News
Change to smartcard passcode requirements
Smartcards now require a passcode of 6-8 digits in length and can only contain number values
Service vulnerability in NHS Identity Agent - mandatory update required
We have identified there is a medium-severity service vulnerability with all previous versions of the NHS Identity Agent, including v2.4.5.0 and v2.4.6.0.
End of support for TLS 1.0 and 1.1
IT teams need to update to the latest version of Identity Agent. Failure to update could result in authentication issues and service disruption.
New report showing actively used series 4, 5 and 6 smartcards
Find out if anyone is still using legacy smartcards in your organisation, before they are deprecated.
Deprecation note update 10 February: deprecated identity agents and smartcard update
Dates by which NHS Digital will no longer provide support and then access for older product version of the smartcards and Identity Agent (IA) Clients.
CIS1 Authentication moves to no SLA on 1 March 2026
CIS1 Authentication will be retired on 28 February 2027, and will move to zero SLA on 1 March 2026.
Action required by IT teams to support ongoing use of Care Identity Service
Important dates for IT teams as we update infrastructure and authentication.