Germany’s Digital State Test: Health IT Encryption and Online Certificates Hit Real-World Bottlenecks

The healthcare transition is the more immediate test. Germany is replacing legacy RSA-2048 encryption with Elliptic Curve Cryptography (ECC-256) across the telematics infrastructure that connects medical practices, hospitals, pharmacies and health insurers. The change is being managed by gematik, the agency responsible for the network. From 1 October, public health insurers began issuing electronic health cards backed exclusively by the new standard, while the final stages of the withdrawal of legacy RSA certificates are scheduled for 14 and 19 October.

On the administrative side, the Federal Office of Justice has introduced a digital certificate of conduct, known in Germany as the Digitales Führungszeugnis. Citizens can receive the document through their BundID account without visiting a local authority or waiting for postal delivery.

Neither measure amounts to a digital revolution on its own. Their significance lies in what they require from the systems around them. Germany is moving beyond putting individual services online towards establishing common rules for identity, authentication and secure communication. That shift is necessary if digital government is to work at national scale. It is also where the practical difficulties begin.

Security standards meet the realities of healthcare

The move to ECC is a technical upgrade with direct consequences for everyday medical services. Elliptic Curve Cryptography can provide strong cryptographic security with substantially smaller keys than RSA, reducing computational demands and making it more efficient for connected systems.

That advantage matters in a network on which electronic prescriptions, certificates of incapacity for work and electronic patient records depend. Security cannot be treated as an optional layer added after these services have been built. The network must remain protected as cryptographic standards evolve, and the infrastructure supporting it must be capable of meeting the new requirements.

But a stronger standard does not automatically produce a more reliable service.

Medical practices and hospitals need compatible hardware, including specialised connectors and professional identity cards. Some providers may have to replace equipment or obtain new cards before their existing certificates are withdrawn. Card manufacturers have acknowledged delivery delays of up to four weeks, raising concerns about whether every part of the network can complete the transition on time.

Gematik has reported no systemic outages. That is reassuring, but it does not eliminate the risk facing individual providers whose equipment is not ready. A network can remain operational overall while a practice encounters problems with electronic prescriptions or access to digital records.

The consequences are not evenly distributed. Large organisations may have more capacity to coordinate technical upgrades, whereas smaller practices face the same requirements with fewer resources to absorb additional costs and administrative work. The available information does not establish the total financial burden of the transition or how those costs are distributed across the healthcare system. It does, however, make clear that providers must deal with the practical requirements of compliance.

The approaching certificate deadlines leave limited room for complacency. If incompatible systems lose connectivity, the immediate problem will not be the abstract failure of a cryptographic policy. It will be the interruption of routine clinical administration.

This is the central tension in Germany's approach: the state is raising its security requirements across a critical network whose operation depends on thousands of separate organisations and their equipment. The standard can be uniform. Readiness cannot be assumed.

A certificate without a trip to the town hall

The new digital certificate of conduct offers a more visible benefit to citizens. Traditionally issued on green security paper, the document is used to demonstrate criminal-record status in circumstances such as employment applications. The digital version is delivered as a PDF to the applicant's Central Citizen Mailbox, accessed through BundID.

The fee remains €13, the same as for the paper certificate. The difference is the process. Applicants who meet the technical requirements and do not need additional background checks or a review of European criminal records can receive a standard digital certificate within hours.

Applying requires an identity document with an activated electronic identification function and PIN, a compatible NFC-enabled smartphone, a BundID account, and a credit card for payment. An electronic residence permit or an eligible EU eID card can also be used. Applications are handled through the Federal Office of Justice's online portal.

The change makes a case for digital government that is easier to measure than many promises of administrative modernisation: a process that could involve physical attendance and postal delays can instead be completed remotely.

Yet the document's security depends on more than placing a PDF behind a login.

Its authentication combines a Qualified Electronic Seal with a Visual Digital Seal. The former can be validated digitally using standard PDF viewers. The latter is represented by a QR code in the document's upper-left corner, allowing authenticity to be checked both on screen and on a printed copy.

That second layer addresses a problem that will remain relevant as public administration moves away from paper: documents still need to be trusted when they leave the digital environment in which they were issued.

There is a catch. The QR code must be checked using ZeSI mobile, a dedicated free application developed by Bundesdruckerei. A standard smartphone camera or generic QR reader cannot validate the seal. Each page of a multi-page document must be scanned separately.

The application also has known functional limitations on certain smartphones, including the Samsung Galaxy A36 5G and Galaxy A13 5G. Support is handled by Bundesdruckerei.

For a service designed to remove administrative friction, such limitations matter. A document can be cryptographically secure yet difficult to verify for someone whose phone is not fully supported. The security architecture may be sophisticated, but its usefulness still depends on the compatibility of ordinary consumer devices.

One digital identity, many points of failure

BundID sits at the centre of the new certificate service. Established under Germany's Online Access Act, it is intended to provide a common digital identity for interactions with federal, state and local authorities.

A shared identity framework can reduce the need for citizens to navigate separate authentication processes for every administrative service. It also gives government a foundation on which additional paperless services can be built.

The certificate of conduct demonstrates both the promise and the limits of that approach. Its delivery is centralised through BundID, but the applicant still needs compatible identification, a working smartphone, a payment method and access to a separate verification application if the seal must be checked.

The system therefore depends on several components working together. A weakness in any one of them can undermine the convenience promised by the whole.

Germany's healthcare infrastructure faces a comparable problem on a larger operational scale. Its transition requires compatibility between professional identity cards, connectors, certificates and the systems used by healthcare organisations. In both cases, national standards must operate across a fragmented technological environment.

The simultaneous launches on 1 October do not, by themselves, establish that the government deliberately coordinated the two measures as a single programme. They do reveal a common direction in administrative policy: secure digital identity and modern cryptography are becoming essential infrastructure rather than isolated technical projects.

That creates a governance challenge. Central authorities can define requirements and manage the systems they control, but successful implementation also depends on manufacturers, service providers and users. Delivery delays and unsupported devices are not necessarily failures of cryptography or identity policy. They are failures of readiness at the points where those policies meet the real world.

The limits of going paperless

The digital certificate also shows why replacing paper does not mean eliminating every need for it.

The electronic version cannot receive an apostille, legalisation or the relevant forms of additional authentication required for certain foreign legal procedures. Applicants who need a certificate for such purposes must continue to request the paper version.

For someone applying for a job abroad, the new service may therefore offer little practical advantage if the receiving authority requires a document that can undergo international legalisation. Germany has digitised issuance without making the resulting document suitable for every jurisdiction.

That limitation is important because the value of an administrative document depends not only on how quickly it can be obtained, but also on where it will be accepted. A PDF that is valid and verifiable within one system does not automatically satisfy the requirements of another.

A related question concerns the expansion of digital records within healthcare. Germany's electronic patient record operates under an opt-out model, meaning that records are created for statutory health insurance policyholders unless they explicitly reject participation. Patients can hide documents, restrict access, or request deletion through their insurer's digital services or an ombudsman.

Those rights provide mechanisms for individual control, but deletion from the electronic patient record does not erase the underlying medical documentation held independently by a doctor or hospital. The distinction matters: removing information from one digital system is not the same as removing every official copy of it.

As more services become digital by default, trust will depend on citizens understanding not only what a system makes possible, but also what it does not do. The same principle applies to authentication. A digital seal can establish a document's authenticity without guaranteeing its acceptance abroad; an electronic record can give patients greater control over access without replacing every other record of their treatment.

Germany's immediate challenge is operational. Healthcare providers must meet the encryption deadlines, while citizens using the new certificate service must navigate a chain of identity and verification tools that is not yet compatible with every device. The longer-term challenge is institutional: ensuring that stronger security and common digital standards do not create new barriers for the people and organisations expected to use them.