ePCS Registrar Access

System Administrator Help

ePCS Prescriber Access

ePCS prescribers can digitally sign and send Electronic Prescriptions of Controlled Substances (ePCS). Access to the ePCS prescriber role is restricted. Two ePCS registrars are required to grant or remove a provider's ePCS prescriber access, and one of these registrars must use two-factor authentication as part of the process. The ePCS prescriber access authorization process involves steps by both the system administrator and the two ePCS registrars. Granting ePCS prescriber access is logged as part of the ePCS audit trail, which is available as a report in NextGen® Enterprise. For information about the ePCS Auditable Events report, go to NextGen Healthcare Success Community and download the latest Reports Guide for NextGen® Enterprise EHR . Before you can grant ePCS prescriber access to a provider, the following setups must be completed on the General tab for a provider: Assigned provider has retail service level of ePCS. Provider's relationship with the user is set up as self. If the

System Administrator Help

Set Up the ePCS Authentication Method

You can set up the Electronic Prescriptions of Controlled Substances (ePCS) authentication method to apply to an enterprise. Note: You can set the user preference for ePCS authentication method to be different from the universal preference. In the System Administrator application, from the View menu, select Universal Preferences. The NextGen Preferences window opens. Select ePrescribing, and then double-click EPCS Authentication Method. The EPCS Authentication Method window opens. Do one of the following: For Symantec VIP, leave the default value that is VIP For IdenTrust Mobile Authentication Service, enter IdenTrustMAS. For Imprivata Confirm ID for EPCS, enter ImprivataConfirmID. Ensure that you entered the correct method name. Select OK. Parent topic: ePCS Setup

System Administrator Help

Two-Factor Authentication Credentials for ePCS

According to the Drug Enforcement Administration (DEA) regulations, providers who want to send Electronic Prescriptions of Controlled Substances (ePCS) must be identity-proofed by appropriate persons within a practice. As a step in this process, the NextGen Healthcare administrator must associate a two-factor authentication (TFA) credential with the provider’s NextGen Healthcare user ID and activate that credential. The credential works only with NextGen® Enterprise applications. You can activate a provider's token to enable TFA. The token can be either an issued VIP or IndenTrust hard token or a software token that was downloaded onto a smartphone. Because at least one ePCS registrar must have TFA to grant user ePCS prescriber rights, non-ePCS prescribers can also have TFA tokens activated. The user must be present for the activation. Although users can have multiple credentials, only one is necessary. Note: If you do not set up a credential for a provider, the provider can send the p

System Administrator Help

Digital Signing Certificates

Practices and providers use certificates to digitally sign and demonstrate the authenticity of ePCS messages. When a provider uses the credential to send an ePCS message, the application digitally signs part of the eRx message. Certificates can be at a system level and used by all providers of a practice who are ePCS prescribers, or a provider can have a unique personal certificate. Note: When a certificate is set up at a user level, that certificate is linked to the provider's NextGen Healthcare user ID for the specified enterprise and practice. Assign Digital Signing Certificates Parent topic: ePCS Setup

NextGen® Enterprise EHR Help

ePCS Registrar Access

ePCS registrars provide the authentication necessary to grant other NextGen Healthcare providers the right to send Electronic Prescriptions of Controlled Substances (ePCS). ePCS registrars can grant ePCS rights across all enterprises. You must set up at least two ePCS registrars before you can grant ePCS prescriber access to a user. The user acting as Registrar B must have a DEA number and must have a relationship of self with the provider. Granting registrar access is logged as part of the ePCS audit trail and is available as a report in NextGen® Enterprise EHR. For information about the ePCS Auditable Events report, go to NextGen Healthcare Success Community and download the latest Reports Guide for NextGen® Enterprise EHR . Grant ePCS Registrar Access You can grant ePCS registrar access to a user. Parent topic: ePCS Setup

System Administrator Help

ePCS Setup

The Drug Enforcement Administration (DEA) allows DEA registrants to write Electronic Prescriptions of Controlled Substances (ePCS). To control who can send these electronic prescriptions, the System Administrator application meets the DEA regulations that determine how applications and practices are to restrict eRx access rights. These measures rely on identity-proofing to prevent fraud. To comply with the DEA regulations, NextGen Healthcare providers can use any of the following ePCS authentication methods: Symantec™ VIP Token IdenTrust Mobile Authentication Service Imprivata Confirm ID™ for EPCS Note: You can prevent a specific medication (controlled substance) from being electronically prescribed by selecting the Do not allow eRX option from the Medication Tasks master file in File Maintenance. The ePCS setup process involves the following procedures in the System Administrator application: Set up the ePCS authentication method. Authorize ePCS registrar access. ePCS registrars give

ePCS Registrar Access

Recommendations

ePCS Prescriber Access

Set Up the ePCS Authentication Method

Two-Factor Authentication Credentials for ePCS

Digital Signing Certificates

ePCS Registrar Access

ePCS Setup

ePCS Prescriber Access

Set Up the ePCS Authentication Method

Two-Factor Authentication Credentials for ePCS

Digital Signing Certificates

ePCS Registrar Access

ePCS Setup