Imprivata Collaborates with DigiCert to Enable Remote Identity Proofing for EPCS

National bill requires use of EPCS for all Medicare Part D prescriptions beginning January 2021

Lexington, Mass.–December 5, 2018—Imprivata®, the healthcare IT security company, today announced a new collaboration with DigiCert, the world’s leading provider of TLS/SSL, IoT and other PKI solutions and a federally approved certificate authority (CA), to deliver a streamlined, fully integrated workflow for remote identity proofing and give customers more options for meeting U.S. Drug Enforcement Agency (DEA) requirements for electronic prescribing for controlled substances (EPCS).

EPCS continues to gain momentum amongst lawmakers to reduce “doctor shopping” and minimize the risk of altered, stolen or fraudulent prescriptions to help combat America’s opioid and prescription drug abuse epidemic. This October, President Trump signed into law H.R.6 - SUPPORT for Patients and Communities Act, a comprehensive bill designed to address the opioid abuse epidemic. Included in the bill is an electronic prescribing requirement for all controlled substance prescriptions for a covered part D drug under a prescription drug plan. Additionally, 13 states (NY, ME, CT, AZ, NC, RI, IA, OK, TN, VA, MA, CA, and PA) have already enacted legislation containing full EPCS mandates for controlled substances prescribed in those states.

Before practitioners can be issued the two-factor authentication credentials necessary for signing EPCS orders, the DEA stipulates that they must successfully undergo either an institutional or an individual identity proofing process. Imprivata Confirm ID™, the most comprehensive, end-to-end solution for EPCS, offers a robust, role-based supervised enrollment workflow to automate the institutional identity proofing process. Now, through collaboration with DigiCert, Imprivata Confirm ID also delivers a streamlined, fully integrated workflow for individual identity proofing.

“While Imprivata delivers the end to end authentication for providers, DigiCert delivers authentication for connected devices and the networks and stations that providers connect to,” said Wes Wright, Chief Technology Officer at Imprivata. “Working with DigiCert, we’re now able to offer our customers a full suite of institutional and individual identity proofing solutions.”

Imprivata Confirm ID offers the most innovative and convenient authentication options – including Hands Free Authentication, push token notification, and fingerprint biometrics – to ensure a fast, efficient EPCS workflow. DigiCert offers two methods for identity proofing, online verification and declaration of identity verification.

“Providing multiple authentication options ensures all practitioners can complete the identity proofing process in a timely fashion, especially for individuals who may be unable to complete online verification – for example, if they have issues with their credit history,” said Mike Nelson, VP of IoT at DigiCert. “By integrating seamlessly with our identity proofing process, Imprivata Confirm ID gives customers a single, comprehensive reporting solution to meet the DEA recordkeeping requirements.”

Integrating with the DigiCert identity proofing process, Imprivata Confirm ID binds the identity of providers to the authentication modalities they will use for EPCS, allowing them to leverage the full suite of authentication options and establishing a secure, auditable chain of trust.

Imprivata Confirm ID is the comprehensive identity and multifactor authentication platform for remote access and clinical authentication workflows across the healthcare enterprise. Imprivata Confirm ID is a single, centralized solution that enables remote and on-premise users to transact with patient health information securely and conveniently.

About Imprivata

Imprivata®, the healthcare IT security company, provides healthcare organizations globally with a security and identity platform that delivers ubiquitous access, positive identity management, and multifactor authentication. Imprivata enables healthcare securely by establishing trust between people, technology, and information to address critical compliance and security challenges while improving productivity and the patient experience. For more information, please visit

About DigiCert, Inc.

DigiCert is the world’s leading provider of scalable PKI solutions for identity and encryption. The most innovative companies, including the Global 2000, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS/SSL and other digital certificates for PKI deployments at any scale through its certificate lifecycle management platform, CertCentral®. The company has been recognized with dozens of awards for its enterprise-grade management platform, fast and knowledgeable customer support, and market-leading growth. For the latest DigiCert news and updates, visit or follow @digicert.

Media Contact:
Kerry Pillion