Electronic Health Professional Card (eHPC)

Here you can find more information about the electronic health professional card (eHPC) for doctors, dentists and psychotherapists.

Information and frequent questions regarding the electronic health professional card

Note: The electronic health professional card for doctors and dentists can be ordered via Bundesdruckerei's website as of mid-2019.

General information

The eHPC for doctors, dentists, psychotherapists and pharmacists is issued by their respective federal state medical chamber.

D‑TRUST GmbH, a Bundesdruckerei company, produces the eHPC.

ICCSN

The Integrated Circuit Card Serial Number is a 20-digit identifier of smart cards such as the electronic health card, the SMC-B card of the health professional card. It is printed on the eHPC and includes, for instance, the country code and the coding of the card issuer and the trust service provider. It can be scanned thanks to the QR code or barcode attached.

EFN

The unique, 15-digit training number is assigned to a doctor by the respective medical chamber and enables the doctor's identification. It can be scanned thanks to the QR code or barcode attached.

CAN

The Card Access Number is required for the contactless reading of the data stored on the eHPC. This is a 6-digit random number that is not calculated from personal or document data.

Application

The electronic health professional card can be directly ordered on the D‑TRUST Application Portal.

Entering the order code is optional and only relevant for customers of CompuGroup Medical (CGM). Bundesdruckerei is working together with CGM in order to make access to the telematics infrastructure as easy as possible for CGM customers.

The telephone number will be used, for instance, for the SMS-TAN procedure in order to activate or revoke the health professional card. Please use a mobile phone number or a fixed line number with direct dial. Please also observe the correct international notation: 0049171123456789 or 004930123456789.

Please provide an e-mail address and make sure that the e-mail address is written correctly. This e-mail address will be used to regularly send you status information on your request and the eHPC.

If you wish to claim the VAT on the invoice, it is important that you provide us with the correct invoice address. You can also clarify this issue with your tax accountant before you submit your request.

When you request your electronic professional health card, you can choose between various payment types:

  • Purchase on account with a payment term of 30 days
  • Electronic direct debit (ELV)

A payment interval must be defined for the electronic direct debit method. This payment interval will be applicable for the entire term of five years.

  • Quarterly payment at the end of a quarter
  • Half-yearly payment after six months
  • Annual payment at the end of the year
  • Immediately in one amount

The electronic health professional card is issued by the chambers (for doctors, dentists, psychotherapists and pharmacists) in the respective federal states. If it is currently not possible to order an eHPC in your region, the service is probably in preparation and the card will soon be available. D‑TRUST merely produces the card and is bound by the rules laid down by the chambers. Please visit the websites of the respective federal state chambers to find out when eHPCs will be issued.

  • eHPC application

Since the electronic health professional card is issued by the federal state chambers for doctors, dentists and psychotherapists, the eHPC must first be applied for there. For more information, please contact your chamber. Alternatively, you can use the D‑TRUST Application Portal https://ehealth.d-trust.net/antragsportal/. After selecting the chamber responsible for you, you will be forwarded to the correct office.

Once your application has been approved, the chamber will send you a transaction number which you can use to order the electronic health professional card from D‑TRUST

You can now enter this transaction number in the Application Portal. You will then receive a prefilled application, including a form for identification using the Post‑Ident service, which you will have to complete, print out and return by post.

  • Identification

Since the eHPC is a high-quality personal photo ID card, secure identification is mandatory and you will need the forms that you received together with the application documents.

  • Production of the eHPC
    Following identification and confirmation by the chamber, the production of the electronic health professional card will be triggered. The card will be sent the following day in a registered letter to the applicant. The required PIN and PUK will also be sent separately three days before or after. Please note that the card must be activated in the Application Portal within 28 days. If this does not take place, we are obliged by law to block the card.
  • Administrative act by the state chambers of pharmacists

As a first step, you must submit your application for issuance of a pharmacist’s card to your state chamber of pharmacists. Alternatively, you can use our portal: https://ehealth.d-trust.net/antragsportal/. After selecting the chamber responsible for you, you will be directed to the correct office. Your application will first be received and the so-called administrative act will be triggered during which a check will be carried out to ascertain whether all the preconditions are met. A transaction number will also be assigned. The administrative act is completed when the application is approved.

  • Online application with D‑TRUST at: https://ehealth.d-trust.net/antragsportal/

You can now enter the transaction number assigned by the chamber of pharmacists in the Application Portal. You will then receive a prefilled application, including a form for identification using the Post‑Ident service, which you will have to complete, print out and return by post.

  • Identification

Since the pharmacist’s card is a high-quality personal photo ID card, secure identification is mandatory and you will need the forms that you received together with the application documents.

  • Production of the pharmacist’s card

Following identification and confirmation by the chamber, the production of the pharmacist’s card will be triggered. The card will be sent to the pharmacists the following day in a registered letter. The required PIN and PUK will also be sent separately three days before or after. Please note that the card must be activated in the Application Portal within 28 days. If this does not take place, we are obliged by law to block the card.

We will automatically inform you about progress with your order. This means you will receive automated status messages by e-mail.

Dispatch

Your eHPC will be sent in a registered letter (personal delivery) to the delivery address provided by you. Please note that you as the requester must accept the registered letter in person. Otherwise, you can also issue a power of attorney so that someone else can accept your electronic health professional card, or use the power of attorney from Deutsche Post. More information on the power of attorney from Deutsche Post can be found in our download section.

You will receive the PIN letter three days following dispatch of the eHPC. This letter will be sent by post to the delivery address which you provided.

Identification of the applicant

The eHPC allows to attach a qualified electronic signature (QES). This signature has the same legal standing as a handwritten signature. This is why identification of the requester in line with the provisions of the eIDAS Regulation is required by law.

Identification services by Deutsche Post:

  • Postident service with the online ID function: Using the online ‘Postident with the online ID function’ service, applicants can identify themselves online in a fast and simple process using their ID card with the online ID function activated.
  • Postident by a post office: This method allows applicants to identify themselves in a secure and reliable manner using the nationwide branch network of Deutsche Post.
  • PoS-Ident service by qualified staff trust service provider D-TRUST and its partners (such as CGM): Identification is carried out at your location or at a central event. All you need is your complete application documents as well as the valid ID documents listed in your application documents. Advantage: You are identified directly on site and do not have to go to a post office.

Activation

The eHPC and the certificates stored on the card must be activated within 14 days following delivery of the card. After 14 days, Bundesdruckerei will send you a reminder. You will then have another 14 days to activate the card. If the certificates are not activated within this period of time, the trust service provider D-TRUST is obliged to finally and irrevocably revoke the certificates, making the electronic health professional card invalid.

The electronic health professional card is activated on Bundesdruckerei's online request portal using the SMS-TAN method or a service password. Please note that you must have received the PIN letter at the time the card is activated.

Initialisation

During production of the card, only a transport PIN is set. This transport PIN must be changed to a personal PIN before the eHPC is used for the first time.

The eHPC has two different PINs:

  • PIN.QES: for the generation of qualified electronic signatures
  • PIN.CH: for the encryption and authentication function

PIN.QES: For generating qualified electronic signatures, you will first obtain a 5-digit transport PIN which you must change into a 6 to 8-digit PIN before you use the card for the first time. This signature function must be activated first; otherwise you won't be able to generate a qualified electronic signature.

PIN.CH: For the encryption and authentication function you will first obtain a 5-digit transport PIN which you must change into a 6 to 8-digit PIN before you use the card for the first time. This encryption and authentication function must be activated first; otherwise the eHPC won't be able to access the telematics infrastructure.

To make sure that all of the functions of the eHPC can be fully used, the card must be initialized using the PIN management software D-TRUST Card Assistant.

A limited initialization can be made at one of the mobile card terminals accredited by gematik. Activation of the qualified electronic signature (QES) for legally binding electronic signing is not possible in this case.

  • The PIN must be composed of six to eight characters and the numbers zero to nine.
  • Choose your own letter and number combination.
  • Do not choose a combination that can be easily assigned to you, for instance, your date of birth or marriage or your phone number.
  • You should also avoid trivial combinations like 123456, 111111, etc.

The PIN.QES can only be changed when the active PIN.QES that was assigned during activation is entered. This is why you should carefully store the current PIN.QES.

If you have forgotten or lost your original PIN.QES, you can no longer use the QES function of the eHPC (generation of legally binding electronic signatures).

If you have forgotten the PIN.CH and if this was blocked, you can set a new PIN.CH using the pertinent PUK.CH during unblocking.

Revocation

If you have lost your eHPC, you should request revocation in order to avoid misuse.

The electronic health professional card and the certificates stored on the card are revoked on Bundesdruckerei's online request portal using the SMS-TAN method or a service password. In addition it is also possible that the card issuer, i. e. the respective medical chamber, initiates revocation.

  1. Log in to the online request portal at https://ehealth.d-trust.net/antragsportal stating the record number and the password. You can find this information on the cover sheet of your request.
  2. Then identify the card to be revoked using the unambiguous ICCSN and click the "Revoke" button.
  3. Finally, click the "Request SMS-TAN" button. The SMS-TAN will then be sent to the telephone number you provided.
  4. Enter the SMS-TAN you received in the "SMS-TAN" box.
  5. Then activate the checkbox: "I hereby request the irrevocable and final revocation of my certificate product."
  6. Finalize the procedure by clicking the "Confirm" button.
  1. Log in to the request portal at https://ehealth.d-trust.net/antragsportal/ stating the record number and the password. You can find this information on the cover sheet of your request.
  2. Then identify the card to be revoked using the unambiguous ICCSN and click the "Revoke" button.
  3. You can now select the "Service password" choice box for the option: "Please select how revocation should be made".
  4. Please enter the service password you chose in the "Service password" field. You can find the service password on page 5 of the request documentation of your eHPC.
  5. Then activate the checkbox: "I hereby request the irrevocable and final revocation of my certificate product."
  6. Finalize the procedure by clicking the "Confirm" button.

No, revocation of the eHPC certificates is irrevocable and final.