New Zealand
AustraliaHealthSecure Digital Certificates are widely used across the New Zealand health sector, providing an additional layer of security for access to Health New Zealand and ACC services.
Certificates are issued to authorised practitioners following identity verification by the Registration Authority (RA) service operated by ACC. ACC performs this role on behalf of the New Zealand Health & Disability Sector Registration Authority (NZHSRA), processing digital certificate applications for ACC and Health New Zealand.
Certificates are renewed annually. Renewals are confirmed by ACC and then issued by HealthLink.
Transition to the G5 Platform
From 1st April 2026, HealthLink will transition HealthSecure Digital Certificates to a new G5 certificate platform.
This planned security upgrade introduces several improvements:
- Digital, web-based‑based certificate issuance
- Removal of physical media (USB sticks and CDs)
- Faster and more efficient certificate delivery
The registration and renewal process remains unchanged. Practitioners will continue to renew certificates via the Registration Authority service operated by ACC.
Digital Certificate Delivery
Under the new platform, certificates will be issued electronically.
To receive a digital certificate, users will need:
- A unique email address
- A mobile phone number capable of receiving SMS messages
During enrolment, users will receive:
- A secure email link
- A one‑time enrolment code sent via SMS
Both are required to securely access the certificate.
This change significantly improves the customer experience while maintaining strong security controls.
Certificate Compatibility and Transition
- Existing HealthSecure G4 certificates remain valid until expiry
- A 12‑month transition period will support both G4 and G5 certificates
- The HealthSecure root CA remains unchanged
- Certificates issued after 1 April 2026 will use a new G5 intermediate CA
Health New Zealand and ACC services are expected to continue operating without disruption.
Vendor Support
Application vendors requiring early access to HealthSecure G5 certificates for testing can contact:
Do the users of digital certificates need to apply for a new G5 certificate if the already have a G4 certificate?
No. Existing G4 certificates will continue to operate until they expire. When your certificate is renewed, it will be issued as a G5 HealthSecure certificate. The Registration Authority will contact you prior to expiry.
Do G5 certificates work differently from G4 certificates?
No. G4 and G5 certificates function the same way. Applications will trust both during the transition period.
Do I need to change my application to connect to Health New Zealand or ACC services?
Best practice is for applications to trust the root certificate authority, which remains unchanged. In this case, no application changes should be required.
What if my application trusts the intermediate CA instead of the root CA?
Vendors should update their application to trust the root CA to align with best practice. If this is not possible, ensure the HealthSecure G5 intermediate certificate is added to your trust store.
I have other non‑HealthSecure certificates. Are they affected?
No. Commercial or third-party certificates not issued by HealthLink are unaffected and should be renewed as usual.
I received an SMS but can’t find my digital certificate email. What should I do?
Check your spam or junk mail folder. The email will be sent from no-reply@digicert.com.
Who do I contact for technical support?
Please contact ca@healthlink.net.
The email with my certificate looks like spam. How can I verify it’s legitimate?
The email will be sent from no-reply@digicert.com, and you will receive a matching SMS with a unique enrolment code at the same time.