Following the system flaw that was identified with Jersey’s Digital COVID Status Certification (CSC) platform on Wednesday, 20 October, the Government would like to provide the below update.
Officers are working at pace to fix the security issue and will be reinstating the service as soon as possible. The ambition is for the service to be available at the end of next week.
In the meantime, Islanders who are travelling to those countries that require CSC over half term can:
- call the Coronavirus helpline on 0800 735 5566 to get a PDF version of their CSC, including QR codes, emailed to them
- use the secure paper CSC document that was sent to Islanders in the post and which many countries are still accepting as evidence of vaccination status
Islanders who successfully downloaded their CSC before the service was removed on Wednesday 20 October, will be able to use them for 30 days from that date. Because the QR codes expire after 30 days from the point of generation, Islanders are reminded to only request their PDF version of their CSC from the Coronavirus helpline a couple of days before they plan on travelling to maximise their use.
Islanders are reminded to check the COVID status entry requirements of the country they are travelling to. These are changing frequently, and the Government of Jersey is not responsible for these requirements.
Islanders who have been vaccinated in Jersey do not need to present any form of CSC upon arrival back through Jersey’s borders. However, Islanders must complete a pre-departure travel form when returning to Jersey, which will mean their vaccination status is automatically generated when they submit their social security number on the form.
Chief Minister, Senator John le Fondré, said: “Officials have been working hard with Microsoft to investigate the security issue and I would like to thank all the officers who are involved in finding a solution.
“I would like to remind Islanders that the COVID Status Certification is a service for Islanders travelling off-Island to countries that use vaccine certificates for domestic use or entry to their borders. It is not used internally in Jersey, or for Islanders returning through our own borders.
“If Islanders are travelling over half term and plan on calling the Coronavirus helpline to request their QR codes, please remember to only call up a couple of days prior to travel to ensure the codes last for as long as possible.
“Officers will provide further updates as they progress in reinstating the service.”
Timeline of events so far:
On Wednesday 20th October, Government officers were made aware of an exploit with the privacy controls of the Digital CCS platform. This was deemed a security flaw and so the platform was closed, and the service removed.
Officers and Microsoft began looking into the issue overnight and updated Islanders the following day that the flaw did not lie with the Digital ID app YOTI and was not a hack on the system.
Full escalation procedures have been followed, including informing and working with the Jersey Office of the Information Commissioner, who is content that all processes have been correctly followed.
Government of Jersey News Release.