Configuring General Settings
Imprivata PatientSecure is highly customizable. You can configure general settings that affect your entire installation. While Imprivata recommends that you keep the default settings where possible, your installation may require that you refine them.
To configure general system settings:
-
In the Admin Console, go to Settings > General.
The General settings are expanded by default.
-
Expand the sections to review the system settings and make changes as needed.
-
To clear all the changes and start over with the latest saved settings, click Reset.
-
To change an individual setting to its default, click Reset to default next to the setting name. The setting will be reset and saved.
-
-
Click Save.

Item | Description |
---|---|
Database Maintenance Enabled |
Enable database maintenance for your installation. The default setting is ON. BEST PRACTICE:
Running database maintenance daily is highly recommended to improve performance for large organizations with high levels of database usage. |
Database Maintenance Time |
Set the time of day when database maintenance will run. The Time Zone is based on the time zone setting of the PatientSecure Admin Console. Click the field and enter a time in the format provided, or click The default setting is 2:00 AM. |
Registrar script |
Display a customized script in the PatientSecure window for registrars to read to new patients about the benefits of enrolling in PatientSecure. The default setting is OFF. |
Customize registrar script |
Specify the body of the registrar script.
|
HL7 Outbound Pause |
Pause the sending of HL7 outbound events. The default setting is ON. IMPORTANT:
Pausing the sending of outbound events causes the events to build up in the database. |
Select the depth of information to capture in logs:
You can also set log levels for client machines. |
|
Log Level Reset Interval |
The number of days before Server log level and Client log level reverts to Error level. When you change the server log level, this setting specifies the number of days before the logs revert the to the default Error level. The default setting is seven (7) days. |
Site Monitoring Data Collection Time |
Set the time of day, according to the Time Zone setting, when your data collection service will post data. Click the field and enter a time in the format provided, or click The default setting is 1:00 AM. |
Site Monitoring URL |
The base URL address where your data collection service will post data. Depends on whether you configured the PatientSecure environment as a production or test environment.
|
Exclude Today's Data from Dashboard |
Excludes data from the current day (from 12:00 AM to 11:59 PM) from the PatientSecure dashboard. Utilization data will be displayed the following day. This setting affects reports run directly from the dashboard. This setting does not affect duplicate detection. The default setting is OFF. |
Static Machine IP Addresses |
For Epic integrations and Toolbar only. NOTE:
To use this feature, contact the PatientSecure Engineering team. Download or upload a .CSV file containing the machine name and IP address mapping.
The file must contain the following columns:
|
Time Zone |
Set the time zone displayed for dates and times in the Admin Console, including dashboards and reports. Select a time zone that most closely matches your server’s local time from the drop-down list. In Imprivata PatientSecure, time is stored in Coordinated Universal Time (UTC) but displayed according to the time zone you select. The default setting is (UTC-05:00) Eastern Time (US & Canada). |
Bulk Delete Patients |
Enable the ability to bulk delete patient enrollments and biometrics from your PatientSecure environment. The default setting is OFF. The reason and the identity of the person who is performing the deletion is audited. CAUTION:
This feature permanently deletes patient enrollments from your environment. Contact Imprivata Support for guidance. |

Item | Description |
---|---|
Admin Console Announcement |
Enable the Admin Console announcement feature.
The default setting is OFF. |
Display to |
Display the announcement message to the selected groups of users. Select a group from the list. |
Subject |
Specify the subject line of the announcement message.
|
Message |
Specify the body of the message.
|

Changing the settings for Emergency Search may impact the performance of your environment. Contact Imprivata Support for guidance.
If you change any of the settings in the Emergency Search section, you must stop and start the PatientSecure Emergency Search site in Microsoft IIS for the settings to take effect.
Item | Description |
---|---|
Age range |
The number of years Emergency Search will scan looking for potential matches. The age range is divided in half. The default setting is 20. For example, if this setting is 20, Emergency Search scans patients whose date of birth is between 10 years below and 10 years above the patient date of birth patient's estimated age supplied by the registrar. |
Candidate Pool Size |
The number of potential match candidates analyzed per server request. The default setting is 10,000. |

For integration with the Cerner Photo Web Service.
Item | Description |
---|---|
Photo Web Service |
Whenever a photo is created, updated or when a patient's identifier is changed, a photo upload event is scheduled and sent to the Cerner Photo Web Service. The following parameters construct the URL and authorization request used for posting a photo to the Cerner Photo Web Service endpoint. <protocol>://<Server>/<resourcePath>?<PatientIdentifierTag>&<AdditionalParameters> Example: http://192.0.2.0/camm/c197.dr.char_nc.cernerasp.com/service/PERSON_PHOTO/store?cmrn=1111&mimeType=image%2fjpeg |
Enable Photo Upload |
Enable photo upload for the configured web service. The default setting is OFF. |
Run Interval | Specify the number of minutes to wait between processing photo uploads. |
Patient identifier tag for PatientSecure |
Specify the patient identifier to use for PatientSecure to look up patient details when uploading a photo. This patient identifier is the value used in the API Tag box in the Patient Identifiers page. |
Protocol |
Required. Specify the protocol to use in the designated URL when posting the photo event to the endpoint. Valid values: http and https. |
Server | Required. Specify the server name to use in the designated URL when posting the photo event to the endpoint. |
Resource path |
Required. Specify the resource path to use in the designated URL when posting the photo event to the endpoint. Example: camm/c197.dr.char_nc.cernerasp.com/service/PERSON_PHOTO/store |
Patient identifier tag for EMR |
Required. Specify the patient identifier tag to use in the designated URL when posting the photo event to the endpoint. |
Additional parameters |
Optional. Specify additional query strings to use in the designated URL when posting the photo event to the endpoint. Format: name=value, where each parameter is separated by an ampersand. n1=v1&n2=v2&n3=v3 Example: mimeType=image%2fjpeg |
Username | Specify the username to authorize the request to the endpoint. |
Password | Specify the password to authorize the request to the endpoint. |

Item | Description |
---|---|
Patient biometric auto-delete |
Enable the ability to automatically delete patients and remove their biometric data based upon a defined period of inactivity. Inactivity is defined as no PatientSecure enrollments, authentications, or opt-outs for a patient during the specified time period. HL7 updates are not included when determining activity. When a patient and their biometric data are deleted due to this setting, the patient record is updated to indicate that the biometric data has been removed for compliance reasons. The default setting is OFF. CAUTION:
Existing customers should reach out to Imprivata before enabling this feature. |
Records age threshold |
Select the threshold (in months) after which inactive patient records and biometric data will be automatically deleted. The default setting is 120 months (10 years). |
Scheduled time |
Set the time of day, according to the Time Zone setting, when the daily scheduled task for the automatic deletion of inactive patient biometric data will run. Click the field and enter a time in the format provided, or click The default setting is 9:00 PM. |
Test settings |
Click Test settings to test the Patient biometic auto-delete settings and receive a preview of how many inactive patient records will be deleted during the next scheduled run. |