Rabo CORPORATE CONNECT. Certificate renewal

Transcription

1 Rabo CORPORATE CONNECT Certificate renewal

2 Content

3 1 Preface Your smart card, which provides access to the Rabo Corporate Connect portal and its underlying applications, is provided with a certificate. For security reasons this certificate is valid for three years. Before the certificate expires, you will be notified on the screen at login. This notification includes a link that allows you to renew the certificate yourself. You will get this notification after you successfully log in on Rabo Corporate Connect. The first notification appears 62 days before the certificate expires. From 30 days before expiration of the certificate you will be forced to renew your certificate. If you do not renew the certificate of your smart card it will be unusable once the certificate expires. Follow all instructions in this document to prevent your smart card becomes unusable. To renew your certificate, specific software must be installed on your computer. For each application or driver the correct version must be installed. It is not possible to renew the certificate of your smart card within a Citrix-environment. If you are using Citrix or any other virtual environment we recommend that you install the card reader and right software on a standalone computer. The renewal of the certificate of your smart card is only necessary and possible when you use the USB card reader. If you are using the blue random reader, renewal of the certificate is not needed. This document is not applicable for you. 3

4 2 System requirements To renew the certificate of your smart card your computer must meet several requirements. These are listed below: One of the following operating systems - Windows Vista - Windows 7 (32-bit / 64-bit) - Windows 8 (32-bit / 64-bit) Internet browser - Internet Explorer version 8 or higher Certificate software - SafeNet version Renroll.dll version If you are using Windows Vista - Renroll3.dll version Renroll4.dll version If you are using Windows 7 (32-bit / 64-bit) of Windows 8 (32-bit / 64-bit) - Renroll3.dll version Renroll4.dll version The following sections describe how to verify if you have the right software versions installed. For a successful certificate renewal it is necessary to perform this check before you renew the certificate. 2.1 Verify SafeNet version SafeNet drivers are installed on your computer in order to use your USB card reader. It is only possible to renew the certificate on your smart card when you are using SafeNet version 8.2. By following the steps below you can check what version of SafeNet you have installed on your computer: 1. Click on Start and go to All Programs. 2. Select SafeNet in the list with installed software. 3. You will get the option to select the folder Borderless Security PK or SafeNet Authentication Client. a. If the folder SafeNet Authentication Client is displayed in the list you must open SafeNet Authentication Client tools. There will open a new window. Click on the -symbol to see what version of SafeNet is installed on your computer. When version 8.2 is installed, you are in possession of the appropriate version. The following steps are not applicable for you. Continue with chapter 2.2. b. If you can choose Borderless Security PK you have not installed the latest version of SafeNet. Please continue with the following steps. 4

5 Please note: the steps below are only applicable when you are using an outdated version of SafeNet. 4. Click on Start en go to the Windows Control Panel. Now you must select Programs followed by Programs and Features. 5. Now select the SafeNet software in the list with the installed software. After selecting the SafeNet software an uninstall button appears. Please click this button. 6. After this process is completed you can close all open windows. Follow the steps as described in annex 1 to install the latest version of SafeNet. 2.2 Verify Certificate Renewal drivers To renew the certificate of your smart card the certificate renewal software is mandatory. By following the steps below you can verify if you have the right version installed. If you have not installed the proper version you can damage the certificate of your smart card. 1. Click the Start ( ) button and click on Computer. 2. Double click the hard disk where Windows is installed and navigate to the folder Windows. 3. If you are using Windows 7 64-bit or Windows 8 64-bit than you must open the folder SysWOW64. For other operating system you must open the folder System Search for the file Renroll3.dll. Click the file with the right mouse button and press the button Properties. 5. In the new window that appears select the tab Details. 6. Verify if the installed version compares with the version number as described in the chapter System requirements. 7. Repeat step 4 till 6, but now search for the file Renroll4.dll. Please note: Is the right version not installed or are the files missing on your computer? Follow the steps in annex 2. With these steps the mandatory software will be installed on your computer. 5

6 3 Certificate renewal Two months before the certificate of your smart card expires you will receive a notification when you log in to Rabo Corporate Connect. This message indicates that the certificate will expire soon and includes a link to renew the certificate. It is necessary that you have the right software installed on your computer. If you try to renew your certificate without the right software installed your smart card can become unusable. It is not possible to renew the certificate of your smart card within a Citrix-environment. If you are using Citrix or any other virtual environment we recommend you install the card reader and right software on a standalone computer. Once you have clicked the link to renew the certificate the link takes you to a new web page. Depending on your browser setting the text is displayed in Dutch or English. Go through all the steps that are shown on your screen. Wait until the page is fully loaded before you click the Next-button. The entire process time of renewing the certificate is circa 10 minutes. Do not interrupt any step during this process or refresh the page until a step is completed and the entire page is fully loaded. Only when the step is completed click Next to continue. At the end you will get a message saying you must copy the certificate to the system. This message is not applicable. Close your browser after finishing the renewal of your certificate. Now re-insert your smart card in the card reader. 6

7 4 Troubleshooting This chapter describes the troubleshooting you can do if problems occurs during the renewal of the certificate of your smart card. It is important that all instructions are followed. 4.1 Log in: Offline Authentication Normally certificates are automatically read by your browser (Internet Explorer). It is possible for a certificate to be read by the USB card reader but not by the browser. If this happens, instead of the PIN code screen appearing when logging in, a blue screen with the heading Offline authentication appears. If this happens you should follow the (manual) procedure below: Start the program SafeNet Authentication Client Tool via Start -> All Programs -> SafeNet -> SafeNet Authentication Client. 1. Choose for Advanced View. 2. Followed by Client Settings. 3. Verify or the checkboxes are ticked as shown in the screenshot at the right. 4.2 Problems during certificate renewal Problems that occur during the renewal of the certificate can have different causes. Below the most common causes are mentioned. 1. Incorrect version of SafeNet and/or Certificate renewal drivers. You should use the most recent software offered through See chapter 9 of the Installation Guide to make sure you have the appropriate software installed. 2. You are using Citrix or any other virtual environment. Rabobank does not provide support on these environments. We recommend you to install the right software and card reader on a standalone computer. This way you can renew the certificate of your smartcard. 3. The page is not fully loaded. It may take some time before a step is completed. Your web browser indicates whether the page is loaded. Only when the page is fully loaded proceed to the next step. 7

8 5 Support and service If you have further questions about the content of this installation guide or the installation of the software you can contact Rabo Corporate Support. Contact information Rabo Corporate Desk Service hours: working days from 8.00 a.m. to 5.30 p.m. Phone: +31 (0)

9 Annex 1 Installation SafeNet and Certificate drivers To use your smart card in combination with the OmniKey USB card reader you must install the SafeNet software. For the installation of this software you must have administrator rights. If you are not sure having these permissions please contact the IT-department within your organization. The following must be taken for a successful installation: 1. Go to 2. Under Installation guide and software you can download the SafeNet and Certificate renewal drivers. 3. Depending on the internet browser you are using you will get the option to run or save the installation software. We recommend you to Save the installation software on your computer before installing it. 4. The installation file is compressed with WinZip. You can download and install WinZip form if you do not have this software installed on your computer. In the WinZip Window the installation file is shown. Double click this file to install the SafeNet drivers. 5. If WinZip shows a warning regarding to the file type please choose Yes to continue the installation of the SafeNet software. 6. When starting the software installation a security notification from Windows might appear. Please click Yes to continue the installation of the SafeNet drivers. 7. Click the Next-button in the SafeNet screen that appear. Then select the desired language and click Next. You will be asked to accept the conditions. To proceed with the installation you have to agree and click Next. 8. If you have version 7 of SafeNet installed on your computer this version must be uninstalled manually. If this is the case you will get a notification and the installation will abort. To uninstall SafeNet version 7 please follow the next steps: a. Click on Start en go to the Windows Control Panel. Now you must select Programs followed by Programs and Features. b. Now select the SafeNet software in the list with the installed software. After selecting the SafeNet software an uninstall button appears. Please click this button. c. After this process is completed you can close all open windows. d. We recommend to restart your computer and start again with step 1 of this chapter. 9. The welcome screen of the SafeNet installer appears. Click Next to continue the installation. 10. In the new screen the two components are selected. Because both components are mandatory it is not possible to deselect one of them. Click the Install button to install the required software and drivers on your computer. 11. The installation of the software and drivers will start now. When all components are installed your will get a notification. Please note: You have to restart your computer. After the restart you can connect your USB card reader to the USB-port of your computer. 9

10 Annex 2 Installation Certificate Renewal drivers Please note: Follow the instructions in this annex only if you are sure that the right version of SafeNet is installed on your computer. We strongly recommend you to follow the instructions in annex 1. With the installation of SafeNet the proper version of the certificate renewal drivers will be installed as well. To renew the certificate of your smart card it is necessary that the right software is installed on your computer. Installing this software can be done by following the steps below: 1. Go to 2. Scroll to the section Installation guide and software and click Certificate renewal drivers. 3. In the new windows choose for the option Open or Run. 4. The installation file is compressed with WinZip. You can download and install WinZip form if you do not have this software installed on your computer. The installation files is shown in the WinZip window. Save this file to your desktop by using the Extract button. 5. Go to your desktop en double click the installation file. 6. While starting the installation file you can get a security notification. Click the Run button to continue the installation. 7. The required software will be installed on your computer. At the end of the installation you will get a notification that installation is completed. 10