ING I-Dentity Reader I-Dentity Reader Installation manual

InsideBusiness Payments

Comprehensive installation manual for the blue

ING I-Dentity Reader

Table of contents

1. Introduction

3

2. Configuration requirements

2.1 Software requirements

4

4

2.2 Hardware requirements

5

3. Installing the ING I-Dentity Software

6

3.1 Automatic installation of ING I-Dentity Software

7

3.2 Manual installation of the ING I-Dentity Software

3.2.1 Installing the driver for the ING I-Dentity Reader

10

10

3.2.2 Installing the GemSAFE software

11

3.2.3 Installing the IAIK PKCS#11wrapper

11

4. Configuring Windows

12

4.1 Setting the Smart Card services to automatic

12

4.2 Starting up the Browser in 32 bit mode for 64 bit operating system

14

5. Configuring Internet Explorer

15

5.1 Internet Explorer 7 settings

15

5.2 Internet Explorer 8, 9 and 10 settings

15

6. Configuring Java

17

6.1 Deleting older versions of Java

17

6.2 Installing the most recent version of Java

17

6.3 Java settings

17

7. Use of Registration Tool (Gemplus)

7.1 Registration Tool icons

19

19

7.2 Shortcut to InsideBusiness Payments

21

8. Troubleshooting

22

8.1 Conflicting software

22

8.2 Proxy server

8.3 Certificates

22

22

8.4 Virus scanners

22

8.5 Client-server environment

22

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

2

1. Introduction

This manual is intended for system managers or end users who act as system manager when

installing InsideBusiness Payments. The system manager sees to it that all software is correctly installed and configured. The right to log on and verify that InsideBusiness Payments is working properly is reserved for the end user who possesses a ING I-Dentity Card and ING I-Dentity Reader.

The configuration required for InsideBusiness Payments (IBP) must comply with several system requirements and settings.

This manual provides a more detailed account of the hardware requirements and the software (and software settings) needed to be able to use IBP properly.

The manual also deals with the installation of the ING I-Dentity

Software provided by ING for the ING I-Dentity Card and ING

I-Dentity Reader, operating software, browser software and other required software including the preferred settings.

Furthermore the manual explains how the system manager can verify whether the ING I-Dentity Reader is ready for use. Only the end user can assess whether IBP can be logged on to successfully using their valid ING I-Dentity Card.

For more information go to inginsidebusiness.com.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

3

2. Configuration requirements

2.1 Software requirements

To be able to use InsideBusiness Payments the computer must comply with various software and hardware requirements.

Configurations that do not comply are not officially supported.

In any such case, please contact your advisor.

Provided by ING to enable use of InsideBusiness Payments:

• ING I-Dentity Card (smartcard)

• ING I-Dentity Reader + USB cable

• ING I-Dentity Software (operating software for the

ING I-Dentity Card and the ING I-Dentity Reader).

InsideBusiness Payments works with an ING I-Dentity Reader that can be either connected or unconnected to the computer.

The ING I-Dentity Software must be installed on every computer on which InsideBusiness Payments is used in combination with the connected ING I-Dentity Reader.

Operating Systems

• Windows Vista / SP2 (32 or 64 bit)

• Windows 7 / SP1 (32 or 64 bit)

• Windows 8.

Browsers

• Windows Internet Explorer 7.0

• Windows Internet Explorer 8.0 / 9.0 / 10.0

• Only 32 bit browsers are supported when the reader is connected to the computer.

Internet Protocol

• Internet Protocol version 4.

SUN Java JRE 1.7 and higher (international version)

• Sun Java plugin version 1.7 and higher

• In the event of a 64 bit operating system the Java 32 bit software must also be installed to be able to work with the ING

I-Dentity Reader connected to the computer.

JavaScript

• JavaScript must be enabled

• Active scripting, paste operations via script and scripting of

Java applets enabled

• The use of Cookies (per session) enabled.

Adobe Acrobat Reader

• At least version 10.0 to view reports in PDF format.

Spam filter – receiving email

InsideBusiness Payments informs users via email about the status of the application and other matters. Accordingly, ensure that the email domain @ing.nl is not blocked.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

4

2.2 Hardware

requirements

Memory

• Minimum: 256MB

• Recommended: 512MB or more.

Hard drive space available

• Minimum: when using the connected ING I-Dentity Reader a minimum of 50MB hard drive space needs to be available for installation of the ING I-Dentity Software

• Space for exchanging files (to be managed by the client).

USB port

• A USB port is needed to connect the ING I-Dentity Reader

(preferably on the base unit).

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

5

3. Installing the

ING I-Dentity Software

The ING I-Dentity Software only needs to be installed if you want to connect the ING I-Dentity Reader to the computer. You can skip this step if you wish to use the ING I-Dentity Reader without connecting it to the computer.

Check that the correct version of the cd rom is used

(see description on cd rom):

GEMPLUS Libraries v6.0

Includes Windows 7 support

If you have an older version in your possession, you can request a new cd rom from the helpdesk or via your ING contact person.

We recommend opting for automatic installation. This usually starts up automatically after the cd rom is inserted in the cd/dvd drive. If the installation process does not start automatically or if the following image does not appear, you can start the installation by opening ‘setup.exe’ from the cd rom. Information on manual installation can be found in section 3.2.

Be sure to save and shut down any open applications before starting the installation process.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

6

3.1 Automatic installation of ING I-Dentity Software

The following screens will appear during the automatic installation process. The card reader may be connected during installation but this is not required for the software to operate properly. Please follow the steps below.

1. Click ‘Next’

2. Select all components. The ING Secure Reader DP850

Driver (USB), GemSAFE software and IAIK PKCS#11

Wrapper are essential.

It is recommended to also select the ING I-Dentity

Documentation but this is not required for the software to operate properly.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

7

3. Select the desired location and click ‘Next’

4. Click ‘Install’

5. Windows Vista the software will request to connect the reader if you have not already done so. Follow the instructions. This question will not be posed if you are using another version of Windows

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

8

6. The software will now take a few minutes to install the various components

7. For quick installation, select ‘No, I will visit the website some other time’ and click ‘Finish’

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

9

3.2 Manual installation of the ING I-Dentity Software

8. Select ‘Yes’ and click ‘OK’.

If automatic installation is unsuccessful the software can also be installed manually by following the instructions below.

The installation of the ING I-Dentity Software consists of three essential components, namely:

1. The driver for the ING I-Dentity Reader (Vasco DP850 smartcard reader)

2. The GemSAFE software

3. The IAIK PKCS#11 Wrapper (pkcs11wrapper.dll).

To access the content of the cd rom:

Go to Computer > cd rom / dvd rom player (usually D:\) and select ‘Explore’ (can also be accessed via the Windows start menu).

3.2.1 Installing the driver for the ING I-Dentity Reader

1. Go to the ‘DP850’ folder on the cd rom and select the folder used for the operating system (for Windows 7 you can use the Vista driver). Be sure to use the correct version for your operating system (32 bit or 64 bit version)

2. Double-click ‘dp850x32.exe’ or ‘dp850x64.exe’ for Windows

Vista or Windows 7 / 8

3. The setup will now start up

4. Select ‘Install’

5. During the installation process you may be asked to

connect the card reader; if so connect the ING I-Dentity

Reader using the USB cable that has been provided

6. Wait around 5 seconds until Windows recognises the device and click ‘OK’

7. The installation process is now complete.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

10

3.2.2 Installing the GemSAFE software

1. Go to the ‘GemSAFE’ folder on the cd rom and select the folder for the operating system that is in use (the folders named ‘CC’ are suitable for Windows 7 / 8)

2. Go to the ‘Classic_Client_EN_32’ or

‘Classic_Client_EN_64’ folder

3. Double-click the ‘*.msi’ file

4. Accept the user agreement and click ‘Next’ and ‘Install’ in the following screens

5. The computer will need to be restarted once the installation has been completed.

3.2.3 Installing the IAIK PKCS#11wrapper

The PKI Wrapper cannot be installed by following an installation process but has to be copied to the

C:\Windows\system32 folder

1. Go to the ‘IAIK’ folder on the cd rom

2. Right-click the ‘pkcs11wrapper.dll’ file and select ‘Copy’

3. Go to the C:\Windows\system32 folder and paste the file.

The installation of the three components completes the manual installation of the ING I-Dentity Software.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

11

4. Configuring Windows

4.1 Setting the Smart Card services to automatic

A configuration is needed if you wish to use the ING I-Dentity

Reader connected to the computer. This is not necessary if you only plan to work with the ING I-Dentity Reader which is not connected to the computer.

To prevent users from having to manually start-up the

ING I-Dentity Software every time, the Smart Card services have to be set to ‘Automatic’.

The following steps describe how to check and make any changes (administrator rights are required for this).

1. Go to ‘Start’ and select:

- Windows Vista, Windows 7 / 8: ‘Search programs and files’ (see screenshot below)

2. Type:

- Windows Vista, Windows 7 / 8: ‘services’ (see screenshot,

‘Services’ option at the top)

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

12

3. In the Services list go to ‘Smart Card’. It should be set to

‘Started’ and ‘Automatic’. If not you can change the settings by right-clicking the line and selecting ‘Properties’

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

13

4. Select ‘Automatic’ and click ‘OK’ to confirm.

4.2 Starting up the

Browser in 32 bit mode for 64 bit operating system

Using a Windows 64 bit operating system means that the 64 bit version of Internet Explorer can be used if it is combined with the

ING I-Dentity Reader unconnected. If you plan to use the ING

I-Dentity Reader connected to the computer, you will not be able to use the 64 bit version of the browser. It is essential to start up the browser in normal mode (= 32 bit mode).

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

14

5. Configuring Internet

Explorer

5.1 Internet Explorer 7 settings

5.2 Internet Explorer 8,

9 and 10 settings

A number of browser options must be changed to ensure the best possible operation of InsideBusiness Payments. These options are shown below for the supported versions of Internet

Explorer. The other settings mentioned below need not all be necessary but can prevent problems and improve performance.

It is often necessary to add the ING website to the list of trusted sites when configuring the browser.

1. In Internet Explorer go to ‘Tools’ > ‘Internet options’

2. Click the ‘Security’ tab and then ‘Trusted sites’. Then click

‘Sites’. Under ‘Add this Web site to the zone’ in the new screen, type: https://*.inginsidebusiness.com

3. In the ‘Advanced’ tab, click ‘Restore advanced settings’ at the bottom

4. Under the ‘Browsing’ header, disable the checkbox ‘Enable third-party browser extension*’

5. Click ‘Apply’ and then ‘OK’

6. In the ‘General’ tab click ‘Delete’ under the ‘Browsing history’ header

7. In the new screen, click ‘Delete’. Once the computer has finished deleting the files, click ‘Close’

8. In the ‘General’ tab, click ‘Settings’ under the ‘Browsing history’ button (next to the ‘Delete’ button in the previous step)

9. In the new screen, select the top option: ‘Every time I visit the webpage’

10. To improve performance change the ‘Disk space to use’ to

100MB (it also performs fine at the 50MB default setting) and click ‘OK’

11. Shut down Internet Explorer completely to save all changes.

1. In Internet Explorer go to ‘Tools’ > ‘Internet options’

2. Click the ‘Security’ tab and then ‘Trusted sites’. Then click

‘Sites’. Under ‘Add this Web site to the zone’ in the new screen, type: https://*.inginsidebusiness.com

3. In the ‘Advanced’ tab, click ‘Restore advanced settings’ at the bottom

4. Under the ‘Browsing’ header, disable the checkbox

‘Enable third-party browser extension*’

5. Click ‘Apply’ and then ‘OK’

6. In the ‘General’ tab click ‘Delete’ under the ‘Browsing history’ header

7. In the new screen ensure that the checkbox next to the option: ‘Preserve Favorites website data’ is enabled (the other options may remain disabled). Then click ‘Delete’

8. In the ‘General’ tab, click ‘Settings’ under the ‘Browsing history’ button (next to the ‘Delete’ button in the previous step)

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

15

9. In the new screen, select the top option: ‘Every time I visit the webpage’. To improve performance change the ‘Disk space to use’ to 100MB (it also performs fine at the 50MB default setting) and click ‘OK’

10. Shut down Internet Explorer completely to save all changes.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

16

6. Configuring Java

6.1 Deleting older versions of Java

6.2 Installing the most recent version of Java

6.3 Java settings

To ensure the best possible operation of InsideBusiness

Payments it is recommended to have only one version of Java installed.

1. Go to ‘Start’ > ‘Control Panel’ or ‘Start’ > ‘Settings’ >

‘Control Panel’

2. Be sure the ‘Classic View’ is used

3. Double-click ‘Programs and Features’ (Windows Vista or

Windows 7 / 8)

4. If it is not available select ‘Classic View’

5. Check to be sure that the Java version is at least 1.7.x

6. Check whether various versions of Java are listed. If so delete all older versions of Java but leave the most recent version.

The most recent version of Java can be downloaded from www.java.com. If the Java website is visited using the 32 bit version of Internet Explorer, then only the 32 bit version of Java is offered. If the Java website is visited using a 64 bit version of Internet Explorer, then the 64 bit version of Java is offered as standard practice. The connected ING I-Dentity Reader requires the use of the 32 bit version of Java in combination with the 32 bit version of Internet Explorer.

1. Go to ‘Start’ > ‘Control Panel’ or ‘Start’ > ‘Settings’ >

‘Control panel’

2. Double-click ‘Java’ in the Control Panel

3. If it is not available, then select ‘Classic View’ first

4. In the ‘General’ tab, click ‘Settings’ at the bottom

5. Disable ‘Keep temporary files on this computer’

6. Click ‘Delete Files…’. All the options must be enabled in the new window and then click ‘OK’

7. Click ‘OK’

8. Go to the ‘Advanced’ tab (this does not apply for older versions of Java than update 6.18, in that case the actions for the ‘Next-generation Java plug-in’ do not have to be taken)

9. Click ‘Java plug-in’

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

17

10. Ensure that ‘Enable the next-generation Java plug-in’ is enabled

11. Click ‘Apply’ and then ‘OK’.

More information about installing and uninstalling Java and

Java settings can be found on www.java.com.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

18

7. Use of Registration

Tool (Gemplus)

7.1 Registration Tool icons

To be able to support users properly it is also wise for system managers to be familiar with the use of the ING I-Dentity Software (Gemalto Gemplus). The status of the software is shown by means of the Registration tool (RegTool) icon. System managers (with no ING I-Dentity Card) can follow the steps below up to and including connecting the card reader.

The right to log on to InsideBusiness Payments is reserved for users with an activated ING I-Dentity Card and personal PIN.

To be able to use InsideBusiness Payments together with the connected ING I-Dentity Reader, the ING I-Dentity Card certifi cate must be correctly loaded on the local computer. This can be seen on the Registration Tool icon in the Windows task bar.

When working with the ING I-Dentity Reader connected to the computer the text ‘VASCO DP850’ appears when the mouse is placed on the icon. Possible pictograms and what they mean are listed below.

1. The Smart Card software is running but the ING I-Dentity

Reader has not been detected. Logging on is not possible:

- Check whether the card reader is connected correctly to the computer

- Try another USB port on the computer (preferably on the base unit or via USB 3.0 connection)

- Disconnect the USB cable from the card reader and reconnect it

- Check the status of the card reader and ING I-Dentity

Card by right-clicking the icon > Launch Toolbox >

Diagnostics > Diagnostic Tool > Check cards, tokens and readers. Click ‘Start’ to start the Diagnostics

- If the card reader is connected then the card reader and/ or the USB cable could be broken. A new card reader and/or cable can be ordered from the InsideBusiness

Payments Helpdesk (+31 (0)88 464 22 33)

2. The software is set to pause. The Smart Card services in

Windows is still set to ‘Manual’. The user can start up the software manually (click the icon), but it is more effi cient to start up the software automatically (see chapter 4.1 Setting

Smart Card services to automatic)

3. The software has been started up and the card reader is connected. The ING I-Dentity Card has not been inserted into the card reader yet. It is not possible to log on (yet).

- Check whether the ING I-Dentity Card is in place and whether it has been inserted properly into the card reader

(see adjoining fi gure)

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

19

4. The software is running and the ING I-Dentity Card is inserted in the card reader. The certificate has not yet been loaded (this can take 10 seconds). It is not possible to log on (yet).

- If the certificate cannot be selected, there may be a conflict with other software that has been installed

(see paragraph 8.1 Conflicting software)

- If the icon does not automatically change into , it is possible that the ING I-Dentity Software is frozen. This can be tested by removing the ING I-Dentity Card from the card reader.

If the icon does not change into then the ‘Regtool.

exe’ programme will indeed have frozen

- Restart the computer and the programme usually restarts automatically. If the programme stays frozen, press Ctrl+Alt+Del and go to Start Task Manager and the ‘Processes’ tab to shut down ‘RegTool.exe’. The programme can then be restarted. To do so go to:

C:\Program Files\Gemplus\Gemsafe Libraries\BIN\

RegTool.exe or C:\Program Files\Gemalto\Classic Client\

BIN\RegTool.exe (path name depends on the selection made by the system manager during the installation)

5. The software has started up and the certificates are loaded; the text: ‘Certificate(s) loaded: 2’ appears when the mouse is placed over the icon. The user can now log on.

If you try to log on too soon (if the certificates have not yet been loaded) you will be shown the error message. Once the certifi cates are subsequently loaded (you will see this

icon) you will have to shut down the browser completely and restart it before attempting to log on again.

The following security warning may be issued when you try to log on:

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

20

Enable the checkbox ‘Always trust content from this publisher’ and click ‘Yes’.

Click ‘OK’ when you are asked to select the digital certificate.

7.2 Shortcut to

InsideBusiness Payments

The following URL can be used to log in to InsideBusiness

Payments, using the orange ‘Log In’ button on: inginsidebusiness.com or ing.nl/insidebusiness.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

21

8. Troubleshooting

8.1 Conflicting software

8.2 Proxy server

8.3 Certificates

8.4 Virus scanners

8.5 Client-server

environment

A problem can always occur which could prevent you from using InsideBusiness Payments, even if you installed the

ING I-Dentity Software correctly by following the instructions in this document and checked and changed the various settings.

This chapter discusses a number of common problems. Should it not offer you a solution to the problem, please contact the

Helpdesk InsideBusiness Payments for further support.

Various cases of conflicting software are known, particularly if other applications (e.g. SafeSign) also use smart cards.

Removing the other software will often resolve the problem. If this is not an option the problem can also be resolved via the

Windows registry. Contact the helpdesk for further support.

If you use a proxy the following settings must be incorporated on the proxy server for InsideBusiness Payments to be able to run correctly:

• The outgoing ports 80 and 443 must be open

• The ING site https://*.inginsidebusiness.com must be granted access

The ING certificates are normally loaded automatically. Should there be any problem with the certificates, please refer to the detailed information on certification that was provided on the cd rom and ING I-Dentity Software. Common issues are dealt with here.

Virus scanners can cause problems if data exchanged between

ING and the user is viewed as harmful (so-called ‘false positives’). Contact the supplier of your anti-virus software should you experience any problems.

Installation into a client-server environment (e.g. Citrix) is often complex and can differ for each client. This has to do with the client-specific setup in client-server environments. In all cases the client terminals must have a USB port to connect a card reader and a fully-fledged Windows operating system (with full

API) to be able to manage the USB connection. The latter tends to cause problems for so-called ‘thin clients’ because they often work with an operating system (other than Windows) that has been supplied by the manufacturer or a restricted Windows

operating system such as Windows CE.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

22

8.6 Other

More information about client server applications can be found in the Classic Client User Guide (on the installation cd rom or via the regtool icon (GemPlus) > Diagnostic/Help >

Documentation > Classic Client > Classic_Client_User_Guide.

pdf).

Contact the helpdesk for further support.

ING always advises that you use the most recent software versions. Check regularly for new updates.

InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader

23

More information

On inginsidebusiness.com you can download documentation, view instruction videos and read frequently asked questions.

If you still have questions please visit inginsidebusiness.com for contact details.

The registered office of ING Bank N.V. is located at Bijlmerplein

888, 1102 MG Amsterdam, Trade Register number 33031431 in

Amsterdam. ING Bank N.V. is registered with the Dutch Central

Bank (DNB) and the Netherlands Authority for the Financial

Markets (AFM) in the Credit Institutions and Financial Institutions Register. ING Bank N.V. is also subject to the supervision of the Authority for Consumers & Markets (ACM). Information about the supervision of ING Bank N.V. can be obtained from the DNB (www.dnb.nl), the AFM (www.afm.nl) or the ACM

(www.acm.nl).

In the context of this publication ‘ING’ and ‘bank’ are

understood to mean: ‘ING Bank N.V.’