Learn More >

Ministry Status: Routine Monitoring and Engagement

Ontario Health Insurance Plan

OHIP Bulletins

OHIP Technical Bulletin

Ensuring excellence in claims service delivery for Ontarians

To:  OHIP Billing Software Vendors

Published by:   Claims Services Branch

Date Issued:  January 5, 2017

Bulletin Number:  17-001

Re:  DEADLINE EXTENDED: MCEDT and HCV Web Service Security Certificate and Cryptography Protocol Upgrade

Posted Electronically Only

PDF Version Portable Document Format | 243 Kb

This is to inform all software vendors that the old URLs for Medical Claims Electronic Data Transfer (MCEDT) and Health Card Validation (HCV) Web Services will now be decommissioned July 17th, 2017, upon expiration of the previously issued SHA-1 certificates. This extension has been granted to support the roll-out of required updates to clients and to minimize the impact to service providers.

The URLs being decommissioned (referred to as the old URLs) are:

In order to ensure that there is no impact to providers, it is strongly recommended that conformance testing be fully completed by January 31st, 2017 and all clients are upgraded by March 31st, 2017.

There will be minimal technical support to maintain old URLs after December 9th, 2016. The services will be kept operational until decommissioning, but there will be no support to individual vendors who are having issues with these services while using old URLs beyond what is required to support for the roll-out.

Frequently Asked Questions

Will there be any more extensions?

The Ministry will not be able to further extend the deadline beyond July 17th, 2017 as the SHA-1 certificates will have expired and will not be reissued. Any concerns that clients will not be updated before the deadline should be identified to the Service Support Contact Centre (SSCC) as soon as possible.

What if the software hasn't been updated by July 17th, 2017?

The old URLs for the MCEDT and HCV Web Services will be decommissioned July 17th, 2017 and the MCEDT and HCV Web Services will restrict all connections to Transport Layer Security (TLS) protocol TLS 1.2. All vendors are required to have clients using the new URLs prior to July 17th, 2017 or risk a disruption in services to their customers.

How do I begin conformance testing?

The process for beginning conformance testing is as follows:

  1. Submit the Acceptable Use Policy (AUP) by completing the Vendor Application for Conformance Testing form (4860-84) and send it to the Service Support Contact Centre (SSCC) (SSCC) for conformance specifying you are retesting for SHA-2 compliance;
  2. SSCC will provide the updated Technical Specifications and the new root certificates required for conformance testing and the new production environment;
  3. MOHLTC test teams will contact you with credentials and the modified test scenarios; and
  4. Upon successful completion of conformance you will be provided with the new production URL. You will continue to use your existing production key.

Who do I ask for further information about this bulletin?

Technical questions about this update can be asked of the MOHLTC conformance teams once you have entered conformance testing and they have contacted you.

All other inquiries should be directed to:

Service Support Contact Centre (SSCC)
Phone: 1-800-262-6524
E-mail: SSContactCentre.MOH@ontario.ca

Hours of operation: Monday-Friday, 8:00 a.m. – 5:00 p.m.

To view Portable Document Format PDF files, you will need to have Adobe Acrobat® Reader installed on your computer. You can download this free software from the Adobe website.

For More Information

Call ServiceOntario, Infoline at:
1-866-532-3161 (Toll-free)
In Toronto, (416) 314-5518
TTY 1-800-387-5559.
In Toronto, TTY 416-327-4282
Hours of operation: Monday to Friday, 8:30am - 5:00pm