 1 proof of address to be acceptable outside of Apply for CareID (so everything aligns)?

The online address check that we do checks that there are at least 2 matches to a name and date of birth, so therefore, this aligns to current policy. Where there is only one match, we must also collect the information from the passport e-chip as well as a copy of the details page in order to bolster this.

We have a lot of overseas staff who at the point of applying won't have a UK address - how do they use AfCID?

They can still use the service, but should not select to do the online address check. They should present 2 photo ID and an accepted overseas proof of address document.

Is a local DPIA required for CareID?

This depends on your local organisation’s view, if you have completed one for CIS2, our service should fall under this, we have some content on our website and in the CIS-2 privacy policy:

https://digital.nhs.uk/services/care-identity-service/applications-and-services/apply-for-care-id/get-started-with-apply-for-care-id

The face scan on Apply for Care ID doesn't give applicant's a chance to take the photo so often it comes up blurry. Also when you look on the CIS after the UUID has been generated the photo is squished. Is there any plans to fix this?

This should have been improved by our recent smartcard photo upload feature, this is now live in the service.

Any plans to check person ID with official agencies/organisations? such as GMC, NMC, Banks, Passport Office, DVLA?

We are in discussion with these organisations about the possibility of getting data feeds from these.

If our hr did use the apply for care id, then they would not be able to upload these users on esr as they need to put the id's onto esr, to assign a position.

We are not currently planning on feeding back the ID checks into ESR, we see that ESR is a legitimate and alternative method of creating Care IDs.

that leads on to the question when could apply for ID feed the id checks back into ESR - hard to get HR teams to do id checks if someone already working in the Trust

We are not currently planning on feeding back the ID checks into ESR.

Will you be able to use Care ID to recheck ID for existing registered users, ie for name changes?

We are not currently planning on using Apply for Care ID for reverifying existing identities in the near future. The challenge with this is that our service cannot easily verify documents such as deed poll name changes or other name change document. As technology improves we will revisit this in the future.

Is there any way that once the card has been printed that the details get removed from the approved list :)

We are soon to implement a ‘mark as done’ feature so that you can better manage approved applications.

Recently Apply for Care ID went down for nearly or just over 3 weeks and we was left without another solution. What is the alternative to Apply for Care ID in your guidance if this happens again.

We are working on a 'fallback' solution that could be used if this happened again.

Can staff be shown the photo, so they can have the option to retake it? as its using the scanned photo as profile pic

We now provide an opportunity for applicants to upload a smartcard photo of their choosing, this change is Live in the service currently.

Is something being done about the pictures from AfCID, we keep having to replace them.

We now provide an opportunity for applicants to upload a smartcard photo of their choosing, this change is Live in the service currently.

Can RA's be notified by email when the applications are rejected/accepted/duplicate found etc?

We still do not have notifications regarding application status but this is something that we are considering.

Will there be a way for RAs to get notified when a Registration has been approved on Apply for CareID, instead of having to go onto the dashboard at check manually?

We still do not have notifications regarding approved applications but this is something that we are considering.

Can you please look at UK Voter Authority Certificate for ID

We will consider this ask with policy colleagues.

Can the option given deliver address as work address as we have internal post which save the cost a little bit? thanks

We will take this feedback and consider how to further improve delivery address capture.

Is Bulk Users spreadsheet (as you mentioned up tp 300 users) will this be available for other staff groups besides Junior Doctors?

Yes, the template is available to upload for any bulk requirments

Apply for Care ID - will we have the ability to override if they put something unsuitable for the name on the card (e.g. first name only, nickname, or something too long)?

Yes, we give the applicant the option to enter one, but you can change it if required.

Question

Answer

How about bulk position removal?

Bulk position processing is a requested feature and something we are looking into

Do we still have the functionality to produce local reports in CIS2..... comparable with those we produced in CIS?

Reporting will be delivered after our other priorities. We have done some research into Reporting already and have a number of suggestions and improvements. But we are yet to timetable the development work for reporting

On CIM if you want to add an email address to a user where there isn't one already when you click on Change nothing happens.

That sounds like a bug. To report a bug or issue, go to the NHS Digital Customer Portal or email ssd.nationalservicedesk@nhs.net - Please include your UUID and the UUID of the profile

Is there anything we need to do before we start using ESR / CIS2 ? Will requests still go to CIS1?

This is the setting up page for CIM. You just need IA and Credential Management, and ensure you're not filtering out domains https://digital.nhs.uk/services/care-identity-service/applications-and-services/care-identity-management/support/setting-up-care-identity-management

I have 2 separate login options as I also cover our local hospice staff, when will I be able to move between the two login options in CIM?

Changing role is on the product roadmap for delivery

When i go into CIM on the portal all i ge is the videos of how to do

https://digital.nhs.uk/services/care-identity-service/applications-and-services/care-identity-management

any plan regarding viewing the requests in CIM itself rather going to CIS for that?

In future release 2023

When will the reporting function be available is CiS2?

Reporting is on our list, but we have currently prioritised functionality that is used day-in-day out for access control and profile management - such as the ESR integration, smartcard unlocker access and sponsor workflows.(

Is there a plan in process for the ability to be able to add notes to all request in CIM?

We have noted it as a future potential requirement

Is there an expiry date for CIS1?

We hope to deprecate the legacy system in 2024, but we haven't got fixed date as there is still a lot of challenging feature migration work outstanding. We will share concrete dates as soon as I can.

We have noticed that the photo upload in CIS2 has some issues when needing to crop full size photos, particularly when they are high res images...the crop tool will only go in so far and seems to result in a very low res output, so we are often having to pre-crop images for upload. Has this been raised by any other users please and if so, is there a fix in the works?

We've seen this on a couple of research sessions. Please could you report it with your UUID and that of the user profile? To report a bug or issue, go to the NHS Digital Customer Portal or email ssd.nationalservicedesk@nhs.net

Does the roadmap include the reporting functions that are currently available in CIS

Yes, these are the product roadmap

Will there be updated guidance for Sponsors and ID Checker for CIM?

Yes. We will create guidance for all the functionality. Keep an eye on our roadmap https://roadmap.productboard.com/9d4f3098-664f-4c51-9164-b346fde08d8b but we will make regular announcements via the RA email about new features and functions. We aim to give you plenty of notice so you can plan your training.

Question

Answer

Are TPP & IBM any closer to onboarding for CIS2?

The CIS2 Onboarding team have engaged with both suppliers on their timeline for supporting CIS2 Authentication. Please contact the service providers directly to confirm their timelines.

Question

Answer

Does ESR integration remove the need for ID checks?

If you are integrated then yes, once the initial ID check has been completed in ESR the identity will flow through to CIS/CIM

From the questions would it not be wise to reissue the documents and process around the ESR interface as there is a lot of work to get it running, but once done it makes life so easy

We'll review with ESR and see if we can get an update from them re their guidance, which needs to be implemented from the ESR side

I may have missed something very obvious but how do you request this in ESR?

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/helpful-contacts-and-the-ra-community#electronic-staff-record-esr-

can we have some guidance around esr integration to cim

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/helpful-contacts-and-the-ra-community#electronic-staff-record-esr-

How do we get esr set up with integration with CIM?

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/helpful-contacts-and-the-ra-community#electronic-staff-record-esr-

(skb (Unverified) asked "can we have some guidance around esr integration to cim")

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/helpful-contacts-and-the-ra-community#electronic-staff-record-esr-

what do we need to do in esr and CIM to receive new ID requests in CIM from ESR?

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/helpful-contacts-and-the-ra-community#electronic-staff-record-esr-

Is there any plan to use the photo from ESR to the smartcard creation in CIS2?

No plans to introduce this. We did some research and found that there are very few images within ESR. And the image functionality in ESR was trickier to use than in CIM. So we don't plan to introduce photo sharing between the two systems.(Duane (Unverified) asked "Is there any plan to use the photo from ESR to the smartcard creation in CIS2?")

The organisation that I work for uses Workgroups for our SystmOne access rather than just positions (we add a position and then a workgroup is linked to it) is there going to be something like this available on CIM as I haven't seen anything about it on the roadmap?

We are looking to introduce workgroups in CIM, but we have current priorities set for the remainder of 2023. Looking at this in 2024.

Question

Answer

Please can you ask why the price difference between SCC magicard 300 and other companies on the Internet £ 800 can be the difference

We have contacted the supplier and asked for any reasons for this and that it does not align with what was agreed. We will update when we have a definitive answer

Question

Answer

Is there still a requirement to move to the rationalised [R8000] Job Role Codes? We moved over years ago, much to the annoyance of many of our staff and we are yet to see any benefit of doing so, as the non-rationalised roles are still available and named far more appropriately...

We have to allow both as some system suppliers are deeply integrated with the old codes.

Question

Answer

Is there further guidance on using RPA processes with smartcards?

We have recently published guidance for RPA https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/secure-authentication-for-robotic-process-automation

During the previous roadshow 9/03/23 Robotic Process Automation was mentioned. Is there any update on some guidance please.

We have recently published guidance for RPA https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/secure-authentication-for-robotic-process-automation

is there directions to self service you can send out so i can forward to my team of nurses please

We are piloting an improvement to self service unlock which does not require separate sign up. There will be more information available soon in the RA newsletter, the next roadshow, and the website. If you wish to participate in collaborative design and review sessions of new features, keep an eye out for Feature Focus sessions in the https://digital.nhs.uk/services/care-identity-service/latest-news

When we try to use the option to self certify to renew a smart card it never works it fails halfway through each time

We are piloting an improvement to self service unlock which does not require separate sign up. There will be more information available soon in the RA newsletter, the next roadshow, and the website. If you wish to participate in collaborative design and review sessions of new features, keep an eye out for Feature Focus sessions in the https://digital.nhs.uk/services/care-identity-service/latest-news

Are you going to look at alternative ways to register for self-service unlock, perhaps a mobile phone as our target audience which is Pharmacy really struggle as they often don't have an email address that is on the allow list. Thank you

We are piloting an improvement to self service unlock which does not require separate sign up. There will be more information available soon in the RA newsletter, the next roadshow, and the website. If you wish to participate in collaborative design and review sessions of new features, keep an eye out for Feature Focus sessions in the https://digital.nhs.uk/services/care-identity-service/latest-news

with the widescale use of MS teams for remote calls, has there been any progress with regards to remote self-service PIN reset solutions..i.e. verify user over teams calls, generate one time code for RA to give to user, user can then reset PIN code

We are piloting an improvement to self service unlock which does not require separate sign up. There will be more information available soon in the RA newsletter, the next roadshow, and the website. If you wish to participate in collaborative design and review sessions of new features, keep an eye out for Feature Focus sessions in the https://digital.nhs.uk/services/care-identity-service/latest-news

Question

Answer

What is the reasoning behind the numbers only restriction for passcodes?

The standard argues this is more secure

I would argue that if its numbers only and a minimum of 6 digits...everybody will go for DOB or a child DOB...which would be vulnerable(What is the reasoning behind the numbers only restriction for passcodes?)

The standard argues this is more secure

Can users please be forced to accept the T&Cs with the S9 smartcards

There is a balance here with clinical safety which has meant we have always been mandated to allow the dialogue box being navigated away from

Will users 4 digit pins still work or will they get prompted to change them?

They will work - it is only when they need to reset their passcode or get a new card that this change will become effectove

It does feel like there needs to be a standardised set of requirements to ensure that we are all working with a renewal set up that definitely functions irrespective of organisation

We do publish a set of requirements and a warranted environment specification but cannot mandate this for end user organisations.

Do we need to ask you about contacting the IT department for the software of S9

We will provide guidance within the next few weeks

How will the Series 9 rollout effect software requirements - will this require updated Middleware?

Yes, it will require a new middleware, which should be automatically downloaded if you allow Microsoft updates, also a new version of NHS Credential Manager

When will you inform RA's if they are part of the pilot for 09?

All organisations involved in the S9 pilot have being contacted

Will we require a new smartcard printer for the S9

No

Will Series 9 cards still have NHS written on them or will it be abbreviated to NCRS

Same format as series 8

Can Smartcards now be sent to home addresses? We were always under the impression it had to be collected or go to a Trust site.

Smartcards can be sent to home addresses

What's the way identify series 9?

They will have a slightly smaller chip and the serial number on the back will start 09

will the series 9 work with Active Directory / Azure AD like the existing cards do

Yes

If new security software is required will this be backward compatible with series 4, 5 and 6 cards?

Yes

Will the series 9 smartcard software requirements/changes be share with Independent providers that also use smartcards

Yes

Will you be releasing the new credential management software to Wales?

Yes

Question

Answer

Can virtual smartcards be displayed differently in CIS so we know they are virtual?

We are working on this with the virtual card suppliers

Is there any plans to allows users to self-renew virtual smartcards? this takes up a lot of our time as we have over 9000 staff on VSC?

We do not supply virtual smartcards so you will need to contact your supplier

Where can we find the latest guidance on virtual smartcards?

Apart from our website which has information on the two products and their suppliers, we have published guidance around using them for RPA https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/secure-authentication-for-robotic-process-automation

Question

Answer

Does National RA talk to pharmacies as so many of them and their IT providers are clueless on the software and smartcards!

We’re constantly making improvements to our website for setup and troubleshooting. It's a work in progress, but you can see our initial pages here https://digital.nhs.uk/services/care-identity-service/setting-up-and-troubleshooting

Does membership of Workgroup auto drop off when Access removed from card?

Yes as it is part of the access control position that will be removed.

The current guidance leaflets aren't very user friendly, as users are more likely to view online than print off and view in a leaflet format. Are these being looked at so the information is more spaced, the screenshots are larger and easier to look at?

Yes definitely - we'll soon be replacing the old PDFs with new web versions that are easier to read and easier to update

Can you pop the links into this chat for the Windows Hello info please?

https://digital.nhs.uk/services/care-identity-service/applications-and-services/cis2-authentication/windows-hello-for-business

Where can we find what activities fall within each job role?

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/what-is-a-registration-authority-ra

Do you tell me what are the RBAC codes that enable users to create a user in CIS and add the 3 proofs of ID required, as some Pharmacy managers are having issues doing this. Thank you

https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/what-is-a-registration-authority-ra

There are occasions when ESR overwrites the CIS workgroups. I have raised the issue. Will this be resolved soon?

Problem record raised

Sorry I am confused do I still go into CIS or CIM but CIM all i get is videos

Select Start now on https://digital.nhs.uk/services/care-identity-service/applications-and-services/care-identity-management - this is currently only available to RAs and RAMs but will be opened out to unlockers, ID checkers and sponsors later in 2023

is it CIS allow list or AfCID allow list?

The same list is used for both

Support seems to have gone down since Portal! CS0363622 and CS0363993 constantly being asked to upload Diagnostics (not appt in one instance), but not appearing in my Tickets. Raised a new ticket via phone re: this issue and that's not appearing either??

We are in discussion with support to improve

Can this include links to the various services (such as ers, EPS, SCR, SUS etc) and details what B codes do what within those systems. Such as with this page:

https://digital.nhs.uk/services/e-referral-service/document-library/business-roles

We are in discussion with the spine services to provide links for this

Is the RA Training going to be available of the eLfH website?

Having issues accessing it at present - we are a non NHS organisation

We hope to look at RA learning support in the near future

Is there any useful e-learning for RA Managers/Agents on all things RA

We hope to look at RA learning support in the near future