DirectTrust Domain Bound Certificate Activation Information

Key Points

• The DirectTrust Activation process is mandatory to enable Direct messaging with external users.
• The identity verification pertains to a human not a company.
• The information is kept secure via encryption.

Purpose

The DirectTrust Activation process is part of the initial implementation of your Direct messaging application and only takes a few minutes. This process enables you to send Direct messages to providers outside of your practice who are also part of the DirectTrust network. Security is the key component that distinguishes Direct messaging from regular email. In order to exchange Direct messages both the sender and receiver need to validate “who they say they are”. This is accomplished by verifying the identity of each user before issuing a Direct address to them.

Identity Verification

Since your EHR vendor is using organizational-level security certificates, only one person (the practice representative) completes the DirectTrust Activation process. That person is then responsible to verify the identity of other users given a Direct address at the practice. Typically, a person’s identity is verified during the hiring process so no further action is usually needed by the representative (e.g. I9 Employment form, copy of passport or driver’s license).

Activation Process

The DirectTrust Activation process consists of three parts:

• Government ID verification
• Financial ID verification
• Confirmation code and voice recording

Notes

• All the sections of this process pertain to a single “person”. It’s that person’s identity that is being verified, not the practice.
• Concerned about using your credit card as the Financial/Utility ID? Don’t be, this is simply an identity verification and does not affect your credit report or credit score. There is no charge to your card. All the information is kept secure through encryption and your credit card number is not saved.
• If you choose the NPI as your government ID, it must be your individual NPI not the practice NPI.
• If the representative leaves the practice, another person needs to assume the role and complete the identity verification process.