PKI CERTIFICATE USER GUIDE AGRESSO

Transcription

1 PKI CERTIFICATE USER GUIDE AGRESSO Before using Agresso Notes on renewals 1st certificate or renewal Manual Enrolment (non-council employee) AUTO-ENROL (council employee)

2 CONTENTS Contents 2 Downloading a PKI Certificate before using agresso 3 Agresso First Time User or renewing PKI Certificate (council employee) 3 Agresso First Time User or renewing PKI Certificate (not employed by council) 6 Notes on renewals 9 How do I know when to install a new PKI Certificate? 9 Finding your Employee ID Number and line manager s surname 9 Key points: A PKI Certificate must be downloaded before an employee can access Agresso Council employees need their Employee ID Number to download their certificate using AUTO-ENROL Non-council employees download their certificate using Manual Enrolment PKI Certificates expire ones issued in 2015 lasted for 12 months, from the first renewal and on-going, PKI Certificates now last for 24 months H&F staff need one certificate, RBKC and WCC staff need one certificate per device Key policy documents: Not applicable This user guide explains why you need a PKI Certificate to use Agresso; auto-enrol for council employees; manual enrolment for non-council employees; and notes on renewing PKI Certificates when they expire. PKI Certificate user guide March

3 DOWNLOADING A PKI CERTIFICATE BEFORE USING AGRESSO In order to use Agresso you must download a PKI Certificate to ensure the safety of your and others information in the system. The certificate protects all data when carrying out transactions in Agresso. Note on renewing PKI Certificates: The initial PKI Certificates issued in 2015 lasted for 12 months. From the first renewal and on-going, PKI Certificates now last for 24 months. AGRESSO FIRST TIME USER OR RENEWING PKI CERTIFICATE (COUNCIL EMPLOYEE) If you are a council employee use AUTO-ENROL. You will need your Employee ID Number which BT SSC ed to you. Follow the instructions below. 1. Click on AUTO-ENROL PKI Certificate user guide March

4 2. Complete the Enrolment Form a b c d e PKI Certificate user guide March

5 (2) Enter the following information: a) Device: Enter the name of the device that this PKI Certificate will be used on. For example Laptop21March2017. Add a date to make the name unique from previous and future certificates. b) Employee ID Number: Enter your Employee ID Number. BT SSC this number to staff as they are set up in Agresso. Do not enter any prefix e.g. TB, just type the numbers. c) Date of Birth: Enter your date of birth. d) Line Manager s Surname: Enter your Line Manager s Surname. Just type the surname starting with a capital letter e.g. Smith. e) Challenge Phrase: Enter a phrase that you can remember in case you need to revoke this PKI Certificate. 3. Click on Submit, two further information boxes will appear. 4. Click OK and then Yes. 5. The PKI Certificate will then be issued. When you click on the ABW Self Service link you will be taken to the Agresso login screen. You can also access Agresso by clicking on the Quick link at the bottom of your intranet s home page. NOTE - if you receive an error message with Status Code: A001 check that you have entered the correct information and spellings. If you continue to receive an error message contact BT SSC. PKI Certificate user guide March

6 AGRESSO FIRST TIME USER OR RENEWING PKI CERTIFICATE (NOT EMPLOYED BY COUNCIL) If you are a third party external user i.e. you are not employed by the council use Manual Enrolment. Follow the instructions below. 1. Click on Third party external users (not employed by the council please click here. 2. Click on ENROL PKI Certificate user guide March

7 3. Complete the Enrolment Form First Name: Enter your first name e.g. John. Last Name: Enter your last name e.g. Smith. Your Address: Enter your address e.g. Employer: Enter your employer s name e.g. Verisign Challenge Phrase: Enter a phrase that you can remember in case you need to revoke this PKI Certificate. 4. Enter a Justification e.g. NHS line manager of Westminster staff so access to Agresso required. 5. Click on Submit and the following message appears. PKI Certificate user guide March

8 6. Once your Manual Enrolment has been approved you will receive an (example below). 7. Make a note of your PIN number (Step 2). 8. Click on the London Framework PKI Certificate retrieval web page link (Step 1). 9. Enter your PIN number and click Submit. 10. The PKI Certificate will then be issued. When you click on the ABW Self Service link you will be taken to the Agresso login screen. Save this url in your Favourites for future access to Agresso. PKI Certificate user guide March

9 NOTES ON RENEWALS Follow the guidance above to renew your PKI Certificate. HOW DO I KNOW WHEN TO INSTALL A NEW PKI CERTIFICATE? Before your PKI certificate expires, you will receive an from pkiadmin@btsharedservices.com To renew your certificate click on which takes you to the London Framework PKI Certification Centre. If you do not renew your PKI Certificate before it expires, when you log-in to Agresso you will automatically be redirected to the London Framework PKI Certificate Centre website. You will need to renew your PKI Certificate before you can access Agresso again. FINDING YOUR EMPLOYEE ID NUMBER AND LINE MANAGER S SURNAME For renewals this is where you can find your Employee ID Number and your line manager s surname in Agresso. Click on the UNIT 4 Agresso link on the front page: PKI Certificate user guide March

10 If you are unsure who your line manager is in Agresso, you can find it following this path: Your employment > Your personnel information > Employment tab > click on your position > Employment relations tab. Your line manager is next to the Employees (RESNO) under Contract. Your line manager Relevant Service Now forms: Not applicable Further advice and information: Not applicable PKI Certificate user guide March