This document explains how to install and how to remove the token software for your personal token. 20 May 2016
Table of Contents Table of Contents Preface...3 1 Token Software Installation Prerequisites...4 2 Configure Internet Explorer Settings...6 3 Configure Java Settings...7 4 Obtain the Token Installation Software...8 4.1 Download the installation software... 8 4.2 Unzip and run the software installation file...8 5 Installation Procedure... 9 6 Install the Token Software in Silent Mode... 14 7 Remove the Token Software... 15 7.1 Remove the Token Software in Interactive Mode... 15 7.2 Remove the Token Software in Silent Mode...15 8 Getting Support... 17 Legal Notices... 18 20 May 2016 2
Preface Preface Purpose of the document Audience This document explains how to install and how to remove the token software for your personal token. This document is for personal token users. Significant changes The following table lists significant changes since the August 2013 release. This does not include various edits that have been made. New information The configuration of Java settings has been updated. The token software installation procedure has been simplified. Updated screenshots have been added to illustrate the installation procedure in interactive mode Updated screenshots have been added to the installation procedure for silent mode due to the renaming of the properties file. Updated screenshots have been added to illustrate the removal procedures. Location Configure Java Settings on page 7 Obtain the Token Installation Software on page 8 Installation Procedure on page 9 Install the Token Software in Silent Mode on page 14 Remove the Token Software on page 15 20 May 2016 3
Token Software Installation Prerequisites 1 Token Software Installation Prerequisites General prerequisites Administrator rights are required to install the necessary drivers and software. Your PC must be running one of the following operating systems: - Windows Vista (32-bit) with Service Pack 1 or higher - Windows 7 (32-bit or 64-bit), optionally with a Service Pack - Windows 8 (32-bit or 64-bit) - Windows 8.1 (32-bit or 64-bit) - Windows 10 (32-bit or 64- bit) - Windows Server 2008 R2 (32-bit or 64-bit) - Windows Server 2012 (64-bit) To access the SWIFT Certificate Centre, you must use one of the following versions of Internet Explorer: - Internet Explorer 8.0 (32-bit) - Internet Explorer 9.0 (32-bit) - Internet Explorer 10.0 (32-bit) - Internet Explorer 11.0 (32-bit) For Windows 8 and above: make sure that you have switched to desktop mode before launching internet explorer. Your PC must have free space of at least 500 MB. To check this, open Windows Explorer, right-click the C: drive and select Properties. A System (C:) Properties window opens: 20 May 2016 4
Token Software Installation Prerequisites To access the SWIFT Certificate Centre, your system requires a 32-bit version of the Java Runtime Environment (JRE). The minimum supported versions are 1.6.0_32 for Java 6, 1.7.0_7 for Java 7, or Java 8. You must download and install the latest version of Java from the Java website. The Windows Script Host (WSH) must be enabled for the.vbs scripts used by the installer to execute properly. This setting is enabled by default. The Windows Smart Card Service must be started for the proper detection of the certificate by the SafeNet authentication client. This service is started by default. You can install the token software on a PC that is running either the 32-bit version or the 64-bit version of Windows. However, you must use the 32-bit versions of Internet Explorer and the Java Runtime Environment to access the SWIFT Certificate Centre and configure your tokens. The installation procedure checks that the required versions are installed on your system. For more information, see Installation Procedure on page 9. 20 May 2016 5
Configure Internet Explorer Settings 2 Configure Internet Explorer Settings The required Internet Explorer settings are normally part of its default settings. If the default settings of Internet Explorer have been modified, then make sure that the correct settings are selected or enabled. You can access the settings by going to Internet Explorer > Tools > Internet Options > Advanced. SWIFT recommends correctly configuring the Internet Explorer Settings to improve PC performance and to avoid pop-up warning messages. See the Knowledge Base tip 5019758 for the latest settings. 20 May 2016 6
Configure Java Settings 3 Configure Java Settings The required settings of the Java plug-in are normally part of its default settings. If the default settings of the Java plug-in have been modified, then make sure that the correct settings are configured. You can access the settings by going to the Java Control Panel > Advanced. SWIFT recommends correctly configuring the Java settings to improve PC performance and to avoid pop-up warning messages. See the Knowledge Base tip 5019757 for the latest settings. Depending on the version of Java that you are using, some of the settings may not be applicable. If a setting does not exist for your version, then please ignore it. 20 May 2016 7
Obtain the Token Installation Software 4 Obtain the Token Installation Software Before you can use your token, you must obtain and download the token installation software. 4.1 Download the installation software Procedure 1. For Windows 8 and above: From the Start window, click the Desktop tile to enter desktop mode. 2. Navigate to the SWIFT Certificate Centre. 3. On the Getting started page, there is a link that enables you to download the token installation software. Click the link. 4. Save the software installation file on your PC. The file name is Personal_token_install.zip. 4.2 Unzip and run the software installation file Procedure 1. Navigate to the folder in which you saved the installation software zip file. Either unzip the archive and navigate to the extracted folder OR Double-click the zip file. In either case, the following window appears. 2. Double-click the software installation file contained within the zip file. The Welcome to the SWIFT Token Client Installer window opens and you are ready to start the installation in Interactive Mode. Refer to Install the software on page 9. 20 May 2016 8
Installation Procedure 5 Installation Procedure Install the software Prerequisites To install or remove the token software on a PC in interactive mode, you must have administrator rights for that PC. Note Procedure SWIFT recommends that you close all other applications running on the PC before installing the token software. 1. After you double-click the software installation file, the Welcome to the SWIFT Token Client Installer window opens. This window informs you of the actions that are performed during installation. Click Next. The SWIFT Token Client Location window opens. Important Although it is possible to customise the options, SWIFT recommends that you accept the proposed installation options. 2. If you want to customise the installation, then you can do so by selecting or clearing the following options: Install SafeNet Authentication Client - the installer checks whether there is already an appropriate version of the SafeNet Authentication Client installed on the PC and installs it if needed. The SafeNet software contains the drivers needed for the token to be recognised. You can clear this box if you want to install the SafeNet software after the token software is installed. Install SWIFT Token Client - this configures the SWIFT environment on the PC and, therefore, you cannot modify this setting. Import SWIFT CA certificate - if you select this box, the installer automatically imports the SWIFT CA certificate on to your PC. 20 May 2016 9
Installation Procedure Clear this box if your company policy does not allow you to import certificates. (In this case, each time that you access the portal you get a warning pop-up message that says you are using an untrusted certificate. Click OK on the warning, the pop-up closes, and you can access the portal.) Note If you clear this option and you want to import the SWIFT CA certificate after the token software is installed, then refer to the SWIFT Certificate Centre Troubleshooting Guide on the User Handbook Online for the SWIFT CA certificate import procedure. Configure Browser settings - if you select this box, then the installer enables TLS version 1.0, TLS 1.1 and TLS 1.2 on your internet browser and disables SSL 2.0 and SSL 3.0 as these options are considered not secure. Please check the recommended TLS and SSL settings in the section Configure Internet Explorer Settings on page 6 and the section Configure Java Settings on page 7. When you have selected your installation options, click Next. 3. The SWIFT Token Client Location window opens. It shows the proposed folder location for the software installation files. If you want to change the default location, then click Browse... and navigate to the required folder for installation. However, the SafeNet authentication software is stored in a default folder that cannot be changed. The location of this software is shown in the field SafeNet Authentication Client Folder Name. Click Next. 4. The installer then runs a test to verify that the PC can support the token software installation. This can take a few moments to complete. If one or more of the configuration tests fail, then the System Configuration Test Results window opens. If all of the configuration tests are successful, then the SWIFT Token Client Installer confirmation window opens (see the next step). 20 May 2016 10
Installation Procedure The tests compare the Recommended conditions for installation to the Actual conditions of the user's PC. The Result in each case appears as OK, as a Warning or an ERROR. If there is a Warning/ERROR, then an explanation appears in the lower half of the screen. In the case of a Warning, the installation can continue. In the case of an ERROR, it cannot. In the example above, the PC does not have a recommended version of Java installed on it. It is only a Warning because the installation can complete with a lower version of Java, but there can be problems when accessing the SWIFT portal. In this case, there is also a link directly to the Java web site from where you can download the latest version of Java software. Click Next. 5. The SWIFT Token Client Installer confirmation window opens. It confirms the actions that are performed during installation. 20 May 2016 11
Installation Procedure Click Install to proceed with the installation. The installation can take a couple of minutes. Do not interrupt the installation procedure during this time. 6. The results of the installation appear. If there is a Warning, then an explanation appears at the bottom of the window. Click Next. 7. The Installation Complete window opens. 20 May 2016 12
Installation Procedure Click Finish. 8. The Reboot notice window opens. Restart your computer to complete the installation. Click Restart now or Restart later. 20 May 2016 13
Install the Token Software in Silent Mode 6 Install the Token Software in Silent Mode In silent mode, you can remotely install the token software without interactive user input. The installation procedure takes the input from a response file instead. You must extract the installer files to one location, and use a script to install the token software in silent mode. Prerequisites To install or remove the token software on PCs in silent mode, you must have administrator rights for all of the PCs involved. Note Procedure SWIFT recommends that you close all other applications running on the PC before installing the token software. 1. Extract the contents of the zip file Personal_token_install.zip, including the Silent subfolder to a folder of your choice. 2. Start a DOS command window and navigate to that folder. Execute the following command to start the silent installation: Personal_token_install.exe -silent silent\silentinstall.properties If you want to customise the installation, then you can do so by setting the options in the file silent-install.properties. This file provides the explanation of each option available. 20 May 2016 14
Remove the Token Software 7 Remove the Token Software You must have administrator rights on each PC from which you want to remove the token software. 7.1 Remove the Token Software in Interactive Mode Procedure 1. From the Control Panel menu, ensure that you have the View by: Category option active. Click the link Uninstall a program. The Uninstall or change a program window opens. 2. Select the appropriate SWIFT Token Client program from the list and click Uninstall. The Welcome to the SWIFT Token Client Uninstaller window opens. 3. Click Next. Click Yes to confirm the uninstallation. The Uninstallation Complete window opens. Click Finish. The Reboot notice window opens. The token software is removed, but you must restart your computer for the uninstallation to take effect. You can choose to Restart now or Restart later. 7.2 Remove the Token Software in Silent Mode In silent mode, you can remotely uninstall the token software without interactive user input. To install or remove the token software on PCs in silent mode, you must have administrator rights for all of the PCs involved. Note The directory in which the uninstall command is executed is important. The command must not be under the installation directory otherwise the uninstaller will not be able to remove some installation files. 20 May 2016 15
Remove the Token Software Execute the uninstaller as shown in the above example. The uninstall.exe-silent command line requires a response file as argument. A sample response file is present in the installation folder at %PDI_HOME%\..\config\silentuninstall.properties. 20 May 2016 16
Getting Support 8 Getting Support SWIFT is the single point of contact to report all problems and queries that relate to SWIFT services and products. If you require help for the SWIFT Certificate Centre or your personal token, then please refer to http://www.swift.com/certificates. 20 May 2016 17
Legal Notices Legal Notices Copyright SWIFT 2016. All rights reserved. Restricted Distribution Do not distribute this publication outside your organisation unless your subscription or order expressly grants you that right, in which case ensure you comply with any other applicable conditions. Disclaimer The information in this publication may change from time to time. You must always refer to the latest available version. Translations The English version of SWIFT documentation is the only official and binding version. Trademarks SWIFT is the trade name of S.W.I.F.T. SCRL. The following are registered trademarks of SWIFT: the SWIFT logo, SWIFT, SWIFTNet, Accord, Sibos, 3SKey, Innotribe, the Standards Forum logo, MyStandards, and SWIFT Institute. Other product, service, or company names in this publication are trade names, trademarks, or registered trademarks of their respective owners. 20 May 2016 18