Secure Installation

Intended Use and Operating Environment

• HIS Agent is intended to be run in a secure virtualized environment.

• It is expected that the customer IT policy provides additional protection, especially when it comes to communication between HID Integration Service Agent software and the PACS system.

Access Control

• Only authorized personnel should have access to HIS Agent and HIS Cloud.

• Use strong, unique passwords and regularly update the passwords according to the customer IT policy for the HIS Agent software and HIS Cloud.

Network Security

• HIS Agent requires a network connection to the managed PACS system and a network connection to HIS cloud running on the AWS public internet. Both network paths inside the customer network should be properly secured by customer IT policy.

• HIS Cloud uses an HTTPS connection and publicly signed HTTPS certificate. Insecure connections should not be allowed by customer IT policy.

Agent Security

• Never store HIS Agent PACS passwords in plaintext; always use dedicated password managers or encryption.

Physical Security

• To prevent unauthorized access, the virtual machine running HIS Agent should be physically secured in a locked room or cabinet.

Software Updates

• Keep HIS Agent Software and the software environment up to date to patch vulnerabilities and improve overall system security.