For Awareness: Connecting Personal Devices to AHSRestrict

Beginning April 8, 2026, the way non-prescriber staff connect their personal devices to corporate WiFi will change. Staff can currently access AHSRestrict and Healthspot using their work credentials. After this transition, non-prescribers' personal devices can only use Healthspot. This change will significantly enhance the security of the network and critical systems, and will roll out in small batches across the province with an expected completion date of July 2026.

Prescribers should not see an impact of this change and can continue to login and access WiFi as before, as both corporate-owned and prescribers' BYOD and personal devices will continue to have access to AHSRestrict. However, if any prescribers notice difficulty connecting to AHSRestrict, they should contact the IT Service Desk (1-877-311-4300) for assistance.

• Insite: Information Technology - Mobility Services

All User Bulletin - Internet Security Certificate Update (Action May Be Needed)

All-user-bulletins highlight stumbling blocks that all prescribers need to be aware of when using the Connect Care clinical information system.

Internet Security Certificate Update - Personal devices may require user action

On September 4 and 5, 2025, AHS IT Identity-Directory Services will renew its Public Key Infrastructure (PKI) certificate servers. This PKI service manages electronic security certificates and unique electronic keys that verify end users, devices, systems and servers throughout AHS and its affiliates. AHS devices and personal devices enrolled in the AHS Bring Your Own Device (BYOD) program should not be impacted, but personal devices not enrolled in BYOD may be impacted and require user action. Prescribers who haven't yet done so may want to consider enrolling their device in BYOD prior to this change.

• AHS devices and personal devices enrolled in BYOD: No action is required by users if their computer or mobility device is enrolled in BYOD. PKI certificates will be automatically updated.

• Personal devices not enrolled in BYOD: Both Android and Apple devices may be impacted by this change. Users may see warnings to the effect that a security certificate cannot be verified, and will then need to follow a few simple steps on or after September 5 to restore AHSRestrict wireless connectivity following the PKI update (see memo for more details).

For instructions for affected users on what actions may be required, see the memo.

• Memo: Internet Security Certificate Update - September 2025

Best Practice Review - Bring Your Own Device (BYOD) Connect Care Printing

AHS IT provides best effort support for BYOD/personal laptops such as Macbooks or Microsoft Surface devices. There are two ways for BYOD users to print documents from Connect Care; however, only one is supported and recommended by AHS IT:

• Virtual Local Printing (VLP) - This method requires the user to select a printer for each print job. It is the only method supported by AHS IT for printing from Connect Care on BYOD devices.
• Server-Side Printing - This method requires mapping a particular device to a printer; once mapped, print jobs from that device would automatically route to a pre-mapped printer. Server-side printing from Connect Care on BYOD devices is not supported by AHS IT.

Why isn’t BYOD server-side printing supported?

Server-side printing requires workstations to stay in the same unit and have unique names. As neither of these conditions is guaranteed for BYOD devices, multiple users with the same default BYOD device name could potentially print to the same printer, regardless of their department location. This creates a major risk for privacy breaches.

How to get printing support for your BYOD device

If you need help setting up Virtual Local Printing, see the below tip sheet or call the AHS Service Desk at 1-877-311-4300. Please do not request server-side printing for BYOD devices. 

• Tip: Virtual Local Printing (VLP)

Multi Factor Authentication for Microsoft 365 Apps Accessed from Personal Workstations

As of Wednesday, May 28, 2025, Multi Factor Authentication (MFA) will be required when users access Microsoft 365 (M365) applications - i.e., the web versions of Microsoft Office software, including Outlook, SharePoint, and OneDrive - from personal workstations such as laptops. This change may prompt MFA when accessing CMIO and other AHS resource links, as most of our materials are hosted on SharePoint; however, links clicked from within Connect Care will not prompt MFA.

What is changing and why?

AHS IT is restoring Multi Factor Authentication (MFA) for Microsoft 365 (M365) applications accessed from personal workstations such as laptops. MFA was previously required for M365 apps, but was temporarily removed in December 2024 while AHS' SharePoint was migrated to the cloud. The migration process is now largely complete, and so M365 MFA is being reactivated to align with AHS' security policies. 

This change does not impact shared workstations, or any other applications including Connect Care.

What action do you need to take?

The M365 MFA will be triggered only on personal workstations when accessing the web versions of Microsoft software; this includes opening a Microsoft web app (e.g., Outlook) as well as opening a document created by/saved on Microsoft software (e.g., a Word file, or a document saved on SharePoint) on your browser. Users will be prompted for personal login as usual, and then prompted for MFA confirmation (such as a code texted to a mobile phone). Once the MFA step is complete, the user will not need to re-authenticate for at least 6 hours. 

• Tip: When accessing SharePoint, please select "Keep me signed in" when prompted, to allow for even longer timeout.

Problems?

If you have any issues with M365 MFA, please contact the IT Service Desk (1-877-311-4300).

All User Bulletin - PowerMic 4 Issues

All-user-bulletins highlight stumbling blocks that all prescribers need to be aware of when using the Connect Care clinical information system.

PowerMic 4 Not Compatible on Thin Clients

Dragon Medical One (DMO) requires a microphone to function. Connect Care provides the PowerMic Mobile (PMM) application as the default microphone solution for prescribers, but some may prefer to use wired/USB microphones. USB microphones are not a standard offering at AHS, and microphone peripherals are the responsibility of the user to purchase as bring your own device (BYOD).

Prescribers across the zones have reported issues with using their PowerMic 4 with an AHS device. While the PowerMic 4 may work on personal devices and some AHS full clients, PowerMic 4 is not currently fully supported on all AHS devices. In particular, they are not supported on AHS thin clients, which are the more common type of workstation in the North Zone. 

The AHS technology teams are currently in the process of testing PowerMic 4. In the meantime, prescribers are encouraged to use other tools such as the PMM app, or a device that is certified as being compatible with all AHS devices, such as PowerMic 3; see the 1-pager for a list of all compatible devices. 

• Dragon Medical One Compatible Devices
• Manual: DMO Microphones

All User Bulletin - Internet Security Certificate Update

All-user-bulletins highlight stumbling blocks that all prescribers need to be aware of when using the Connect Care clinical information system.

Internet Security Certificate Update - Personal devices may require user action

On October 19 and 20, 2023, AHS IT Identity and Directory Services will renew its Public Key Infrastructure (PKI) certificate servers. This PKI service manages electronic security certificates and unique electronic keys that verify end users, devices, systems and servers throughout AHS and its affiliates. AHS devices and personal devices enrolled in the AHS Bring Your Own Device (BYOD) program will not be impacted, but personal devices not enrolled in BYOD may be impacted and require user action.

• AHS devices and personal devices enrolled in BYOD: No action is required by users if their computer or mobility device is enrolled in BYOD. PKI certificates will be automatically updated.

• Personal devices not enrolled in BYOD:
• Android devices: Will not be impacted, with the possible exception of Google Pixel devices. Google Pixel users experiencing issues following the PKI update should call the IT Service Desk (see memo for more details).
• Windows and Apple devices: May be impacted with this change. Users may see warnings to the effect that a security certificate cannot be verified, and will then need to follow a few simple steps to restore AHS Restrict wireless connectivity following the PKI update (see memo for more details).

For instructions for affected Google Pixel, Window, and Apple device users on what actions may be required on or after the PKI update is completed, see the memo.

• Memo: Internet Security Certificate Update - October 2023

All User Bulletin - User Profile Error on Shared Workstation

All-user-bulletins highlight stumbling blocks that all prescribers need to be aware of when using the Connect Care clinical information system.

User Profile Error on Shared Workstation

For highly shared workstations, there is a possibility that device performance will degrade due to the volume of user profiles existing on the device, as all user information is stored locally (including information for those users who may not have used the workstation for a while). In some cases, this issue may also be coupled with the device’s hard drive being nearly full. 

In such a situation, a user may get an error message when trying to log on to the workstation, noting that the user’s profile cannot be loaded. If you get this error message, call IT Service Desk or log the incident ticket to mention the issue above (Unit Clerks can do this), ensuring the Service Desk is provided with the barcode and physical location of the affected device. IT will then clean up the user profiles and data on the workstation. 

IT has put in new controls to avoid user data build-up, and will confirm if these controls successfully fix the situation after Connect Care Launch 6.

For more information, see the FAQ:

• FAQ: Shared Workstation - User Profile Error

Non-Medical Device Assessments: What Prescribers Need to Know

Non-Medical Devices (NMDs) are computing and related devices that enable interaction with Connect Care. These include computer workstations, printers, document scanners, e-signature pads and track boards, among other things. 

AHS provisions and supports NMDs in clinical areas in order to match peak staff and workflow needs. To better estimate site-specific needs, NMD Assessments are completed prior to each Connect Care launch. The assessments are collaborative, facilitated by visiting teams working with site managers and prescribers. AHS NMD standards help set expectations for the quantity, types and locations of devices that can be deployed to sites. Information about NMDs and the NMD Standards can be found on Insite. 

Prescriber participation in NMD Assessments is important for ensuring that device type and location support physician workflows. For example, a printer placed in the wrong location can add significant burden to a physician’s workflow if inconvenient for retrieving printed prescriptions or outpatient laboratory test requisitions. 

Prescribers are encouraged to attend the first 30 minutes of NMD Assessment sessions at their sites. North Zone Wave 7 NMD Assessments begin May 17, 2021 and run until October 1, 2021. Dates will be emailed to site Medical Leadership directly. If you have questions about NMD Assessments in your Zone, please contact your Zone's CMIO supports:

• North Zone: cmio.nz@ahs.ca
• Edmonton Zone: cmio.ez@ahs.ca
• Central Zone: cmio.cez@ahs.ca
• Calgary Zone: cmio.caz@ahs.ca
• South Zone: cmio.sz@ahs.ca

All Prescriber Bulletin - Tap Out or Log Off

All-user-bulletins highlight developments that all physicians need to be aware of when using the Connect Care clinical information system.

Tap out or log off!

Some computer workstations are enabled for Tap-n-Go logons in high-flow settings. This is a great convenience because prescribers can sign-on to a workstation and get to Connect Care quickly by tapping an enabled ID card. 

Problems arise when prescribers do not "tap-out" upon leaving the workstation. Even if Connect Care is logged out, this can leave Windows open to the prescriber's session and expose that session to misuse by others. Tapping-in elsewhere else does not tap-out the prior workstation.

Most users do not notice this challenge because workstations in other clinical settings are often configured such that users only log on to Connect Care, with the Windows session automatically taken care of. 

Universal best practice: If you log on to Windows (keyboard, tap card, biometrics, or any other method) with a personal account, be sure to log off before leaving the device. 

• Related FAQ: Does Connect Care support generic logins?

Practical Paranoia - Protecting Personal Devices

Personal computing devices (laptop, notebook, tablet, desktop) may support clinical work when physicians take call from remote sites, or otherwise participate in the provision of healthcare services outside AHS facilities. 

Because identifiable personal health information could appear on data storage devices which, if stolen, could risk a privacy breach, it is essential that personal devices be configured in compliance with AHS policy and legislative requirement, including:

• Password protection with a strong and well maintained code
• Inactivity timeouts that re-challenge for a device password after automatic system suspend or sleep states
• Hard drive encryption
• Firewall protection
• File sharing off or appropriately protected

Encryption is a method of protecting information by converting it to a format that's unreadable by anyone except those with a special key (usually a very long password). All Windows operating system devices must have native hard drive encryption enabled (BitLocker). All Macintosh operating system devices must also have native hard drive encryption enabled (FileVault).

• Manual: Working Remotely

Prescriber Workstation Preferences - Please Respond

We are eager to learn more about physician non-medical device preferences.

The Connect Care non-medical device plan includes estimates of the number of fixed (desktop, wall-mount, counter, etc.) and mobile (Workstation on Wheels [WOW], Laptop on Wheels [LOW], etc.) computers to install in different clinical environments. The Wave 1 experience suggests that prescribers have welcomed mobile workstations. This could influence future device re-distribution.

If you are a prescriber (physician, trainee, medical student, nurse practitioner, etc.) with at least ONE week of experience using the Connect Care clinical information system, please take a few moments to complete an anonymous survey about your device experience:

• Survey: Prescriber Workstation Preferences

Apple Purchase Portal for Connect Care Physicians

NOTE: the Apple Physician Device Purchase Portal has been discontinued. Discounts are still available through AHS and University purchase programs.

We previously posted about things to consider when selecting a personal mobile device for physician use with the Connect Care clinical information system (CIS). We also posted about a new arrangement between Apple and Alberta Health Services to provide enterprise support for clinicians using Apple devices with the CIS.

We are now pleased to confirm availability of a physician purchase portal for Apple devices. The available devices are selected for their fit to rounding and other workflows where personal computing can be most helpful. An exception is iPhones, since both pricing and support is better had through one's mobile phone and wireless services provider.

CIS-ready tablet and notebook computers purchased through the portal are backed by extended enterprise AppleCare support at no additional cost.

• Announcement: Apple Physician Device Purchases
• Portal: Apple Physician Device Purchases
• Tip: Using the Apple Physician Purchase Portal

NOTE: please see comments on this item

Barcoding in Connect Care - Getting to HIMSS 6

Barcodes are graphic compositions of lines, symbols or shapes organized in ways that convey information to optical devices. Barcodes can be incorporated into identity cards, patient wristbands, medication labels, laboratory test collection tubes or scannable documents.

We know from the experience of others that good barcoding aligns with best practice. The connection is so strong that the Health Information and Management System Society (HIMSS) looks for this as a marker of organizations that have achieved advanced use of digital health records. Indeed, good barcoding for patient identification, medication management, blood product administration, medical imaging and supply management merits Stage 6 (out of 7) HIMSS certification.

We aspire to this level of digitally enabled transformation at AHS and will seek HIMSS stage 6 within 6 months of each Connect Care implementation wave.

• Byte: Barcoding in Connect Care

Thinking ahead - Barcoding Technology

A core Connect Care strategy is avoidance of hybrid (mixed paper and digital) workflows. This is particularly important where data re-entry is error-prone and puts patients at risk. An important example relates to medication administration. Mistakes involving just a character or two can make the difference between intended or unintended person, medication, dose, route or frequency.

Accordingly, Alberta Health Services (AHS) takes the opportunity of Connect Care to implement barcoding technology in medication workflows. A unique identifier will appear on all medications dispensed by AHS pharmacies. When medications are administered, providers scan the patient wristband as well as the medication. This simplifies data entry, safety checks and documentation.

Another core Connect Care strategy is to "close the loop" on as many workflows as possible. In the case of medication administration, this means workflow-attuned tracking so that there is an unbroken informational chain from plan, reconciliation, adverse reaction check, order, pharmacy receipt, decision support, dispensing, administration, documentation and effect monitoring. Barcoding locks down one more step in closed-loop medication management.

Physicians will be less affected by medication barcode scanning than other members of the multidisciplinary team. Still, it is important to understand an important change to team workflows that affect us. Questions can be directed to connectcare@ahs.ca.

• FAQ: Barcode Scanning

Non-Medical Device Workflows

The Connect Care communications team has produced a nice video illustrating how clinicians can interact with non-medical devices (computers, mobility, etc.) in inpatient environments.

Sneak Peak - Inpatient non-medical devices

Intense work continues to prepare our workplaces for Connect Care launch. We make much of "going digital" but may not appreciate all the technology that must be in place to free us from paper constraints.

The technologies of immediate interest to clinicians allow us to directly interact with the clinical information system (CIS). These devices are "non-medical" to the extent that they are not subject to regulations governing medical measurements or interventions (medical devices).

The Connect Care non-medical device mix will include, in addition to conventional desktop computers, mobile workstations, wall-mounted large-screen dashboard displays, notebook computers and tablets. The Information Technology team has released a video demonstrating some inpatient non-medical devices planned for Connect Care:

• Video: Connect Care Non-Medical Devices