Where can I purchase a X.509 SSL / TLS certificate suitable for HL7 end-to-end encryption? See 3rd Party SSL Vendors.

 

Can I create my own certificate to use? Yes, but you MUST import your certificate into the Windows Certificate Store to use it with the CORE HL7 Listener. See Creating Your Own Certificate.

 

I have a 3rd Party SSL certificate. What happens when I renew it? A lot will happen. This even applies if you are using your own Self-Signed certificate and you "renew" it. Here's a dirty little secret that casual users don't know. SSL / TLS Certificates of this kind cannot be "renewed" they are "replaced" with a new one. It can have much of the same information as the old one BUT the certificate THUMBPRINT (which is the central unique identifier for certificates) will be different. SO at the very least, after you have "renewed" your certificate you will need to make sure that the new one has been imported into your Windows Certificate Store AND then edit the profile and Choose the certificate again as you did when you first configured your Listener (see Using SSL / TLS Encryption). If your HL7 Sender Trading Partner(s) required that you send them your certificate information, you will likely also need to coordinate with them and send the new information (see SSL Utilities).

 

I have my own X.509 certificate (either purchased or self-signed) in a .PFX certificate file. How do I use it in the CORE HL7 Listener? The CORE HL7 Listener will only use ONE certificate directly from a .PFX file and that is the "Default" X.509 certificate that we create. For others you have to import the certificate into the Windows Certificate Store and then click Choose SSL Certificate in the SSL/TLS tab of the profile window. There are explicit instructions on how to do this HERE.

 

I am using a secure VPN already which uses SSL, do I need to have a SSL Enabled HL7 Listener? We say possibly no, but it is your decision. As of 2026 we are aware of NO Federal, State, City, County, Region, District, etc regulation in the USA, UK, Australia, or New Zealand which isn't satisfied by the use of a secure VPN. You will note that SSL functionality is included in the basic cost of our CORE HL7 Sender and CORE HL7 Listener products, there is no add-on modules that cost extra. Be cautious of HL7 software vendors trying to sell you something that you might not need to be compliant with regulatory agencies.

 

 

I have my Secure Listener configured and running. My client (the HL7 Sender) says that they need my certificate information. What do I send them? See SSL Utilities.

 

I have configured my Secure Listener according to the instructions, however, my client's secure encrypted HL7 TCP/IP Sender cannot connect to my Listener. What's the problem?  See Troubleshooting Problems.