InsideBusiness Payments
Comprehensive installation manual for the blue
ING I-Dentity Reader
Table of contents
1. Introduction
3
2. Configuration requirements
2.1 Software requirements
4
4
2.2 Hardware requirements
5
3. Installing the ING I-Dentity Software
6
3.1 Automatic installation of ING I-Dentity Software
7
3.2 Manual installation of the ING I-Dentity Software
3.2.1 Installing the driver for the ING I-Dentity Reader
10
10
3.2.2 Installing the GemSAFE software
11
3.2.3 Installing the IAIK PKCS#11wrapper
11
4. Configuring Windows
12
4.1 Setting the Smart Card services to automatic
12
4.2 Starting up the Browser in 32 bit mode for 64 bit operating system
14
5. Configuring Internet Explorer
15
5.1 Internet Explorer 7 settings
15
5.2 Internet Explorer 8, 9 and 10 settings
15
6. Configuring Java
17
6.1 Deleting older versions of Java
17
6.2 Installing the most recent version of Java
17
6.3 Java settings
17
7. Use of Registration Tool (Gemplus)
7.1 Registration Tool icons
19
19
7.2 Shortcut to InsideBusiness Payments
21
8. Troubleshooting
22
8.1 Conflicting software
22
8.2 Proxy server
8.3 Certificates
22
22
8.4 Virus scanners
22
8.5 Client-server environment
22
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
2
1. Introduction
This manual is intended for system managers or end users who act as system manager when
installing InsideBusiness Payments. The system manager sees to it that all software is correctly installed and configured. The right to log on and verify that InsideBusiness Payments is working properly is reserved for the end user who possesses a ING I-Dentity Card and ING I-Dentity Reader.
The configuration required for InsideBusiness Payments (IBP) must comply with several system requirements and settings.
This manual provides a more detailed account of the hardware requirements and the software (and software settings) needed to be able to use IBP properly.
The manual also deals with the installation of the ING I-Dentity
Software provided by ING for the ING I-Dentity Card and ING
I-Dentity Reader, operating software, browser software and other required software including the preferred settings.
Furthermore the manual explains how the system manager can verify whether the ING I-Dentity Reader is ready for use. Only the end user can assess whether IBP can be logged on to successfully using their valid ING I-Dentity Card.
For more information go to inginsidebusiness.com.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
3
2. Configuration requirements
2.1 Software requirements
To be able to use InsideBusiness Payments the computer must comply with various software and hardware requirements.
Configurations that do not comply are not officially supported.
In any such case, please contact your advisor.
Provided by ING to enable use of InsideBusiness Payments:
• ING I-Dentity Card (smartcard)
• ING I-Dentity Reader + USB cable
• ING I-Dentity Software (operating software for the
ING I-Dentity Card and the ING I-Dentity Reader).
InsideBusiness Payments works with an ING I-Dentity Reader that can be either connected or unconnected to the computer.
The ING I-Dentity Software must be installed on every computer on which InsideBusiness Payments is used in combination with the connected ING I-Dentity Reader.
Operating Systems
• Windows Vista / SP2 (32 or 64 bit)
• Windows 7 / SP1 (32 or 64 bit)
• Windows 8.
Browsers
• Windows Internet Explorer 7.0
• Windows Internet Explorer 8.0 / 9.0 / 10.0
• Only 32 bit browsers are supported when the reader is connected to the computer.
Internet Protocol
• Internet Protocol version 4.
SUN Java JRE 1.7 and higher (international version)
• Sun Java plugin version 1.7 and higher
• In the event of a 64 bit operating system the Java 32 bit software must also be installed to be able to work with the ING
I-Dentity Reader connected to the computer.
JavaScript
• JavaScript must be enabled
• Active scripting, paste operations via script and scripting of
Java applets enabled
• The use of Cookies (per session) enabled.
Adobe Acrobat Reader
• At least version 10.0 to view reports in PDF format.
Spam filter – receiving email
InsideBusiness Payments informs users via email about the status of the application and other matters. Accordingly, ensure that the email domain @ing.nl is not blocked.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
4
2.2 Hardware
requirements
Memory
• Minimum: 256MB
• Recommended: 512MB or more.
Hard drive space available
• Minimum: when using the connected ING I-Dentity Reader a minimum of 50MB hard drive space needs to be available for installation of the ING I-Dentity Software
• Space for exchanging files (to be managed by the client).
USB port
• A USB port is needed to connect the ING I-Dentity Reader
(preferably on the base unit).
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
5
3. Installing the
ING I-Dentity Software
The ING I-Dentity Software only needs to be installed if you want to connect the ING I-Dentity Reader to the computer. You can skip this step if you wish to use the ING I-Dentity Reader without connecting it to the computer.
Check that the correct version of the cd rom is used
(see description on cd rom):
GEMPLUS Libraries v6.0
Includes Windows 7 support
If you have an older version in your possession, you can request a new cd rom from the helpdesk or via your ING contact person.
We recommend opting for automatic installation. This usually starts up automatically after the cd rom is inserted in the cd/dvd drive. If the installation process does not start automatically or if the following image does not appear, you can start the installation by opening ‘setup.exe’ from the cd rom. Information on manual installation can be found in section 3.2.
Be sure to save and shut down any open applications before starting the installation process.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
6
3.1 Automatic installation of ING I-Dentity Software
The following screens will appear during the automatic installation process. The card reader may be connected during installation but this is not required for the software to operate properly. Please follow the steps below.
1. Click ‘Next’
2. Select all components. The ING Secure Reader DP850
Driver (USB), GemSAFE software and IAIK PKCS#11
Wrapper are essential.
It is recommended to also select the ING I-Dentity
Documentation but this is not required for the software to operate properly.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
7
3. Select the desired location and click ‘Next’
4. Click ‘Install’
5. Windows Vista the software will request to connect the reader if you have not already done so. Follow the instructions. This question will not be posed if you are using another version of Windows
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
8
6. The software will now take a few minutes to install the various components
7. For quick installation, select ‘No, I will visit the website some other time’ and click ‘Finish’
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
9
3.2 Manual installation of the ING I-Dentity Software
8. Select ‘Yes’ and click ‘OK’.
If automatic installation is unsuccessful the software can also be installed manually by following the instructions below.
The installation of the ING I-Dentity Software consists of three essential components, namely:
1. The driver for the ING I-Dentity Reader (Vasco DP850 smartcard reader)
2. The GemSAFE software
3. The IAIK PKCS#11 Wrapper (pkcs11wrapper.dll).
To access the content of the cd rom:
Go to Computer > cd rom / dvd rom player (usually D:\) and select ‘Explore’ (can also be accessed via the Windows start menu).
3.2.1 Installing the driver for the ING I-Dentity Reader
1. Go to the ‘DP850’ folder on the cd rom and select the folder used for the operating system (for Windows 7 you can use the Vista driver). Be sure to use the correct version for your operating system (32 bit or 64 bit version)
2. Double-click ‘dp850x32.exe’ or ‘dp850x64.exe’ for Windows
Vista or Windows 7 / 8
3. The setup will now start up
4. Select ‘Install’
5. During the installation process you may be asked to
connect the card reader; if so connect the ING I-Dentity
Reader using the USB cable that has been provided
6. Wait around 5 seconds until Windows recognises the device and click ‘OK’
7. The installation process is now complete.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
10
3.2.2 Installing the GemSAFE software
1. Go to the ‘GemSAFE’ folder on the cd rom and select the folder for the operating system that is in use (the folders named ‘CC’ are suitable for Windows 7 / 8)
2. Go to the ‘Classic_Client_EN_32’ or
‘Classic_Client_EN_64’ folder
3. Double-click the ‘*.msi’ file
4. Accept the user agreement and click ‘Next’ and ‘Install’ in the following screens
5. The computer will need to be restarted once the installation has been completed.
3.2.3 Installing the IAIK PKCS#11wrapper
The PKI Wrapper cannot be installed by following an installation process but has to be copied to the
C:\Windows\system32 folder
1. Go to the ‘IAIK’ folder on the cd rom
2. Right-click the ‘pkcs11wrapper.dll’ file and select ‘Copy’
3. Go to the C:\Windows\system32 folder and paste the file.
The installation of the three components completes the manual installation of the ING I-Dentity Software.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
11
4. Configuring Windows
4.1 Setting the Smart Card services to automatic
A configuration is needed if you wish to use the ING I-Dentity
Reader connected to the computer. This is not necessary if you only plan to work with the ING I-Dentity Reader which is not connected to the computer.
To prevent users from having to manually start-up the
ING I-Dentity Software every time, the Smart Card services have to be set to ‘Automatic’.
The following steps describe how to check and make any changes (administrator rights are required for this).
1. Go to ‘Start’ and select:
- Windows Vista, Windows 7 / 8: ‘Search programs and files’ (see screenshot below)
2. Type:
- Windows Vista, Windows 7 / 8: ‘services’ (see screenshot,
‘Services’ option at the top)
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
12
3. In the Services list go to ‘Smart Card’. It should be set to
‘Started’ and ‘Automatic’. If not you can change the settings by right-clicking the line and selecting ‘Properties’
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
13
4. Select ‘Automatic’ and click ‘OK’ to confirm.
4.2 Starting up the
Browser in 32 bit mode for 64 bit operating system
Using a Windows 64 bit operating system means that the 64 bit version of Internet Explorer can be used if it is combined with the
ING I-Dentity Reader unconnected. If you plan to use the ING
I-Dentity Reader connected to the computer, you will not be able to use the 64 bit version of the browser. It is essential to start up the browser in normal mode (= 32 bit mode).
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
14
5. Configuring Internet
Explorer
5.1 Internet Explorer 7 settings
5.2 Internet Explorer 8,
9 and 10 settings
A number of browser options must be changed to ensure the best possible operation of InsideBusiness Payments. These options are shown below for the supported versions of Internet
Explorer. The other settings mentioned below need not all be necessary but can prevent problems and improve performance.
It is often necessary to add the ING website to the list of trusted sites when configuring the browser.
1. In Internet Explorer go to ‘Tools’ > ‘Internet options’
2. Click the ‘Security’ tab and then ‘Trusted sites’. Then click
‘Sites’. Under ‘Add this Web site to the zone’ in the new screen, type: https://*.inginsidebusiness.com
3. In the ‘Advanced’ tab, click ‘Restore advanced settings’ at the bottom
4. Under the ‘Browsing’ header, disable the checkbox ‘Enable third-party browser extension*’
5. Click ‘Apply’ and then ‘OK’
6. In the ‘General’ tab click ‘Delete’ under the ‘Browsing history’ header
7. In the new screen, click ‘Delete’. Once the computer has finished deleting the files, click ‘Close’
8. In the ‘General’ tab, click ‘Settings’ under the ‘Browsing history’ button (next to the ‘Delete’ button in the previous step)
9. In the new screen, select the top option: ‘Every time I visit the webpage’
10. To improve performance change the ‘Disk space to use’ to
100MB (it also performs fine at the 50MB default setting) and click ‘OK’
11. Shut down Internet Explorer completely to save all changes.
1. In Internet Explorer go to ‘Tools’ > ‘Internet options’
2. Click the ‘Security’ tab and then ‘Trusted sites’. Then click
‘Sites’. Under ‘Add this Web site to the zone’ in the new screen, type: https://*.inginsidebusiness.com
3. In the ‘Advanced’ tab, click ‘Restore advanced settings’ at the bottom
4. Under the ‘Browsing’ header, disable the checkbox
‘Enable third-party browser extension*’
5. Click ‘Apply’ and then ‘OK’
6. In the ‘General’ tab click ‘Delete’ under the ‘Browsing history’ header
7. In the new screen ensure that the checkbox next to the option: ‘Preserve Favorites website data’ is enabled (the other options may remain disabled). Then click ‘Delete’
8. In the ‘General’ tab, click ‘Settings’ under the ‘Browsing history’ button (next to the ‘Delete’ button in the previous step)
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
15
9. In the new screen, select the top option: ‘Every time I visit the webpage’. To improve performance change the ‘Disk space to use’ to 100MB (it also performs fine at the 50MB default setting) and click ‘OK’
10. Shut down Internet Explorer completely to save all changes.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
16
6. Configuring Java
6.1 Deleting older versions of Java
6.2 Installing the most recent version of Java
6.3 Java settings
To ensure the best possible operation of InsideBusiness
Payments it is recommended to have only one version of Java installed.
1. Go to ‘Start’ > ‘Control Panel’ or ‘Start’ > ‘Settings’ >
‘Control Panel’
2. Be sure the ‘Classic View’ is used
3. Double-click ‘Programs and Features’ (Windows Vista or
Windows 7 / 8)
4. If it is not available select ‘Classic View’
5. Check to be sure that the Java version is at least 1.7.x
6. Check whether various versions of Java are listed. If so delete all older versions of Java but leave the most recent version.
The most recent version of Java can be downloaded from www.java.com. If the Java website is visited using the 32 bit version of Internet Explorer, then only the 32 bit version of Java is offered. If the Java website is visited using a 64 bit version of Internet Explorer, then the 64 bit version of Java is offered as standard practice. The connected ING I-Dentity Reader requires the use of the 32 bit version of Java in combination with the 32 bit version of Internet Explorer.
1. Go to ‘Start’ > ‘Control Panel’ or ‘Start’ > ‘Settings’ >
‘Control panel’
2. Double-click ‘Java’ in the Control Panel
3. If it is not available, then select ‘Classic View’ first
4. In the ‘General’ tab, click ‘Settings’ at the bottom
5. Disable ‘Keep temporary files on this computer’
6. Click ‘Delete Files…’. All the options must be enabled in the new window and then click ‘OK’
7. Click ‘OK’
8. Go to the ‘Advanced’ tab (this does not apply for older versions of Java than update 6.18, in that case the actions for the ‘Next-generation Java plug-in’ do not have to be taken)
9. Click ‘Java plug-in’
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
17
10. Ensure that ‘Enable the next-generation Java plug-in’ is enabled
11. Click ‘Apply’ and then ‘OK’.
More information about installing and uninstalling Java and
Java settings can be found on www.java.com.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
18
7. Use of Registration
Tool (Gemplus)
7.1 Registration Tool icons
To be able to support users properly it is also wise for system managers to be familiar with the use of the ING I-Dentity Software (Gemalto Gemplus). The status of the software is shown by means of the Registration tool (RegTool) icon. System managers (with no ING I-Dentity Card) can follow the steps below up to and including connecting the card reader.
The right to log on to InsideBusiness Payments is reserved for users with an activated ING I-Dentity Card and personal PIN.
To be able to use InsideBusiness Payments together with the connected ING I-Dentity Reader, the ING I-Dentity Card certifi cate must be correctly loaded on the local computer. This can be seen on the Registration Tool icon in the Windows task bar.
When working with the ING I-Dentity Reader connected to the computer the text ‘VASCO DP850’ appears when the mouse is placed on the icon. Possible pictograms and what they mean are listed below.
1. The Smart Card software is running but the ING I-Dentity
Reader has not been detected. Logging on is not possible:
- Check whether the card reader is connected correctly to the computer
- Try another USB port on the computer (preferably on the base unit or via USB 3.0 connection)
- Disconnect the USB cable from the card reader and reconnect it
- Check the status of the card reader and ING I-Dentity
Card by right-clicking the icon > Launch Toolbox >
Diagnostics > Diagnostic Tool > Check cards, tokens and readers. Click ‘Start’ to start the Diagnostics
- If the card reader is connected then the card reader and/ or the USB cable could be broken. A new card reader and/or cable can be ordered from the InsideBusiness
Payments Helpdesk (+31 (0)88 464 22 33)
2. The software is set to pause. The Smart Card services in
Windows is still set to ‘Manual’. The user can start up the software manually (click the icon), but it is more effi cient to start up the software automatically (see chapter 4.1 Setting
Smart Card services to automatic)
3. The software has been started up and the card reader is connected. The ING I-Dentity Card has not been inserted into the card reader yet. It is not possible to log on (yet).
- Check whether the ING I-Dentity Card is in place and whether it has been inserted properly into the card reader
(see adjoining fi gure)
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
19
4. The software is running and the ING I-Dentity Card is inserted in the card reader. The certificate has not yet been loaded (this can take 10 seconds). It is not possible to log on (yet).
- If the certificate cannot be selected, there may be a conflict with other software that has been installed
(see paragraph 8.1 Conflicting software)
- If the icon does not automatically change into , it is possible that the ING I-Dentity Software is frozen. This can be tested by removing the ING I-Dentity Card from the card reader.
If the icon does not change into then the ‘Regtool.
exe’ programme will indeed have frozen
- Restart the computer and the programme usually restarts automatically. If the programme stays frozen, press Ctrl+Alt+Del and go to Start Task Manager and the ‘Processes’ tab to shut down ‘RegTool.exe’. The programme can then be restarted. To do so go to:
C:\Program Files\Gemplus\Gemsafe Libraries\BIN\
RegTool.exe or C:\Program Files\Gemalto\Classic Client\
BIN\RegTool.exe (path name depends on the selection made by the system manager during the installation)
5. The software has started up and the certificates are loaded; the text: ‘Certificate(s) loaded: 2’ appears when the mouse is placed over the icon. The user can now log on.
If you try to log on too soon (if the certificates have not yet been loaded) you will be shown the error message. Once the certifi cates are subsequently loaded (you will see this
icon) you will have to shut down the browser completely and restart it before attempting to log on again.
The following security warning may be issued when you try to log on:
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
20
Enable the checkbox ‘Always trust content from this publisher’ and click ‘Yes’.
Click ‘OK’ when you are asked to select the digital certificate.
7.2 Shortcut to
InsideBusiness Payments
The following URL can be used to log in to InsideBusiness
Payments, using the orange ‘Log In’ button on: inginsidebusiness.com or ing.nl/insidebusiness.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
21
8. Troubleshooting
8.1 Conflicting software
8.2 Proxy server
8.3 Certificates
8.4 Virus scanners
8.5 Client-server
environment
A problem can always occur which could prevent you from using InsideBusiness Payments, even if you installed the
ING I-Dentity Software correctly by following the instructions in this document and checked and changed the various settings.
This chapter discusses a number of common problems. Should it not offer you a solution to the problem, please contact the
Helpdesk InsideBusiness Payments for further support.
Various cases of conflicting software are known, particularly if other applications (e.g. SafeSign) also use smart cards.
Removing the other software will often resolve the problem. If this is not an option the problem can also be resolved via the
Windows registry. Contact the helpdesk for further support.
If you use a proxy the following settings must be incorporated on the proxy server for InsideBusiness Payments to be able to run correctly:
• The outgoing ports 80 and 443 must be open
• The ING site https://*.inginsidebusiness.com must be granted access
The ING certificates are normally loaded automatically. Should there be any problem with the certificates, please refer to the detailed information on certification that was provided on the cd rom and ING I-Dentity Software. Common issues are dealt with here.
Virus scanners can cause problems if data exchanged between
ING and the user is viewed as harmful (so-called ‘false positives’). Contact the supplier of your anti-virus software should you experience any problems.
Installation into a client-server environment (e.g. Citrix) is often complex and can differ for each client. This has to do with the client-specific setup in client-server environments. In all cases the client terminals must have a USB port to connect a card reader and a fully-fledged Windows operating system (with full
API) to be able to manage the USB connection. The latter tends to cause problems for so-called ‘thin clients’ because they often work with an operating system (other than Windows) that has been supplied by the manufacturer or a restricted Windows
operating system such as Windows CE.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
22
8.6 Other
More information about client server applications can be found in the Classic Client User Guide (on the installation cd rom or via the regtool icon (GemPlus) > Diagnostic/Help >
Documentation > Classic Client > Classic_Client_User_Guide.
pdf).
Contact the helpdesk for further support.
ING always advises that you use the most recent software versions. Check regularly for new updates.
InsideBusiness Payments Comprehensive installation manual for the blue ING I-Dentity Reader
23
More information
On inginsidebusiness.com you can download documentation, view instruction videos and read frequently asked questions.
If you still have questions please visit inginsidebusiness.com for contact details.
The registered office of ING Bank N.V. is located at Bijlmerplein
888, 1102 MG Amsterdam, Trade Register number 33031431 in
Amsterdam. ING Bank N.V. is registered with the Dutch Central
Bank (DNB) and the Netherlands Authority for the Financial
Markets (AFM) in the Credit Institutions and Financial Institutions Register. ING Bank N.V. is also subject to the supervision of the Authority for Consumers & Markets (ACM). Information about the supervision of ING Bank N.V. can be obtained from the DNB (www.dnb.nl), the AFM (www.afm.nl) or the ACM
(www.acm.nl).
In the context of this publication ‘ING’ and ‘bank’ are
understood to mean: ‘ING Bank N.V.’
