HealthSecure Digital Certificates will transition to a new G5 intermediate Certificate Authority (CA) from 1 April 2026, strengthening security and modernising the certificate issuance framework used across the New Zealand health sector.
The upgrade introduces a new G5 intermediate CA under the existing HealthSecure root certificate authority, ensuring continuity of trust for Health New Zealand and ACC digital services. While the HealthSecure root CA remains unchanged, all newly issued certificates will be generated under the updated G5 intermediate CA.
This transition represents a routine but important security enhancement, aligning HealthSecure certificates with current best-practice PKI standards and ensuring ongoing integrity of authentication services relied on by approximately 10,000 authorised practitioners nationwide.
Existing HealthSecure G4 client certificates will continue to be supported during a 12-month transition.
Application vendors seeking access to a G5 certificate for integration or testing purposes can contact CA@healthlink.net.
Operational Improvements Under the G5 Platform
Alongside the CA upgrade, the move to the G5 platform introduces significant improvements to how certificates are delivered and managed across the sector.
Certificates will now be issued via a secure, web-based digital enrolment process, eliminating the need for physical distribution media such as USB devices or CDs. This change improves issuance speed, reduces logistical overhead, and enhances reliability.
Users will require:
During enrolment, practitioners will receive:
Both elements are required to access and install the certificate securely.
Importantly, the registration and renewal process itself will not change. Practitioners will continue to apply for and renew certificates through the ACC-operated Registration Authority service.
Andrew Grant, Director of Technology at Lanas, says the change strengthens both security and usability:
“Transitioning to the G5 intermediate CA ensures HealthSecure remains aligned with modern PKI standards and maintains a strong trust framework for sector applications.”
“At the same time, moving to digital issuance removes the need for physical media, enabling certificates to be delivered faster and more reliably to practitioners.”
Further information about the move to HealthSecure G5 certificates is available on the HealthLink website: http://www.healthlink.co.nz/HealthSecure-G5-update
