USER GUIDE FOR CONNECTION OF MEMBERS TO THE INFORMATION SYSTEM CENTRAL DEPOSITORY & CLEARING COMPANY Inc. SKDD-CCP Smart Clear Inc.

Size: px

Start display at page:

Download "USER GUIDE FOR CONNECTION OF MEMBERS TO THE INFORMATION SYSTEM CENTRAL DEPOSITORY & CLEARING COMPANY Inc. SKDD-CCP Smart Clear Inc."

Griselda Wilkins
5 years ago
Views:

1 USER GUIDE FOR CONNECTION OF MEMBERS TO THE INFORMATION SYSTEM CENTRAL DEPOSITORY & CLEARING COMPANY Inc. SKDD-CCP Smart Clear Inc. January 2017

2 Documentation Central Depository & Clearing Company Inc. and SKDD- CCP Smart Clear Inc. make up the Group and the procedures set forth below apply to customers of both companies. The latest version of this document is at: The latest version of VPN client is at: For additional technical information sending your questions at: Phone: Fax:

3 Contents: 1. System Requirements 4 2. Installing ActivClient smart card software 5 3. Installing Check Point Mobile for Windows 32/64-bit 6 4. Certificate Enrollment and Renewal 6 5. VPN connection to the primary location of the Group 9 6. VPN connection to the secondary location of the Group Appendix 1 12

4 1. System Requirements For supported client operating systems, see below. Windows Version Editions Architecture 8.1 with or without Update 1 Enterprise, Pro 32/64 bit BIOS/UEFI 8 Enterprise, Pro 32/64 bit BIOS/UEFI 7 Enterprise, Professional, Ultimate, with or without SP1 Vista Enterprise, Professional, SP1 or higher 32/64 bit 32/64 bit XP Professional, SP3 32-bit MB free disk space for a complete installation - installed ActivIdentity ActivClient x msi for 32-bit OS or ActivIdentity ActiveClient x msi for 64-bit OS - Smart card reader - Web Browsers(IE) newer versions - installed Java 7(SE) - installed Acrobat Reader 10 and above - Firewall settings (Appendix 1) Ver

2. Installing ActivClient smart card software To install a ActivClient software on any version of Windows, you need Administrator permissions. Install ActivClient x86 7.0.2.msi for 32-bit OS or ActiveClient x64 7.

5 2. Installing ActivClient smart card software To install a ActivClient software on any version of Windows, you need Administrator permissions. Install ActivClient x msi for 32-bit OS or ActiveClient x msi for 64-bit OS. Double-click the installation package and after accepting the licensing agreement, choose the Typical installation. After installation, the Client icon appears in the system tray notification area. To increase security it is recommended to change the PIN supplied by Group. 1. Insert smart card into reader. 2. Right-click the ActivClient Agent icon located in the system tray notification area and select PIN Initialization Tool from the right-click menu. 3. Enter your new PIN twice, then the old one supplied by Group, and at the end store your unlock code in a safe place Ver

6 3. Installing Check Point Mobile for Windows 32/64-bit 1. Log in to Windows with a user name that has Administrator permissions. 2. Double-click the installation package Check Point Mobile E80.51.msi supplied by Group. 3. Accept the licensing agreement. 4. Close installation with Finish. After installation, the Client icon appears in the system tray notification area. 4. Certificate Enrollment and Renewal To enroll a certificate: 1. Insert smart card into reader. 2. Right-click the client icon in the system tray, and select VPN Options. 3. On the Sites tab, select the site skddprim.skdd.hr from which you will enroll a certificate and click Properties. The site Properties window opens. 3. Select the Settings tab. 4. Choose the setting type CAPI and click Enroll. The CAPI window opens Ver

5. For CAPI, choose the provider to which you will enroll the certificate. 7. Enter the Registration Key that Group sent to you. 8.

Group issues certificates for each user for a period of four years.

Thirty days before the expiry date of the certificate, users report a message about the need for renewal of certificates.

7 5. For CAPI, choose the provider to which you will enroll the certificate. 7. Enter the Registration Key that Group sent to you. 8. Click Enroll. If necessary enter the PIN for smart card. The certificate is enrolled and ready for use. Group issues certificates for each user for a period of four years. Before the end of four years the certificate must be renewed otherwise it will be impossible to connect the information system of the Group. Thirty days before the expiry date of the certificate, users report a message about the need for renewal of certificates. To renew a certificate: 1. Insert smart card into reader. 2. Right-click the client icon in the system tray, and select VPN Options. 3. On the Sites tab, select the site from which you will renew a certificate and click Properties. The site Properties window opens Ver

The authentication method you chose is set

accordingly. 4. Select the Settings tab. 5.

For CAPI, choose the certificate you want to

8 The authentication method you chose is set and the certificate will be renewed accordingly. 4. Select the Settings tab. 5. Click the Renew button. 6. For CAPI, choose the certificate you want to renew from the drop-down list. 6. Click Renew. If necessary enter the PIN for smart card. The certificate is renewed and ready for use Ver

9 If you are unable to renew the certificate, users are required to send your completed SYS- SEC order with a note to seek renewal of the certificate. After checking the validity of the obtained SYS-SEC order Group will deliver registration key to user, thus enabling the generation of the certificate, which is essential for a successful connection to the information system of the Group. 5. VPN connection to the primary location of the Group 1. Log in to Windows. 2. Right-click the Client icon in the system tray notification area and select Connect to In the Connect window select the site skddprim.skdd.hr to connect to, select a gateway prchp1_cluster and choose the certificate from drop-down list. Click on Connect button. Launch your Internet browser, type in the address bar deprin.skdd.hr or ccp.skdd-ccp.hr and press Enter. Log in to selected application with username and password suplied by Group Ver

6. VPN connection to the secondary location of the Group If you are unable to connect to the primary location of Group, then you can connect to the secondary

skdd.hr to connect to, select a gateway bkchp1 and choose the certificate from drop-down list. Click on Connect button.

10 6. VPN connection to the secondary location of the Group If you are unable to connect to the primary location of Group, then you can connect to the secondary location of Group. 1. Right-click the Client icon in the system tray notification area and select Connect to In the Connect window select the site skddsecu.skdd.hr to connect to, select a gateway bkchp1 and choose the certificate from drop-down list. Click on Connect button. Launch your Internet browser, type in the address bar deprin.skdd.hr or ccp.skdd-ccp.hr and press Enter. Log in to selected application with username and password suplied by Group Ver

11 Appendix 1 It is necessary to miss the following protocols and ports on your firewall to the Group public addresses: 1. skddprim.skdd.hr (IP: ) 2. skddsecu.skdd.hr (IP: ) ( IP/50 ) ( IP/51 ) ( TCP/80 ) ( TCP/443 ) ( UDP/500 ) ( TCP/500 ) ( UDP/259 ) ( TCP/264 ) ( UDP/2746 ) ( UDP/18233 ) ( UDP/18234 ) ( TCP/18264 ) ( UDP/4500 ) The Group using in applications digitally signed components(jar archive) so it is necessary to provide access to the Internet to verify the authenticity of the digital signature. MANAGEMENT BOARD No: U-148/17-2/SŠ Zagreb, PRESIDENT OF THE MANAGEMENT BOARD Vesna Živković Ver

Acronis Backup & Recovery 11 Beta Advanced Editions

Acronis Backup & Recovery 11 Beta Advanced Editions Quick Start Guide Table of contents 1 Main components... 3 2 Supported operating systems... 3 3 Where do I install the components?... 3 4 What you need