Set Up the ePCS Authentication Method

System Administrator Help

ePCS Registrar Access

ePCS registrars provide the authentication necessary to grant other NextGen Healthcare providers the right to send Electronic Prescriptions of Controlled Substances (ePCS). ePCS registrars can grant ePCS rights across all enterprises. You must set up at least two ePCS registrars before you can grant ePCS prescriber access to a user. The user acting as Registrar B must have a DEA number and must have a relationship of self with the provider. Granting registrar access is logged as part of the ePCS audit trail and is available as a report in NextGen® Enterprise EHR. For information about the ePCS Auditable Events report, go to NextGen Healthcare Success Community and download the latest Reports Guide for NextGen® Enterprise EHR . Grant ePCS Registrar Access You can grant ePCS registrar access to a user. Parent topic: ePCS Setup

System Administrator Help

Two-Factor Authentication Credentials for ePCS

According to the Drug Enforcement Administration (DEA) regulations, providers who want to send Electronic Prescriptions of Controlled Substances (ePCS) must be identity-proofed by appropriate persons within a practice. As a step in this process, the NextGen Healthcare administrator must associate a two-factor authentication (TFA) credential with the provider’s NextGen Healthcare user ID and activate that credential. The credential works only with NextGen® Enterprise applications. You can activate a provider's token to enable TFA. The token can be either an issued VIP or IndenTrust hard token or a software token that was downloaded onto a smartphone. Because at least one ePCS registrar must have TFA to grant user ePCS prescriber rights, non-ePCS prescribers can also have TFA tokens activated. The user must be present for the activation. Although users can have multiple credentials, only one is necessary. Note: If you do not set up a credential for a provider, the provider can send the p

System Administrator Help

ePCS Prescriber Access

ePCS prescribers can digitally sign and send Electronic Prescriptions of Controlled Substances (ePCS). Access to the ePCS prescriber role is restricted. Two ePCS registrars are required to grant or remove a provider's ePCS prescriber access, and one of these registrars must use two-factor authentication as part of the process. The ePCS prescriber access authorization process involves steps by both the system administrator and the two ePCS registrars. Granting ePCS prescriber access is logged as part of the ePCS audit trail, which is available as a report in NextGen® Enterprise. For information about the ePCS Auditable Events report, go to NextGen Healthcare Success Community and download the latest Reports Guide for NextGen® Enterprise EHR . Before you can grant ePCS prescriber access to a provider, the following setups must be completed on the General tab for a provider: Assigned provider has retail service level of ePCS. Provider's relationship with the user is set up as self. If the

System Administrator Help

Remove a Two-factor Authentication Credential

You can remove a credential if a token or registered device can no longer be used, for example if a provider leaves the practice, a token or device is broken or replaced. Removing a credential for IdenTrust or Imprivata removes the IdenTrust or Imprivata mapping from the NextGen Healthcare provider account. Removing a credential for Symantec VIP disassociates the token from the provider. Select a provider, and then on the General tab, select ePCS. The ePCS Authentication and Authorization Setup window displays the Credentials tab. In the Two-Factor Credentialing section, do one of the following: For IdenTrust or Imprivata, select Remove. For Symantec VIP, select a token from the Symantec VIP Tokens list, and then do the following: Select Remove. In the Select Credential window, select the token serial number you want to remove. Select Select. Parent topic: ePCS Setup

NextGen® Enterprise EHR Help

Set Up the ePCS Authentication Method

You can set up the Electronic Prescriptions of Controlled Substances (ePCS) authentication method to apply to an enterprise. Note: You can set the user preference for ePCS authentication method to be different from the universal preference. In the System Administrator application, from the View menu, select Universal Preferences. The NextGen Preferences window opens. Select ePrescribing, and then double-click EPCS Authentication Method. The EPCS Authentication Method window opens. Do one of the following: For Symantec VIP, leave the default value that is VIP For IdenTrust Mobile Authentication Service, enter IdenTrustMAS. For Imprivata Confirm ID for EPCS, enter ImprivataConfirmID. Ensure that you entered the correct method name. Select OK. Parent topic: ePCS Setup

System Administrator Help

ePCS Setup

The Drug Enforcement Administration (DEA) allows DEA registrants to write Electronic Prescriptions of Controlled Substances (ePCS). To control who can send these electronic prescriptions, the System Administrator application meets the DEA regulations that determine how applications and practices are to restrict eRx access rights. These measures rely on identity-proofing to prevent fraud. To comply with the DEA regulations, NextGen Healthcare providers can use any of the following ePCS authentication methods: Symantec™ VIP Token IdenTrust Mobile Authentication Service Imprivata Confirm ID™ for EPCS Note: You can prevent a specific medication (controlled substance) from being electronically prescribed by selecting the Do not allow eRX option from the Medication Tasks master file in File Maintenance. The ePCS setup process involves the following procedures in the System Administrator application: Set up the ePCS authentication method. Authorize ePCS registrar access. ePCS registrars give

Set Up the ePCS Authentication Method

Recommendations

ePCS Registrar Access

Two-Factor Authentication Credentials for ePCS

ePCS Prescriber Access

Remove a Two-factor Authentication Credential

Set Up the ePCS Authentication Method

ePCS Setup

ePCS Registrar Access

Two-Factor Authentication Credentials for ePCS

ePCS Prescriber Access

Remove a Two-factor Authentication Credential

Set Up the ePCS Authentication Method

ePCS Setup