Enabling home working without compromising clinical access
Faced with the sudden shift to remote working, a GP network required a reliable way to provide access to smart card-secured clinical systems without replacing existing infrastructure.
RealVNC® Connect enabled healthcare professionals to securely access their workplace PCs from home, helping the organisation maintain uninterrupted patient services and support staff throughout a period of rapid change.
The situation
A security control tied to a physical device.
Primary care runs on smart card authentication. Clinicians and staff use a physical smart card to reach national clinical systems. The card is a hardware token. It only works when it is physically present in a reader.
So staff could not simply work from a home laptop. The card requirement is not a local policy that can be relaxed. It is a national control. The card, the reader and the practice PC form a single chain, and the authentication depends on all three being in the same place.
Before RealVNC, that meant being on site. If you needed the card, you needed to be at the machine the card lived in.
The complication
Lockdown removed the on-site assumption overnight.
The trigger was the COVID pandemic. Practices had to keep running while staff worked away from the building. The on-site assumption that the whole model rested on disappeared in days.
The organisation still needed card-authenticated clinical work to happen from home. It could not move the card. It could not move the reader. Bypassing the smart card was not an option, because the control is mandated, not chosen.
So the requirement was narrow and unusual. Let a person at home drive a specific practice PC that has their smart card locked into it, securely enough to satisfy primary care information governance.
What mattered. The shortlist they drew up.
- Preserve the smart card control exactly.
- Keep the card in the reader at the practice, rather than work around it.
- Security fit for regulated primary care, aligned with DSPT expectations and safe for clinical data.
- Simplicity for non-technical clinical users.
- Connect and work, not administer software.
Deployable and manageable by a small internal IT team. - Clear licence counts and pricing, with no paying for capacity they did not use.
The Solution
Remote access to the card-bound PC, not around it.
The organisation deployed RealVNC Connect to give staff secure remote access to their own practice PCs. The physical smart card stays inserted and locked in the reader at the practice. The person at home connects to that machine and works as if sitting in front of it.
The control is preserved, because the card never leaves the building and the authentication chain stays intact. Remote access to the physical machine became the durable model rather than a stopgap, where a virtual desktop or a VPN-issued laptop did not fit the card-bound requirement.
The environment is regulated primary care across multiple practice sites, serving GPs and support staff for daily clinical work, remote consultations and IT support. The compliance driver throughout was primary care information governance and the non-negotiable smart card control.
The results
Continuity first, efficiency second.
- Clinical and administrative work continued through lockdown, with the smart card control intact.
- Remote card-authenticated access became a permanent capability, not a temporary measure.
- The organisation later reviewed an over-provisioned licence estate and trimmed it to real usage, taking out cost.
The Future
If this looks like your estate.
Large acute trusts are being pushed into the same decision. A tool they relied on is deprecated, an incumbent is due for review, and the replacement has to prove itself across tens of thousands of devices without unsettling a live service desk. This trust met that moment with one secure tool, deployed through the management stack it already ran.
