PKB Production UK (HL7) Public

Available endpoints on Port 443:

• mtls.hl7.uk.patientsknowbest.com,

• no-mtls.hl7.uk.patientsknowbest.com

• deprecated-ciphers.no-mtls.hl7.uk.patientsknowbest.com.

Deprecations

• my.patientsknowbest.com:7443 is now deprecated.

Overview

All new endpoints have WAF protection. Two out of the three will only accepts ciphers that are deemed as recommeded and secure by the industry, while the third provides backward compatibility.

Better support clients in the clould

We offer mtls.hl7.uk.patientsknowbest.com to those customers who have moved to the cloud and can’t use static IPs when accessing our services. It is also our prefered setup for new customers.

Security

Customers, who have

• up-to-date client software tools that support the state of the art cipher suites,

• have static IPs that we can allow-list and

• can’t allocate budget to implement mTLS in short term

can move to no-mtls.hl7.uk.patientsknowbest.com.

Backward compatibilty

deprecated-ciphers.no-mtls.hl7.uk.patientsknowbest.com is intended as a short term solution for customers who are not as yet up to date with their software systems and still require support for using ciphers that are considered to be weak.

Standard ports

Using standard ports (443) allows us to consolidate our server certificate management and fully automate the renewall process for all our endpoints.

Supported ciphers

Legend

• supported,

• not-supported,

• *: not supported (for technical reasons)