TITLE: CHIP-CARD BROWSER RECOMMENDATIONS AUDIENCE: GENERAL MANAGERS, FRONT DESK STAFF DATE: DECEMBER 12 Intro As a web-based application, the choiceadvantage Property Management System is impacted by the settings and configuration of the browser used to access it. Before you begin processing chipcard transactions, please refer to the specific browser recommendations in this bulletin to be sure transactions post properly within choiceadvantage. 1 Internet Explorer 11(IE11) and Google Chrome: In order to ensure transactions are processed promptly and correctly when using these two browsers it will be necessary to import a security certificate to EACH front desk workstation. The security certificate will be created during the remote software installation by Spencer Technologies and stored on the same workstation as the chip-card software. Please see here for directions on importing this certificate to EACH front desk workstation to allow proper handling of chip-card transactions 2 Internet Explorer 10: This browser my also be used to process chip-card transactions through choiceadvantage, but will require specific settings to be applied, in addition to importing the security certificate to each front desk workstation, in order for chip-card payments to process correctly. Please see here for directions on importing the security certificate, and here for specific browser configuration settings. 3 Firefox: Use of the FireFox browser will require the security certificate to be imported directly into Firefox s certificate store on each workstation where it will be used to access and process chip-card payments through choiceadvantage. Please see here for directions on importing the certificate into FireFox. 4 Windows Edge browser: The browser that serves as the default for machines running the Windows 10 operation system, this browser is NOT currently supported by choiceadvantage. However, Internet Explorer 11, which is compatible, is also installed with the Windows 10 operating system. Please see here for directions on opening IE11 on Windows 10, then here for directions on importing the security certificate. 5 Other browsers: Other internet browsers will not currently support chip-card transactions processed through choiceadvantage. This includes Safari and older versions of Internet Explorer (IE9 and earlier). If you are not sure which version of IE is currently on running on your workstation(s), please see here for directions on identifying your version of IE. Choice University 1
Steps Identifying which version of Internet Explorer is installed Please be sure to do this on EACH front desk workstation. 1 From the Tools menu, select About Internet Explorer. 2 A window will display listing the version of Internet Explorer currently installed. What else do I need to do? Using IE9 or earlier? We recommend upgrading to Internet Explorer version 11. Using IE10? We recommend upgrading to IE11. If you do choose to keep using IE10, see here to verify and update settings in IE10 to allow chip-card transactions to process through choiceadvantage. Using IE11? IE10? Google Chrome? See here for directions to import the security certificate. Using Edge? See here for directions to open IE11 within Windows 10. Configuring Internet Explorer 10 to support chip-card transactions 1 From the Tools menu, select Internet Options. Choice University 2
2 On the Security tab, click the Custom Level button 3 Scroll down the Security Settings list until you see the ActiveX Controls and Plug-Ins options. Under Automatic Prompting for ActiveX controls select Enable. Choice University 3
Continue scrolling down Under Download Signed ActiveX controls, select Enable Continue scrolling down Under Run ActiveX controls and plug-ins, select Enable. Under Script ActiveX controls marked safe for scripting click Enable. Click OK to exit the Security Settings window. 4 From the Internet Options window, click the Advanced tab Choice University 4
5 On the Advanced tab, scroll down to near the bottom of the list and find the Use TLS 1.2 setting. This setting needs to be enabled (checked) to complete the transaction. If it is not already checked, do so now. 6 Click OK to exit the Internet Options window. 7 Restart the workstation (some settings will not take effect until the computer is restarted). What else do I need to do? Import the security certificate for use with IE (versions 10 or 11) and Google Chrome. Using FireFox? See here for certificate import directions in FireFox. Back to Top Importing the security certificate to Internet Explorer (for use in IE AND Google Chrome **In order to complete this process, you will need a portable thumb/flash drive. 1 Locate the workstation on which the chip-card software was installed by Spencer Technologies. In most cases, this will be the Jedi workstation (where the Emergency Reports are generated and saved). The computer with the chip-card software will have a UTG Reboot icon on the desktop. Choice University 5
2 Connect the portable flash drive to the workstation Spencer Technologies installed the chip-card software on. Open the Start Menu by clicking on the Windows icon. From the Start Menu, select Computer. Note the drive letter assignment for the portable flash drive. This is automatically selected by your computer, so the assigned letter may be different on your computer. 3 Open a Command Prompt window. From the Start Menu, type cmd into the search box at the bottom and press Enter. Choice University 6
A command prompt window will display. 4 In the Command Prompt window, type the following, including quotes, as shown (using the assigned letter for your flash drive where described): copy c:\shift4\utg EMV Public.pem [assigned flash drive letter]:\ example: copy c:\shift4\utg EMV Public.pem d:\ Press Enter When completed, 1 file(s) copied. will display in the command prompt window. 5 Close the Command Prompt window, and eject/remove your portable flash drive. 6 Connect your portable flash drive to a front desk workstation. Continue to step 7 if importing into Internet Explorer. See here if you importing the certificate into Firefox. 7 Open Internet Explorer select Internet Options from the Tools menu. 8 Select the Content tab from the Internet Options window, and click the Certificates button. 9 From the Certificates window, select the Trusted Root Certification Authorities tab. Then click the Import button. When the Certificate Import Wizard opens, click the Next button. Choice University 7
10 From the Certificate Import Wizard, click the Browse button to navigate to the copied certificate file saved to your portable flash drive. The click the Next button. 11 Select the Place all certificates in the following store option. In the Certificate store dialog box, it should read Trusted Root Certification Authorities. Then click the Next button. 12 On the final step, verify that Certificate Store Select by User is highlighted, then click the Finish button. Choice University 8
13 A security warning will display. Click Yes to continue importing the certificate. A prompt will display to let you know that the import was successful (or if it was not, will proved an error reason or code). Click OK to continue. 14 Close out of the Certificates and the Internet Options windows. Then eject and disconnect the portable flash drive, and repeat these steps for any additional workstations requiring the certificate. What else do I need to do? Be sure to complete the steps in this section for any front desk workstation which will use Internet Explorer or Google Chrome to post chip-card transactions in choiceadvantage. Using IE10? See here for specific configuration settings which must also be set for chip-card transactions to process correctly. Back to Top Choice University 9
Accessing Internet Explorer 11 in Windows 10 1 Open the Start menu (click the Windows logo) and click All Apps. 2 Go to Windows Accessories. 3 Select Internet Explorer (this will open up IE 11). To make IE11 more easily accessible, right click on Internet Explorer and select Pin to Taskbar. Choice University 10
4 To set IE11 as your default browser: Open IE 11 Open the Tools menu and select Internet Options. On the Programs tab, click the Make Default button. Select OK, then close Internet Explorer (default setting will take effect after browser session is closed). *Windows 10 screenshots courtesy of http://blogs.interfacett.com/how-to-launch-internet-explorer-11-in-windows-10 What else do I need to do? Using IE11 or Google Chrome? See here to import the security certificate. Using FireFox? See here to import the security certificate into Firefox. Back to Top Choice University 11
Importing the security certificate to Firefox The certificate will need to be copied from the workstation it was created on during the remote software installation with Spencer Technologies. See here for directions to copy the certificate. 1 In the Firefox browser, click to open the Menu and select History. 2 Under History, select Clear Recent History. 3 In the Clear All History dialog box, select Everything from the drop-down menu, then click the Clear Now button. 4 The history dialog box will close. Click to open the Menu again, and select Options. Choice University 12
5 From the Options menu, select Advanced and click the Certificates tab. 6 From the Certificates tab, click the View Certificates button. 7 From the Certificate Manager, select the Servers tab. 8 Click the Add Exceptions button. 9 Enter the location of the certificate. You will be importing this from your portable flash drive, so be sure it is connected before continuing. Enter the location of the certificate on your portable flash drive. Format will look something like letter of assigned drive:\ (ie, d:\). Be sure to include the name of any additional folder(s) it was copied to. Alternatively, you may copy and paste this information by opening your flash drive, navigating to the location of the certificate, clicking in the address bar and copying the location once it highlights. After entering the location, click the Get Certificate button. Click the certificate, select the Permanently store this exception checkbox, then click the Confirm Security Exception button. Choice University 13
10 In order for the certificate to take effect, close out all instances of Firefox open on your computer and then start a new browsing session. It is recommended to perform a test transaction using choiceadvantage in Firefox to verify the certificate installed correctly. What else do I need to do? Use other browsers (such as IE or Chrome) with choiceadvantage? See here for directions on installing the security certificate for use with these browsers. Keep in mind that the only other supported browsers are IE10, IE11, and Google Chrome. Not sure which version of IE is on your computer? See here to check. Back to Top Choice University 14