GE TLS (Anonymous)

Use this workflow when your GE system is configured for anonymous TLS client behavior.

Applies to

• Users with Integrations: DICOM permission (typically Administrators)
• Site staff with GE system admin access

Create a DICOM Identity:

1. Navigate to Settings > Devices > DICOM.

2. Click View DICOM Endpoints and note the following under 'DICOM via TLS':

• Server AE title.
• Server IP address.
• TLS port (typically 11112).

3. Download Server CA Certificate in PEM Format.
4. Click Create DICOM Identity.
5. Enter a name, and device AE title. Note: GE machines often have default AE titles found in Config > Connectivity > TCPIP.
6. Click Save.

The server AE title, server IP address and server CA certificate will be used in a later step.

Importing Certificates

1. On GE, navigate to Utilities > Configuration > Admin > LDAP > Certificates.

2. From the dialog, click Trusted Root Certification > Certificates.

3. From the toolbars, select Action > Tools > Import.
4. From the Import Wizard, find and import the Server CA Certificate.
5. Check 'Mark this key as exportable…' and 'Include all exported properties'.
6. Click Finish

Installing Certificates

1. On GE, navigate to Utilities > Config > Connectivity > TCP/IP > Client Certificates > My.

2. Select the imported certificate and click Ok.

Configure GE dataflow

1. On GE, navigate to Utilities > Config > Connectivity > Dataflow.

2. Create a new data flow or edit an existing dataflow.
3. Add 'LocalArchiveService' to both Input and Output.
4. Add 'DicomStorage' to Output.
5. Select 'DicomStorage' and click Properties, and configure the following:
   • IP address: Enter server IP address, as noted in previous steps.
   • Name the location (e.g. 'HeartLab PACS')
   • AE title: Server AE Title, as noted in previous steps.
   • Port: 11112
   • Enable Transport Layer Security, SR, SR Private Data and Multiframe
6. Click Ok to finish set up.

Verify

1. Run connectivity check from the GE dataflow target.
2. Send a test study and confirm it appears in HeartLab.

Notes

• If check fails on newer software versions, disable ICMP echo dependency in advanced DICOM settings.
• Use the authenticated TLS guide if your site requires client certificates.

Related

• GE TLS (Authenticated)
• DICOM Identity