FIIT. Financial Institution Integration Tools. Installation Instructions

Transcription

1 FIIT Financial Institution Integration Tools Installation Instructions

2 ACH Alert uses a proprietary software application called Financial Institution Integration Tools (hereby referred to as FIIT) for transferring ACH files between the financial institution and Fraud Prevention HQ. After installation, FIIT runs in the background as a Windows service. FIIT will send and receive all Fraud Prevention HQ, BIO-WIRE, C.O.P.S. and PRO-TECH data. SECURITY Before transmitting any files, FIIT will encrypt the file before transmission via PGP. The file transfer process also takes place over SSH, which encrypts all traffic during transmission. End of Day files that FIIT downloads are also encrypted by Fraud Prevention HQ before they are downloaded. All files are encrypted during transit and at rest. PREREQUISITES The only two prerequisites before installing FIIT are Java SE 8 and the Java 8 Cryptographic Extension files. If Java SE 8 and the Java 8 Cryptographic Extensions are not already installed, please refer to the Installing Java 8 with Cryptographic Extensions Instructions to support FIIT documentation. REQUIREMENTS FOR INSTALLATION FI Responsible A server with Java SE 8 and the Java 8 Cryptographic Extensions already installed Provided by ACH Alert FIIT MSI Installer Link Username for download Password for download FI Code FIIT Password FIIT Server Address NOTE: All elements provided by ACH Alert will be done so via via secure during the implementation process. Version 1.0 Page 2 of 10

3 FIREWALL CONSIDERATIONS FIIT requires a maximum of three outgoing TCP ports to be opened in the firewall. TESTING ("CAT") Opening this port is optional and only required if the FI subscribes to the CAT environment. Web Site File Transfer FIIT Control Hostname sftp.fphq.us IP Port http: 80 https: 443 sftp: prchat: 4455 PRODUCTION Web Site File Transfer FIIT Control Hostnames sftp.fraudpreventionhq.com Domain sftp.fphq.us IP Port http: 80 https: 443 sftp: prchat: 4455 The FIIT application originates all network traffic. Upload: If there are files that need to be uploaded, FIIT will initiate the upload process. Download: FIIT also checks for End of Day files that need to be downloaded and initiates the download. Version 1.0 Page 3 of 10

4 EXAMPLE SCENARIO In this example walkthrough, we will download and install FIIT on Windows Server 2012 R2 64-bit. Other versions of Windows will be very similar. DOWNLOAD FIIT During implementation, you will be provided a secure with a direct download link to the latest version of the FIIT MSI installer. The secure will also contain a Username and Password to enter before downloading the FIIT installer. After entering the provided Username and Password, save the FIIT MSI installer to the Desktop. If you receive any warning messages from your browser about downloading MSI files, it is safe to ignore them while downloading the FIIT Installer. INSTALLING FIIT 1. Go to the Desktop and double-click the FIIT MSI installer to begin the installation. Or you can right-click and select Install. 2. When the Installation Wizard begins, click Next. Version 1.0 Page 4 of 10

5 3. Read the End-User License Agreement, check the I accept the terms in the License Agreement box and click Next. 4. Select a Destination Folder to install FIIT. In this example, we will leave the default value of C:\Program Files (x86)\ach Alert\FIIT\ Version 1.0 Page 5 of 10

6 5. At the FIIT Configuration Options window, fill out the required fields FI Code Provided by ACH Alert Password Provided by ACH Alert FIIT Server Address Provided by ACH Alert FIIT Server Port 4455 Data File Directory C:\ACH Alert Data\ NOTE: The FIIT Application itself will install under C:\Program Files (x86)\ach Alert. The Data File Directory is where Pro-Tech, COPS, Wire, and End of Day files will be located. The first three values will be provided via secure from ACH Alert Version 1.0 Page 6 of 10

7 6. At the Service Logon Credentials window, select if you want to run the FIIT service as LocalSystem, or if you have a dedicated User Account in your environment, enter those credentials now. In this example, we are running the service as LocalSystem. Click Next. 7. At the Ready to install Financial Institution Integration Tools window, Click the Install button. FIIT has now been installed. NOTE: During the installation, if you receive the error There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor, you may need to reboot your server. This can happen on a server that has recently had Java SE 8 and the Java Cryptographic Extension installed and hasn t been restarted. Version 1.0 Page 7 of 10

8 8. Navigate to Start -> Control Panel -> Administrative Tools -> Services Look for a Service named FI Integration Tools <FI Code>. In our example the Service name shows up as FI Integration Tools AcmeFI. Verify that the Service is Running. If it is not, right-click it and select Start. DIRECTORY STRUCTURE AND LAYOUT After installation, and depending on the services you are subscribed to, you will see subdirectories for Fraud Prevention HQ, BIO-WIRE, C.O.P.S. and PRO-TECH. During the installation, C:\ACH Alert Data\ is the default data directory for ACH and End of Day files. Version 1.0 Page 8 of 10

9 Module Location Description C:\ACH Alert Data\conf Fraud Prevention HQ BIO-WIRE C.O.P.S. PRO-TECH C:\ACH Alert Data\logs C:\ACH Alert Data\temp C:\ACH Alert Data\biowirefedwire\incoming C:\ACH Alert Data\biowirehybrid\incoming C:\ACH Alert Data\cops\incoming C:\ACH Alert Data\cops\upload_archive C:\ACH Alert Data\cops\endof-day C:\ACH Alert Data\protech\incoming C:\ACH Alert Data\protech\upload_archive C:\ACH Alert Data\protech\end-of-day Where FIIT stores its configuration. FIIT configures and provisions itself automatically, so there should be no need to modify these configuration files expect at the direction of ACH Alert support personnel. Where FIIT stores its log files. If you have any problems with FIIT that require troubleshooting, ACH Alert support personnel may ask that you send the contents of this directory for further analysis. FIIT s temporary working directory. This is where you will place Fedwire Wire files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. This is where you will place Hybrid Wire files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. This is where you will place ACH batch files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. After a COPS ACH batch file has been encrypted, it is placed in the cops\upload_archive folder. This is where you can check to see that a file has been both encrypted and uploaded to ACH Alert s online processing center. FIIT will periodically ping the ACH Alert online processing center for End of Day files. When FIIT detects that a new End of Day file is waiting, it will be downloaded to this folder. This is where you will place ACH files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. After a Pro-Tech ACH file has been encrypted, it is placed in the protech\upload_archive folder. This is where you can check to see that a file has been both encrypted and uploaded to ACH Alert s online processing center. FIIT will periodically ping the ACH Alert online processing center for End of Day files. When FIIT detects that a new End of Day file is waiting, it will be downloaded to this folder. Version 1.0 Page 9 of 10

10 SUPPORTING MULTIPLE ACH ALERT ENVIRONMENTS ACH Alert provides two online environments. There is the ACH Alert Production environment and the ACH Alert CAT (Customer Acceptance Testing) environment. Access to the CAT environment entails an extra monthly charge. As a best practice, if your Financial Institution has access to both the Production and CAT environments, you will need to install FIIT on two separate servers. One FIIT instance on one server will communicate with the Production environment and the other FIIT instance will communicate with the CAT environment. THE WINDOWS SERVICE FIIT runs as a Windows Service in the background. The name of the service is unique and partially derived from the name of your FI. The format of the Windows Service name is as follows: Display Name Service Name FI Integration Tools <FI Code> FIIT_<FI_Code> NOTE: In our example, the Service Display Name shows up as FI Integration Tools AcmeFI and the Service name is FIIT_AcmeFI. KEEPING JAVA UP TO DATE It is important to remember that if you update Java to a newer version on your server, you will also need to update the Cryptographic Extension files as well or file transfers will fail. Please refer to the Installing Java 8 with Cryptographic Extensions Instructions to support FIIT documentation for updating the Cryptographic Extension files. Version 1.0 Page 10 of 10