Manual Rabo Corporate Connect Rabo Cash Management Installation Manual
Content 1 PREFACE 3 2 CONFIGURATION REQUIREMENTS 4 3 USB CARD READER INSTALLATION 5 4 INSTALLATION OF SAFENET DRIVERS 6 5 JAVA INSTALLATION 7 6 GENERAL SETTINGS 8 7 JAVA NOTIFICATIONS AND WARNINGS 10 8 CHANGING YOU PIN 12 9 CERTIFICATE 13 9.1 SYSTEM REQUIREMENTS FOR CERTIFICATE RENEWAL 13 9.2 SAFENET VERSION 14 9.3 CERTIFICATE RENEWAL SOFTWARE VERSION 15 9.4 CERTIFICATE RENEWAL 15 10 TROUBLE SHOOTING 16 11 SUPPORT AND SERVICE 18
1 Preface To use the Rabo Corporate Connect Portal and Rabo Cash Management your computer must meet certain conditions. If you are using the USB card reader specific software needs to be installed on your computer. This document describes what software and what settings are required for the proper functioning of the Rabobank applications. For all necessary software please refer to our website www.rabobank.com/supportcorporateconnect.
2 Configuration requirements To use the secured environment of the Rabo Corporate Connect portal and Rabo Cash Management (RCM) your computer must meet the requirements which are available on www.rabobank.com/supportcorporateconnect. Reader: There are no additional configuration requirements for the random reader. Use a USB card reader for: A simplified signing process (see the User Guide) Signing orders exceeding 2.500.000, - Greater speed when importing large files USB card reader: Additional configuration requirements for the USB card reader: The following ports needs to remain open if a firewall is in use: 80 and 443 (both outgoing) Java Runtime version 1.7 (also known as Java 7) or Java Runtime version 1.8 (also known as Java 8) You must have administrator rights ( Administrator ) for this installation 4
3 USB Card reader installation For using the OmniKey 3121 USB card reader additional software must be installed on your computer. For the installation of this software you must have administrator rights. If you are not sure having these permissions please contact the IT-department within your organization. Please note: Do not connect your USB card reader before all the software is installed. If you are using Windows 7 or Windows 8 installation of the OmniKey drivers is not needed. This driver is already part of your Windows operating system. When you are using Windows Vista you need to install this driver. The following must be taken for a successful installation: 1. Go to www.rabobank.com/supportcorporateconnect. 2. click on the link OmniKey drivers for Windows. You will be redirected to the suppliers website. 3. We advise you to download the OmniKey 3x21 unattended setup installer for Intel x64 and AMD64 BIT CPUs installation software. 4. You need to accept the agreements for installing this software on your computer. 5. Depending on the internet browser you are using you will get the option to run of save the software. We recommend you to Save the software on your computer. 6. Run the installation software from the location where you have save it. You will get a pop up where you are asked to give Windows the permission to continue installation. Please choose for Continue. 7. Choose for Next in the following steps. At the end choose for Install. 8. After you have had the confirmation that all the software is installed click Finish to complete the installation. 9. The installation of your OmniKey 3121 USB card reader is now completed. 5
4 Installatie SafeNet en Certificaat drivers To use your smart card in combination with the OmniKey USB card reader you must install the SafeNet software. For the installation of this software you must have administrator rights. If you are not sure having these permissions please contact the IT-department within your organization. The following must be taken for a successful installation: 1. Go to www.rabobank.com/supportcorporateconnect. 2. you can download the SafeNet and Certificate renewal Drivers. 3. Depending on the internet browser you are using you will get the option to run or save the installation software. We recommend you to Save the installation software on your computer before installing it. 4. The installation file is compressed with WinZip. You can download and install WinZip form www.winzip.com if you do not have this software installed on your computer. In the WinZip Window the installation file is shown. Double click this file to install the SafeNet drivers. 5. If WinZip shows a warning regarding to the file type please choose Yes to continue the installation of the SafeNet software. 6. When starting the software installation a security notification from Windows might appear. Please click Yes to continue the installation of the SafeNet drivers. 7. Click the Next-button in the SafeNet screen that appear. Then select the desired language and click Next. You will be asked to accept the conditions. To proceed with the installation you have to agree and click Next. 8. If you have version 7 of SafeNet installed on your computer this version must be uninstalled manually. If this is the case you will get a notification and the installation will abort. To uninstall SafeNet version 7 please follow the next steps: a. Click on Start en go to the Windows Control Panel. Now you must select Programs followed by Programs and Features. b. Now select the SafeNet software in the list with the installed software. After selecting the SafeNet software an uninstall button appears. Please click this button. c. After this process is completed you can close all open windows. d. We recommend to restart your computer and start again with step 1 of this chapter. 9. The welcome screen of the SafeNet installer appears. Click Next to continue the installation. 10. In the new screen the two components are selected. Because both components are mandatory it is not possible to deselect one of them. Click the Install button to install the required software and drivers on your computer. 11. The installation of the software and drivers will start now. When all components are installed your will get a notification. Please note: You have to restart your computer. After the restart you can connect your USB card reader to the USB-port of your computer. 6
5 Java installation To use the OmniKey USB card reader with your smart card Java has to be installed on your computer. Java is needed for authorizing payments and orders and to import files. For the installation of this software you must have administrator rights. If you are not sure having these permissions please contact the IT-department within your organization. The following must be taken for a successful installation: 1. Go to www.rabobank.com/supportcorporateconnect. 2. Click on the link Java for Windows. You will be redirected to the website of Java. 3. Click the red button Agree and Start Free Download. 4. Depending on the internet browser you are using you will get the option to run or save the installation software. We recommend you to Save the installation software on your computer before installing it. 5. Start the installation from the location where you have saved the installation software. You will get a pop up where you are asked to give Windows the permission to continue installation. Please choose for Continue. 6. To proceed with the installation you have to click Install in the window that appears. 7. At the end of the installation process you will get the option to change the settings of Google Chrome. This option is selected by default. If you do not want to change anything deselect the options in this window and click Next. 8. 8. At the end of the installation of Java click Finish. The newest version of Java is now installed on your computer. The next two steps are only applicable if you have installed Java Runtime 1.8. 9. Now open the Java Control Panel which you can select in your Windows Control Panel. In the Java Control Panel you choose for the tab Advanced. 10. Go to the section Advanced Security Settings. With the installation of Java Runtime 1.8 the options Use TLS 1.1 and Use TLS 1.2 are checked by default. Uncheck the option Use TLS 1.2 and press OK. Please note: By a combination of versions and setting it could happen that Java gives a notification or error message during the use of RCM. See chapter 7 for more information. 7
6 General Settings To ensure that the USB card reader works properly, the following settings must be applied: 6.1 Trusted websites in Internet Explorer The Rabobank websites need to be add to the trusted websites in Internet Explorer. The following steps need to be taken: 1. 1Start Internet Explorer and go to Tools, Internet Options, and select the tab Security (screen print to the right) 2. Click on Trusted sites. And then on Sites. The following screen will appear: 3. Remove the tick next to Require server verification (https).. 4. Add the following websites to the Add this website to the zone field: http://*.rabobank.nl http://*.rabobank.com https://*.rabobank.nl https://*.rabobank.com 5. Close Internet Explorer. 8
6.2 Java Runtime in Internet Explorer This step is only needed if you are using Windows XP. These settings are necessary to make sure that Java works properly with Internet Explorer and Windows XP. To apply these setting the following steps need to be taken: 1. Start Internet Explorer and go to Tools, Internet Options and select the tab Advanced. Check whether the right version of Java is used here. 2. Under Java (Sun), JRE 1.7.0.xxx needs to be ticked. Please be aware that Rabobank does not support Windows XP anymore. We strongly advise you to update your operating system to a recent version. Windows Vista, Windows 7 and Windows 8 These settings do not need to be checked for Windows Vista, Windows 7 and Windows 8. 9
7 Java notifications and warnings The Java security is continuously improved. It can thus avoid being faced with a notification or warning. Below are the most common messages appointed. 7.1 Security warning The First time after the installation of Java it might happen that you will be faced with a security warning when authorize payments or importing files. To ensure that this message does not occur every time, you have to tick Always trust content from this publisher. Then click the Run button. Depending on the installed Java version you can be faced with the warnings to the right. 10
7.2 An exception occurred during signing When authorizing a payment it can occur that you will be faced with the message An exception occurred during signing. This message is related to the Java version you are using. If the instructions as described in chapter 6 does not solve this message we recommend you to install the newest update of Java on your computer. Please see chapter 5 for instructions how to update your Java version. If you have Java Runtime 1.8 installed on your computer please verify if the options Use TLS 1.2 is disabled. Please consult step 9 and 10 in chapter 5 of this manual for instructions how to disable this option. 7.3 Application Blocked for Security If you are using Java version 7 update 40 in combination with the RCM upload applet to upload files it might happen you will be faced with the message the application is blocked. If the instructions as described in chapter 6 does not solve this message we recommend you to install the newest update of Java on your computer. Please see chapter 5 for instructions how to update your Java version. 11
8 Changing your PIN For security reasons, we advise you to change the PIN code immediately on receipt of the smart card. Below is an explanation on how to do this. USB RFLP Reader: Place your card in the USB card reader. Go to: Start -> All Programs -> SafeNet -> SafeNet Authentication Client and click on SafeNet Authentication Client Tools. You will see the following screen: Choose for Change Token Password and follow the instructions on your screen. Your PIN code is now changed.. Random reader: Place your card in the random reader Press 5 times on the Menu button and you will see the words Change PIN. Press OK. Enter a new PIN code, press OK and follow the further instructions. Your PIN code is now changed. If you forget your PIN code or enter it incorrectly ten times, you will have to request a new card: your card will be blocked. 12
9 Certificate Your smart cart is provided with a certificate. This certificate is valid for three years. After this period the validity expires and cannot be used in conjunction with the USB card reader. It is possible to renew the certificate yourself. After the renewal of the certificate it will be valid for the next three years. 62 Days before the certificate of your smart card expires you will get a notification. For a successfully renewal of the certificate it is important to have the right software installed on your computer. Via the support page on www.rabobank.com/ supportcorporateconnect you can download the Certificate renewal manual. If you have not the right versions of our software installed you can damage the certificate. When the certificate is damaged it is not possible to renew it anymore. Your smart card cannot be used anymore. You have to apply for a card replacement at your Rabobank. 9.1 System requirements for certificate renewal To renew the certificate of your smart card your computer must meet the following requirements. The next chapters will describe how to verify if you are in possession of the right software. Operating system Internet browser Windows Vista Internet Explorer 8 Windows 7 Internet Explorer 9 Windows 8 Internet Explorer 10 Both 32-bit and 64-bit operating systems are supported. SafeNet Drivers SafeNet version 8.2 or higher Certificate renewal software Renroll.dll version 1.0.0.0 If you are using Windows Vista Renroll3.dll version 3.1.9.0 Renroll4.dll version 4.0.0.0 If you are using Windows 7 (32-bit / 64-bit) or Windows 8 (32-bit / 64-bit) Renroll3.dll version 4.2.0.0 Renroll4.dll version 4.0.0.0 Please note: It is not possible to renew the certificate of your smart card within a Citrix-environment. If you are using Citrix or any other virtual environment we recommend that you install the card reader and right software on a standalone computer. 13
9.2 SafeNet version SafeNet drivers are installed on your computer in order to use your USB card reader (see chapter 4). It is only possible to renew the certificate on your smart card when you are using SafeNet version 8.2 or higher. By following the steps below you can check what version of SafeNet you have installed: 1. Click on Start and go to All Programs. 2. Select SafeNet in the list with installed software. 3. You will get the option to select the folder Borderless Security PK or SafeNet Authentication Client. a. If the folder SafeNet Authentication Client is displayed in the list you must open SafeNet Authentication Client tools. There will open a new window. Click on the -symbol to see what version of SafeNet is installed on your computer. When version 8.2 or later is installed, you are in possession of the appropriate version. The following steps are not applicable for you. b. If you can choose Borderless Security PK you have not installed the latest version of SafeNet. Please continue with the following steps. Please note: the steps below are only applicable when you are using an outdated version of SafeNet. 4. Click on Start en go to the Windows Control Panel. Now you must select Programs followed by Programs and Features. 5. Now select the SafeNet software in the list with the installed software. After selecting the SafeNet software an uninstall button appears. Please click this button. 6. After this process is complete you can close all open windows. 7. Follow the steps as described in chapter 4 to install the latest version of SafeNet. 14
9.3 Certificate renewal software version To renew the certificate of your smart card the certificate renewal software is mandatory. By following the steps below you can verify if you have the right version installed. If you have not installed the proper version you can damage the certificate of your smart card. 1. Click the Start ( ) button and click on Computer. 2. Double click the hard disk where Windows is installed and navigate to the folder Windows. 3. If you are using Windows 7 64-bit or Windows 8 64-bit than you must open the folder SysWOW64. For other operating system you must open the folder System32. 4. Search for the file Renroll3.dll. Click the file with the right mouse button and press the button Properties. 5. In the new window that appears select the tab Details. 6. Verify if the installed version compares with the version number as described in the chapter System requirement for certificate renewal. 7. Repeat step 4 till 6, but now search for the file Renroll4.dll. Please note: Is the right version not installed or are the files missing on your computer? Follow the steps in chapter 4. With these steps the mandatory software will be installed on your computer. 9.4 Certificate renewal Once your computer has the right software and your smart cart is eligible to renew the certificate you have to follow the steps after clicking the hyperlink. Once you have clicked the hyperlink to renew the certificate the software will read information from your smart card and will create a new certificate. Follow the instruction as displayed on your screen. The entire process time of renewing the certificate is circa 10 minutes. Do not interrupt any step during this process or refresh the page until a step is completed and the entire page is fully loaded. Only when the step is completed click Next to continue. NOTE: The message that you must copy the certificate to the system is not applicable. NOTE: Close your browser after finishing the renewal of your certificate. Now re-insert your smart card in the card reader. 15
10 Trouble shooting This chapter contains extra information for the system administrator Services The following services are relevant for the use of the USB RFLP Reader: Datakey Log Service to log information Datakey Token Service to enable the RFLP Card to be read Datakey Virtual Channel Monitor for UDP Smartcard to drive the USB RFLP Reader Docking station If you use a laptop for which you also use a docking station, its drivers must be up-to-date, particularly (the drivers for) the USB-ports. Potential Software conflicts A device-lock service may be running and controlling the devices (such as USB-devices). This may cause a USB RFLP Reader to be seen as a USB-stick or USB-hard disk. This type of software/service can prevent the USB RFLP Reader from being accessible. Proxy (server) A Proxy (server) can prevent the display of the PIN code screen or import screen. To enable the Rabobank application to work, the following settings must be applied on your Proxy (server): The outgoing ports 80 and 443 must remain open; Access to the following sites must be allowed: http://*.rabobank.nl http://*.rabobank.com https://*.rabobank.nl https://*.rabobank.com Check that no bypass proxy is installed and/or that there are no patterns in the exceptions section which apply to the RCM-URL. If there are, the proxy will not be used and the site cannot be accessed. Certificates Normally certificates are automatically read by your browser (IE). It is possible for a certificate to be read by the USB card reader but not by the browser. If this happens, instead of the PIN code screen appearing when logging in, a blue screen with the heading Offline authentication appears. In dat geval kunt u de volgende (handmatige) controle uitvoeren: Start the program SafeNet Authentication Client Tool via Start -> Alle Programma s -> SafeNet -> SafeNet Authentication Client. 1. Choose for Advanced View. 2. Followed by Client Settings. 3. Verify or the checkboxes are ticked as shown in the screenshot at the right. 16
Certificate renewal Problems which occur during the renewal of the certificate can have different causes. Below the main causes are named. 1. Incorrect version of SafeNet and/or Certificate renewal drivers. You should use the most recent software offered through www. rabobank.com/supportcorporateconnect. See chapter 9 to make sure you are in possession of the appropriate software. 2. You are using Citrix or any other virtual environment. Rabobank does not provide any support on this environment. We recommend you to have the right software and card reader installed on a standalone computer. Does this computer meet the requirements, you can renew the certificate in this way. 3. The page is not fully loaded. It may take some time before a step is completed. Your web browser indicates whether the page is loaded. Only when the page is fully loaded proceed to the next step. 17
11 Support and service If you have further questions about the content of this installation guide or the installation of the software you can contact Rabo Corporate Support.. Contact information Rabo Corporate Support Service hours: Working days from 8.00 a.m. to 5.30 p.m. Email: corporatesupport@rabobank.com Telephone: +31 (0) 30 71 21 777 www.rabobank.com