View source for OpenEMR 7.0.1 ONC Certification Requirements

== Overview ==
OpenEMR 7.0.1 has ONC Certification. The requirements for your OpenEMR instance to fulfill this certification are in below Requirements section.

== Requirements ==
*You are required to register your Organization name and FHIR endpoint with the OpenEMR Foundation by sending an email with this information to hello@open-emr.org with subject of 'ONC registration'. This information will be posted on [[OpenEMR_7.0.1_API#Service_Base_URLs]], which is a requirement for ONC certification (the OpenEMR Foundation is required to post this information within 10 days of your request).
*Required global settings
:*Administration->Globals->Security->Hash Algorithm for Authentication->SHA512 (ONC Certification)
:*Administration->Globals->Security->Hash Algorithm for Token->SHA512 (ONC Certification)
:*Administration->Globals->Logging->Enable Audit Log Encryption->On
:*Administration->Globals->Connectors->Enable OpenEMR Standard FHIR REST API->On
*To ensure optimal security, users are required to run their OpenEMR client web browser on a end-user device that encrypts entire drive(s) with AES based encryption algorithm.
*To ensure optimal security, users are required to use a FIPS compliant cipher for the HTTPS/SSL browser connection.
*To ensure accurate time, server are required to set up a Network Time Protocol server that supports version 4 Network Time Protocol (NTP) as defined by RFC 5905.
*For users NOT NEEDING ONC certification, then would consider setting following global setting to improve performance
:*Administration->Globals->Security->Audit Logging SELECT Query->Off
:*Administration->Globals->Security->Printing Log Option->No logging

== Certification Details ==
{{Onc2015}}