This document contains general instructions on how to install OfficeNet Extra and how to act on first use of OfficeNet Extra.

Transcription

1 Dear Client This document contains general instructions on how to install OfficeNet Extra and how to act on first use of OfficeNet Extra. Preparation before installation of OfficeNet Extra (Creating a Backup)...2 Installation-instruction OfficeNet Extra...3 Starting OfficeNet Extra for the first time (Clean installation)...5 Starting OfficeNet Extra for the first time (Upgrade installation)...7 Conversion manual (Migration of data from OfficeNet Plus)...8 Using OfficeNet Extra in combination with a connection via a gateway...9 Disclaimer: This document has been drafted with the highest possible care. Nevertheless ABN AMRO can not be held responsible for the correctness and completeness of the information supplied.

2 Preparation before installation of OfficeNet Extra (Creating a Backup) If a previous version of OfficeNet Extra is installed, a backup should be created before the OfficeNet Extra 1.5 is installed. Note: Only if a backup of the existing installation is available is it possible to restore OfficeNet Extra if the installation of OfficeNet Extra 1.5 is not successful. Creating a back up of an existing OfficeNet Extra installation Step 1 Determine the location of the OfficeNet Extra files (standard location is C:\Program Files\OfficeNet Extra) and make a copy of this folder. Open Windows Explorer. Locate the OfficeNet Extra folder. Click the name of the folder using the right mouse button and select <Copy>. Select the destination folder. Click on the name of this folder using the right mouse button and select <Paste>. If you do not use shared files in OfficeNet Extra, the procedure for creating a backup is finished and you can proceed with the installation of the new version of OfficeNet Extra. Step 2 (Only applicable if OfficeNet Extra uses shared files ) Open one of the modules in OfficeNet Extra and open the options screen (Action Options). Check the User Data entry. Here you can find the folder containing the shared files (in the example E:\OfficeNet Extra Data). Close OfficeNet Extra and open Windows Explorer. Create a copy of the folder containing the shared files in the same way as described in step 1. Note: If a previous version of OfficeNet Extra is installed that uses shared data it is important to start upgrading at the computer where the reporting module contains the information you wish to include in OfficeNet Extra 1.5. Only the data from the reporting module that is upgraded first will be included.

3 Installation-instruction OfficeNet Extra Before starting the installation: You should contact the network administrator prior to starting a network installation of OfficeNet Extra. Any smartcardreader used with OfficeNet Extra should be connected to the computer before starting the installation of OfficeNet Extra. Step 1 Insert the OfficeNet Extra CD-Rom in your CD-Rom drive. Wait for the installation menu to appear. In case the installation menu does not appear you can start the installation by selecting your CD-Rom drive in Windows Explorer and double-clicking Install.exe. Note: If a previous version of OfficeNet Extra is installed on your computer installation will start at step 4. Step 2 The first screen of the OfficeNet Extra installation is the Select Folder for installation of local parts screen. Here you can select in which local folder the files should be installed. Standard selection is C:\Program Files\OfficeNet Extra. An alternative folder can be selected by clicking the button. Click <Next> to start the installation. Note: The number of subfolders can be no more than 5. When using Windows 2000 the number of characters in the path can be no higher than 33 (this includes spaces). Contact your network administrator when your computer is connected to a (company) network. Only a local folder can be used to install OfficeNet Extra. Step 3 If you want to share data with other OfficeNet Extra users the next screen ( Select folder for the central data ) allows you to select the network location to install the shared information. If you are the only user or you do not want to share data no selection should be made here. Click <Next> to proceed with the installation. Note: The number of subfolders can be no more than 5. When using Windows 2000 the number of characters in the path can be no higher than 33 (this includes spaces). In order to be able to share files on each computer where OfficeNet Extra will be installed the same folder on the networkserver should be selected during each installation. Make sure to always use a driveletter and directoryname (for instance M:\Ondata). Universal Naming Convention names are not supported..

4 Step 4 The following screen ( Select Features ) allows you to select which of the available modules should be installed. A module can be (de)selected by clicking the check box in front of the name of the specific module. The OfficeNet Direct module is the central module and should always be installed. Therefore, it cannot be deselected. A short description of the usage of a specific module is available by clicking the name of a module and will appear in the field to the right of the selection field. Click <Next> to proceed to the next step. Step 5 The following installation screen allows you to select how domestic payment orders created in your financial software should be processed. Batch: All payments are kept together and reported as one payment. Individual: All payments are processed and reported individually. Standard selection is Batch. If necessary this setting can also be changed after installation by selecting <Settings\General> in OfficeNet Direct. Make a selection and continue by clicking <Next>. Note: in order to have your payments processed as batch a contract should be signed with Interpay. Contact your account manager for more information about such a contract. Step 6 It is possible to transfer data from OfficeNet Plus to OfficeNet Extra. If you do not have OfficeNet Plus installed or choose not to transfer the data select <No>. Make your selection and click <Next> to proceed with the installation. Note: The actual conversion of OfficeNet Plus data takes place after the installation is finished. See the conversion manual for more information. Stap 7 When all files have been copied a screen is shown that signals the end of the installation process. This screen offers the choice whether to start OfficeNet Direct after completion. You need to start OfficeNet Direct to enter essential data to be able to work with OfficeNet Extra (see also the information in Starting OfficeNet Extra for the first time ). If you prefer not to start OfficeNet Direct after installation you can deselect this option by clicking in the check box. Click <Finish> to complete the installation.

5 Starting OfficeNet Extra for the first time (Clean installation) To start OfficeNet Extra for the first time select the module OfficeNet Direct. If you were using a previous version of OfficeNet Extra you should continue at Starting OfficeNet Extra for the first time (Upgrade installation). Step 1 When starting OfficeNet Direct for the first time you are required to enter the name and password for the superuser. The superuser is the user that can create users, reset passwords and change settings in OfficeNet Direct. Upon entering the username and password and the confirmation of the password click the <Ok> button to continue. Step 2 A screen is shown next indicating which data is needed to be able to work with OfficeNet Extra. Click <Ok> to enter the data. Step 3 Next the user settings screen is shown. You can enter an abbreviation for the superuser here In this screen also the contract number, contract PO box and the user serial number should be entered. These can all be found on your EB contract. Click <Apply> when the data is completed. Step 4 If you are using financial software to create your payment orders select <Yes>. When you are going to use OfficeNet Extra to create your payment orders select <No> (continue at step 9). Step 5 The next screen offers the choice to select whether the folders standard to OfficeNet Direct or the folders used by your financial software will be used to place payment files for import. If you select <No> the standard folders for OfficeNet Direct will be used and you will have to change the settings in your financial software (continue at step 9). Selecting <Yes> indicates that OfficeNet Direct should use the folders used by your financial software for import.

6 Step 6 Select <Yes> to add folders where files to be imported will be placed. Step 7 In the OfficeNet Direct Import OfficeNet Direct click <Add> in the bottom right. In the pop-up screen you can select for which type of payment you want to add an import folder. Select the type of payment and click <Ok>. Step 8 Enter a name for the new location and select the folder where this type of import files will be stored. To save the new settings click <Apply>. Note : the selected folder should contain only files that are in a format that can be imported by OfficeNet Direct. OfficeNet Extra can import files that comply with the ClieOp-03 or BTL-91 specifications. Step 9 Next step is to enter the security token used and the way in which you will be connecting to the ABN AMRO server. When the entries are complete click <Apply> to continue. Step 10 As a final step in your first session with OfficeNet Extra you can choose to start a communication session to collect account information that is available on the ABN AMRO server. Click <Yes> to start a communication session.

7 Starting OfficeNet Extra for the first time (Upgrade installation) To start OfficeNet Extra for the first time select the module OfficeNet Direct. Step 1 If OfficeNet Extra is installed over a previous version of OfficeNet Extra, you can use your existing username and password to start OfficeNet Direct. The settings for the connection, contract info and import are kept from the previous version of OfficeNet Extra. Step 2 In the next screen you can choose whether you want to use the account statements received in OfficeNet Direct in your financial software. Select <Yes> if you want to make use of this possibility. (Some additional changes need to be made in OfficeNet Direct, these are described at step 4). If you just want to use the account statements in OfficeNet Direct select <No>. Step 3 (only applicable if you have used the reporting module in a previous version of OfficeNet Extra) In previous versions of OfficeNet Extra reports were shown in a separate reporting module. OfficeNet Extra 1.4 no longer uses this reporting module. Reports will be shown in OfficeNet Direct. Existing reports have been converted to OfficeNet Direct. Note: Users that were set up in the reporting module will no longer be available in OfficeNet Extra 1.5. You need to create new users in OfficeNet Direct. Step 4 If at step 2 you selected to use the received account statements in your financial software you need to set up OfficeNet Direct to place the statements in a folder for the financial software to use. This setting can only be changed by the superuser. Select <Settings/Conversion/ Export OfficeNet Direct> and select account status. If you want to use a different folder than the pre-selected you can change the folder by clicking the button and then browse to the folder of your choice.

8 Conversion manual (Migration of data from OfficeNet Plus) Before starting migration: Even though you select to migrate OfficeNet Plus data during installation the actual migration takes place after installation is finished. If OfficeNet Extra is installed in a network, migration only has to take place on the computer that will communicate with the bank server. Standard installation will suffice on all other computers. Step 1 When the installation process has ended start the OfficeNet Direct module. When the standard information (username, contractnumber, security token, connection type) has been entered the Migration screen appears. Click <Ok> to start the migration of data. Step 2 In OfficeNet Direct a migration page will appear. Select OfficeNet Plus. Specify in which folder OfficeNet Plus is installed on your computer. Last step is to select the items that need to be migrated to OfficeNet Extra. By clicking you can select all items. Click <Apply> to start the migration of data. Step 3 OfficeNet Direct will now migrate the selected data from OfficeNet Plus. During migration you can check the progress, for data that have been migrated successfully the display colour of the name will change to green. After completion of the migration the following screen is displayed. Click <Ok> to finish the migration. The data will now be available in OfficeNet Extra. Note: During migration of OfficeNet Plus data the passwords of the existing users will be reset. After migrating to OfficeNet Extra users can log on with the same username as in OfficeNet Plus. However, the password has been changed and is the same as the username. After migration the created payments and cancellations that were present in OfficeNet Plus are placed in a sheet for each module. These payments can be imported in OfficeNet Direct by opening a module (e.g. domestic payments) and then opening this file. The name of the file will start with NOTSENT.

9 Using OfficeNet Extra in combination with a connection via a gateway OfficeNet connects to the ABN AMRO server using active FTP. If your internal network uses a gateway (proxyserver/firewall) this means that adjustments to this gateway may be necessary. General Considering the wide variety in gateway hardware and software it unfortunately is impossible to indicate where in your environment the necessary adjustments should be made. If performing the changes to your gateway raises questions and/or problems ABN AMRO unfortunately cannot supply support. In such a case we will have to refer you to the supplier of your gateway Attention: Contact your network administrator before changing settings on your gateway. Explanation of active FTP With active FTP a client connects to the command port of the server (port 21). The client uses a standard TCP port where the port number is higher than During communication the client will listen to the TCP port that is 1 higher than the original port. Also the FTP command Port+1 is sent to the server. The server will then set up a connection with the data port specified by the client using its own local data port (TCP port 20). Server Client 20 Data 21 Command 1026 Command 1027 Data In step 1 the command port of the client (here 1026) makes a connection to the command port of the server. After establishing a connection the client will send the command Port 1027 (Portnumber 1 higher than command port). The server will send an ACK (acknowledgement) to the command port of the client (step 2). In step 3 the server will make a connection using the local data port and the data port specified by the client (here 1027). Finally the client sends an ACK (acknowledgement) to the server (step 4). After this the data will be transferred. In this document the term gateway will be used.

10 Active FTP using a gateway and security In order to be able to use a gateway (proxyserver/firewall) for setting up a safe way of communication using active FTP the gateway should meet a number of demands. First the gateway should be able to use active FTP sessions. On top of that the gateway should be able to use some intelligence in handling active FTP. With active FTP agreements are set on which (source and data) ports to use and also on the (local and destination) IPaddresses to use. Using these agreements the gateway will accept traffic on the agreed data port. In other words the gateway should be able to distinguish a trusted session on the basis of the ports and IP addresses specified by the client. The gateway should be intelligent enough to open or close ports on the basis of the active FTP protocol. This is further explained in the following diagram. (Bank)server Gateway Client (OfficeNet) 20 Data 21 Command 21 Command 20 Data 1026 Command 1027 Data Command 1029 Data If more gateways are being used in a chain setting (for instance a proxyserver and a seperate firewall) all should meet these demands. Limitations It will not be possible to set up communication to the ABN AMRO FTP servers in the following situations: A username and password needs to be specified on the gateway. The gateway uses 1 IP address but multiple port numbers for address translation to the Internet, this is also called PAT (Port Address Translation) or NAT-overload.

11 Possible exceptions DNS-problems If DNS look-up is not possible using your gateway the IP-address for the bankservers should be entered in OfficeNet Direct instead of the URL. This can be done by using the following instruction. Start the module OfficeNet Direct, select <Settings> and then <Advanced>. Note! In order to make the changes you need to log on as superuser. Change the settings in the field server addresses using the table below. URL Change to IP-address Server addresses viaebt.eb.abnamro.com viaebt1.eb.abnamro.com Software Update iigprod1.eb.abnamro.nl Server addresses iigprod2.eb.abnamro.nl Note : ABN AMRO does not recommend using IP-addresses instead of the URL of bankservers as IP addresses may change in time. Routing problems General When a gateway does not use NAT (Network Address Translation) a number of alterations are necessary. Changes need to be made to the gateway as well as to OfficeNet Direct. Changes to the gateway Configure the gateway to use port forwarding using unused ports. Note! The selected ports can not be used for other communication in the internal network. A minimum of two free ports need to be available to be able to distinguish the bankserver and the update server. Create the following rules for portforarding on the gateway 1 : Create a rule where all FTP traffic that is received from the internal network through port X be redirected to the bankserver through port 21. Create a rule where all FTP traffic that is received from the internal network through port Y be redirected to the bankserver through port 21. An important condition is that the gateway should have a fixed IP address. If on the internal network DHCP is used for dynamically assigning IP-addresses, a fixed IP address should be assigned to the gateway being used for communication with the bank. Changes in OfficeNet Direct In OfficeNet Direct the IP address of the gateway should be entered as address for the bankservers and software update servers. 1 In this document the free ports used are named X (for communication with the bankservers) and Y (for communication with the software update servers). Replace X and Y with values for available ports on your network.

12 Start the module OfficeNet Direct, Select <Settings> and <Advanced>. Change the entries for server addresses and Software update servers using the table below. URL Change to IP address Server addresses viaebt.eb.abnamro.com viaebt1.eb.abnamro.com Software Update iigprod1.eb.abnamro.nl Server addresses iigprod2.eb.abnamro.nl The IP address used in the table ( ) is an example value. Replace this value with the actual IP address for your gateway. Note: the gateway used for connecting to the software update servers should be the same as the one used for connecting to the bankservers. In OfficeNet Extra the ports used (X and Y in the example) also have to be specified. You can do this by making an adjustment to the ebca.ini file. Changes in ebca.ini The file ebca.ini can be found in the data folder of your OfficeNet Extra installation. The following changes need to be made under the header [Transport Protocol]: [Transport Protocol] TPServerName=VIAEBT TPServerPort=X TPIIGPort=Y Disclaimer: This document has been drafted with the highest possible care. Nevertheless ABN AMRO can not be held responsible for the correctness and completeness of the information supplied. No rights can be derived from any information in this document. Before changes are made a careful consideration should be made if these changes comply to the security strategy for your network. ABN AMRO will not accept any liability for damage caused by changes mentioned in this document.