$TXT Created by FORT,WALLY W MD at NXT.KERNEL.FO-OAKLAND.MED.VA.GOV (KIDS) on Monday, 05/05/03 at 11:26 ============================================================================= Run Date: JUL 02, 2003 Designation: XU*8*283 Package : XU - KERNEL Priority: Mandatory Version : 8 SEQ #254 Status: Released Compliance Date: AUG 02, 2003 ============================================================================= Subject: PKI pilot support Category: - Routine - Enhancement (Mandatory) - Data Dictionary Description: ============ Patch Tracking #: 35703753 Test Sites: Hines VAMC. Blood Bank Clearance: 2/20/2003 Pharmacy Benefits Management (PBM) Strategic Healthcare Group, in collaboration with the Drug Enforcement Administration (DEA), requested the development of the first Public Key Infrastructure (PKI) VistA pilot project, named Public Key Infrastructure for Electronic Prescriptions Pilot Project. The objective is to develop an electronic order entry system for Schedule II controlled substances using digital signatures. A Memorandum of Understanding between the DEA and the Department of Veterans Affairs authorizes only specified sites to use the full functionality of this pilot, although additional functionality is included that will benefit non-pilot sites. This patch contains the functionality required for this pilot and lays the foundations for the future implementation of the PKI once the DEA regulations are revised and published. It is installed with the PKI functionality disabled and will not have any impact until the PKI functionality is enabled. PKI functionality can be enabled via Computerized Patient Record System (CPRS) parameters at a site level and a user level. Additional hardware and software is required from various sources before PKI can be implemented at a site. DO NOT enable the PKI parameters until all required software and hardware has been installed. To make this project viable, modifications to the following packages were identified: National Drug File (NDF) V. 4.0 Kernel V. 8.0 (This patch and XU*8*288) Computerized Patient Record System (CPRS) V. 1.0 Pharmacy Data Management (PDM) V. 1.0 Outpatient Pharmacy (OP) V. 7.0 Controlled Substances (CS) V. 3.0 Web sites with more information: Overview of VA PKI projects: https://vaww.webdev.med.va.gov/techsvc/projects/vapki.asp The VA PKI project, for this project: http://vaww.va.gov/techsvc/projects/vapkidea/vapkidea.asp Files to get from the download sites. "HinesPKIUserGuide.doc", This is a word document to help in the installation and implementation of PKI for DEA/VA Schedule II drugs. "cert_how_to_updated11-5-02.pdf", This is from a DEA contractor and shows how to view a DEA Cert. "Krn8_0p283sp.pdf", This documents the digital signature from the Kernel point of view during the development phase. "XuDigSigSC.exe", This is the self extracting ZIP file with the install files for the Signing COM object. "XuDigVerify.exe", This is the self extracting ZIP file with the install files for the Verification server. *** This patch creates a new global ^XUSSPKI, which should be placed before installing the patch. Following national deployment, a site could see approximately 3000 characters in this file for every Schedule II, III, and IV out patient drug that is prescribed. This data must be held for a minimum of two years. *** Post install instructions only for a site in the pilot: 1. Use the "Kernel PKI Parameter Edit" option [XUSSPKI EDIT] to edit/enter the IP address of the Verification Server. 2. Use the "Mail Group Edit" option [XMEDITMG] to add users to the "XUSSPKI CRL SERVER" mail group. 3. If you need debug information, use the General Parameter Tools option [XPAR MENU TOOLS] to set the value of the XUSC1 DEBUG parameter to 1 for debug logging. 4. From EVE, go to TaskMan's "Schedule/Unschedule Options" option and schedule "XUSSPKI CRL UPLOAD" to run once an hour. 5. From one of the national download site get the following files. a. XuDigSigSC.exe This is a self-extracting ZIP file of a install disk, that expands into C:\temp\PKI-c\. Switch to this folder and Double click on the SETUP icon. This will install the signing COM file (XuDigSigSC.exe) into C:\program files\vista\Common files\ and register it.It installs a COM object that is used by CPRS when doing a digital signature. It will need to be installed on each workstation. b. XuDigVerify.exe It gets installed on the Verification Server, a Windows 2K Pro box provided by the site. This is a self- extracting ZIP file of a install disk, that expands into C:\temp\PKI-v\. Switch to this folder and Double click on the SETUP icon. It runs two services that are used by Pharmacy to verify the digital signature. Install/implementation guide doc, This is a word document to help in the installation and implementation of PKI for DEA/VA Schedule II drugs. Routine Summary The following routines are included in this patch. The second line of each of these routines now looks like: ;;8.0;KERNEL;**[Patch List]**;Jul 10, 1995 Checksum Routine Old New Patch List XUSC1 n/a 2382547 **283** XUSC1C n/a 2708557 **283** XUSC1S n/a 3593900 **283** XUSC1S1 n/a 1044835 **283** XUSSPKI n/a 3407285 **283** Sites should use CHECK^XTSUMBLD to verify checksums. ========================================================================= Installation: >>>Users may remain on the system. >>>TaskMan does *not* need to be stopped. >>>There are post install instructions. 1. Use the 'INSTALL/CHECK MESSAGE' option on the PackMan menu. This option will load the KIDS package onto your system. 2. The patch has now been loaded into a Transport global on your system. You now need to use KIDS to install the Transport global. On the KIDS menu, under the 'Installation' menu, use the following options: Verify Checksums in Transport Global Print Transport Global Compare Transport Global to Current System Backup a Transport Global 3. Users can remain on the system. This patch can be loaded any non-peak time. TaskMan can remain running. 4. On the KIDS menu, under the 'Installation' menu, use the following option: Install Package(s) 'XU*8.0*283' ========== Want KIDS to Rebuild Menu trees Upon Completion of Install? YES//YES === Want KIDS to INHIBIT LOGONs during the install? YES// NO == No Options or Protocols need to be placed out-of-order. Want to DISABLE Scheduled Options, Menu Options, and Protocols? NO Enter the Coordinator for Mail Group 'XUSSPKI CRL SERVER' 5. From one of the national download site get the following files. a. XuDigSigSC.exe This is a self-extracting ZIP file of a install disk, that expands into C:\temp\PKI-c\. Switch to this folder and Double click on the SETUP icon. This will install the signing COM file (XuDigSigSC.exe) into C:\program files\vista\Common files\ and register it.It installs a COM object that is used by CPRS when doing a digital signature. It will need to be installed on each workstation. b. XuDigVerify.exe It gets installed on the Verification Server, a Windows 2K Pro box provided by the site. This is a self- extracting ZIP file of a install disk, that expands into C:\temp\PKI-v\. Switch to this folder and Double click on the SETUP icon. It runs two services that are used by Pharmacy to verify the digital signature. Install/implementation guide doc, This is a word document to help in the installation and implementation of PKI for DEA/VA Schedule II drugs. ============================================================================== Routine Information: ==================== Routine Name: - XUSC1 Routine Checksum: Routine Name: - XUSC1C Routine Checksum: Routine Name: - XUSC1S Routine Checksum: Routine Name: - XUSC1S1 Routine Checksum: Routine Name: - XUSSPKI Routine Checksum: ============================================================================= User Information: Entered By : FORT,WALLY Date Entered : JAN 27, 2003 Completed By: SINGH,GURBIR Date Completed: JUL 01, 2003 Released By : TILLIS,LEWIS Date Released : JUL 02, 2003 ============================================================================= Packman Mail Message: ===================== $END TXT