Epic Kiosk Configuration

This document describes how to install the Imprivata PatientSecure® client-side components for Epic Kiosk.

Before You Begin

Before you begin, have the following information ready:

  • PatientSecure:

    • Directory path(s) where you will install the pre-defined group of features for Epic Kiosk.

      NOTE: Check with your Imprivata PatientSecure representative to make sure that the server components are installed and that Admin Console is installed and configured.

    • Epic environment. Ensure that the Epic environment is already configured.

      • Epic LWS records. Ensure that the local workstation (LWS) records for the kiosks and registrar endpoints already exist in the Epic database.

      • Epic Configuration ProgID. Take note of the ProgIDs for the kiosks in the Epic database. For more information, see Enabling Palm Scanner for Specific Workstations.

BEST PRACTICE:

Take note of the machine names where the Imprivata PatientSecure client is installed, so you can map each machine to your location settings.

Install the Drivers

To install Fujitsu F-Pro extended drivers with InstallShield:

  1. Disconnect the palm scanner from the computer.

  2. Download the PatientSecure software .zip file from the Imprivata PatientSecure downloads page.

  3. Extract the .zip and navigate to the F-Pro Sensor drivers directory.

  4. Run PSSD_32.msi or PSSD_64.msi, according to your kiosk's platform.

  5. Follow the instructions in the installer.

  6. When the installation is completed, click Finish.

  7. Click Yes to restart the computer.

    Repeat this procedure for each kiosk using a scanner.

Install the Drivers from the Command Line

To install the Fujitsu F-Pro drivers from the command line:

  1. In the extracted .zip directory, navigate to the directory F-Pro Sensor drivers.

  2. From the command line, run the commands, according to your kiosk's platform:

    Copy 
    msiexec /i <pathToFujitsuDrivers>\PSSD_64.msi /qn /forcerestart
    Copy 
    msiexec /i <pathToFujitsuDrivers>\PSSD_32.msi /qn /forcerestart

    where <pathToFujitsuDrivers> is the path to the Fujitsu F-Pro drivers.

Epic Welcome or PatientWorks Kiosks

If you are installing Imprivata PatientSecure on Epic Welcome or PatientWorks kiosks:

  1. Uninstall the drivers from the kiosk.

  2. Install the Fujitsu F-Pro drivers.

  3. Install the Imprivata PatientSecure client software with the kiosk.

Install the Imprivata PatientSecure client with the appropriate pre-defined group of features for your Epic Kiosk environment.

  • During setup, select the Epic Kiosk, Hub group of features.

For more information, see Installing the PatientSecure Client.

Before you begin, make sure that all facilities and departments have been configured in Admin Console.

To map your computer to a facility and department using the Admin Console, use one of the following methods:

From the Locations page:

  1. In the Admin Console, go to Settings > Locations.

  2. Select the correct Organization, Facility and Department for your needs.

  3. In the right pane, select Map a Machine from the Options drop-down list.

  4. In the dialog box, enter the machine name and click Map Machine.

    The computer is added to the facility and department you specified.

From the Machine Mappings page:

  1. In the Admin Console, go to Settings > Machine Mappings.

  2. To add a new machine, click Add new machine.

    1. In the dialog box, click Add names manually.

    2. Type a machine name.

    3. Click Add.

      The new machine is added to the list of machines. Unmapped machines are indicated by a flag and the status of "no location".

      To add additional machines, select Add another and type the additional machine name.

  3. To map an unmapped machine, select the unmapped machine and click Map selected.

    1. In the dialog box, select the Organization, Facility and Department from the drop-down lists and click OK.

To configure an authentication device in Epic 2017 or Epic 2018:

  1. In Chronicles, access the E0G master file.

  2. Go to Enter Data > Create/Edit Device.

  3. Type a new ID of 10000 or greater. You can also enter an asterisk (*) to select the next available open ID.

    Chronicles prompts you to create a new device.

  4. Type y. The RECORD ID field displays the ID.

  5. (Optional) If necessary, you can edit the ID value.

  6. In the RECORD NAME field, type Palm Scanner Welcome.

  7. On the General Settings screen, complete the following fields:

    • Description: This is an optional value.

    • Platform: Select the Desktop platform.

    • ProgID: Type PSEpicWelcomeIntegration.EpicWelcomeIntegrator

    • Device icon path: This is an optional value.

  8. Enter the record and exit Chronicle.

To configure an authentication device in Epic 2015 IU2:

  1. In Chronicles, access the E0G master file.

  2. Go to Enter Data > Create/Edit Device.

  3. Type a new ID of 10000 or greater. You can also enter an asterisk (*) to select the next available open ID.

  4. On the General Settings screen, fill out the following fields:

    • Description: Type Palm Scanner Welcome.

    • Platform: Select the Desktop platform.

  5. On the Desktop Settings screen, type the following ProgID:

    PSEpicWelcomeIntegration.EpicWelcomeIntegrator

  6. Exit the record and exit Chronicles.

Take note of the Epic Configuration ProgID that corresponds to this kiosk.

For example:

A second Login Device will need to be created, with a progid of 'PSEpicWelcomeIntegration.EpicWelcomeIntegrator'. Depending on what the login device for palm scanning was named, you will want to add 'Welcome' to the title. 'PalmScannerWelcome'. Once that is completed the login device will need to be added to the kiosk at the LWS level. Set the Context 'Kiosk Identification(1010)'.

Enabling Palm Scanner for Specific Workstations

NOTE: The following instructions assume that the local workstation (LWS) records already exist in the Epic database.

To enable the Palm Scanner at the Workstation level:

  1. Log in to Hyperspace as an administrator.

  2. Click Epic, then select Admin > Access Management > Authentication Administration.

  3. Do one of the following:

    • If Imprivata is the Active authentication record, click Accept.

    • If Imprivata is not the Active authentication record, select Other and then select Imprivata.

    The Authentication Administration page opens.

  4. Click Add/Edit Workstation and search for the specific workstation for which you want to enable the Connector, and then select it from the list.

  5. Click Add/Edit Context for the selected workstation and set the Context to 'Kiosk Identification (1010)'.

  6. Set the Primary Device to Palm Scanner Welcome.

To turn off photo capture for Epic Kiosk:

  1. Log in to the Admin Console.

  2. From the Settings menu, select Client Settings.

    The Client Settings page opens.

  3. Expand the Epic Kiosk section.

  4. Set the Capture Picture setting to OFF.

  5. Click Save.

You may need to modify the PatientSecure authentication and verification windows to better resemble the current kiosk screens in use by the client.

For more information, see Epic Kiosk Settings.

Error Connecting to Device Hub

Symptom

The kiosk displays an error: "Error Connecting to Device Hub".

Solution

  1. Verify the following items:

    • You installed the extended Fujitsu drivers on the device.

    • The machine is mapped correctly in Admin Console for the Production environment.

    • PatientSecure was not installed on this machine before installing the PatientSecure Kiosk.

      If the Control Panel displays PatientSecure as installed, uninstall all components and start from the beginning.

  2. On the device, navigate to Services and restart the PatientSecure Hub Service.