Description of changes:

Eighteen months ago, the Sequoia Project announced a change to a new Certificate Authority and certificate issuance process. Over the last 18 months, eHealth Exchange have provided approximately 50 reminders about this event in various venues including weekly eHealth Exchange Technical Work Group calls, Monthly All Participant calls, various emails to designated contacts, and targeted outreach.

At 2:30pm et on Tuesday November 16, 2021, the eHealth Exchange Hub successfully transitioned its outward facing certificates in the LIVE PRODUCTION environment from the Entrust to EMR Direct-issued certificates.

There are under a dozen Participants currently negatively impacted by this change who are currently unable to communicate through the eHealth Exchange Hub. The eHealth Exchange team is actively engaged with all impacted Participants to assist in resolving all issues.

The Entrust certificates will still be trusted on the eHealth Exchange Hub until December 13, 2021, at which time they will be fully decommissioned.

Scope:

These changes were applied to the eHealth Exchange Hub PRODUCTION environment as outlined above.

Impact:

We do not anticipate any other service interruptions during the maintenance event; Real-time routing of messages through the Hub will be unaffected, other than the dozen or so Participants mentioned above.

Support:

eHealth Exchange staff will continue to monitor administrator@ehealthexchange.org to address any questions or concerns.

ADDITIONAL INFORMATION AND REMINDERS:

The eHealth Exchange Hub team has implemented a recurring weekly scheduled maintenance window each Thursday evening at 5:00pm ET for all non-urgent events.  The duration of each maintenance event will be determined by the respective changes for each event, and details will be communicated out to all Participants at least 48 hours prior to the event.  If there are no changes for any given week then the maintenance event will not occur, and no notice will be sent. Also please note that Operating System and similar updates that do not require a service outage, and do not require changes to the application layer, will be performed during this scheduled maintenance window without specific notice due to their frequent and routine nature.