I am a Zivver admin
Configure and manage Zivver
ChipSoft HiX
Introduction
Easily and securely send appointment reminders, referrals, and other types of messages directly from HiX. Secure emailing is available from HiX version 6.1.
There are three different options for securely sending messages from HiX:
- Send all messages securely.
- Use Exchange on-premise to securely send specific types of messages (for example, appointment reminders).
- Use a mail server to securely send specific types of messages (for example, appointment reminders).
This option also applies to Exchange Online (Office 365).
Configure mail submission in Zivver
To configure secure emailing in ChipSoft HiX, you use the Zivver Mail Submission functionality. You must be an administrator to configure this.
- Go to SMTP credentials.
- Click .
- Enter a description.
For example, “HiX”. - Click .
A new screen opens showing a username and password. These credentials are displayed only once. Make sure to store them securely. - Click .
You have now generated an SMTP username and SMTP password. You will use these SMTP credentials later in this guide to authenticate the connection to smtp.zivver.com. Depending on which of the three options you choose, you will use these credentials in HiX, Exchange on-premise, or a mail server.
Send all messages securely
Use this option to securely send all messages from HiX via Zivver. To do this, you set up an SMTP connection with Zivver in HiX. This is available from HiX version 6.1.
Set up an SMTP connection in HiX
Follow the steps below to set up the SMTP connection between HiX and Zivver. To do this, you adjust the global settings in CS-Routeer.
- Open HiX.
- Go to CS-Routeer.
- Go to the global settings.
- Go to Routeertypes > Emailen.
- Verify that the Emailen actief option is enabled.
- Enter smtp.zivver.com in Emailhost.
- Enter the SMTP password from the chapter Mail submission instellen in Zivver in Mailserver password.
Warning
Do not enter the password of a Zivver account here. - Enter the SMTP username from the chapter Mail submission instellen in Zivver in Mailserver user.
Warning
Do not enter the email address of a Zivver account here. - Optional: enter the default email address of the sender in lowercase.
HiX is now configured to securely send messages via Zivver.
smtp.zivver.com only accepts the submitted message if:
- A Zivver account exists for the default sender. Verify this on the account page.
- This Zivver account is a member of the Zivver organization for which the SMTP credentials were generated.
Use Exchange on-premise to securely send specific types of messages
In this chapter, we explain how to set up an SMTP connection with Zivver in Exchange on-premise. We use a Mail Flow Rule to filter messages. This allows you to determine which types of messages are sent securely via Zivver, while regular email traffic is not routed through Zivver.
Create an accepted domain
The first step is to add a new accepted domain in Exchange. This is a fictitious domain that exists only within Exchange.
- Go to the Exchange Admin Center (EAC).
For example, viahttps://<ServerFQDN>/ecp. - Log in to the EAC as an administrator (admin).
- In the menu, go to Mail flow.
- Go to accepted domains.
- Click add to add a new domain.
- Enter a name, for example Zivver HiX.
- Enter
zivver.orgin Accepted domain. - For This accepted domain is, select Authoritative.
- Click .
The fictitious accepted domain has now been created. In the next section, create a mail contact for this domain.
Create a mail contact
The second step is to create a mail contact. This mail contact uses the fictitious domain that was created in the previous section.
- Go to the Exchange Admin Center (EAC).
For example, viahttps://<ServerFQDN>/ecp. - Log in to the EAC as an administrator (admin).
- In the left-hand menu, select recipients.
- Select contacts.
- Click add.
- Select Mail contact.
- Enter
Zivver Relayfor Display name. - Enter
Zivver Relayfor Name. - Enter
relayfor Alias. - Enter
relay@zivver.orgfor External email address (the placeholder domain). - Click .
The mail contact has now been created. Later in this chapter, we will route messages to this contact using a Mail Flow Rule.
Configure an Exchange Send Connector
The third step is to create an SMTP connection with smtp.zivver.com. To do this, you create a Send Connector.
- Go to the Exchange Admin Center (EAC).
For example, viahttps://<ServerFQDN>/ecp. - Log in to the EAC as an administrator (admin).
- In the left-hand menu, select Mail flow.
- Select Send connectors.
- Click add to add a new connector.
- Name the connector
Zivver Send Connector. - For Type, select Internet.
- Click .
- Select Route mail through these smart hosts.
- Click add.
- Enter
smtp.zivver.com. - Click .
The smart host now appears in the list. - Click .
- For Smart host authentication, select Basic authentication.
- Enable Offer basic authentication only after starting TLS.
- Enter the generated SMTP username from the chapter Mail submission instellen in Zivver in User name.
Warning
Do not enter the email address of a Zivver account here. - Enter the generated SMTP password from the chapter Mail submission instellen in Zivver in Password.
Warning
Do not enter the password of a Zivver account here. - Click .
- Click add.
- Enter
SMTPfor Type. - Enter the placeholder domain
zivver.orgfor FQDN. - Enter
1for Cost. - Click .
- Click .
- Click add.
- Select a server and click .
- Click .
- Click .
The Send Connector is now configured to intercept all messages addressed to this fictitious domain. To actually submit the messages to smtp.zivver.com, one additional change is required. This cannot be done via EAC/ECP and must be performed using PowerShell. See Connect to Exchange servers using remote PowerShell for background information on the PowerShell cmdlets below.
- Start Windows PowerShell with administrator privileges.
- Run the following cmdlet to ensure that all loaded scripts use a valid certificate:
Set-ExecutionPolicy RemoteSigned - Run the following cmdlet to prompt for credentials:
$UserCredential = Get-Credential - Connect to Exchange on-premise and replace
ServerFQDNwith the correct server name:$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://"ServerFQDN"/PowerShell/ -Authentication Kerberos -Credential $UserCredential - Import the Exchange cmdlets:
Import-PSSession $Session -DisableNameChecking - Retrieve an overview of the Send Connectors:
Get-SendConnector - Check the current port number of the Zivver Send Connector:
Get-SendConnector "<Naam-Zivver-SendConnector>" | Select-Object port - Change the port number of the Zivver Send Connector to 587:
Set-SendConnector "<Naam-Zivver-SendConnector>" -port 587 - Verify that the port number has been updated:
Get-SendConnector "<Naam-Zivver-SendConnector>" | Select-Object port - Close the PowerShell session:
Remove-PSSession $Session
Set-ExecutionPolicy RemoteSigned
$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://"ServerFQDN"/PowerShell/ -Authentication Kerberos -Credential $UserCredential
Import-PSSession $Session -DisableNameChecking
Get-SendConnector
Get-SendConnector "<naam>" | Select-Object port
Set-SendConnector "<naam>" -port 587
Get-SendConnector "<naam>" | Select-Object port
Remove-PSSession $Session
The Send Connector is now ready. In the next section, create a Mail Flow Rule to route specific types of messages to the contact with this fictitious domain.
Configure a Mail Flow Rule
The fourth step is to create a rule that filters messages. The filtered messages are then routed to the mail contact with the fictitious domain.
Filter messages by subject
In the steps below, we use an example filter that checks the subject. If the subject of the message contains Afspraakbevestiging, the message will be sent securely.
- Go to the Exchange Admin Center (EAC).
For example, viahttps://<ServerFQDN>/ecp. - Log in to the EAC as an administrator (admin).
- In the left-hand menu, go to Mail flow.
- Go to Rules.
- Click the add button.
- Select Create a new rule....
- Name the rule
Stuur HiX-afspraakbevestiging via Zivver. - At the bottom, click More options....
- Under *Apply this rule if..., select The subject or body... and then subject matches these text patterns.
- Enter
Afspraakbevestiging. - Click add to add the value.
- Click .
- Click .
- Under And, select The recipient... and then is external/internal.
- Select the option Outside the organization.
- Click .
- Under *Do the following..., select Redirect the message to... and then these recipients.
- Select the mail contact with the fictitious domain created in Contactpersoon aanmaken.
- Click .
- Click .
- For Choose a mode for this rule, select Enforce.
- Enable the option Defer the message if rule processing doesn’t complete.
Warning
When this option is enabled, a message (regardless of whether it comes from HiX or Outlook) will only be sent after it has been checked against this rule. If Exchange temporarily fails to check messages, sending will be paused. - Click .
- Check that the priority of the newly created rule is correct. Adjust if necessary to ensure that the different rules have the intended effect.
- Activate the rule.
The rule is now configured and active. All sent messages are checked and, depending on the subject, routed to the mail contact with the fictitious domain. The Send Connector intercepts all messages to this fictitious domain and then sends them via the SMTP connection to the Zivver SMTP server.
Use a mail server to securely send certain types of messages
This chapter explains how to set up an SMTP connection with Zivver on a mail server.
Deploying an additional mail server alongside Exchange Online
With Exchange Online, you need an additional mail server to authenticate the SMTP connection to smtp.zivver.com using a username and password. This additional mail server filters messages from HiX, allowing you to determine which types of messages (e.g., appointment confirmations) are sent securely via Zivver, while regular message traffic is not sent through Zivver.
Messages from HiX then follow one of the routes below:
- HiX > Additional mail server > smtp.zivver.com > Recipient (secure message)
- HiX > Additional mail server > Exchange Online > Recipient (regular message)
To enable these routes, set up the following two SMTP connections on the additional mail server:
- An SMTP connection that sends certain types of messages (e.g., appointment confirmations) securely via smtp.zivver.com.
- An SMTP connection that sends all other messages via Exchange Online (Office 365).
In the following sections, we will show how to configure an additional mail server.
Setting up the SMTP connection
Use the following information to set up the SMTP connection with Zivver on your mail server:
- SMTP server: smtp.zivver.com
- SMTP port: 587
- TLS: Yes, v1.2 with STARTTLS
- SMTP authentication: Yes, using a username and password.
- For username, enter the SMTP username from the chapter Mail submission instellen in Zivver.
Warning
Do not enter a Zivver account email address here. - For password, enter the SMTP password from the chapter Mail submission instellen in Zivver.
Warning
Do not enter a Zivver account password here.
Setting up the SMTP connection in hMailServer
In this chapter, we use hMailServer as the mail server. This is a free, open-source mail server for Microsoft Windows, which allows you to set up multiple SMTP connections and filters.
Follow the steps below to set up an SMTP connection with Zivver in hMailServer:
- Open hMailServer Administrator.
- Select the mail server.
- Click Connect.
- Enter the password.
- Click Settings.
- Click Protocols.
- Click SMTP.
- Click Routes.
- Click Add.
- Enter Zivver in Domain.
- Enter smtp.zivver.com in Target SMTP host.
- Enter 587 in TCP/IP port.
- For Connection security, select STARTTLS (Required).
- For When sender matches route, treat sender as, select A local email address.
- For When recipient matches route, treat recipient as, select A local email address.
- Go to the Delivery tab.
- Enable Server requires authentication.
- Enter the SMTP username from the chapter Mail submission instellen in Zivver under User name.
Warning
Do not enter a Zivver account email address here. - Enter the SMTP password from the chapter Mail submission instellen in Zivver under Password.
Warning
Do not enter a Zivver account password here. - Click Save.
The SMTP connection with Zivver is now set up. Repeat these steps to set up a second SMTP connection with your own mail server (e.g., Office 365).
Setting up a filter
In this section, we use hMailServer as the mail server. This is a free, open-source mail server for Microsoft Windows that allows you to set up multiple SMTP connections and filters.
The steps below use an example filter that checks the subject. If the subject of the message contains Afspraakbevestiging, the message will be sent securely.
- Open hMailServer Administrator.
- Select the mail server.
- Click Connect.
- Enter the password.
- Go to Rules.
- Click Add.
- Enter a name.
For example: Send HiX appointment confirmation via Zivver. - Enable Enabled.
- Under Criteria, click Add.
- Select the option Predefined field.
- Select Subject.
- For Search type, select Equals.
- Enter Afspraakbevestiging under Value.
- Click OK.
- Under Actions, click Add.
- Select the option Send using route.
- Select the option Zivver.
- Click OK.
- Click OK.
The filter is now set up and activated. All outgoing messages will now be checked and, depending on the subject, sent securely via Zivver.
Modifying an email report definition
Follow the steps below to make a HiX email report definition suitable for secure emailing:
smtp.zivver.com will only accept the message if:
- A Zivver account exists for the default sender.
Check this on the account page. - This Zivver account is a member of the Zivver organization for which the SMTP credentials were generated.
- Open HiX.
- Go to CS-Overzichtsgenerator.
- Open an existing email report definition.
- Ensure that Rapportage type has the option Emailen enabled.
- Enter the sender’s email address in lowercase.
- Enter a recipient. For example, the patient’s email address using the following expression: =[Context]Patient(Emailadres).
- Optional: see Bericht extra beveiligen met 2FA to secure the message further with an SMS code or access code.
- Optional: see Bericht automatisch intrekken na de vervaldatum to automatically retract the message after the expiration date for the recipient or both sender and recipient.
- Click OK.
Repeat the steps above for each email report definition you want to use for secure emailing.
Securing a message with 2FA
This functionality is optional. Secure the message with an SMS code or access code. The recipient can only read the message after entering the SMS code or access code. This ensures that only the intended recipient can access the message.
This can be done by providing the recipient’s mobile number, by setting the patient number as an access code, or by using a combination of SMS codes and patient numbers. Zivver uses this information to secure the message further. The mobile number and access code are not visible to the recipient, as these details are included as comments in the email report definition.
Securing with an SMS code
Include the patient’s mobile number in the message. Add the following code to the email report definition. The location of this code in the message does not matter.
Download expression to secure Zivver messages with SMS code
Securing with an access code
Include the patient number in the message as an access code. Add the following code to the email report definition. The location of this code in the message does not matter.
Download expression to secure Zivver messages with access code
Securing with an SMS code or access code
Include the patient’s mobile number in the message, or use the patient number as an access code if the mobile number is not available. Add the following code to the email report definition. The location of this code in the message does not matter.
Download expression to secure Zivver messages with SMS code or access code
Automatically retract message after expiration date
This functionality is optional. Set an expiration date after which the message can no longer be read by the recipient or by sender and recipient. This setting is not visible to the recipient, as these details are included as comments in the email report definition. See below how to configure this in an email report definition.
Message no longer readable by recipient after expiration date
In this example, the message is set to expire 30 days after sending and can no longer be read by the recipient. Add the following code to the email report definition. The location of this code in the message does not matter.
Download expression to make Zivver messages expire after 30 days for the recipient
Message no longer readable by sender and recipient after expiration date
In this example, the message is set to expire six months (178 days) after sending and can no longer be read by the sender and recipient. Add the following code to the email report definition. The location of this code in the message does not matter.
Download expression to make Zivver messages expire after 178 days for the sender and recipient