NHS Credential Management

NHS Credential Management should now be installed on all devices that use the Care Identity Service to authenticate.

When the SHA256 change to the security of prescription signing goes live, NHS Credential Management v1.4.2.0 and Oberthur middleware will be required to use series 8 smartcards to sign prescriptions.

Read about action required by IT teams to support ongoing use of series 8 smartcards

Version 1.x of NHS Credential Management allows access to NHS CIS1 Authentication and CIS2 enabled applications via smartcards.

It does not directly authenticate with CIS2 and the authentication journey does require a Health and Social Care Network (HSCN) connection.

All workstations using CIS1 Authentication must have version 1.x of NHS Credential Management installed.

If you use CIS2 Authentication only and you are no longer using CIS1 Authentication, you can upgrade to NHS Smartcard Connect, which does not need an HSCN connection.

Operating systems and environments

For a full list of compatible platforms, check the SPINE Warranted Environment Specification (WES).

Microsoft .NET 4.8 is the minimum .NET framework required.

NHS Credential Management is supported in environments like Citrix, VDI, and Terminal Services, including when users are performing Card Management services.

It also supports the use of EPS (Electronic Prescription Signing) via DSS (Digital Signature Service) only.

Download NHS Credential Management

NHS Credential Management is required when using a smartcard with CIS1 or CIS2 Authentication.

Previous versions, named NHS Identity Hub, are now deprecated and should be upgraded to the recommended NHS Credential Management version.

Below, you’ll find all relevant versions and release notes for the NHS Credential Management that we recommend and support.

Installation order

NHS Credential Management is one of several applications that need to be set up and configured.

It's important that these are done in a specific order, following the steps in our guidance on how to set up a smartcard workstation.

NHS England Credential Management v1.4.2.0

Download NHS Credential Management v1.4.2.0

Downloaded file

SHA1 - AC67F8C35E023051E37AB1D1FBF02CD18A5F6F60
MD5 - DEC873C925B4DA552E959431243160D0

Program executables

.exe Name - NHSHub.UI.exe
SHA1 - ca36fd453e7cc3e9d34e6fd736c0b9db7ab091cf
MD5 - a65fd7803c7479d3c2e385374647bea7

.exe Name - NHSD.PR.Api.exe
SHA1 - 8C136854154260FFB82C37DD8F69CE924AA24E3D
MD5 - CF284B1B23373C8369E8C5AE89103E80

Release notes

SHA2 Support for prescription signing on smartcards - Oberthur Middleware must be present to enable this on series 8 smartcards
Resolved high CPU usage issues on multi-user machines (VDI, Terminal Services) caused by the legacy Gemalto middleware
Additional enhancements to ensure support of CMS operations with VDI and Terminal Services
Resolved the issue where a Registration Authority repair operation followed by renewal of a series 8 smartcard caused problems due to a caching bug in series 8 middleware.
Updated the installer to create the NHSEnrollment registry key if it is not detected.

Install NHS Credential Management

We strongly recommend that you uninstall any previous versions of NHS Credential Management before beginning any new installation. No other programs are removed as part of this process.

See uninstallation instructions.

Some earlier releases of NHS Credential Management were named NHS Identity Hub. You must uninstall these before starting a new installation.

1. Download the installer

Go to the Download NHS Credential Management section.
Download the installer file.

2. Run the installer

Navigate to the location where you downloaded the installer file.
Double-click the installer file to start the installation process.
The installer will open a setup wizard.
Follow the prompts, which typically include agreeing to the terms and conditions, choosing the installation directory, and, if applicable, selecting additional features or components to install.

3. Complete the installation

Once you've made your selections, click the Install button to begin the installation.
Wait for the installation process to complete. This may take a few minutes depending on the application size and your system's performance.

4. Launch the application

After the installation is complete, you can find the application in your start menu or on your desktop.
Click on the application icon to open and start using it.

Silent installation

NHS Credential Management supports silent installation using standard deployment tools that recognise .msi packages. Alternatively, you can use the following command line for script-based installation:

%SystemRoot%\System32\msiexec.exe /i "NHS.CredentialManagement.Setup-1.4.2.0.msi" /qn

NHS Port Service

As part of the NHS Credential Management installation, the NHS Port Service will be installed on a machine and will automatically start.

This service is required for NHS Credential Management to function correctly and should not be stopped or barred from executing.

Installation location

Software will be installed in the following locations:

C:\Program Files (x86)\NHS Digital\NHS Credential Management
C:\Program Files (x86)\NHS Digital\NHS Port Service

Primary care suppliers

See registry changes needed for Care Identity Service software.

Uninstall NHS Credential Management

Uninstall via Control Panel

1. Open the Control Panel

Press the Windows key + S and type Control Panel.
Select Control Panel from the search results.

2. Navigate to Programs and Features

In the Control Panel, click on Programs.
Click on Programs and Features.

3. Uninstall the application

Scroll through the list of installed programs to find the version of NHS Credential Management you want to uninstall.
Select the application from the list.
Click on Uninstall at the top of the list.
Follow the prompts to complete the uninstallation process.

Uninstall via Settings

1. Find the application to uninstall

Press the Windows key + I to open Settings.
Go to Apps > Installed apps.
Scroll through the list of installed applications to find the version of NHS Credential Management you want to uninstall.
Alternatively, you can use the search bar to quickly locate the application.

2. Uninstall the application

Click on the application.
Click on Uninstall and follow the prompts to complete the uninstallation process.

Uninstall using Command Prompt

1. Open Command Prompt as administrator

Press the Windows key + R on your keyboard.
In the Run dialog box, type “cmd” into the field and then press Ctrl + Shift + Enter. This will open Command Prompt with administrative privileges.

2. Use WMIC to uninstall

Type the following command to list all installed applications: wmic product get name
Find the name of the application you want to uninstall.
Type the following command to uninstall the application (replace your application name with the actual name of the application: wmic product where "name='your application name'" call uninstall

Using NHS Credential Management

Launch the program

Once NHS Credential Management has been installed, an icon will be placed in the Programs | NHS Credential Management area of the Start Menu. On Windows 10 devices, an icon will also be placed on the Applications screen.

NHS Credential Management does not automatically start after installation but will automatically start on a subsequent user login or machine restart.

Close the program

An icon will be visible in the system tray when NHS Credential Management is running. The program can be closed by right clicking on this icon and selecting Close. Right clicking and selecting Status will show the currently installed version.

Log paths

NHS Credential Management logs can be found under the path below:

C:\Users\{username}\AppData\Local\HSCIC\NHSCredentialManagement

NHS Port Service logs can be found under the path below:

C:\ProgramData\HSCIC\NHS Port Service

Configuration and troubleshooting

Read full guidance and instructions on how to set up and troubleshoot Credential Management.

Registration Authorities

Registration Authority staff need NHS Credential Management to use the new Magicard 300 printer. This printer will not work without it.

It's also needed for any application that uses NHS CIS2 Authentication, such as Care Identity Management or sending invitations to register in Apply for Care ID.

NHS Credential Management v1.4.2.0 is required for series 9 smartcards.

Last edited: 11 December 2025 12:32 pm