The original PIC (password) supplied by HeSA and associated with your location private signing key used for S8
Online can be difficult to remember. This guideline details how to change the
PIC (password).
The steps involved in this process are:
Use Windows Explorer to view the contents of the floppy disk provided from HeSA.
This floppy disk contains your HIC/HeSA PKI location keys and
certificates.
Double click on the file fac_sign.p12 (private signing key) that is supplied
by HeSA.
The Certificate Import Wizard window opens.
Select Next.
Ensure the fac_sign.p12 file is shown in the File name field. If not,
select the Browse button and select the file from the floppy disk.
Select Next.
In the Password window, enter your HIC supplied Password (PIC) for the certificate.
Select the Mark this key as exportable option.
Select Next.
In the Certificate Store window, select the Automatically select the certificate store based on the type of certificate
option.
Use Internet Explorer to export the private signing certificate and change
its password.
Open Internet Explorer and from the Tools menu select Internet Options.
To view all imported certificates, select the Content tab and click on the Certificates
button.
From the Personal tab, select your private signing certificate and click on
the Export button.
The Certificate Export Wizard window opens.
Select Next.
Select the Yes, export the private key option and click on Next.
Select the Include all certificates in the certification path if possible
and Enable strong protection options
Select Next.
Enter and confirm your new Password.
Select Next.
Select the Browse button and navigate to the location where you want to
store the file. Note: It is recommended that you save the file to a new
floppy disk or CD. Do not store the exported file on your original HIC floppy.
Ensure the filename is named
fac_sign.p12 Note: Double check that the file extension is .p12.
(In some systems, (notably Windows XP) the default is .pfx and if accepted will cause failure.
If you are using Windows XP, check that you can view file extensions by
following the Prerequisite
guideline.)
From you browser, enter the URL for S8 Online
(https://s8online.health.qld.gov.au).
The S8 Online Application opens.
Select the Keys Certificates tab.
Select the Import Pharmacy Keys and Certificates button.
An information window opens.
Select OK.
The Open window displays.
Insert the new floppy disk (or CD) and navigate to the location where you exported your
new private signing key (fac_sign.p12). Note: Check again that the file is named fac_sign.p12,
(with the .p12 extension).
Select the fac_sign.p12 file and click on Open.
The Keys/Certificates Password window opens.
Enter your new PIC (password) and click on OK.
The Keys and Certificates are imported. (This takes approx. 15-20 seconds.)
When you change your HeSA supplied PIC (password), it is important that you do
not mix your old and new signing keys (Certificates) and their respective
PIC's (passwords). To safeguard against this occurring, the following steps
are recommended:
Original certificates
Write protect the HeSA floppy disk containing the original Certificates.
When changing the password, do NOT export the new private key to the HeSA
floppy.
Clearly label the original HeSA floppy disk and store in a secure location.
New certificates
Write protect your new floppy disk (or CD) containing the new Certificates.
Clearly label the new floppy disk (or CD) and store in a secure location.
Printed copies are uncontrolled
This page last updated: 16 August 2004
Review date: 01 February 2005
Document No.: SOD008-0