PS Suite EMR ASP Remote Access Setup Guide for Macintosh computers

PS Suite EMR ASP Remote Access Setup Guide for Macintosh computers MDQS-6-3639 Rev 4.0

Revised June 13, 2017. PS Suite EMR software and related products and services are owned by TELUS. PS Suite EMR and TELUS Health are trademarks of TELUS. The patients, physicians and circumstances depicted within this manual are fictitious. Any resemblance of any sample data or screenshots to any actual person, whether living or dead, is purely coincidental and unintentional.

Table of contents Overview of ASP remote access................................................ 4 Setting up ASP remote access on Windows....................................... 7 Installing and configuring RSA SecurID application on Windows.................. 7 Setting your PIN....................................................... 11 Installing FortiClient software on Windows.................................. 14 Configuring FortiClient for Windows....................................... 20 Using PS Suite EMR from a remote computer.................................... 24 Closing your ASP remote access.......................................... 27 Troubleshooting............................................................ 28 Insufficient credentials error.............................................. 28 FortiClient is unable to connect........................................... 28 3

3 Overview of ASP remote access For ASP-hosted implementations, you can use remote access to connect remotely to PS Suite EMR. This enables you to connect to PS Suite EMR while you are away from your office, such as from home or from a hotel. How ASP remote access works The remote access is provided through a secure virtual private network (VPN) using FortiClient VPN software. Security is ensured by a two-factor authentication, which is based on something you know your PIN and something you have your RSA SecurID token. If you forget your PIN or the computer with your token is lost or stolen, your health information remains secure because both are needed to access PS Suite EMR remotely. Connecting remotely involves two layers of connection and authentication. 1. After your remote computer is connected to the Internet, you use the FortiClient VPN software to connect to your province s ASP data centre. Each time that you connect, you must authenticate with your passcode, which consists of your PIN combined with your 6- digit RSA SecurID token code. 2. Once you are connected to the VPN, you launch PS Suite EMR from your workstation like you would when you are in the clinic. You then log in with your regular PS Suite EMR user name (your initials) and password. When you are done working, you must close the PS Suite EMR and disconnect from the remote access connection. 4

Overview of ASP remote access Prerequisites Before you can install and configure the remote access software, you must have completed the following prerequisites: Signed up for remote access with TELUS Health and completed the registration paperwork. Contact the PS Suite inside sales team at accounts.psemr@telus.com or 1-800-265-8175 (option 2). Received two emails from TELUS Health: One email containing your PS Suite remote access user name, remote access gateway, and your clinic s server DNS string. One email containing your RSA SecurID token (an attachment called Software_Token.zip). The remote computer that you use must meet all of the software and hardware requirements for use with PS Suite EMR. See the PS Suite EMR workstation requirements on the PS Suite Community Portal at https:// telushealthcommunity.force.com/pssuitecommunity/articles/en_us/ System_Requirement/Workstation-Requirements-v5-3. Typically (and what we recommend), you bring home the same laptop that you use in the office. In this case, your workstation already meets all of the requirements. Note: You must be a registered portal user to log into the Community Portal. If you don t yet have an account, you can register for one on the login page. You will get access to the portal within 24 hours of submitting your information. The latest version of Java 7 or 8 is installed on the remote computer. Go to http:// help.pssuiteemr.com/downloads/remote_access/mac/ Click the.dmg file that begins with jdk to download and install Java (e.g. jdk-8u121-macosx-x64.dmg). The remote computer must have stable internet access. We recommend a wired connection instead of wireless. Important: Ontario - sending and receiving MOH files via MC EDT For Ontario, you can send and receive medical claims files and perform health card validation from PS Suite EMR using the MC EDT system while you are connected remotely. Printing remotely and using peripherals If you choose to print at home, any printer that is supported by your computer's operating system should work with PS Suite EMR. We recommend using a post script or PCL6 printer driver. For a list of supported peripheral devices (e.g., scanner) and recommended printers, refer to the Workstation Requirements, published in the Knowledge area of the PS Suite Community Portal ( https://telushealthcommunity.force.com/pssuitecommunity/articles/ en_us/system_requirement/workstation-requirements-v5-3). 5

Overview of ASP remote access Accessing multiple clinics If you work at multiple clinics that use PS Suite EMR software, you only need one RSA SecurID token and one PS Suite remote access user name. Multiple profiles must be created for you, to allow you to connect to each clinic. Contact the PS Suite EMR support team at PSSuiteEMR.support@telus.com or 1-800-265-8175 (option 1) to set up your remote workstation to connect to multiple clinics. 6

4 Setting up ASP remote access on Mac To set up the remote access service with your ASP-hosted PS Suite EMR, you must download, install, and configure both the RSA SecurID software and the FortiClient VPN client software, as well as set up your PIN. This will take around 30 minutes. Tip: To make this process easier, all the necessary install files are available from the PS Suite help website: http://help.pssuiteemr.com/downloads/remote_access/mac/ The file names in the screenshots in this document may vary slightly from what you see on the website (for example, if the version of an installer changes). Note: If you are a previous Nightingale user and will be using your existing physical key fob for remote access, skip the instructions on installing and configuring the RSA SecurID application and setting your PIN, and instead proceed to Installing FortiClient software on Mac on page 14. Installing and configuring RSA SecurID application on Mac The RSA SecurID software is used to generate a token code, in place of a physical key fob. The 6-digit token code, along with your PIN, make up the passcode required to connect to the VPN. Steps to install RSA SecurID Software Token application for Mac 1. Download the RSA SecurID software from the PS Suite help website: http:// help.pssuiteemr.com/downloads/remote_access/mac/ 2. Save the file to your computer. 7

3. Double-click the downloaded RSASecurIDMac.dmg file and then double-click RSASecurIDTokenAutoMac.pkg. 4. In the welcome screen, click Continue. 5. In the license agreement screen, read the terms of the agreement and click Continue. Then, click Agree to accept the terms. 6. Select your hard drive in the select a destination window and click Continue. 8

7. In the install window, click Install. 8. Authenticate with your computer administrator password and click Install Software. 9. When the installation is complete, you see the following screen. Click Close. 9

The RSA SecurID software is saved in the Applications folder. To easily access it later, do one of the following: Create a shortcut on your desktop. Open the Applications folder and locate the SecurID software. Click and drag it to your desktop. A shortcut will automatically be created. Keep the application in the dock. Double-click the SecurID application to open it. When it appears in the dock, click and hold and choose Options > Keep in Dock. Then quit the SecurID software. You can now proceed to importing the software token. Steps to import the software token into the RSA SecurID application After the RSA SecurID software is installed, you must import the software token provided to you in the email from TELUS Health. The software token is in a.zip format and must be unzipped before you can import it. 1. Save the Software_Tokens.zip file from the email to your desktop. 2. Double-click the Software_Tokens.zip to unzip it. A file ending in.sdtid will appear. 3. Open the RSA SecurID software from the Applications folder, the shortcut on the desktop, or the icon in the dock. 4. The SecurID software will automatically locate the software token on your desktop and import it. Click OK. Tip: The token will be automatically imported if the file is on your desktop or in your Documents folder. If the token was not automatically imported, choose Options > Import Token and select Import from File. Browse to and select the.sdtid file. 10

5. The SecurID software is set up and displays the current token code. 6. Drag the Software_Token.zip file that is still on your desktop to the trash to delete it. Do not close the SecurID software. You will need the token code when setting up your PIN in the next step. Setting your PIN You must configure a personal identification number (PIN) which will be used along with the 6 random digits displayed in your RSA SecurID software to log on the FortiClient VPN. Your PIN must be four to eight characters or numbers, or a combination of both. The PIN that you choose, combined with the token code from the SecurID software, creates your passcode. The two are always used together. For example, if you set your PIN to 1234emr and the token code is 123456, your passcode becomes 1234emr123456 and that s what you use to connect to the VPN. Your PIN will never expire, so choose a PIN that you will remember. If you forget your PIN, you must contact the PS Suite EMR support team at 1-800-265-8175 (option 1) to have it reset. You are responsible for maintaining the security of the personal health information in your control. Keep your PIN secure by following these guidelines: Do not write down your PIN and do not keep it on or anywhere near you Ensure that your PIN is unique and memorable only to you, and that you do not already use this PIN elsewhere Do not share your PIN with anyone. Steps 1. Open a web browser and go to the following URL: For Alberta and Saskatchewan: https://remoteab.pssuite.telushealth.com:443 For Ontario: The email from TELUS Health indicates which of the following links to use to create your PIN. https://remoteon2.pssuite.telushealth.com:443 or 11

https://remoteon1.pssuite.telushealth.com:443 or https://remoteon.pssuite.telushealth.com:443 You may be presented with a certificate error. If this happens, add the URL to trusted sites in your web browser. 2. In the logon screen, in the Name field, enter your PS Suite remote access user name, which you can find in the enrollment email from TELUS Health (usually five characters of your last name and two of your first name). 3. In the Password field, wait for your RSA SecureID token code to change, type the 6 digits, and then click Login. 4. Type your new PIN in the Answer box. It must be four to eight alphanumeric characters, such as 1234emr, and it is case-sensitive. 5. In the Answer box, type your PIN again to confirm. 12

6. The next window should say PIN Accepted. You must now type both your PIN and the token code from the SecurID software. When both are used together, it is called a passcode. Wait for your token code to change. The token code changes every 60 seconds and is always a six-digit number. In the Answer box, type your PIN that you just created immediately followed by the six digits of the token code (no spaces) and then click OK. For example, if your PIN is 1234emr and the token code is 123456, type 1234emr123456 (without the quotes). 7. You now see a portal page, which confirms that your PIN is configured correctly. Click the logout button in the top right corner of the page. Your unique PIN is now set up and will be used with your RSA SecureID token code to configure and use the FortiClient VPN. 13

Installing FortiClient software on Mac The free FortiClient software establishes a secure virtual private network (VPN) between the remote computer and your province s PS Suite data centre. Note: You must download and install the FortiClient software that is appropriate for your operating system. To find out which operating system your workstation uses, from the Apple menu, choose About This Mac. Operating system Mac OS X 10.12 (Sierra) or later FortiClient version to download and install v5.4.2.523 (or latest version) Download from the PS Suite help website: http:// help.pssuiteemr.com/downloads/ Remote_Access/Mac/ Mac OX X 10.11 (Yosemite) Mac OS X 10.10 (El Capitan) Mac OS X 10.9 (Mavericks) See Steps to install FortiClient v5.4 or later on page 14. v4.0.2073 Download from the PS Suite help website: http:// help.pssuiteemr.com/downloads/ Remote_Access/Mac/. See Steps to install FortiClient v4.0 on page 19. Steps to install FortiClient v5.4 or later Follow these steps to install FortiClient v5.4 or later (for Mac OS X 10.12 (Sierra) or later). 1. Download the FortiClient v5.4 or later software from the PS Suite help website: http:// help.pssuiteemr.com/downloads/remote_access/mac/. 2. Save the file to your computer. 14

3. Double-click the downloaded FortiClientOnlineInstaller.dmg file and then double-click FortiClientUpdate. 4. If you see a security warning, click Open. 5. When FortiClient is finished downloading, click Install. 6. In the welcome screen, click Continue. 15

7. In the license agreement screen, read the terms of the licence software and click Continue. Then, click Agree to accept the terms of the software licence. 8. In the installation type window, click Customize. 16

9. Clear the Other components checkbox and then click Install. This option would install antivirus software that which may conflict with any other antivirus software that is already installed. 10. Authenticate with your computer administrator password and click Install Software. 17

11. When the installation is complete, you see the following screen. Click Close. 12. If a FortiClient Registration window appears, click Cancel. FortiClient is saved in the Applications folder and a FortiClient icon appears in your menu bar. You can now proceed to configuring the FortiClient software (see Steps to configure FortiClient v5.4 or later on page 22). 18

Steps to install FortiClient v4.0 Follow these steps to install FortiClient v4.0 (for Mac OS 10.9, 10.10 and 10.11): 1. Download the FortiClient v4.0 software from the PS Suite help website: http:// help.pssuiteemr.com/downloads/remote_access/mac/ 2. Save the file to your computer. 3. Double-click the forticlientsslvpn_macosx_4.0.2073.dmg file that you downloaded and then double-click the forticlientsslvpn.pkg file. 4. In the welcome screen, click Continue. 19

5. In the license screen, read the licence agreement, click Continue, and then click Agree. 6. Click Install. 20

7. Authenticate with your computer administrator password and click OK. 8. After the installation is complete, you see the following screen. Click Close. You can now proceed to configuring the FortiClient software (see Steps to configure FortiClient v4 on page 25). 21

Configuring FortiClient on Mac After the FortiClient software is installed, you must configure it to enter your province s ASP data centre connection details and to enter your PS Suite remote access user name. Steps to configure FortiClient v5.4 or later Follow these steps to install FortiClient v5.4 or later on Mac OS X 10.12 (Sierra) or later. 1. From the Applications folder or from your menu bar, open FortiClient. 2. Click the drop-down arrow and choose Add a new connection. 3. Fill out the connection information, as follows: VPN Type: Choose SSL VPN. Connection Name: Type a unique name for the connection, such as Goldenvale Clinic VPN. Description: Type the same name as used for the Connection Name. Remote Gateway: 22

For Ontario, the email from TELUS Health indicates which remote access server name that you need to use. Type the server name that corresponds to your email: remoteon2.pssuite.telushealth.com and 443 as the custom port number or remoteon1.pssuite.telushealth.com and 443 as the custom port number or remoteon.pssuite.telushealth.com and 443 as the custom port number For Alberta and Saskatchewan, type remoteab.pssuite.telushealth.com and 443 as the port number. Client Certificate: Leave as None. Authentication: Select the Save Login checkbox. Username: Type your PS Suite remote access user name, which you can find in the email from TELUS Health (usually five characters of your last name and two of your first name). 4. Click Add. 5. In the Password field, type your passcode, which is the PIN that you created earlier, immediately followed by the six-digit token code from your RSA SecurID software (without a space). Always wait for the token code number to change before you use it, as the number 23

may be about to change. For example, if your PIN is 1234emr and the code on your token is 123456, type 1234emr123456 (without the quotes). 6. Click Connect and confirm that FortiClient is connected. You are now ready to use PS Suite EMR on your remote computer (see Using PS Suite EMR from a remote computer on page 24). 24

Steps to configure FortiClient v4 Follow these steps to configure FortiClient v4.0 (on Mac OS 10.9, 10.10, or 10.11): 1. From the Applications folder, launch FortiClient SSL VPN. 2. When the FortiClient SSL VPN window opens for the first time, it should be mostly blank and look like the window below. 25

3. Fill out the connection information, as follows: Server: For Ontario, the email from TELUS Health indicates which remote access server name that you need to use. Type the server name that corresponds to your email: remoteon2.pssuite.telushealth.com and 443 as the custom port number or remoteon1.pssuite.telushealth.com and 443 as the custom port number. or remoteon.pssuite.telushealth.com and 443 as the custom port number. For Alberta and Saskatchewan, type remoteab.pssuite.telushealth.com and 443 as the port number. User name: Type your PS Suite remote access user name, which you can find in the email from TELUS Health (usually five characters of your last name and two of your first name). Password: Type your passcode, which is the PIN that you created earlier, immediately followed by the six-digit token code from RSA SecurID software (without a space). Always wait for the token code to change before you use it, as the number may be about to change. For example, if your PIN is 1234emr and the token code is 123456, type 1234emr123456 (without the quotes). 4. Click Connect and confirm that FortiClient is connected. You are now ready to set up and use PS Suite EMR on your remote computer (see Using PS Suite EMR from a remote computer on page 24). 26

Using PS Suite EMR from a remote computer 5 After you have properly installed and configured the RSA SecurID software, the FortiClient remote access software, and your PIN, you are ready to use PS Suite EMR remotely. The following steps walk you through connecting remotely with FortiClient and launching PS Suite EMR. If it s not already installed, you will need to install PS Suite EMR on your remote workstation. Before you use PS Suite EMR remotely, ensure that you have installed the latest version of Java 7 or 8 on the remote computer. If necessary, you can download this from the PS Suite help site: http://help.pssuiteemr.com/downloads/remote_access/mac/ Click the.dmg file that begins with jdk to download Java (e.g. jdk-8u121-macosx-x64.dmg). Note: You must download the JDK version of Java and not the JRE version from the Java website. PS Suite will not launch using the JRE version. 24

Using PS Suite EMR from a remote computer Once the download is complete, double-click the.dmg file to begin the installation of Java. Steps 1. Launch the RSA SecurID application. Double-click the shortcut on your desktop, or click the icon in the dock. 2. After your remote computer is connected to the internet, launch FortiClient SSL VPN and connect to your province s data centre. From the Applications folder, launch FortiClient SSL VPN. In the FortiClient Password field, type your passcode, which is the PIN that you created earlier immediately followed by the six-digit token code from the RSA SecurID software (without a space). Always wait for the token code number to change before you use it, as the number may be about to change. For example, if your PIN is 1234emr and the code on your token is 123456, type 1234emr123456 (without the quotes). Click Connect. Confirm that the FortiClient window shows that the VPN is connected before you proceed. 3. If PS Suite is not already installed on your remote computer, follow these steps to install it. Otherwise, skip this step and proceed to step 4. On the remote computer, open a web browser and type your clinic s unique PS Suite server web site to download PS Suite EMR. This is your clinic s server DNS string that was provided in your email from TELUS Health. The web site is http://xxxxxyy.pssuite.telushealth.com/pss, where xxxxx is your clinic s unique server DNS string and yy is your province. For example, in Ontario, type, http://12345on.pssuite.telushealth.com/pss And, for example, in Alberta or Saskatchewan, type http://12345ab.pssuite.telushealth.com/pss Note that the pss at the end is case-sensitive and must be lowercase. 25

Using PS Suite EMR from a remote computer Click Download PS Suite Client and save the file to your desktop. The PS Client.jar file is downloaded to the desktop and appears with a Java icon, as shown below. 4. Log into PS Suite EMR as you normally do: Double-click the PS Client icon on your desktop, as you normally do. If you just installed PS Suite EMR, it will take a few minutes to load and finish installing. Log into PS Suite EMR using your initials and your PS Suite password. You are now connected and can use PS Suite EMR remotely. Closing your ASP remote access After you are done working with PS Suite EMR, quit the PS Client as you normally would. Then, in the FortiClient window, click Disconnect to close your remote access connection. 26

6 Troubleshooting Insufficient credentials error If you encounter an insufficient credentials error when using your PIN and your six-digit code from your RSA SecurID token, your token may need to be re-synchronized due to server timing issues. Contact the PS Suite EMR support team at 1-800-265-8175 (option 1) to have your token re-synchronized. FortiClient is unable to connect If the FortiClient software is unable to connect, confirm the following: The remote computer has an internet connection. The correct server address is entered in entered in FortiClient. The user name in FortiClient is all lowercase. Your passcode is entered correctly. It is always be your PIN, immediately followed by the six digit token code from the RSA SecurID software, without spaces. There is no internet security blocking the FortiClient connection. 28

Questions? PSSuiteEMR.support@telus.com 1-800-265-8175 https://telushealthcommunity.force.com/ pssuitecommunity