Electronic Health Professional Card (eHPC)

Here you can find more information about the electronic health professional card (eHPC) for doctors, dentists and psychotherapists.

Information and frequent questions regarding the electronic health professional card

Note: The electronic health professional card for doctors and dentists can be ordered via Bundesdruckerei's website as of mid-2019.

General information

The electronic professional health card is issued by the respective medical chambers of the German federal states.

Bundesdruckerei GmbH together with its subsidiary T-TRUST GmbH, a trust service provider, produces the health professional Card.

ICCSN

The Integrated Circuit Card Serial Number is a 20-digit identifier of smart cards such as the electronic health card, the SMC-B card of the health professional card. It is printed on the eHPC and includes, for instance, the country code and the coding of the card issuer and the trust service provider. It can be scanned thanks to the QR code or barcode attached.

EFN

The unique, 15-digit training number is assigned to a doctor by the respective medical chamber and enables the doctor's identification. It can be scanned thanks to the QR code or barcode attached.

CAN

The Card Access Number is required for the contactless reading of the data stored on the eHPC. This is a 6-digit random number that is not calculated from personal or document data.

Application

The card can be ordered directly on Bundesdruckerei's request Portal: https://ehealth.d-trust.net/antragsportal. Currently it is not possible to submit any orders.

Entering the order code is optional and only relevant for customers of CompuGroup Medical (CGM). Bundesdruckerei is working together with CGM in order to make access to the telematics infrastructure as easy as possible for CGM customers.

The telephone number will be used, for instance, for the SMS-TAN procedure in order to activate or revoke the health professional card. Please use a mobile phone number or a fixed line number with direct dial. Please also observe the correct international notation: 0049171123456789 or 004930123456789.

Please provide an e-mail address and make sure that the e-mail address is written correctly. This e-mail address will be used to regularly send you status information on your request and the eHPC.

If you wish to claim the VAT on the invoice, it is important that you provide us with the correct invoice address. You can also clarify this issue with your tax accountant before you submit your request.

When you request your electronic professional health card, you can choose between various payment types:

  • Purchase on account with a payment term of 30 days
  • Electronic direct debit (ELV)

A payment interval must be defined for the electronic direct debit method. This payment interval will be applicable for the entire term of five years.

  • Quarterly payment at the end of a quarter
  • Half-yearly payment after six months
  • Annual payment at the end of the year
  • Immediately in one amount

Dispatch

Your eHPC will be sent in a registered letter (personal delivery) to the delivery address provided by you. Please note that you as the requester must accept the registered letter in person. Otherwise, you can also issue a power of attorney so that someone else can accept your electronic health professional card, or use the power of attorney from Deutsche Post. More information on the power of attorney from Deutsche Post can be found in our download section.

You will receive the PIN letter three days following dispatch of the eHPC. This letter will be sent by post to the delivery address which you provided.

Identification of the requester

The eHPC allows to attach a qualified electronic signature (QES). This signature has the same legal standing as a handwritten signature. This is why identification of the requester in line with the provisions of the eIDAS Regulation is required by law.

KammerIdent:
If you are a doctor, dentist, psychotherapist or pharmacist, your competent medical chamber can identify you. Please have the identification form (page 6 of the request form) and a valid ID document (ID card of passport with proof of residence) with you.

Identification services by Deutsche Post:

  • Postident with online ID function: The "Postident with online ID function" method allows requesters to be quickly and easily identified online using their ID card with the activated online ID function.
  • Postident at the post Office: Using this method, requesters can be reliably identified in one of the many post offices throughout Germany.

Activation

The eHPC and the certificates stored on the card must be activated within 14 days following delivery of the card. After 14 days, Bundesdruckerei will send you a reminder. You will then have another 14 days to activate the card. If the certificates are not activated within this period of time, the trust service provider D-TRUST is obliged to finally and irrevocably revoke the certificates, making the electronic health professional card invalid.

The electronic health professional card is activated on Bundesdruckerei's online request portal using the SMS-TAN method or a service password. Please note that you must have received the PIN letter at the time the card is activated.

Initialisation

During production of the card, only a transport PIN is set. This transport PIN must be changed to a personal PIN before the eHPC is used for the first time.

The eHPC has two different PINs:

  • PIN.QES: for the generation of qualified electronic signatures
  • PIN.CH: for the encryption and authentication function

PIN.QES: For generating qualified electronic signatures, you will first obtain a 5-digit transport PIN which you must change into a 6 to 8-digit PIN before you use the card for the first time. This signature function must be activated first; otherwise you won't be able to generate a qualified electronic signature.

PIN.CH: For the encryption and authentication function you will first obtain a 5-digit transport PIN which you must change into a 6 to 8-digit PIN before you use the card for the first time. This encryption and authentication function must be activated first; otherwise the eHPC won't be able to access the telematics infrastructure.

To make sure that all of the functions of the eHPC can be fully used, the card must be initialized using the PIN management software D-TRUST Card Assistant.

A limited initialization can be made at one of the mobile card terminals accredited by gematik. Activation of the qualified electronic signature (QES) for legally binding electronic signing is not possible in this case.

  • The PIN must be composed of six to eight characters and the numbers zero to nine.
  • Choose your own letter and number combination.
  • Do not choose a combination that can be easily assigned to you, for instance, your date of birth or marriage or your phone number.
  • You should also avoid trivial combinations like 123456, 111111, etc.

The PIN.QES can only be changed when the active PIN.QES that was assigned during activation is entered. This is why you should carefully store the current PIN.QES.

If you have forgotten or lost your original PIN.QES, you can no longer use the QES function of the eHPC (generation of legally binding electronic signatures).

If you have forgotten the PIN.CH and if this was blocked, you can set a new PIN.CH using the pertinent PUK.CH during unblocking.

Revocation

If you have lost your eHPC, you should request revocation in order to avoid misuse.

The electronic health professional card and the certificates stored on the card are revoked on Bundesdruckerei's online request portal using the SMS-TAN method or a service password. In addition it is also possible that the card issuer, i. e. the respective medical chamber, initiates revocation.

  1. Log in to the online request portal at https://ehealth.d-trust.net/antragsportal stating the record number and the password. You can find this information on the cover sheet of your request.
  2. Then identify the card to be revoked using the unambiguous ICCSN and click the "Revoke" button.
  3. Finally, click the "Request SMS-TAN" button. The SMS-TAN will then be sent to the telephone number you provided.
  4. Enter the SMS-TAN you received in the "SMS-TAN" box.
  5. Then activate the checkbox: "I hereby request the irrevocable and final revocation of my certificate product."
  6. Finalize the procedure by clicking the "Confirm" button.
  1. Log in to the request portal at https://ehealth.d-trust.net/antragsportal/ stating the record number and the password. You can find this information on the cover sheet of your request.
  2. Then identify the card to be revoked using the unambiguous ICCSN and click the "Revoke" button.
  3. You can now select the "Service password" choice box for the option: "Please select how revocation should be made".
  4. Please enter the service password you chose in the "Service password" field. You can find the service password on page 5 of the request documentation of your eHPC.
  5. Then activate the checkbox: "I hereby request the irrevocable and final revocation of my certificate product."
  6. Finalize the procedure by clicking the "Confirm" button.

No, revocation of the eHPC certificates is irrevocable and final.