Electronic message exchange via Mailbox over Secure Internet (MSI)

Transcription

1 Electronic message exchange via Mailbox over Secure Internet (MSI)

2 KAS BANK is replacing its current KAS-Mailbox application with the new web application Mailbox over Secure Internet (MSI). Key features of this new technology are reliability and security, in addition to ease of use. In this brochure we explain the options for message exchange via our new Mailbox over Secure Internet application as well as how MSI should be configured for use. General Mailbox over Secure Internet is replacing KAS BANK s current mailbox application (KAS-Mailbox). For existing users of our current KAS-Mailbox application, a date will be agreed for them to switch to the new Mailbox over Secure Internet (MSI). For new users, the MSI application will be installed straight away. Mailbox over Secure Internet (MSI) is a web-based tool. The KAS BANK Public Key Infrastructure (PKI) is used for the secure exchange of data. Data communication takes place via the protocol. As a user, you can choose between two versions of Mailbox over Secure Internet: an unattended version with a SmartCard and a version with a user interface. In the unattended version, a Smart Card is permanently located in a Mailbox-dedicated computer, enabling files to be exchanged directly with KAS BANK from the client s back office applications. For security reasons, it is recommended that this computer be placed in a separate and lockable room. In the version with a user interface, each time you wish to exchange files with KAS BANK a separate smart card needs to be inserted after which you will be able to access Mailbox over Secure Internet with a PIN code. It is possible to have both versions operating in parallel within your organisation. Mailbox over Secure Internet (MSI) includes several improvements that have been made in response to our clients requests, among other things. For example, after entering your instructions you will receive immediate confirmation that your instructions have been delivered to KAS BANK. We have also done away with the limit on the volume of the files to be sent and received. Possibilities in relation to file exchange With Mailbox over Secure Internet you can continue to use the existing message formats and message structure in KAS-Mailbox without change. A change does take place, however, if you use the mailbox file converter with which you convert the KAS BANK message format to another format (such as.xls,.txt or.csv). Thanks to the introduction of MSI, your desired message format is automatically created within KAS BANK s systems. MSI has the important advantage that the software required for the file conversions no longer needs to be installed at the user. Mailbox over Secure Internet currently supports the following file formats:.dat (KAS BANK s own format),.xls,.txt and.csv. 1

3 Security The technology that is used to secure Mailbox over Secure Internet is state-of-the-art. Access to the MSI application is granted on the basis of privileges recorded on a SmartCard that can only be accessed via a personalised PIN code. The SmartCard is also part of KAS BANK s Public Key Infrastructure (PKI). This same PKI structure is also used to provide access to KAS BANK s web environment (KAS-Web). If you already use KAS-Web, your current KAS-Web Security Officers can simply add new users for access to using Mailbox over Secure Internet. Support from KAS BANK KAS BANK offers you technical support in converting the KAS-Mailbox application to the new Mailbox over Secure Internet application. To receive this support, simply contact the Integration Services Department on +31(0) or +31(0) You can also send an to edi-beheer@kasbank.com, stating Mailbox over Secure Internet in the subject line. Abbreviated installation instructions In order to use the MSI application, software must first be installed on the PC or server of the client where the MSI application will be used. The software consists of two elements: the Public Key Infrastructure (PKI) software for managing SmartCards and the Mailbox over Secure Internet (MSI) software. We currently support the following combinations of Windows operating systems and browsers: Servers Server 2003R2 32 bits in combination with Internet Explorer 7 or 8 Server 2008R2 64 bits in combination with Internet Explorer 7 (32 bits) or 8 (32 bits) Personal Computers XP Professional Edition 32 bits in combination with Internet Explorer 7 of 8 Vista 32 bits or 64 bits in combination with Internet Explorer 7 (32 bits) or 8 (32 bits) Windows 7 32 bits or 64 bits in combination with Internet Explorer7 (32 bits) or 8 (32 bits) In order to perform a full Mailbox over Secure Internet installation, the following steps must be completed: 1. Download the PKI (Active Client) software from the following location: This software ensures that the SmartCard reader communicates with the SmartCard. The SmartCard must be linked to your mailbox by KAS BANK. N.B.: If you already have KAS-Web with SmartCards, you can skip step Then download the MSI software from the same location: 3. Execute the KasBank.Sec2KasMailboxSetup.msi. 2

4 The following screen appears: Click on Next. The following screen appears: Click on Next. 3

5 The software is installed in the following folder: C:\Program Files (x86)\kas BANK\Sec2KasMailbox\ Once the software has been installed, the following screen will appear: Click on Close. The installation process has now been successfully completed. Structure and use of Mailbox over Secure Internet MSI comprises two elements: configuration of MSI and use of the MSI application. During the configuration of MSI, several settings must be recorded: File formats File locations Retention periods address for communication reporting from MSI (e.g. error reporting) There are two versions of the MSI application: an Attended version and an Unattended version. In the Attended version, users can send and retrieve files themselves. In the Unattended version, files are sent and received, without human intervention, via a SmartCard permanently installed on the PC (preferably in a sealed computer room). Configuration of MSI The configuration of MSI can only be performed by a user with Administrator privileges. Ensure that a SmartCard is present in the SmartCard reader during the installation. The following screen appears: 4

6 Click on Next to proceed to the following screen: N.B.: You can always go back one page using the Back button. If you press Cancel, the installation process will be discontinued. 5

7 Click on Next to proceed to the following screen: Click on the line with the required SmartCard certificate and then on Next to proceed to the following screen: 6

8 The PIN code for your SmartCard must be entered in this screen. You must then select whether or not to save the PIN code. If an Unattended situation is to be created, you should elect to save the PIN code. In case of an Attended situation, you are free in your selection. Click on Next to proceed to the following screen: In this screen, you define which file formats you wish to upload to KAS BANK and from which folders they should be uploaded. You can use the three icons in the upper left corner of your screen to add, change or remove files. Ignore duplicates: In the Unattended version of the MSI application, you can indicate here that there is no need to check whether duplicate instructions may have been sent. The MSI software itself checks as standard whether duplicate instructions have been sent by performing a file comparison check (without headers and trailers) on the messages to be sent. You are therefore advised not to tick the box Ignore Duplicates. In the Unattended version, if identical upload(s) are found, the files to be sent are not offered to KAS BANK for processing. In the Attended version, an additional pop-up screen will always appear as a security measure if identical upload files are discovered. Add, change and remove upload files: In the top left corner of the screen you can see three icons for adding, changing and removing upload files. Click on Add. The following sub-screen will open: 7

9 The following options are available: File Type: SDF - Standard Delimited Format. In this format, each field has a defined length, unlike the Comma or Tab Delimited Format where each field has a variable length and is separated by a character. Dir.dat dir.dat files. This means that a file with the name DATAFILE.DIR is created. The layout of this file is identical to the DATAFILE.DIR file that is generated by MSI when retrieving messages (see also further under: Receiving files from KAS BANK). The first 12 positions of each record contain the file name. This file name refers to the file where the actual data are to be found. When MSI processes retrieved messages, a file is generated with the name DATAFILE.DIR. This file contains the header and the trailer of a message. The data in the message are stored in another file with the name: <MessageType>.<SequenceNo>. For example: the message GLDMTX (geldmutaties / movements in funds) results in a file with the name: GLDMTX.001. Custom: non-standard supporting formats (reserved for future developments). Source Folder This is the folder from where the upload file is retrieved. Source Mask This is the name of the upload file, which may be defined more generally using *.* Save Folder This is the folder in which a back-up of the file that has been sent is saved. Retention period This is the setting for the number of days a back-up file should be retained. The file is automatically deleted after the expiry of the number of days set. 8

10 The two other icons can be used to alter and remove files. Click on Next to proceed to the following screen: In this screen, you define which file formats you wish to download from KAS BANK and from which folders. As is the case with the upload screen, you can see in the top left corner of the screen three icons for adding, changing or removing files. Click on (add). The following sub-screen will open: The following options are available: Message Type The message type to be downloaded. Click on the dropbox arrow to choose a message type. You can also 9

11 select ALL KAS BANK. In that case, all message types agreed with you in advance will be presented for the download. File Format Select the desired file format in which the files should be received. The following file formats are currently supported: KAS-Mailbox layout, Excel layout, Comma Separated layout, TAB separated layout and KAS BANK.TXT./.SDF layout. Save Folder Here you select the folder in which the file is to be saved. File Extension Define the extension that is to be added to the downloaded file. The MSI application suggests an extension (for example,.xls if the Excel layout is selected). Retention period (days) The number of days that retrieved files are to be retained. The files are automatically deleted after the expiry of the number of days set. Click on Next to proceed to the following screen: In this screen you can indicate whether the received files should (also) be printed. For automatic printing, tick the box Enable Remote Printout. Then indicate the (already connected) printer on which the file should be printed out. 10

12 Click on Next to proceed to the following screen: In this screen the settings with regard to messaging for the MSI application are administered. settings You can receive messages by in the Attended as well as the Unattended version. These s c ontain information on error reports, warnings and session reports. In order to receive s from MSI, an SMTP Server with related address must be defined. Please note that this address may be the same as the address to which the messages are to be sent. In order to activate the required messaging, tick the boxes errors, warnings and/or session report and enter an existing address in the box alongside. Eventlog settings Tick the boxes Log errors and/or Log warnings to indicate that you wish to receive reports about these events. Logfile settings The log reporting level can be selected in the Log level dropbox. You can also select the folder where the log reports should be saved. Remember also to set a retention period. 11

13 Session Report File settings Tick the box Session Report File settings to indicate whether the reports on the communication sessions should be saved. Then select the folder where the session reports should be saved. Remember also to set a retention period. Click on Next to proceed to the following screen: In this screen you can test whether the MSI application has been correctly configured by clicking the TEST button. If the test is completed successfully, the following messages appear in the screen: 12

14 Click on Next to proceed to the following screen: This is the final screen in the configuration section. Here a summary is given of the MSI configuration. Click on Finish to save the configuration and then close. You can now use the Mailbox over Secure Internet (MSI) application of KAS BANK. If you require support for the configuration of MSI, please refer to the paragraph Support from KAS BANK. 13

15 2332-EN (1301) KAS BANK AMSTERDAM P.O. Box DB Amsterdam The Netherlands Nz. Voorburgwal RL Amsterdam The Netherlands T: KAS BANK LONDON 5th Floor 10 Old Broad Street London EC2N 1AA United Kingdom T: KAS BANK WIESBADEN Biebricher Allee Wiesbaden Germany T: