FIIT. Financial Institution Integration Tools Installation Instructions

Transcription

1 FIIT Financial Institution Integration Tools Installation Instructions

2 Table of Contents I. Introduction...3 II. Security...3 III. Prerequisites...3 IV. Requirements for Installation...3 V. Firewall Considerations...3 A. Testing ( CAT )...3 B. Production...4 VI. Example Scenario...4 VII. Download FIIT...4 VIII. Installing FIIT...4 A. Directory Structure and Layout...9 IX. Multiple ACH Alert Environments X. The Windows Service XI. Keeping JAVA Up to Date Page 2 of 13

3 I. Introduction II. III. ACH Alert has developed and uses a proprietary software application called Financial Institution Integration Tools (hereby referred to as FIIT) for transferring ACH files between the financial institution and Fraud Prevention HQ. After installation, FIIT runs in the background as a Windows service. FIIT will send and receive all Fraud Prevention HQ, BIO-WIRE, C.O.P.S., PRO-CHEX, PRO-TECH and PRO- TECH CR data. Security Before transmitting any files, FIIT will encrypt the file before transmission via PGP. The file transfer process also takes place over SSH, which encrypts all traffic during transmission. End of Day files that FIIT downloads are also encrypted by Fraud Prevention HQ before they are downloaded. All files are encrypted during transit and at rest. Prerequisites The only two prerequisites before installing FIIT are Java SE 8 and the Java 8 Cryptographic Extension files. If Java SE 8 and the Java 8 Cryptographic Extensions are not already installed, please refer to the Installing Java 8 with Cryptographic Extensions Instructions to support FIIT documentation. IV. Requirements for Installation FI Responsible A server with Java SE 8 and the Java 8 Cryptographic Extensions already installed Provided by ACH Alert FIIT MSI Installer Link Username for download Password for download FI Code FIIT Password FIIT Server Address NOTE: All elements provided by ACH Alert will be done so via secure during the implementation process. V. Firewall Considerations FIIT requires a maximum of three outgoing TCP ports to be opened in the firewall. A. TESTING ( CAT ) Opening this port is optional and only required if the FI subscribes to the CAT environment. Web Site File Transfer FI File Transfer Processor FIIT Control Hostname sftp.fphq.us sftp.fphq.us IP Port http: 80 https: 443 sftp: sftp: tls: 4455 Page 3 of 13

4 B. PRODUCTION Web Site File Transfer FI File Transfer Processor FIIT Control Hostnames sftp.fraudpreventionhq.com sftp.fraudpreventionhq.com IP Port http: 80 https: 443 sftp: sftp: tls: 4455 I. The FIIT application originates all network traffic A. Upload: If there are files that need to be uploaded, FIIT will initiate the upload process B. Download: FIIT also checks for End of Day files that need to be downloaded and initiates the download. VI. Example Scenario VII. VIII. In this example walkthrough, we will download and install FIIT on Windows Server 2012 R2 64-bit. Other versions of Windows will be very similar. Download FIIT I. During implementation, you will be provided a secure with a direct download link to the latest version of the FIIT MSI installer. The secure will also contain a Username and Password to enter before downloading the FIIT installer. II. After entering the provided Username and Password, save the FIIT MSI installer to the Desktop. If you receive any warning messages from your browser about downloading MSI files, it is safe to ignore them while downloading the FIIT Installer. Installing FIIT I. Go to the desktop and double-click the FIIT MSI installer to begin the installation. Or right click and select Install. Page 4 of 13

5 II. When the Installation Wizard begins, click Next. III. Read the End-User License Agreement, check the box next to I accept the terms in the License Agreement and click Next. IV. Select a destination folder to install FIIT. In this example, we will leave the default value of C:\Program Files (x86)\ach Alert\FIIT V. At the FIIT Configurations Options window, fill out the required fields. FI Code Provided by ACH Alert Password Provided by ACH Alert FIIT Server Address Provided by ACH Alert FIIT Server Port 4455 Data File Directory C:\ACH Alert Data\ Page 5 of 13

6 NOTE: The FIIT Application itself will install under C:\Program Files (x86)\ach Alert. The Data File Directory is where Pro-Tech, C.O.P.S., Bio-Wire, Pro-Chex and End of Day files will be located. Page 6 of 13

7 VI. At the Service Logon Credentials window, select if you want to run the FIIT service as LocalSystem or, if you have a dedicated User Account in your environment, enter those credentials now. In this example, we are running the service as LocalSystem. Click Next. It is more desirable to run as LocalSystem unless the local system administrator has other reasons to change it. Running as a service account is more secure, but more complicated to manage and usually results in file permission issues. VII. At the Ready to Install Financial Institution Integration Tools window, click the Install button. NOTE: During the installation, if you receive the error There is a problem with this Windows installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor., you may need to reboot your server. This can happen on a server that has recently had Java SE 8 and the Java Cryptographic Extension installed and hasn t been restored. FIIT has now been installed. VIII. Navigate to Start > Control Panel > Administrative Tools > Services A. Look for a service named FI Integration Tools <FI Code>. In our example the service name shows up as FI Integration Tools AcmeFI. B. Verify that the service is running. If it is not running, right click and select start. Page 7 of 13

8 Page 8 of 13

9 A. DIRECTORY STRUCTURE AND LAYOUT After installation, and depending on the services you are subscribed to, you will see subdirectories for BIO-WIRE, C.O.P.S., PRO-CHEX and PRO-TECH (PRO-TECH CR). During the installation, C:\ACH Alert Data\[FI Code] is the default data directory for Fraud Prevention HQ / common files. Within each product s sub folder (i.e. Bio-Wire, C.O.P.S, Pro-Chex and Pro-Tech), there are folders for different file formats. Within these folders, there is an incoming and end-of-day folder. Files being sent to ACH Alert will be placed in the incoming folder. FIIT will encrypt the files locally and upload to ACH Alert s online processing data center. Below you will find a more detailed description of the directories and files that comprise FIIT. NOTE: PRO-TECH CR files are loaded into the PRO-TECH folder. Page 9 of 13

10 Page 10 of 13

11 Module Fraud Prevention HQ BIO-WIRE C:\ACH Alert Data\[FI Code]\ billing-and-reports conf errors logs temp biowire\fedwire\ end-of-day biowire\fedwire\ incoming Description FIIT will periodically ping the ACH Alert online processing center for billing files and reports. When FIIT detects that a new billing file or report is waiting, it will be downloaded to this folder. Where FIIT stores its configuration. FIIT configures and provisions itself automatically, so there should be no need to modify these configuration files expect at the direction of ACH Alert support personnel. Where FIIT stores its log files. If you have any problems with FIIT that require troubleshooting, ACH Alert support personnel may ask that you send the contents of this directory for further analysis. FIIT s temporary working directory. FIIT will periodically ping the ACH Alert online processing center for approved wire files. When FIIT detects that a new approved wire file is waiting, it will be downloaded to this folder. This is where you will place Fedwire Wire files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. Biowire\fedwire\ upload_archive This folder contains an encrypted copy of the files uploaded to ACH Alert. C.O.P.S. cops\ach\end-of-day FIIT will periodically ping the ACH Alert online processing center for approved batch files. When FIIT detects that a new approved batch file is waiting, it will be downloaded to this folder. PRO-CHEX cops\ach\incoming cops\ach\ upload_archive cops\csv\end-of-day cops\csv\incoming prochex\disposition\ end-of-day prochex\exceptions\ incoming prochex\ filtered_transactions\ incoming prochex\ filtered_transactions\ rebuild This is where you will place ACH batch files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. This folder contains an encrypted copy of the files uploaded to ACH Alert. FIIT will periodically ping the ACH Alert online processing center for approved batch files. When FIIT detects that a new approved batch file is waiting, it will be downloaded to this folder. This is where you will place CSV files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. FIIT will periodically ping the ACH Alert online processing center for End of Day files. When FIIT detects that a new End of Day file is waiting, it will be downloaded to this folder. This is where you will place incoming exception files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. This is where you will place incoming filtered transactions files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission. This folder contains a file for transactions that didn t match the filtering. File Type*.txt.wire.ach.dat.csv.txt.csv.dat.icl.dat.csv Page 11 of 13

12 PRO-TECH & PRO-TECH CR prochex\ filtered_transactions\ upload_archive prochex\issuance\ end-of-day prochex\transactions \incoming prochex\x937\ incoming protech\end-of-day protech\incoming This folder contains an encrypted copy of the files uploaded to ACH Alert. Issuance End of Day files will only come down if this feature is turned on for the FI or if the FI is doing exception matching ACH Alert can map different file extensions to different templates for the FI. NOTE: This is only available if the FI is configured for ICL files. FIIT will periodically ping the ACH Alert online processing center for End of Day files. When FIIT detects that a new End of Day file is waiting, it will be downloaded to this folder. This is where you will place ACH files that need to be uploaded to ACH Alert s online processing center. FIIT is constantly monitoring this directory for new files. When a new file is detected, it will automatically be PGP encrypted before transmission..ach.dat protech\rebuild protech\ upload_archive This folder contains a file for transactions that didn t match the filtering. NOTE: This is only used when in Suspend mode. This folder contains an encrypted copy of the files uploaded to ACH Alert. *For incoming files, FIIT is looking for a specific file extension. File extensions other than those listed above will not be picked up by FIIT and will remain in the folder. IX. File Upload & Pickup Locations A. BIO-WIRE I. Incoming wire files will be dropped into the biowire\fedwire\incoming subfolder. From there the file will automatically upload to ACH Alert s online processing data center. II. Approved wire files can be picked up in the biowire\fedwire\end-of-day subfolder. B. C.O.P.S. I. Incoming batches will be dropped into the cops\ach\incoming or cops\csv\incoming subfolder depending on the file format being used. From there the file will automatically upload to ACH Alert s online processing data center. II. Approved batch files can be picked up in the cops\ach\end-of-day or cops\csv\end-of-day subfolder depending on the file type needed. C. PRO-CHEX I. Incoming payment files will be dropped into the prochex\filtered_transactions\incoming subfolder. From there the file will automatically upload to ACH Alert s online processing data center. II. End of Day files can be picked up in the prochex\disposition\end-of-day subfolder. III. Incoming exception files will be dropped into the prochex\exceptions\incoming subfolder. From there the file will automatically upload to ACH Alert s online processing data center. IV. End of Day issuance files can be picked up in the prochex\issuance\end-of-day subfolder. V. Incoming transaction files will be dropped into the prochex\transactions\incoming subfolder. From there the file will automatically upload to ACH Alert s online processing data center. Page 12 of 13

13 VI. Incoming X9.37 files will be dropped into the prochex\x937\incoming subfolder. From there the file will automatically upload to ACH Alert s online processing data center. D. PRO-TECH & PRO-TECH CR I. Incoming ach files will be dropped into the protech\incoming subfolder. From there the file will automatically upload to ACH Alert s online processing data center. II. End of Day files can be picked up in the protech\end-of-day subfolder. X. Multiple ACH Alert Environments ACH Alert provides two online environments. There is the ACH Alert Production environment and the ACH Alert CAT (Customer Acceptance Testing) environment. Access to the CAT environment entails an extra monthly charge. As a best practice, if your Financial Institution has access to both the Production and CAT environments, you will need to install FIIT on two separate servers. One FIIT instance on one server will communicate with the Production environment and the other FIIT instance will communicate with the CAT environment. XI. The Windows Service FIIT runs as a Windows Service in the background. The name of the service is unique and partially derived from the name of your FI. The format of the Windows Service name is as follows: Display Name Service Name FI Integration Tools [FI Code] FIIT_[FI_Code] NOTE: In our example the Service Display Name shows up as FI Integration Tools AcmeFI and the Service Name is FIIT_AcmeFI. XII. Keeping JAVA Up to Date It is important to remember that if you update Java to a newer version on your server, you will also need to update the Cryptographic Extension files as well or file transfers will fail. Please refer to the Installing Java 8 with Cryptographic Extensions Instructions to support FIIT documentation for updating the Cryptographic Extension files. Page 13 of 13