HOW TO CONNECT TO THE

ELECTRONIC PREMIUM REMITTANCE SYSTEM WEBSITE Secure Socket Layer is a protocol designed to enable application to transmit information back and forth securely. Some applications that are configured to run SSL include web browsers like Internet Explorer, and Firefox. These programs are automatically able to receive SSL connections.

The online applications of Philhealth like the Electronic Premium Remittance System (EPRS) use this kind of protocol to secure the connections that are coming from outside the PHIC network. In order to establish a secure SSL connection, however, the application must first have an encryption key assigned to it by a Certification Authority in the form of a Certificate. Once the application has a unique key of its own, a secure connection using the SSL protocol can be established.

Philhealth shall provide the Certificates (Root and Client Certificate) with network user account in order to have a secure access to EPRS website and to also identify if the user who is trying to access the website is authorized. PHILHEALTH shall email the Certificates and network user accounts to all EPRS website users. The Certificates should be installed to the web browser that the user will use and provide the requested network user account to login and access the website.

Please be informed, however, that the network user accounts will be valid for one year only upon issuance. It is advised, therefore, that to avoid service interruption, PHILHEALTH should be informed of the intention of the user to renew their network user accounts before the one year expiration. Once the account is renewed, the Network Group, ITMD of PHILHEALTH should be informed of the said renewal through email address network@philhealth.gov.ph as a requisite to the extension of the validity of the network user account.

As for the client certificate, this will also have a validity period (please check Annex A on how to check validity of a client certificate). If the user encounters expiration on the client certificate, it should coordinate PHILHEALTH to send the new client certificate.

Guidelines on how to connect to the EPRS website.

I. The following are the basic requirements to connect to the EPRS Website:

1. A Computer 2. An Internet Connection 3. Web Browser with SSL Certificates (root and client certificate) issued by PHILHEALTH 4. A password to access the private key of the SSL Certificate 5. A username and password (network user account) to be able to access the website 6. A username and password (EPRS user account) to be able to access the EPRS application system

II. Below are steps on how to install the root and client certificate and how to connect to EPRS website

using Internet Explorer and Firefox.

A. INTERNET EXPLORER (recommended version should be at least 7.0)

1. Open your Internet Explorer. Go to “Tools” then click “Internet Options”. The “Internet Option” window will appear.

2. Click the “Content” tab then click on the “Certificates” button.

3. “Certificates” window will appear. Click on the “Import” button.

4. The “Certificate Import Wizard” will appear. Click on “Next”.

5. Specify the file you want to import by clicking on the “Browse” button. Select “EPRS

certificate.pfx” file, which is the Client Certificate to be used by the browser. Then click “Open”.

NOTE: The EPRS certificate.pfx client certificate shall be given through email by Philhealth.

6. Once the certificate is specified, click on “Next”.

7. Enter the password at the textbox provided then click “Next”.

NOTE: The client certificate password shall be given through email by Philhealth.

8. Certificate should be stored at the “Personal” folder. Click “Browse” button then select

“Personal” on the list. Then click “OK”.

9. Click “Next”.

10. Click “Finish”.

11. Click “OK”.

12. You have now successfully installed the client certificate. Now, we need to install the root certificate by again clicking on “Certificates” button.

13. “Certificates” window will appear. Select “Trusted Root Certification Authorities” tab then

click on the “Import” button.

14. The “Certificate Import Wizard” will appear. Click on “Next”.

15. Specify the file you want to import by clicking on the “Browse” button. Select

“philhealthonlineca.p7b” file, which is the Root Certificate to be used by the browser. Then click “Open”.

NOTE: The philhealthonlineca.p7b root certificate shall be given through email by

Philhealth.

16. Select “Trusted Root Certification Authorities” store where the certificate will be placed by clicking on the “Browse” button. Click “OK” then click on “Next”.

17. Click “Finish”. You have now successfully installed the root certificate. If any security warning window will appear, just click “Yes”.

18. Click “OK”.

19. Connect to EPRS website by entering the URL “https://eprs.philhealth.gov.ph” on the

address bar. Choose “EPRS Client Certificate” as the digital certificate to be used. Click “OK”.

20. The “Network User Account Login Page” will appear. Enter the username and password. Please include “@philhealthonline.ph” when entering the username: Eg.eprsphro01@philhealthonline.ph. Click “OK”.

NOTE: Username and password shall be given to you through email by Philhealth. 21. You may now use the EPRS website. Please provide your EPRS username and password to login.

B. FIREFOX

1. Open your Firefox web browser. Go to “Tools” then click on “Options”.

2. The “Options” window will appear. Click on “Advanced” then click on “Encryption” tab. Click “View Certificates” button.

3. The “Certificate Manager” window will appear. Click on “Your Certificates” tab to install the client certificate then click on “Import” button.

4. Specify the file you want to import. Select “EPRS certificate.pfx” file. Then click “Open”.

NOTE: The EPRS certificate.pfx client certificate shall be given through email by Philhealth.

5. Enter the password at the textbox provided then click “OK”.

NOTE: The client certificate password shall be given through email by Philhealth.

6. Click “OK”. You have successfully installed the client certificate.

7. Now, we have to install the root certificate. For the installation of the root certificate, open the “Certificate Manager” window then click on the “Authorities” tab then click on the “Import” button.

8. Select “philhealthonlineca.p7b” root certificate then double click the file.

NOTE: The philhealthonlineca.p7b root certificate shall be given through email by Philhealth.

9. Select all the checkbox then click “OK”.

10. The certificate has been imported and installed. Click “OK”.

11. Connect to EPRS website by entering the URL “https://eprs.philhealth.gov.ph” on the address bar. If the “User Identification Request” window will appear, choose the certificate with CN=EPRS Client Certificate and OU = EPRS then click “OK”.

12. The “Network User Account Login Page” will appear. Enter the username and password. Please include “@philhealthonline.ph” when entering the username: Eg. eprsphro01@philhealthonline.ph. Click “OK”.

NOTE: Username and password shall be given to you through email by Philhealth.

13. You may now use the EPRS website. Please provide your EPRS username and password to login.

ANNEX A: How to Check for the Validity of a Certificate

1. Open the “Control Panel” window by clicking on the “Windows Logo” or “Start” button located at the lower left of the screen and click on “Control Panel”

2. Click on “Internet Options”.

3. The “Internet Properties” window will appear. Click on “Content” tab then click on “Certificates” button.

4. Choose the certificate you want to view the details then click “View” button

5. The certificate details window will appear containing the validity period of the certificate.