Learn More >

Ministry Status: Routine Monitoring and Engagement

Ontario Health Insurance Plan

OHIP Bulletins

OHIP Technical Bulletin

To:  OHIP Billing Software Vendors

Published by:   Claims Services Branch

Date Issued:  October 21, 2016

Bulletin Number:  16-002

Re:  REMINDER: MCEDT and HCV Web Service Security Certificate and Cryptography Protocol Upgrade

PDF Version Portable Document Format

This is a reminder to all software vendors that the current URLs for MCEDT and HCV Web Services will be decommissioned December 9th, 2016.  The URLs being decommissioned are:

HCV: https://ws.ebs.health.gov.on.ca:1440/HCVService/HCValidationService

MCEDT: https://ws.ebs.health.gov.on.ca:1441/EDTService/EDTService

All MCEDT and HCV web services software must complete modified conformance testing by October 31st, 2016.  To avoid service disruptions for customers, all vendors should engage in conformance testing with the Ministry by September 30th, 2016.

Frequently Asked Questions

How long will the modified Conformance Testing take?  What is required?

In order to manage a smooth transition to the new security certificates and updated cryptography, vendors must successfully demonstrate compliance by undergoing modified conformance testing.

Modified conformance testing involves testing for security certificates and cryptography protocol updates only.
Most vendors have been able to complete the conformance testing in less than a week beginning from submission of the Acceptable Use Policy (AUP) to the Service Support Contact Centre (SSCC).

What if the software hasn’t been updated by December 9th, 2016?

The current URLs for the MCEDT and HCV Web Services will be decommissioned December 9th, 2016 and the MC EDT and HCV Web Services will restrict all connections to Transport Layer Security (TLS) protocols TLS 1.1 and TLS 1.2.  All vendors are required to complete conformance testing and start using the new URLs prior to December 9th, 2016 or risk a disruption in services to their customers.

How do I begin conformance testing?

The process for beginning conformance testing is as follows:

  1. Submit the Acceptable Use Policy (AUP) by completing the Vendor Application for Conformance Testing form (4860-84) and send it to the Service Support Contact Centre (SSCC) for conformance specifying you are retesting for SHA-2 compliance;
  2. SSCC will provide the updated Technical Specifications and the new root certificates required for conformance testing and the new production environment;
  3. MOHLTC test teams will contact you with credentials and the modified test scenarios; and
  4. Upon successful completion of conformance you will be provided with the new production URL. You will continue to use your existing production key.

Who do I ask for further information about this bulletin?

Technical questions about this update can be asked of the MOHLTC test teams once you have entered conformance testing and they have contacted you.

All other inquiries should be directed to:

Service Support Contact Centre (SSCC)
Hours of operation: Monday to Friday, 8:00 a.m. – 5:00 p.m.
Or e-mail: SSContactCentre.MOH@ontario.ca

To view Portable Document Format PDF files, you will need to have Adobe Acrobat® Reader installed on your computer. You can download this free software from the Adobe website.

For More Information

Call ServiceOntario, Infoline at:
1-866-532-3161 (Toll-free)
In Toronto, (416) 314-5518
TTY 1-800-387-5559.
In Toronto, TTY 416-327-4282
Hours of operation: Monday to Friday, 8:30am - 5:00pm