TE3.03-3.04 7 Using the test data submitted electronically to the The electronically exchanged hash value and the hash IN3.01 receiving system, the Proctor will generate a new hash value generated on the receiving system are the same. value. This step performed outside of the demonstration. 170.314(d)(7) End-User Device Encryption Setup ONC Test Data and Procedure Guidance Attestation identifying the encryption algorithm Customer must create their own test data and corresponding key length must be submitted prior to scheduling test date. Step # Action to Perform Expected Outcome Reference Notes / Deviations Steps 1-9 performed only if the system stores electronic health information on an end-user device TE1.01-1.02 1 Notify the Proctor of the encryption algorithm and Proctor documents the encryption algorithm and IN1.01-1.02 corresponding key length to be used to encrypt electronic corresponding key length and verifies they are compliant [conditional] health information on end-user devices. with FIPS 140-2 Annex A and matches the algorithm provided via attestation. TE3.01 2 From an end-user device, initiate an EHR session that is A session is initiated to store electronic health designed to store electronic health information on the information on the end-user device. [conditional] end-user device. TE3.02 3 Stop the EHR session using the end-user device identified The session is stopped using the end-user device. in Step 2. [conditional] TE3.03 4 Demonstrate that the electronic health information The electronic health information stored locally on the IN3.01 stored locally on the end-user device after the session end-user device after the session stops is encrypted and [conditional] stops is encrypted. unreadable. Steps 5-9 performed only if the system allows the encryption of electronic health information stored on an end-user device to be disabled TE2.01-2.02 5 Determine the EHR's default setting to encrypt electronic The default setting to encrypt electronic health IN2.01 health information stored on end-user devices (enabled information stored on end-user devices is enabled. [conditional] or disabled).
7 Using the test data submitted electronically to the receiving system, the Proctor will generate a new hash value. This step performed outside of the demonstration. The electronically exchanged hash value and the hash value generated on the receiving system are the same. TE3.03-3.04 IN3.01 170.314(d)(7) End-User Device Encryption Setup Attestation identifying the encryption algorithm and corresponding key length must be submitted prior to scheduling test date. ONC Test Data and Procedure Customer must create their own test data Guidance Step # Action to Perform Expected Outcome Reference Notes / Deviations Steps 1-9 performed only if the system stores electronic health information on an end-user device 1 [conditional] Notify the Proctor of the encryption algorithm and corresponding key length to be used to encrypt electronic health information on end-user devices. Proctor documents the encryption algorithm and corresponding key length and verifies they are compliant with FIPS 140-2 Annex A and matches the algorithm provided via attestation. TE1.01-1.02 IN1.01-1.02 2 [conditional] From an end-user device, initiate an EHR session that is designed to store electronic health information on the end-user device. A session is initiated to store electronic health information on the end-user device. TE3.01 3 [conditional] Stop the EHR session using the end-user device identified in Step 2. The session is stopped using the end-user device. TE3.02 4 [conditional] Demonstrate that the electronic health information stored locally on the end-user device after the session stops is encrypted. The electronic health information stored locally on the end-user device after the session stops is encrypted and unreadable. TE3.03 IN3.01 Steps 5-9 performed only if the system allows the encryption of electronic health information stored on an end-user device to be disabled 5 [conditional] Determine the EHR's default setting to encrypt electronic health information stored on end-user devices (enabled or disabled). The default setting to encrypt electronic health information stored on end-user devices is enabled. TE2.01-2.02 IN2.01
2014%20Edition%20Test%20Script.docx