Secure Module Card (SMC-B and SMC-B ORG) for medical practices/institutions

The main difference between the two card types is the encryption method used. Generation G 2.1 cards also use the more advanced ECC (Elliptic Curve Cryptography) encryption method.

G 2.0

According to gematik specifications for online productive operation (Level 1) – OPB1 Release 1.6.4/Product Type Version 4.4.0-2

Certificates on the SMC-B:

• X.509 nonQES (for authentication and encryption)
• X.509 QES (for signing)
• CV certificate 1 (for access to electronic health card (eGK) G1 plus)
• CV certificate 2 (for access to eGK G2)
• Device certificate (for device authentication)

G 2.1

According to gematik specifications for online productive operation gemProdT_HBA_ObjSys_G2_1_PTV_4.7.1-0

Certificates on the SMC-B:

• RSA and ECC X.509 nonQES (for authentication and encryption)
• CV certificate 1 (for access to electronic health card (eGK) G1 plus)
• CV certificate 2 (for access to eGK G2)
• Device certificate (for device authentication)

Please note that you can only apply for an SMC-B card for your institution if this card can also be assigned to a holder of an electronic health professional card.

Medical or psychotherapy practice:

Doctors and psychotherapists can order their SMC-B card directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

Dental practice:

Dental surgeries must register in the portal of their Association of Statutory Health Insurance Dentists (KZV). They will then be forwarded to the D‑Trust Application Portal. Dental surgeries receive pre-filled applications from their respective KZV association.

Hospital / private clinic:

Hospitals and private clinics can order their SMC-B card directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

The person applying must be an authorized representative of the institution (hospital, private clinic). Proof must be provided in the form of a document appropriate to the institution's legal form.

Manufacturer/provider of digital health applications (DiGA):

Manufacturer/provider of digital health applications can order their SMC-B card directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

Private health insurance (PKV):

Private health insurance can order their SMC-B card directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

Pharmacy:

Pharmacies can order their SMC‑B card directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

Nursing, obstetric and physiotherapy facilities:

Applicants from nursing, obstetric and physiotherapy facilities register in the electronic health professional register (eGBR). You can then use your transaction number to order your SMC-B in on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

Aids companies:

Applicants from opticians, hearing aid acoustics, orthopedic technology, shoemakers and dental technology companies register with their responsible chambers of crafts. You can then use your transaction number to order your SMC-B on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

Outpatient facility:

Applicants can order their SMC‑B card for outpatient facilities directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal

The person applying must be the owner or co-owner of the practice.

Applicants in the outpatient sector include:

• Emergency departments
• Other outpatient departments at a hospital with SHI-accredited physician billing
• Authorized doctors
• Affiliated doctors
• Medical care centres (MVZs)

Please select ‘SMC-B card for a medical practice’ when you apply. The application for the outpatient sector is checked and approved by the relevant statutory health insurance association as the card issuer.

Other organizations in the healthcare sector (SMC-B ORG):

Other organizations in the healthcare sector can order their SMC-B ORG card directly on the D‑Trust Application Portal: https://ehealth.d-trust.net/antragsportal.

Optional code:

D-Trust cooperates with CGM to make access to the telematics infrastructure (TI) as easy as possible for customers of CompuGroup Medical (CGM). Only CGM customers receive a ten-digit order code which is entered in D-Trust's online application portal. This ensures that the CGM-certified technician who connects the medical practice to the TI can track the status of the application selectively until delivery and take this into account when scheduling the installation date for the TI components. The order code is optional and only relevant for CGM customers.

Telephone number:

You should use a mobile phone or a landline number with a direct extension. Please ensure the correct international notation: 0049171123456789 or 004930123456789.

E-Mail address:

Please ensure that your e-mail address is current and spelt correctly, as regular status information on your application and the SMC-B card will be sent to this e-mail address.

Billing address:

If you want to claim the invoice for tax purposes, please ensure that you provide the correct billing address. If necessary, clarify this matter with your tax advisor before submitting the application.

As soon as the card is produced, it is sent by registered letter to the known delivery address.

For security reasons, the SMC-B has a maximum term of 5 years. 

The PIN letter is sent by registered letter to the address stored in the application three days after the card was sent.

From 1 April 2023, the card issuer is obliged to check the identity of the applicant. This applies to both the first and all subsequent cards. We can offer you the following options for this purpose:

• Identservice of DPAG, the German Post Office (Deutsche Post AG): You will be directed to the pages of Deutsche Post through a personalised link. There you can choose between two alternative procedures: 1. The classic postal identification procedure which is carried out at a branch of Deutsche Post, or 2) online identification with the eID function of your identity card - conveniently from your home.
• On-site identification by qualified employees of the D-Trust trust service provider, their partners (e.g. CGM Easy Ident) or by in-house, previously trained and authorized employees of your facility: the identification procedure takes place on your premises or at a central event. For this, you only need the complete application documents and your valid identification document as recorded in the application documents. Advantage to you: you are identified directly on site and do not have to go to the post office.

Please note that you must use the same ID document for identification purposes as the one you entered in your application and that you must also enter the required information exactly as they are given in the identification document.