Installation Guide Rabo Cash Management The Rabo Financial Logistics Portal (RFLP) offers an integrated solution for liquidity and risk management and simplifies financial logistic processes. The Rabo Cash Management (RCM) basic module is offered in a centralized environment together with the Trade services and Treasury modules. Rabo Cash Management This guide describes the installation requirements for your workstation. You can log in to Rabo Cash Management via the Rabo Financial Logistics Portal which can be found on www.rabobank.com/fl. This guide explains the following topics in more detail. Guide content 1. Configuration requirements 2. USB RFLP Reader Installation 3. General settings 4. Changing your PIN 5. Logging in to RFLP 6. Certificate renewal 7. Troubleshooting You can experience an interactive RCM demonstration on www.rabobank.com/rflpdemo
1. Configuration requirements To use the Rabo Financial Logistics Portal (RFLP) your computer and network must meet the requirements which are available on www.rabobank.com/rflpsupport: RFLP Reader: There are no additional configuration requirements for the RFLP Reader Use a USB RFLP Reader for: A simplified signing process (see the User guide) Signing orders greater than 2,500,000.- Greater speed when importing large files USB RFLP Reader: Additional configuration requirements for the USB RFLP Reader: The following ports need to remain open if a firewall is in use: 80 and 443 (both outgoing) Java Runtime version 1.6 (also known as Java 6). Java Runtime version 1.7 (Java 7) can not be used currently You must have administrator rights ( Administrator ) for this installation 2
2. USB RFLP Reader Installation The following 4 components will be installed: 1. Drivers for the USB RFLP Reader 2. Safenet Software to use your RFLP Card 3. Java Runtime Environment (JRE) version 1.6.0.xx 4. Re-enrolment of the certificates. NOTE: Do not connect your USB RFLP Reader before installing it. You will be prompted to do so during installation. The following steps must be taken for a successful installation: 1. Create an empty C:\temp folder on the pc. Without this folder the installation cannot be carried out correctly. In the folder you will find the log files which will be generated during the installation. 2. Download the installation software from the Downloads page on http://www.rabobank.com/rflpsupport (see screen print) 3. Download the correct version of the software for your operating system 4. After you have downloaded the USB RFLP reader Software you can extract it to your hard drive. From this point on, separate instructions are available for the different Windows versions. Please proceed to the relevant instructions for your operating system. 3
Windows XP Double click on the extracted file ( Setup1.11_32.exe ) or ( Setup1.11_64.exe ) Select Dutch or English as the installation language and then click in turn on OK>Next >Install>OK. The program installs the files and asks you to restart. Click on I will restart manually later and then on Finish. Switch off your computer, connect the USB RFLP Reader to your computer and restart the computer. Windows XP automatically finishes the installation, which you can see at the bottom right of your screen. When it is finished, the USB RFLP Reader is ready for use and the light on the USB RFLP Reader should be green. NOTE: Before you use Rabo Cash Management, please first read through the following chapters. Windows Vista and Windows 7 Double click on the extracted file ( Setup1.11_32.exe ) or ( Setup1.11_64.exe ) Windows requests permission to work with the application. Select Allow. Select Dutch or English as the installation language and click in turn on OK>Next >Install>OK. The program installs the files and asks you to restart. Click on I will restart manually later and then on Finish. Switch off your computer, connect the USB RFLP Reader to your computer and restart the computer. When prompted, give Windows permission to finish the installation. When it is finished, the USB RFLP Reader is ready for use and the light on the USB RFLP Reader should be green. NOTE: Before you use Rabo Cash Management, please first read through the following chapters. 4
3. General settings To ensure that the USB RFLP Reader works properly, the following settings must be applied: Trusted websites in Internet Explorer Windows XP, Windows Vista and Windows 7 Start Internet Explorer and click in turn on Extra or Tools > Internet Options > Security (screen print to the right) Click on the Trusted websites pictogram (1) and then on Websites (2). The following screen will appear: Remove the tick next to Require server verification (https:). (1) In the Add this website to the zone: field, add the following URLs: (2) 1. http://*.rabobank.nl 2. http://*.rabobank.com 3. https://*.rabobank.nl 4. https://*.rabobank.com Close Internet Explorer. 5
Java Runtime in Internet Explorer Windows XP Start Internet Explorer and click in turn on Extra > Internet Options > Advanced and check whether the right version of Java Runtime is used for the USB RFLP Reader Under Java (Sun), JRE 1.6.0.xxx needs to be ticked Windows Vista en Windows 7 This setting does not need to be checked for Windows Vista and Windows 7 Java Settings Windows XP, Windows Vista en Windows 7 Click Start > Control Panel. Double click on the Java icon. The Java Control Panel opens Click on Network Settings The Use browser settings option needs to be ticked 6
On tab Advanced, options Enable the next-generation Java Plug-in under Java Plug-in should be ticked off and JRE auto-download should be set to Never Auto-Download to prevent an automatic update to Java 7. Security warning In Rabo Cash Management, when you sign and/or import using the USB RFLP Reader and the screen below appears, tick the box Always trust content from this publisher. Then click on Run. 7
4. Changing your PIN For security reasons, we advise you to change the PIN immediately on receipt of the RFLP Card. Below is an explanation on how to do this. USB RFLP Reader: Place your card in the USB RFLP Reader. Go to: Start -> All Programs -> SafeNet -> Borderless Security PK and click on SafeNet CIP Utilities. You will see the following screen: Right mouse click on Slot 10 OMNIKEY Cardman 3x21 0 (the blue highlighted field), select Change PIN and follow the instructions. Your PIN code is now changed. RFLP Reader: Place your card in the RFLP Reader Press 5 times on the Menu button and you will see the words Change PIN. Press OK. Enter a new PIN code, press OK and follow the further instructions. Your PIN code is now changed. If you forget your PIN code or enter it incorrectly ten times, you will have to request a new card: your card will be blocked. 8
5. Logging in to RFLP There are 2 log in options: 1. USB RFLP Reader 2. RFLP Reader 1. USB RFLP Reader: Step 1. Place your card in the USB reader. When you place the RFLP Card in the reader, the light will flash red a few times and then change to green. Step 2. Go to http://www.rabobank.com/fl Click on Select in the Secure client login field at the bottom of the page and select Financial Logistics Step 3. Select your user name and click on OK Bleeker, P. A dialog box opens: Enter your PIN code and click OK to log in or click Cancel, should you wish to log in with your RFLP Reader 9
2. RFLP Reader: Step 1: Place your card in the RFLP Reader Step 2: Go to http://www.rabobank.com/fl Click on Select in the Secure client login field and select Financial Logistics Step 3: Enter your user number (RFLP card number) and follow the instructions on your screen (see screen below) to generate the access code. Enter the access code and click on OK. For both the USB RFLP Reader and the RFLP Reader: Step 4: You are now in the portal. A blue menu bar is displayed. Click on Tools. A sub-menu will appear on the left. Click on Rabo Cash Management. 10
The right side of the screen displays the notice board, where current messages for RCM are published. We recommend checking the notice board on a weekly basis to stay well informed on releases and service announcements. Step 5: To start the application, click on Rabo Cash Management (RCM) in the RCM window. Step 6: To access RCM, usually you ll have to use your PIN number and/or RFLP Reader again. Step 7: After you have logged in, the RCM Welcome screen is displayed. 11
6. Certificate renewal NOTE: Certificate renewal is possible with a USB RFLP Reader only. A certificate on a RFLP card will be valid for 3 years, after that the certificate will expire. To ensure that you will not be without a RFLP card, you will be informed about the expiration date of your RFLP card 62 days before it will expire. To renew your certificate, please perform the following steps: 1) Check if the following sites have been added to the secure websites in your browser (see chapter 3 of this guide): http://*.rabobank.nl http://*.rabobank.com https://*.rabobank.nl https://*.rabobank.com If these sites have not been added the software for the certificate renewal will not work. 2) Log on to the Rabobank Financial Logistics Portal via www.rabobank.com/fl. 3) When logging on you will be asked the following question: The current webpage is trying to open a site in your Trusted sites list. Do you want to allow this?. Select the option: Yes. After that, log on as shown in the chapter: Logging into RFLP for the first time. With every step of the certificate renewal process you will be asked for your pin. 4) The software which is used for the certificate renewal will automatically inform you when the certificate needs to be renewed. This will be done 62 days before the certificate will expire. 1) Before you enter the portal, certificate renewal will initiate automatically. During the 1 st step the software will request you to generate a new pin code for your card. 12
2) During the 2 nd and 3 rd step the connection with the reader will be renewed. 3) During the 4 th step a new key pair will be generated. 4) During the 5 th step a new certificate will be requested by the software. 5) During the 6 th step the new certificate will placed on the RFLP card. 6) During the 7 th and 8 th step the old certificate will be revoked. After this step the renewal of your certificate will be completed and you can use your RFLP card for another 3 years. NOTE: The message that you will have to copy your certificate to the system has to be ignored. 13
7. Troubleshooting Extra information for the system administrator Services The following services are relevant for the use of the USB RFLP Reader: Datakey Log Service to log information Datakey Token Service to enable the RFLP Card to be read Datakey Virtual Channel Monitor for UDP Smartcard to drive the USB RFLP Reader Docking station If you use a laptop for which you also use a docking station, its drivers must be up-to-date, particularly (the drivers for) the USB-ports. Potential Software conflicts A device-lock service may be running and controlling the devices (such as USB-devices). This may cause a USB RFLP Reader to be seen as a USB-stick or USB-hard disk. This type of software/service can prevent the USB RFLP Reader from being accessible. Proxy (server) A Proxy (server) can prevent the display of the PIN code screen or import screen. To enable the Rabobank application to work, the following settings must be applied on your Proxy (server): The outgoing ports 80 and 443 must remain open; Access to the following sites must be allowed: http://*.rabobank.nl http://*.rabobank.com https://*.rabobank.nl https://*.rabobank.com Check that no bypass proxy is installed and/or that there are no patterns in the exceptions section which apply to the RCM-URL. If there are, the proxy will not be used and the site cannot be accessed. Certificates Normally certificates are automatically read by your browser (IE). It is possible for a certificate to be read by the USB RFLP Reader but not by the browser. If this happens, instead of the PIN code screen appearing when logging in, a blue screen with the heading Offline authentication appears. If this happens you should follow the (manual) procedure below: Start the Safenet CIP Utilities program via Start -> All Programs -> SafeNet -> Borderless Security PK Place your RFLP Card in the USB RFLP Reader and wait until the certificate appears Right mouse click on certificate and select: Copy to System. If instead of Copy to System, statement Delete from System appears, click on it and go back to the previous step. NOTE: Never click on Delete from Token : this will make your card unusable! 14
Multiple USB RFLP Readers If multiple USB RFLP Readers are connected to your PC, then the following situations can cause faults: The Rabobank-software is not up-to-date. Click on http://www.rabobank.com/rflpsupport for the latest software. If the DLL of the out-of-date software is used, then conflicts are possible. Sometimes the problem can be solved by removing the other USB RFLP Reader(s) from the USB-port and restarting the PC. This can frequently resolve conflicts. Virus scanners Virus scanners sometimes flag a harmless file as dangerous; the false positives. This sort of problem is mostly resolved by involving the supplier of the anti-virus software. NOTE: Please ensure that your software is always up-to-date. 15