ACL ANALYTICS. Installation and Activation Guide

Transcription

1 ACL ANALYTICS Installation and Overview... 2 Installation and Licensing... 2 Activation... 2 System Requirements... 2 Installing and Activating ACL Analytics... 3 Step 1: Download and Install ACL Analytics... 3 Step 2: Launch ACL Analytics... 3 Step 3: Activate ACL Analytics... 3 Step 4: Enter your Login Credentials... 4 Step 5: Start using ACL Analytics Resolving issues with installing ACL Analytics... 5 Activating ACL Analytics... 6 Resolving issues with activating ACL Analytics... 7 Scenario: Login screen does not appear for ACL Launchpad... 7 Scenario: Login screen appears with errors for ACL Launchpad... 8 Scenario: Error with organization or subscription... 8 Scenario: No error or activation error... 9 Data Security and Controls FAQ What type of security and controls are in place for data centers and sub service organizations that ACL utilizes? Is an SSAE 16 (SOC) audit report available for ACL? What type of security and controls does ACL have in place for ACL Launchpad? Reference: Connections required by ACL Analytics

2 Overview This guide is intended to help you walkthrough Installing and Activating ACL Analytics 11 and assist with troubleshooting any obstacles that may arise during the process. Installation and Licensing The installation process has been simplified. Activation is no longer part of the ACL installer. ACL is now activated at first use when the user signs in to ACL Launchpad. You will have just one user ID and password to access all ACL resources (both software licenses and online resources). You no longer need to keep track of lengthy serial numbers. A single person in your organization can act as an ACL account administrator and allocate ACL licenses to other employees. Activation During the installation of ACL Analytics, you are no longer required to enter a serial number. Instead, you must activate the software before first use. You activate the software by signing in to ACL Launchpad ( the new portal for downloading all ACL software, and accessing customer services and resources. Instructions for signing in to ACL Launchpad are included in a welcome from ACL, sent to all licensed users. System Requirements Before proceeding with the Activation, ensure that the computer on which ACL Analytics will be activated meets all the following requirements: Supported operating systems: Microsoft Windows 8 (64-bit) Microsoft Windows 7 (32-bit and 64-bit) Internet Explorer 9 or higher, or any version of Chrome, Firefox, or Safari TCP/IP connectivity: Required, post-installation, for activating ACL Analytics Required for accessing context-sensitive online help Periodically required for ongoing software subscription validation Periodically required for software auto-update 2

3 Installing and Activating ACL Analytics Step 1: Download and Install ACL Analytics Head to the ACL Launchpad ( Log in with your ACL Launchpad credentials Any user can download ACL Analytics from their ACL Launchpad account. After downloading, it is possible to redistribute the installer within your company. Each user does not need to download the installer independently. Step 2: Launch ACL Analytics When you launch ACL Analytics you should see a screen similar to this, indicating ACL is not yet activated: Step 3: Activate ACL Analytics Click on the Activate button: 3

4 Step 4: Enter your Login Credentials Sign in with your ACL Launchpad Account details: Step 5: Start using ACL Analytics 11 ACL Analytics 11 will now be activated and you will be able to use all of the new features. 4

5 Resolving issues with installing ACL Analytics There are a variety of potential issues that may prevent you from being able to install ACL Analytics. These typically fall into three cases: 1. You do not have administrative rights to your PC, thus preventing the installation of software 2. There is a corporate policy against installing new software or new versions of existing software until it has been vetted by IT 3. Your PC does not meet the minimum operating system requirements necessary to install ACL Analytics (Windows 7 or later is required) In any of the above cases, you will need to work with your IT department to request that the software is installed on the computer on your behalf. For more information on the process of installing ACL Analytics, please refer to the installation guide: 5

6 Activating ACL Analytics The first time that ACL Analytics is run, you will be prompted to activate your license using your Launchpad credentials. This initial activation uses a login screen displayed by Internet Explorer. After that, ACLwin.exe will periodically contact the ACL Launchpad to confirm the license. In other words, to successfully activate and continue to use ACL Analytics, any proxy or firewall settings need to allow a connection to *.aclgrc.com on port 443 from Internet Explorer and ACLwin.exe. After a successful activation, an activation token is saved in your Windows user profile in the registry, so other users using your PC will need to activate again when they are logged in using their own credentials. Potential issues that prevent the activation of ACL Analytics No internet access Local Windows Firewall IE Security and Privacy Settings Local security application blocking communication from non-authorized applications Network proxy server blocking communication from non-authorized applications or network destinations. See Activating ACL Analytics with Proxy Servers for more information. Domain policies Restricted user permissions: unable to update registry Domain Name Server WAN Acceleration With such a wide range of potential issues, it is best to work with someone that understands your corporate network such as your IT Security team to troubleshoot the root cause. Note: Like many other software technologies, ACL periodically contacts home to verify its active license. Proxies, firewalls, and other network security measures are in place to prevent unauthorized software from connecting to unauthorized servers. ACL software cannot (and should not) circumvent these controls in your organization automatically. Please work your organization s IT security team to configure your network appropriately to use ACL Analytics. 6

7 Resolving issues with activating ACL Analytics If you cannot activate ACL Analytics, the reason typically falls into one of three categories: 1. ACL Analytics is not able to connect to the ACL Launchpad 2. Your ACL Launchpad credentials are not valid 3. You do not have any available licenses for ACL Analytics The most likely scenario is that a proxy, firewall, or some other network security measure is in place. You will need to work with your IT group to allow a connection to *.aclgrc.com on port 443 from Internet Explorer and ACLwin.exe. If your proxy/firewall only supports allowing connection to specific IP addresses, please contact ACL Support Services for a list of IP addresses to allow as exceptions. For a list of Connections required by ACL Analytics, see the topic on Connections Required by ACL Analytics. Note: Like many other software technologies, ACL periodically contacts home to verify its active license. Proxies, firewalls, and other network security measures are in place to prevent unauthorized software from connecting to unauthorized servers. ACL software cannot (and should not) circumvent these controls in your organization automatically. Please work your organization s IT security team to configure your network appropriately to use ACL Analytics. The Activation Log All the steps performed during the activation of the software are recorded in the activation.log. This file is located in the path: C:\users\<user name>\appdata\local\acl If the folder is not present, the activation.log will not be created. If the folder path does not exist, you should create the subfolders listed in the path above to ensure that the file is generated during the process. Scenario: Login screen does not appear for ACL Launchpad The login screen presents a Page not Found error message. The application cannot access the Internet. The error in the activation will be: Connection Error 500 Solution: Ensure that your PC can connect to the Internet. If you have a firewall or proxy, you may need your IT team to create an exception (allow/whitelist) for Internet Explorer and ACLwin.exe executables to access the ACL Launchpad (*.aclgrc.com on port 443). Note that ACL only supports proxies that provide silent authentication, and does not support proxies that require user authentication on connection. If your proxy/firewall only supports allowing connection to specific IP addresses, please contact ACL Support Services for a list of IP addresses to allow as exceptions. If your proxy server allows session connection, then you can try first connecting to from your browser, and then start the activation process. 7

8 Scenario: Login screen appears with errors for ACL Launchpad The display of the login screen is not correct (e.g., the content is too big for the window), or you receive a pop-up indicating a script error. Solution: The issue is related with the Internet Explorer settings. Very high levels of security will prevent the correct display of the window. You can add to your list of trusted sites in the Internet Explorer settings. Alternatively, you can restore the default security settings in Internet Explorer to avoid this issue. Scenario: Error with organization or subscription A message is displayed after you type your credentials: Invalid credentials You do not belong to an organization Your subscription has expired Solution: Start up a browser on your PC (must be a supported browser) and navigate to Use your credentials to sign in. If this fails, it could be one of two things: o Your credentials are incorrect. Confirm you are using the correct account. You should use your organization s not a generic (e.g., Google, Hotmail, Yahoo). If you have forgotten your password, use the Reset password option. o You don t have an ACL Launchpad account. Contact the person in your organization that is the primary contact for ACL or contact ACL Support Services, and have that person create your user account. If you are able to log in to the ACL Launchpad, click the settings button on the top-right. o Review the Ordered Subscription Types section to ensure your organization has purchased AN11. You should see ACL Analytics in this list. The number to the left indicates how many licenses your organization has purchased. If you don t see this it means your organization has not purchased or the order has not been processed yet. Please contact your organization s ACL primary contact, your ACL account rep or ACL Support Services for more information. o If you do see ACL Analytics in this list, it means your organization has purchased AN11 but there are currently no available licenses for you to use for your PC. Your organization s ACL primary contact will be able to sign into ACL Launchpad to confirm how many licenses have been used and by whom. If needed, they can release a license for you to use. If you continue to have issues, contact ACL Support services, with a screenshot of the following entries in the registry: o If you have a 32-bit Windows OS: HKEY_LOCAL_MACHINE\SOFTWARE\ACL Software o If you have a 64-bit Windows OS: HKEY_LOCAL_MACHINE\SOFTWARE\WoW6432Node\ACL Software 8

9 Scenario: No error or activation error You are able to see the login screen and enter credentials, but no error message is displayed, or you receive an activation error occurred message. Solution: 1. If you have a firewall or proxy, you may need your IT team to create an exception (allow/whitelist) for Internet Explorer and ACLwin.exe executables to access the ACL Launchpad (*.aclgrc.com on port 443). 2. If your proxy/firewall prompts you to authenticate your outgoing connections, the activation may fail. ACL currently only supports proxies that provide silent authentication options; you may want to investigate whether you can allow/whitelist ACLwin.exe. 3. If your proxy/firewall only supports allowing connection to specific IP addresses, please contact ACL Support Services for a list of IP addresses to allow as exceptions. 9

10 Data Security and Controls FAQ What type of security and controls are in place for data centers and sub service organizations that ACL utilizes? ACL uses industry advanced and mature infrastructure-as-a-service (IaaS) providers to host our SaaS offering from four data center locations globally (United States, Canada, Europe, and Asia). The data centers provide many physical and logical security controls and are compliant with various certifications and third-party attestations, including but not limited to: ISO 27001, PCI DSS Level 1, SSAE-16/ISAE 3402 SOC 1 (previously SAS 70 Type II), SOC 2 & 3, and HIPAA. Below are examples of these controls: User Access Logical Security Data Handling Physical Security Change Management Data Integrity, Availability, and Redundancy Incident Handling These controls ensure facility and equipment safeguards for areas such as multi-factor access controls, electronic surveillance, intrusion detection systems and environmental safeguards. ACL reviews the certifications and third-party attestations provided by our sub service providers on an on-going basis to attest the services being provided and supplement complimentary elements to ACL controls. Is an SSAE 16 (SOC) audit report available for ACL? Yes, ACL has a current SSAE 16 (Service Organization Control) report prepared by a third-party auditor. This report is a comprehensive assessment of the internal controls and information security related to ACL SaaS offerings. Upon request and subject to customer s execution of ACL standard non-disclosure agreement, ACL will provide a copy of its then-current SSAE 16 report upon request. What type of security and controls does ACL have in place for ACL Launchpad? The ACL control environment is designed to provide confidentiality, availability, and integrity for our SaaS offerings. Controls that are annually audited under SSAE-16 include: Change Management Logical Access Data Security Backup and Recovery Problem Management These controls and their supporting policies provide ACL and our customers with operational assurance. All customer data is classified and treated as confidential by ACL. ACL utilizes the least privilege principle, which means that account privileges are granted to the lowest level of the user s essential work requirements, thus greatly minimizing access to the systems and data. All access to ACL SaaS is performed through secure encrypted channels. An independent security assessment provider scans ACL SaaS systems and certifies its security on a daily basis. 10

11 Reference: Connections required by ACL Analytics Executable Requirements Reason(s) Iexplore.exe port 443 Initial activation of ACL Analytics ACLwin.exe port 443 Initial activation of ACL Analytics Ongoing license verification Sharing results to ACL GRC Results Manager ACLx.exe localhost (dynamic ports) port 443 Inter-process communication between software components Sharing results to ACL GRC Results Manager ACLUpdate.exe port 443 Auto-update for ACL Analytics ACL-service.exe localhost (dynamic ports) Inter-process communication between software components ACLScript.exe port 443 (optional) Ongoing license verification. Required if either: Not using ACLwin.exe; licensing can be verified through ACLwin.exe instead Sharing results to ACL GRC Results Manager ACL Analytics Installation and Document Version /14/