Instructions for the installation of electronic banking
Transcription
Instructions for the installation of electronic banking
Instructions for the installation of electronic banking software and hardware ( - ActivClient 6.2) CONTENT INTRODUCTION ......................................................................................................................... 1 INSTALLING THE ACTIVCLIENT 6.2 SOFTWARE .................................................................. 2 REQUIRED SOFTWARE AND HARDWARE ...................................................................................... 2 INSTALLING ACTIVCLIENT 6.2 SOFTWARE ................................................................................... 3 UNINSTALLING THE ACTIVCLIENT 6.2 SOFTWARE PACKAGE ......................................................... 6 INSTALLING THE SMART CARD READER ............................................................................. 7 BASIC INSTRUCTIONS FOR OPERATIONS WITH THE ACTIVCLIENT 6.2 SOFTWARE ... 10 CHANGING THE PIN................................................................................................................. 11 UNLOCKING THE LOCKED SMART CARD ..................................................................................... 12 INSTALLING ELECTRONIC BANKING SOFTWARE COMPONENTS .................................. 15 BASIC INSTRUCTIONS FOR THE USE OF BANKA CELJE INTERNET SERVICES ........... 17 ASSISTANCE - INSTALLATION AND USE ...................................................................................... 17 APPENDIX 1: DOWNLOADING THE BANKA CELJE DIGITAL CERTIFICATE .................... 18 QUALIFIED DIGITAL CERTIFICATES ............................................................................................ 18 BANKE CELJE, D.D., DIGITAL CERTIFICATES .............................................................................. 18 COMPONENTS REQUIRED FOR DIGITAL CERTIFICATE DOWNLOAD ............................................... 18 DOWNLOADING A NEW DIGITAL CERTIFICATE ............................................................................. 22 RENEWING A VALID DIGITAL CERTIFICATE ................................................................................. 23 APPENDIX 2: INSTALLING THE FIREFOX BROWSER SOFTWARE MODULE ................... 26 APPENDIX 3: ELECTRONIC SIGNATURE IN MOZILLA AND FIREFOX BROWSERS ........ 30 Introduction These instructions describe the procedures necessary for setting up electronic banking. Prior to using the system you need to install the appropriate software for operations with a smart card or key, additionally drivers for the smart card or smart key reader must also be installed. Should you be using a smart card or key you got from Banka Celje you must also install the ActivClient software, ActivCard Gold is also acceptable (Windows 7 or Vista are not supported). If you are a Microsoft Windows ME / 98 / 95 user, the ActivClient software is not a suitable choice for your system. When logging into electronic banking the user is identified with their digital certificate, which has been issued by Banka Celje or a qualified certifier / issuer of digital certificates. Should you still not be in possession of a digital certificate and you intend to use a digital certificate issued by Banka Celje, you can acquire one through the service on the bank's website after ordering in advance – the procedure is described in detail in ‘‘Appendix 1’‘ to these instructions. Due to a more advanced operation of internet services, some cases require the installation of required components (e.g. the component for electronic payment order signatures, the component for the acquisition of a digital certificate, ...). The procedures for the installation of certain components are described in these instructions, in other cases however you should follow the instructions in the warning pop-up informing you of a missing component. Assistance and information pertaining to the installation of software is available over the phone every workday between 8 a.m. and 4 p.m. at the numbers: - +386 (0)3 422 14 08, - +386 (0)3 422 14 09, - +386 (0)3 422 10 79. Assistance and information is also available through the e-mail address: servis@bankacelje.net. -1- Installing the ActivClient 6.2 software Required software and hardware Prior to the installation of the ActivClient 6.2 software make sure that your existing software (operating system) and hardware comply with the minimum requirements as specified below. Installed software You should have one of the following operating systems installed on your computer: • • • • • • Windows 2000 with Service pack 4 Windows XP Professional with Service pack 2 or 3 Windows Server 2003 Windows Server 2008 Windows Vista Windows 7 • • Internet Explorer 5.5 SP2 or newer Mozilla Firefox or Mozilla Existing hardware The hardware below represents the minimum requirements for normal operation using the ActivClient 6.2 software: • a minimum of 100 MB of free disk space, • at least 128MB of memory (with Windows 2000 or Windows XP at least 256MB and 512MB if using Windows 7 or Vista), • a free USB expansion port, • a PCMCIA slot should a PCMCIA reader be installed (laptops), • Pentium II comparable or better processor. -2- Installing ActivClient 6.2 software Administrator rights In Windows 2000, Windows XP, Windows Vista or Windows 7 environments the installation of the software is only possible with administrator rights. Should you not have these rights, turn to the authorised administrator at your company. After installation users from other user groups are also enabled to use the software. Installation process Should you be installing the ActivClient (or ActivCard Gold) software onto an HP laptop with the ‘‘HP Protect Tools’’ software package already installed, it is necessary you remove the ‘‘HP Java Card Security’’ subcomponent prior to installation. ! If you do not do so, the ActivClient will be unable to install and it will also not be possible to remove the files transferred during the failed installation. You are also risking the failure of the operating system failure on your computer. Additional information: http://www.hp.com, http://www.crea.si/WWW/Pages/PomocInPodpora/FAQ.aspx Figure 1: Electronic banking installation start-up menu Click here to install ActivClient 6.2 After the installation has been started, either automatically from the installation disk or manually by double-clicking the Setup.exe file, the installation program first checks whether Microsoft Installer has already been installed on your computer. If it has not yet been installed, it installs automatically and setup continues. In some cases it is necessary to restart the computer (as instructed on screen). -3- After a short check of your PC the ActivClient 6.2 welcome window appears: Figure 2: ActivClient 6.2 installation welcome window After clicking ‘‘Next’’ the License Agreement window appears: Figure 3: License Agreement window Tick the ‘‘I accept the terms in the license agreement’’ option and click ’’Next’’. If you do not accept the terms of the license agreement installation is cancelled. -4- Figure 4: Select setup type Confirm installation of selected components using the ''Install'' button. Figure 5: Install ActivClient 6.2 After installation has been concluded you can view the readme.txt file, containing detailed information on the ActivClient 6.2 software package or simply skip this step (untick the ’’Show the readme file’’) and restart your computer. -5- Figure 6: Installation completed If you had pre-installed the Mozilla Firefox and Mozilla browsers a support package for smart card operations is also installed for both. When the two browsers are installed after installation, an additional manual installation of a software module, enabling access to the digital certificate stored on the smart card, is required. Instructions for the installation of this module are included in the appendix to these instructions and at http://www.bankacelje.si/navodila_eb. Uninstalling the ActivClient 6.2 software package 1. Click the Add/Remove Programs icon in the Control Panel. In Windows Vista click the Programs and Features icon. 2. Look for the ActivClient program in the programmes list and right click the Add/Remove option or the Change option in WIN2000. 3. In the pop-up window click Remove, then confirm by click Remove again in the following window. Complete the uninstallation by clicking Finish. 4. Restart computer. -6- Installing the smart card reader To access digital certificates and other information features on the smart card, the PC needs to be equipped with an appropriate smart card reader and the corresponding drivers. The ActivClient software is designed to function with most PCSC compatible readers on the market and if your computer is already equipped with one of these (produced by e.g. OmniKey, Oberthur, Datakey, Towitoko) adding an additional reader is not required. Installing ActivIdentity USB Reader v3.0 (and older versions) Connect the reader after installing the ActivClient 6.2 software. USB readers should only be connected to the computer after corresponding drivers have been installed. Consult the table below on the type of driver to be installed. Since October 2007 Banka Celje, d.d., has been issuing v3.0 readers. Should you pre-own a smart card reader, you need to first ascertain which reader version you are in possession of. The version is indicated on the underside of the reader. If you own a smart card reader by a different manufacturer and the drivers for it have not yet been installed on your computer, install them from the CD that came with the reader. Reader Type: USB reader version 3.0 USB reader version 2.0 USB reader COM reader PCMCIA reader Indication on the underside: ActivIdentity USB Reader v3.0 ActivIdentity USB Reader v2.0 P/N: ZFG-9800-AB (also AA or AC) Model: ACTR-01 PCMCIA in large letters -7- If you are using the USB v3.0 card reader, select the first option - ‘‘USB reader ver. 3’’ from the ‘‘Special readers’’ menu on the CD installation screen (should you be using the Windows 98 or Windows ME operating systems, select USB reader ver. 3 (Win 9x)). If using a different reader version, select the appropriate driver from the list of drivers. Figure 11: USB reader installation Plug the device into a free USB port on your PC. One of the possible forms with the label used for such a port is shown on the left. When the device is turned on, Windows will install the device drivers automatically. If you are using the Windows 98, 98SE or ME operating system, restart the PC after switching the device on for the first time. The reader will only be accessible and operational after you have done so. -8- Installing the PCMCIA reader The PCMCIA reader is designed to be used with portable laptop computers and is compatible with the PCMCIA or PCCard standard. It fits into the free PCCard I, II or III slot and is supported in the Windows 9x, NT 4.0, 2000, XP, Vista or Windows 7 operating systems. The reader installation is simple as it supports Windows Plug-and-Play. First install the device driver and then insert the reader into the PCMCIA slot by holding the metal part sticking out of the reader structure and place it into the slot. Place the reader so that the serial number is located on its underside. Figure 11: PCMCIA reader installation -9- Basic instructions for operations with the ActivClient 6.2 software Work with the smart card and its content requires certain operations to be completed, such as: • changing the PIN, • unlocking the locked smart card. Changing or unlocking the PIN can be completed with the application, whose icon is located on the task bar, next to the clock. Double clicking it initialises the smart card or smart key management application. Should the smart card not have been inserted into the reader at start-up, a warning pops up, informing you to do so. Figure 12: Enter PIN window Figure 12: Smart card Unlock Code display window - 10 - ! The number of incorrect PIN entries is limited. Usually the card will automatically lock after 6 consecutive incorrect PIN entries. Access to the data on the locked card is only possible after the Unlock Code is entered. Exceeding the number of incorrect Unlock Code entries will lock the card permanently, rendering it useless. Therefore, it is important to keep the Unlock Code in a safe place. Changing the PIN To increase security it is recommended to change the PIN periodically. Also perform the procedure below when there is reason to suspect that another person has obtained information on your PIN and fraudulent use is a possibility. The code change procedure is simple. The same rules apply to the new PIN as applied at initialisation; length between 4 and 25 characters, numbers and letters may be used. It is recommended not to use caron characters (č, ž, š), the ‘‘z’’ and ‘‘y’’ characters and others, which are differently allocated in accordance with keyboard layouts. The procedure is the following: 1. Insert smart card into reader. 2. Start ActivClient – PIN Change Tool. 3. Enter your PIN, then the new one (as changed), which you should confirm again in the window below: Figure 13: Change PIN window Enter the old PIN into the first box and the new one in boxes two and three. Confirm the change by clicking ’’Next’’. If no mistakes have been made while entering the new PIN, a message appears informing you of a successful PIN change. - 11 - Figure 14: Notification of successful PIN change Unlocking the locked smart card The smart card locks automatically when the PIN has been entered incorrectly too many times. Prior to the final PIN entry attempt a warning pops up stating ‘‘LAST ATTEMPT before the card will lock’’. Figure 15: Notification of incorrect PIN entry - 12 - Figure 20: Last PIN entry attempt notification. If the card locks, the below message appears: Figure 21: Smart card locked message After clicking the OK button a window with data on the smart card does appear, however certain information is no longer visible. To unlock the card, an Unlock Code is required – should you not have one, you can apply for it in writing by turning to the electronic banking technical support service. When in possession of the code, select Tools from the menu, then select the ‘‘Unlock Card’’ option. ! One of the options in the Tools menu is also the ‘‘Reset Card ...’’ option. In no event use that option, as it will result in the loss of all data stored on the smart card and cause the Unlock Code to change as well! - 13 - The window for the entry of the Unlock Code pops up: Figure 6: Smart card Unlock Code entry window Enter the Unlock Code and then enter the new PIN twice. The application confirms successful entry with the following pop-up window: Figure 22: Smart card successfully unlocked Access to digital certificates on the smart card is thus enabled. Keep the Unlock Code in a safe place as it remains the same and may be required in the future. - 14 - Installing electronic banking software components After the installation of the ActivClient software you also require a digital certificate for full operation and special components (e.g. ActiveX) for certain electronic banking services when using the Internet Explorer browser. To facilitate transparency and installation we have prepared a special application for the installation of components required for operation. Figure 23: Component install application start-up After selecting the option in the menu (Figure 23) an install application opens, allowing you to select the individual installation steps. Figure 24: Component install application - 15 - Selecting ‘‘Install ActiveX elements’’ installs the electronic signature components, allows for operations in the collection centre, in electronic form sheets and also installs the components for the acceptance of digital certificates. Selecting ‘‘Add sites to trusted sites’’ adds electronic banking internet addresses to trusted sites. You can view the setting under Internet Options in the Security tab. Selecting ‘‘Install the Banka Celje, d.d., root digital certificate’’ adds the root digital certificate to trusted issuers. Clicking the ‘‘Install’’ button installs the selected options. ! In case of error when installing the root digital certificate, it may also be installed manually. Installing the root certificate usually does not significantly influence the functionality of the services, however with its installation warning messages pertaining to unknown sites and invalid digital certificates no longer appear. All of the selected components and settings can also be installed or set manually, however the process is a bit more complex, as security settings must often be adjusted accordingly as well. After you have clicked the ‘‘Verify’’ button, a window pops up displaying the currently installed ActiveX components. Figure 25: Installed components display The ‘‘Remove’’ button uninstalls certain components. These also get uninstalled if they were installed manually. Close the application by clicking the ‘‘Close’’ button. - 16 - Basic instructions for the use of Banka Celje internet services Once you have installed the ActivClient 6.2 software and the card is operational, you need to download a digital certificate for it prior to using it for the first time. You received a detailed description of the procedure together with the card. Download the digital certificate at http://www.banka-celje.si/cert; instructions are also available (Appendix 1). If you hold a qualified digital certificate issued to a company and you have already given notification of the data on the digital certificate for operations with the bank, you may start logging into the bank’s web services. You can access the following web services at http://www.banka-celje.si/eb: • • • • domestic and international payments business cooperation collection centre electronic form sheets. When you click the name of the desired service, the page asks you to select the digital certificate to be used. Once you have confirmed the selection of the digital certificate, you are required to enter the card’s PIN. Correct entry gives you access to the desired service. In addition to the Internet Explorer browser you can also use the Mozilla Firefox and Mozilla. If the browser was installed prior to the installation of ActicClient, the appropriate software components will install automatically. Other cases require manual installation of a software module, enabling access to the digital certificate stored on the smart card. . Instructions for the installation of this module are included in the appendix to these instructions and at http://www.banka-celje.si/navodila_eb. Assistance - installation and use Assistance and information pertaining to procedures employed and the use of services is available over the phone at the numbers 03 422 14 08, 03 422 10 79 and 03 422 14 09 or at: servis@banka-celje.net. - 17 - Appendix 1: Downloading the Banka Celje digital certificate To access the Banka Celje electronic banking services you require an adequate digital certificate issued in the name of the user within your company. Qualified digital certificates You can use qualified digital certificates from the following issuers: Halcom-CA • Pošta®CA • Sigen-CA To use a qualified digital certificate you are required to send the proper form sheet on the identity of the digital certificate to the bank. Halcom-CA attaches such a statement to the package you receive per post, while you must fill it in by hand when using one of the other two. You will find more instructions and information on the use of qualified digital certificates at http://www.banka-celje.si/kvcert. Banke Celje, d.d., digital certificates In addition to the qualified digital certificates, you may also use digital certificates issued by Banka Celje. Such digital certificates can only be used at the Banka Celje website and have no wider spectrum of use as qualified digital certificates. The Banka Celje digital certificates are downloaded exclusively to the smart card or the smart SIM key. The download procedure is identical in both cases. Using the smart card or the smart SIM key provides the advantage of the digital certificate being protected against removal from the medium. Also, when replacing the computer or the operating system a new download is not required. The digital certificate is valid for 2 years and its’ application must be renewed prior to expiry. Digital certificates can only be downloaded by using the Internet Explorer web browser, ver. 5.5 or newer. Components required for digital certificate download Prior to the first download to a certain computer, appropriate components must be downloaded, ensuring the digital certificate is recorded to the smart card or key. You are not required to download these components, if they had already been installed with the use of the component install application (page 15). Enter http://www.banka-celje.si/cert into your browser and if you get the message that components have not been installed, this must be completed before you continue (click on the link shown). Conversely (components already installed) you may continue with the digital certificate download or renewal activities. - 18 - Figure 1: Installing components You need to install the Banka Celje root digital certificate in the first step. Clicking the link for digital certificate installation opens a window requiring you to click the ‘‘Open’’ button. Click the ‘‘Install certificate’’ button Figure 2: Installing root digital certificate - 19 - This opens the digital certificate import wizard, where you move between individual steps by using the ‘‘Next’’ button. When presented with the ‘‘Certificate store’’ option select ‘‘Trusted Certification Root Authorities’’ and click ‘‘Browse’’. Figure 3: Selecting the appropriate certificate store In the new pop-up window tick the ‘‘Show physical stores’’ option and find the ‘‘Trusted Root Certification Authorities’’ folder, then choose ‘‘Local Computer’’. Confirm by clicking on the ‘‘OK’’ button and proceed by clicking ‘‘Next’’. In the second step add the https://webcert.banka-celje.si website to trusted sites: - select ‘‘Tools’’ and then ‘‘Internet Options’’ from the menu; - click on the ‘‘Security’’ tab and select the ‘‘Trusted sites’’ icon; - click the ‘‘Sites’’ button; - enter https://webcert.banka-celje.si in the entry field for trusted sites and click the ‘‘Add’’ button https://webcert.bankacelje.si; - if using Windows Vista, untick the ‘‘Enable Protected Mode’’ box; - confirm entry by clicking the ‘‘OK’’ button. Figure 4: Adding website to ‘‘Trusted sites’‘ - 20 - The third step requires you to install components – the adequate ActiveX component is installed. Click the ‘‘Install components’’ link. Should you be notified that the installation was unsuccessful and a yellow background message appears at the top of your screen, click on it and select ‘‘Install ActiveX Control’’. When the page refreshes, click ‘‘Install components’’ once again. Figure 5: Unsuccessful component installation When prompted whether or not you wish to install the components for smart card operations, click the ‘‘Install’’ button. Figure 6: Confirming component installation Upon successful confirmation a message pops up to inform you of successful installation of the component. Figure 7: Component installation successful - 21 - Once the component is installed, proceed with the download or renewal of the digital certificate at the http://www.banka-celje.si/cert website. Figure 8: Download / renew digital certificate Downloading a new digital certificate If you have received the notification with the reference number as well as the authorisation code (the first per e-mail, the second per regular mail), select the ‘‘Download new digital certificate’’ link. Insert smart card or key, enter both codes and click on the ‘‘Request digital certificate’’ link. Figure 9: Enter new digital certificate generation codes - 22 - If in possession of a valid digital certificate, for which you have received notification instructing you to renew it, select ‘‘Renew existing digital certificate’’. Smart card verification is initialised and if inserted, you are required to enter the PIN to access the smart card. Figure 10: Enter PIN to access smart card After the correct PIN entry the download process continues with the progress report displayed on screen. If you are using the Windows 7 or Vista operating system, the individual steps of the process need to be confirmed – select the ‘‘Yes’’ option. Once the digital certificate has been downloaded to the smart card or key, you are given access to electronic banking. Figure 11: Completed digital certificate download process Renewing a valid digital certificate In case you are renewing a still valid digital certificate (you will be notified per regular mail and e-mail), click the ‘‘Renew existing digital certificate’’ link (Figure 8). ! If you have missed the digital certificate renewal deadline, you must apply for a new one – an application for the issue of a new digital certificate must be submitted in writing. - 23 - A window with brief instructions for the download of the digital certificate pops up. Figure 12: Brief instructions and notes pertaining to the renewal of the digital certificate If you have not yet inserted the smart card or key, do so now and click ‘‘Next’’. Figure 13: PIN entry for access to smart card After the PIN has been entered the smart card or key verification begins and then the application asks you to choose the digital certificate you intend to renew. Select the adequate digital certificate and its description pops up. Figure 14: Confirmation of selected digital certificate renewal - 24 - If the digital certificate shown on screen is appropriate, click the ‘‘Renew digital certificate’’ link. Figure 15: Confirmation of access to digital certificates After confirmation of access to digital certificates, the generation of the digital certificate begins. Once you have downloaded the new digital certificate you have the option of deleting the old digital certificate from the card or key. We recommend that you delete the old digital certificate, as it may cause problems when you try to access electronic banking otherwise. Figure 16: Confirmation of old digital certificate deletion If the download of the digital certificate is successful, a message pops up informing you that the process has successfully been completed. Figure 17: Digital certificate renewal completed You may now use the new digital certificate to log into the electronic banking.. - 25 - Appendix 2: Installing the Firefox browser software module The screens used in the figures featured in these instructions may differ from yours due to the usage of different Firefox versions. The latest Firefox browser version (also available in Slovene) is 3.6.x. The latest version is available at: http://www.mozilla.com/firefox/all. If you already have Firefox Installed on your computer when you are installing ActivClient 6.2 program, then the installation will modify Firefox by itself, and Firefox will be ready to read the smart cards. If Firefox is installed afterwards, then the easiest way to modify it, is by going to Add/Remove programs and modify the installation of ActivClient 6.2 program. If the new modul isn’t added, you have to go to Start and click the Control Pannel, where you have to find ActivClient 6.2 and click Modify. In the Custom Setup you have to click on Digital Certificate Services where you choose Firefox and Thunderbird support and choose the “This feature will be installed on local hard drive”. Then you click Next and allow for the installation to finish. Figure 1: Add Firefox support to the installation - 26 - In order to check the status of digital certificates and security modules in Firefox, you need to open menu “Tools” and select the last line “Options”. Figure 2: Options in Firefox At the top of the ‘‘Options’’ window click ‘‘Advanced’’, then select the ‘‘Encryption’’ tab (‘‘Security’’ in older versions) and click on ‘‘Security devices’’ as shown in Figure 3 below. Figure 3: Loading and deleting security modules - 27 - A new window opens, listing all the security modules currently installed in Firefox. Figure 4: ActivClient module successfully added to module list If a smart card has been inserted into the reader, select ‘‘Manage certificates’’. After you enter the PIN, the following window shows the digital certificates contained on the card. Figure 5: List of certificates contained on the card after successful module installation - 28 - The final step prior to using the Firefox browser is the activation of the electronic signature component, which is described in more detail in Appendix 3 to these Instructions. Afterwards the browser is prepared for electronic banking use. You log on at the http://www.banka-celje.si/eb web address by clicking the link to ‘‘Domestic and international payments’’. Firefox and 64-bit systems Firefox is a 32-bit browser and that is the reason why when in combination with 64-bit versions of Windows Vista or Windows 7 you will need another module for accurate work of ActivClient in Firefox. You can add the module by opening Firefox, clicking Tools, where you choose Options (see figure 2), then you have to select “Advanced”. In Advanced you Click “Encryption” (see figure 3) and “Security devices”. After you click the button Load on the right side (see figure 4), a window will pop up. In that window you have to write a “Module Name” and find where the security module file is located by slicking “Browse” button. In this folder C:\Program Files (x86)\ActivIdentity\ActivClient a file acpkcs211.dll is located. You have to confirm your choice and with that, the adding of the module is finished. Figure 6: Adding a modul The collection centre and electronic form sheets are not supported in this browser, so you are still required to use the Internet Explorer for access to these services. - 29 - Appendix 3: Electronic signature in Mozilla and Firefox browsers To sign payment orders an additional browser setting is required. After logging on to electronic banking at the http://www.banka-celje.si/eb website (‘‘Domestic and international payments‘‘) the application options appear. Position your mouse over the ‘‘Help‘‘ menu and select ‘‘Components‘‘, then one of the language versions. Click the word ‘‘TUKAJ‘‘ in the instructions that appear. The appearance of the instructions on the server is approximately the same as shown below. Figure 1: E-signature installation in Firefox - 30 - After you have clicked the word ‘‘TUKAJ‘‘ another window pops up, where you must tick all three options, then confirm you selection by clicking the ‘‘OK‘‘ button. Figure 2: Selecting options prior to confirming the addition of the certificate After you have completed the above, the browser (Mozilla or Mozilla Firefox) is ready for the use of electronic banking services. - 31 -