InsideBusiness Payments. Comprehensive installation manual for the blue ING I-Dentity Reader

Transcription

1 InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

2 Table of contents 1. Introduction 3 2. Configuration requirements Software requirements Hardware requirements 5 3. Installing the ING I-Dentity Software Automatic installation of ING I-Dentity Software Manual installation of the ING I-Dentity Software Installing the driver for the ING I-Dentity Reader Installing the GemSAFE software Installing the IAIK PKCS#11wrapper Configuring Windows Setting the Smart Card services to automatic Starting up the Browser in 32 bit mode for 64 bit operating system Configuring Internet Explorer Internet Explorer 7 settings Internet Explorer 8, 9 and 10 settings Configuring Java Deleting older versions of Java Installing the most recent version of Java Java settings Use of Registration Tool (Gemplus) Registration Tool icons Shortcut to InsideBusiness Payments Troubleshooting Conflicting software Proxy server Certificates Virus scanners Client-server environment Other 23 InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 2

3 1. Introduction This manual is intended for system managers or end users who act as system manager when installing InsideBusiness Payments. The system manager sees to it that all software is correctly installed and configured. The right to log on and verify that InsideBusiness Payments is working properly is reserved for the end user who possesses a ING I-Dentity Card and ING I-Dentity Reader. The configuration required for InsideBusiness Payments (IBP) must comply with several system requirements and settings. This manual provides a more detailed account of the hardware requirements and the software (and software settings) needed to be able to use IBP properly. The manual also deals with the installation of the ING I-Dentity Software provided by ING for the ING I-Dentity Card and ING I-Dentity Reader, operating software, browser software and other required software including the preferred settings. Furthermore the manual explains how the system manager can verify whether the ING I-Dentity Reader is ready for use. Only the end user can assess whether IBP can be logged on to successfully using their valid ING I-Dentity Card. For more information go to inginsidebusiness.com. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 3

4 2. Configuration requirements To be able to use InsideBusiness Payments the computer must comply with various software and hardware requirements. Configurations that do not comply are not officially supported. In any such case, please contact your advisor. Provided by ING to enable use of InsideBusiness Payments: ING I-Dentity Card (smartcard) ING I-Dentity Reader + USB cable ING I-Dentity Software (operating software for the ING I-Dentity Card and the ING I-Dentity Reader). InsideBusiness Payments works with an ING I-Dentity Reader that can be either connected or unconnected to the computer. The ING I-Dentity Software must be installed on every computer on which InsideBusiness Payments is used in combination with the connected ING I-Dentity Reader. 2.1 Software requirements Operating Systems Windows Vista / SP2 (32 or 64 bit) Windows 7 / SP1 (32 or 64 bit) Windows 8. Browsers Windows Internet Explorer 7.0 Windows Internet Explorer 8.0 / 9.0 / 10.0 Only 32 bit browsers are supported when the reader is connected to the computer. Internet Protocol Internet Protocol version 4. SUN Java JRE 1.7 and higher (international version) Sun Java plugin version 1.7 and higher In the event of a 64 bit operating system the Java 32 bit software must also be installed to be able to work with the ING I-Dentity Reader connected to the computer. JavaScript JavaScript must be enabled Active scripting, paste operations via script and scripting of Java applets enabled The use of Cookies (per session) enabled. Adobe Acrobat Reader At least version 10.0 to view reports in PDF format. Spam filter receiving InsideBusiness Payments informs users via about the status of the application and other matters. Accordingly, ensure that the is not blocked. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 4

5 2.2 Hardware requirements Memory Minimum: Recommended: 256MB 512MB or more. Hard drive space available Minimum: when using the connected ING I-Dentity Reader a minimum of 50MB hard drive space needs to be available for installation of the ING I-Dentity Software Space for exchanging files (to be managed by the client). USB port A USB port is needed to connect the ING I-Dentity Reader (preferably on the base unit). InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 5

6 3. Installing the ING I-Dentity Software The ING I-Dentity Software only needs to be installed if you want to connect the ING I-Dentity Reader to the computer. You can skip this step if you wish to use the ING I-Dentity Reader without connecting it to the computer. Check that the correct version of the cd rom is used (see description on cd rom): GEMPLUS Libraries v6.0 Includes Windows 7 support If you have an older version in your possession, you can request a new cd rom from the helpdesk or via your ING contact person. We recommend opting for automatic installation. This usually starts up automatically after the cd rom is inserted in the cd/dvd drive. If the installation process does not start automatically or if the following image does not appear, you can start the installation by opening setup.exe from the cd rom. Information on manual installation can be found in section 3.2. Be sure to save and shut down any open applications before starting the installation process. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 6

7 3.1 Automatic installation of ING I-Dentity Software The following screens will appear during the automatic installation process. The card reader may be connected during installation but this is not required for the software to operate properly. Please follow the steps below. 1. Click Next 2. Select all components. The ING Secure Reader DP850 Driver (USB), GemSAFE software and IAIK PKCS#11 Wrapper are essential. It is recommended to also select the ING I-Dentity Documentation but this is not required for the software to operate properly. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 7

8 3. Select the desired location and click Next 4. Click Install 5. Windows Vista the software will request to connect the reader if you have not already done so. Follow the instructions. This question will not be posed if you are using another version of Windows InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 8

9 6. The software will now take a few minutes to install the various components 7. For quick installation, select No, I will visit the website some other time and click Finish InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 9

10 8. Select Yes and click OK. 3.2 Manual installation of the ING I-Dentity Software If automatic installation is unsuccessful the software can also be installed manually by following the instructions below. The installation of the ING I-Dentity Software consists of three essential components, namely: 1. The driver for the ING I-Dentity Reader (Vasco DP850 smartcard reader) 2. The GemSAFE software 3. The IAIK PKCS#11 Wrapper (pkcs11wrapper.dll). To access the content of the cd rom: Go to Computer > cd rom / dvd rom player (usually D:\) and select Explore (can also be accessed via the Windows start menu) Installing the driver for the ING I-Dentity Reader 1. Go to the DP850 folder on the cd rom and select the folder used for the operating system (for Windows 7 you can use the Vista driver). Be sure to use the correct version for your operating system (32 bit or 64 bit version) 2. Double-click dp850x32.exe or dp850x64.exe for Windows Vista or Windows 7 / 8 3. The setup will now start up 4. Select Install 5. During the installation process you may be asked to connect the card reader; if so connect the ING I-Dentity Reader using the USB cable that has been provided 6. Wait around 5 seconds until Windows recognises the device and click OK 7. The installation process is now complete. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 10

11 3.2.2 Installing the GemSAFE software 1. Go to the GemSAFE folder on the cd rom and select the folder for the operating system that is in use (the folders named CC are suitable for Windows 7 / 8) 2. Go to the Classic_Client_EN_32 or Classic_Client_EN_64 folder 3. Double-click the *.msi file 4. Accept the user agreement and click Next and Install in the following screens 5. The computer will need to be restarted once the installation has been completed Installing the IAIK PKCS#11wrapper The PKI Wrapper cannot be installed by following an installation process but has to be copied to the C:\Windows\system32 folder 1. Go to the IAIK folder on the cd rom 2. Right-click the pkcs11wrapper.dll file and select Copy 3. Go to the C:\Windows\system32 folder and paste the file. The installation of the three components completes the manual installation of the ING I-Dentity Software. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 11

12 4. Configuring Windows 4.1 Setting the Smart Card services to automatic A configuration is needed if you wish to use the ING I-Dentity Reader connected to the computer. This is not necessary if you only plan to work with the ING I-Dentity Reader which is not connected to the computer. To prevent users from having to manually start-up the ING I-Dentity Software every time, the Smart Card services have to be set to Automatic. The following steps describe how to check and make any changes (administrator rights are required for this). 1. Go to Start and select: - Windows Vista, Windows 7 / 8: Search programs and files (see screenshot below) 2. Type: - Windows Vista, Windows 7 / 8: services (see screenshot, Services option at the top) InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 12

13 3. In the Services list go to Smart Card. It should be set to Started and Automatic. If not you can change the settings by right-clicking the line and selecting Properties InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 13

14 4. Select Automatic and click OK to confirm. 4.2 Starting up the Browser in 32 bit mode for 64 bit operating system Using a Windows 64 bit operating system means that the 64 bit version of Internet Explorer can be used if it is combined with the ING I-Dentity Reader unconnected. If you plan to use the ING I-Dentity Reader connected to the computer, you will not be able to use the 64 bit version of the browser. It is essential to start up the browser in normal mode (= 32 bit mode). InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 14

15 5. Configuring Internet Explorer A number of browser options must be changed to ensure the best possible operation of InsideBusiness Payments. These options are shown below for the supported versions of Internet Explorer. The other settings mentioned below need not all be necessary but can prevent problems and improve performance. It is often necessary to add the ING website to the list of trusted sites when configuring the browser. 5.1 Internet Explorer 7 settings 5.2 Internet Explorer 8, 9 and 10 settings 1. In Internet Explorer go to Tools > Internet options 2. Click the Security tab and then Trusted sites. Then click Sites. Under Add this Web site to the zone in the new screen, type: 3. In the Advanced tab, click Restore advanced settings at the bottom 4. Under the Browsing header, disable the checkbox Enable third-party browser extension* 5. Click Apply and then OK 6. In the General tab click Delete under the Browsing history header 7. In the new screen, click Delete. Once the computer has finished deleting the files, click Close 8. In the General tab, click Settings under the Browsing history button (next to the Delete button in the previous step) 9. In the new screen, select the top option: Every time I visit the webpage 10. To improve performance change the Disk space to use to 100MB (it also performs fine at the 50MB default setting) and click OK 11. Shut down Internet Explorer completely to save all changes. 1. In Internet Explorer go to Tools > Internet options 2. Click the Security tab and then Trusted sites. Then click Sites. Under Add this Web site to the zone in the new screen, type: 3. In the Advanced tab, click Restore advanced settings at the bottom 4. Under the Browsing header, disable the checkbox Enable third-party browser extension* 5. Click Apply and then OK 6. In the General tab click Delete under the Browsing history header 7. In the new screen ensure that the checkbox next to the option: Preserve Favorites website data is enabled (the other options may remain disabled). Then click Delete 8. In the General tab, click Settings under the Browsing history button (next to the Delete button in the previous step) InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 15

16 9. In the new screen, select the top option: Every time I visit the webpage. To improve performance change the Disk space to use to 100MB (it also performs fine at the 50MB default setting) and click OK 10. Shut down Internet Explorer completely to save all changes. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 16

17 6. Configuring Java 6.1 Deleting older versions of Java 6.2 Installing the most recent version of Java 6.3 Java settings To ensure the best possible operation of InsideBusiness Payments it is recommended to have only one version of Java installed. 1. Go to Start > Control Panel or Start > Settings > Control Panel 2. Be sure the Classic View is used 3. Double-click Programs and Features (Windows Vista or Windows 7 / 8) 4. If it is not available select Classic View 5. Check to be sure that the Java version is at least 1.7.x 6. Check whether various versions of Java are listed. If so delete all older versions of Java but leave the most recent version. The most recent version of Java can be downloaded from If the Java website is visited using the 32 bit version of Internet Explorer, then only the 32 bit version of Java is offered. If the Java website is visited using a 64 bit version of Internet Explorer, then the 64 bit version of Java is offered as standard practice. The connected ING I-Dentity Reader requires the use of the 32 bit version of Java in combination with the 32 bit version of Internet Explorer. 1. Go to Start > Control Panel or Start > Settings > Control panel 2. Double-click Java in the Control Panel 3. If it is not available, then select Classic View first 4. In the General tab, click Settings at the bottom 5. Disable Keep temporary files on this computer 6. Click Delete Files. All the options must be enabled in the new window and then click OK 7. Click OK 8. Go to the Advanced tab (this does not apply for older versions of Java than update 6.18, in that case the actions for the Next-generation Java plug-in do not have to be taken) 9. Click Java plug-in InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 17

18 10. Ensure that Enable the next-generation Java plug-in is enabled 11. Click Apply and then OK. More information about installing and uninstalling Java and Java settings can be found on InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 18

19 7. Use of Registration Tool (Gemplus) To be able to support users properly it is also wise for system managers to be familiar with the use of the ING I-Dentity Software (Gemalto Gemplus). The status of the software is shown by means of the Registration tool (RegTool) icon. System managers (with no ING I-Dentity Card) can follow the steps below up to and including connecting the card reader. The right to log on to InsideBusiness Payments is reserved for users with an activated ING I-Dentity Card and personal PIN. 7.1 Registration Tool icons To be able to use InsideBusiness Payments together with the connected ING I-Dentity Reader, the ING I-Dentity Card certifi - cate must be correctly loaded on the local computer. This can be seen on the Registration Tool icon in the Windows task bar. When working with the ING I-Dentity Reader connected to the computer the text VASCO DP850 appears when the mouse is placed on the icon. Possible pictograms and what they mean are listed below. 1. The Smart Card software is running but the ING I-Dentity Reader has not been detected. Logging on is not possible: - Check whether the card reader is connected correctly to the computer - Try another USB port on the computer (preferably on the base unit or via USB 3.0 connection) - Disconnect the USB cable from the card reader and reconnect it - Check the status of the card reader and ING I-Dentity Card by right-clicking the icon > Launch Toolbox > Diagnostics > Diagnostic Tool > Check cards, tokens and readers. Click Start to start the Diagnostics - If the card reader is connected then the card reader and/ or the USB cable could be broken. A new card reader and/or cable can be ordered from the InsideBusiness Payments Helpdesk (+31 (0) ) 2. The software is set to pause. The Smart Card services in Windows is still set to Manual. The user can start up the software manually (click the icon), but it is more effi cient to start up the software automatically (see chapter 4.1 Setting Smart Card services to automatic) 3. The software has been started up and the card reader is connected. The ING I-Dentity Card has not been inserted into the card reader yet. It is not possible to log on (yet). - Check whether the ING I-Dentity Card is in place and whether it has been inserted properly into the card reader (see adjoining fi gure) InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 19

20 4. The software is running and the ING I-Dentity Card is inserted in the card reader. The certificate has not yet been loaded (this can take 10 seconds). It is not possible to log on (yet). - If the certificate cannot be selected, there may be a conflict with other software that has been installed (see paragraph 8.1 Conflicting software) - If the icon does not automatically change into, it is possible that the ING I-Dentity Software is frozen. This can be tested by removing the ING I-Dentity Card from the card reader. If the icon does not change into then the Regtool. exe programme will indeed have frozen - Restart the computer and the programme usually restarts automatically. If the programme stays frozen, press Ctrl+Alt+Del and go to Start Task Manager and the Processes tab to shut down RegTool.exe. The programme can then be restarted. To do so go to: C:\Program Files\Gemplus\Gemsafe Libraries\BIN\ RegTool.exe or C:\Program Files\Gemalto\Classic Client\ BIN\RegTool.exe (path name depends on the selection made by the system manager during the installation) 5. The software has started up and the certificates are loaded; the text: Certificate(s) loaded: 2 appears when the mouse is placed over the icon. The user can now log on. If you try to log on too soon (if the certificates have not yet been loaded) you will be shown the error message. Once the certifi cates are subsequently loaded (you will see this icon) you will have to shut down the browser completely and restart it before attempting to log on again. The following security warning may be issued when you try to log on: InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 20

21 Enable the checkbox Always trust content from this publisher and click Yes. Click OK when you are asked to select the digital certificate. 7.2 Shortcut to InsideBusiness Payments The following URL can be used to log in to InsideBusiness Payments, using the orange Log In button on: inginsidebusiness.com or ing.nl/insidebusiness. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 21

22 8. Troubleshooting A problem can always occur which could prevent you from using InsideBusiness Payments, even if you installed the ING I-Dentity Software correctly by following the instructions in this document and checked and changed the various settings. This chapter discusses a number of common problems. Should it not offer you a solution to the problem, please contact the Helpdesk InsideBusiness Payments for further support. 8.1 Conflicting software 8.2 Proxy server 8.3 Certificates 8.4 Virus scanners 8.5 Client-server environment Various cases of conflicting software are known, particularly if other applications (e.g. SafeSign) also use smart cards. Removing the other software will often resolve the problem. If this is not an option the problem can also be resolved via the Windows registry. Contact the helpdesk for further support. If you use a proxy the following settings must be incorporated on the proxy server for InsideBusiness Payments to be able to run correctly: The outgoing ports 80 and 443 must be open The ING site must be granted access The ING certificates are normally loaded automatically. Should there be any problem with the certificates, please refer to the detailed information on certification that was provided on the cd rom and ING I-Dentity Software. Common issues are dealt with here. Virus scanners can cause problems if data exchanged between ING and the user is viewed as harmful (so-called false positives ). Contact the supplier of your anti-virus software should you experience any problems. Installation into a client-server environment (e.g. Citrix) is often complex and can differ for each client. This has to do with the client-specific setup in client-server environments. In all cases the client terminals must have a USB port to connect a card reader and a fully-fledged Windows operating system (with full API) to be able to manage the USB connection. The latter tends to cause problems for so-called thin clients because they often work with an operating system (other than Windows) that has been supplied by the manufacturer or a restricted Windows operating system such as Windows CE. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 22

23 More information about client server applications can be found in the Classic Client User Guide (on the installation cd rom or via the regtool icon (GemPlus) > Diagnostic/Help > Documentation > Classic Client > Classic_Client_User_Guide. pdf). Contact the helpdesk for further support. 8.6 Other ING always advises that you use the most recent software versions. Check regularly for new updates. InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader 23

24 More information On inginsidebusiness.com you can download documentation, view instruction videos and read frequently asked questions. If you still have questions please visit inginsidebusiness.com for contact details. The registered office of ING Bank N.V. is located at Bijlmerplein 888, 1102 MG Amsterdam, Trade Register number in Amsterdam. ING Bank N.V. is registered with the Dutch Central Bank (DNB) and the Netherlands Authority for the Financial Markets (AFM) in the Credit Institutions and Financial Institutions Register. ING Bank N.V. is also subject to the supervision of the Authority for Consumers & Markets (ACM). Information about the supervision of ING Bank N.V. can be obtained from the DNB ( the AFM ( or the ACM ( In the context of this publication ING and bank are understood to mean: ING Bank N.V. PCM ING Bank N.V.