Updated Guidance to CIS1 Deprecation
Internal NHS England (previously NHS Digital) services are to migrate to NHS CIS2 Authentication by the original date of September 2023. Suppliers have an additional year to migrate to NHS CIS2 Authentication, with a new retirement date of 30 September 2024.
Spine Directory Service (SDS) upgrade on Saturday 19 July 2025
We are carrying out an upgrade to the Spine DEX hosts on Saturday 19 July 2025 between 10:00am and 11:00am.
Change to smartcard passcode requirements
Smartcards now require a passcode of 6-8 digits in length and can only contain number values
As of 31 March 2024, NHS CIS2 will no longer work in IE11 and Edge "IE Mode"
If you try access NHS CIS2 using Internet Explorer and Edge "IE Mode" after 31st March 2024 you will find that it does not work.
Service vulnerability in NHS Identity Agent - mandatory update required
We have identified there is a medium-severity service vulnerability with all previous versions of the NHS Identity Agent, including v2.4.5.0 and v2.4.6.0.
Revised retirement date for CIS1 Authentication
CIS1 Authentication will now be retired on 28 February 2027.
End of support for TLS 1.0 and 1.1
IT teams need to update to the latest version of Identity Agent. Failure to update could result in authentication issues and service disruption.
New report showing actively used series 4, 5 and 6 smartcards
Find out if anyone is still using legacy smartcards in your organisation, before they are deprecated.