Dear Client This document contains general instructions

Dear Client
This document contains general instructions on how to install OfficeNet Extra and how to act on first use of OfficeNet
Extra.
Preparation before installation of OfficeNet Extra (Creating a Backup) ...................................................................2
Installation-instruction OfficeNet Extra .........................................................................................................................3
Starting OfficeNet Extra for the first time (Clean installation) ....................................................................................5
Starting OfficeNet Extra for the first time (Upgrade installation) ...............................................................................7
Conversion manual (Migration of data from OfficeNet Plus)......................................................................................8
Using OfficeNet Extra in combination with a connection via a gateway......................................................................9
Disclaimer: This document has been drafted with the highest possible care.
Nevertheless ABN AMRO can not be held responsible for the correctness and completeness of the information
supplied.
Preparation before installation of OfficeNet Extra (Creating a Backup)
If a previous version of OfficeNet Extra is installed, a backup should be created before the OfficeNet Extra 1.5 is
installed.
Note:
Only if a backup of the existing installation is available is it possible to restore OfficeNet Extra if the installation of
OfficeNet Extra 1.5 is not successful.
Creating a back up of an existing OfficeNet Extra installation
Step 1
Determine the location of the OfficeNet Extra files (standard location is C:\Program Files\OfficeNet Extra) and make a
copy of this folder.
♦ Open Windows Explorer.
♦ Locate the OfficeNet Extra folder.
♦ Click the name of the folder using the right mouse button and select <Copy>.
♦ Select the destination folder.
♦ Click on the name of this folder using the right mouse button and select <Paste>.
If you do not use shared files in OfficeNet Extra, the procedure for creating a backup is finished and you can proceed
with the installation of the new version of OfficeNet Extra.
Step 2 (Only applicable if OfficeNet Extra
uses shared files )
Open one of the modules in OfficeNet Extra
and open the options screen (Action – Options).
Check the User Data entry. Here you can find
the folder containing the shared files (in the
example E:\OfficeNet Extra Data). Close
OfficeNet Extra and open Windows Explorer.
Create a copy of the folder containing the
shared files in the same way as described in step
1.
Note: If a previous version of OfficeNet Extra is installed that uses shared data it is important to start upgrading at the
computer where the reporting module contains the information you wish to include in OfficeNet Extra 1.5. Only the
data from the reporting module that is upgraded first will be included.
Installation-instruction OfficeNet Extra
Before starting the installation:
♦ You should contact the network administrator prior to starting a network installation of OfficeNet Extra.
♦ Any smartcardreader used with OfficeNet Extra should be connected to the computer before starting the installation
of OfficeNet Extra.
Step 1
Insert the OfficeNet Extra CD-Rom in your CD-Rom drive. Wait for the installation menu to appear. In case the
installation menu does not appear you can start the installation by selecting your CD-Rom drive in Windows Explorer
and double-clicking Install.exe.
Note: If a previous version of OfficeNet Extra is installed on your computer installation will start at step 4.
Step 2
The first screen of the OfficeNet Extra installation is the “Select Folder
for installation of local parts” screen. Here you can select in which
local folder the files should be installed. Standard selection is
C:\Program Files\OfficeNet Extra.
button.
An alternative folder can be selected by clicking the
Click <Next> to start the installation.
Note:
• The number of subfolders can be no more than 5.
• When using Windows 2000 the number of characters in the path can
be no higher than 33 (this includes spaces).
• Contact your network administrator when your computer is
connected to a (company) network.
• Only a local folder can be used to install OfficeNet Extra.
Step 3
If you want to share data with other OfficeNet Extra users the next
screen (“Select folder for the central data”) allows you to select the
network location to install the shared information. If you are the only
user or you do not want to share data no selection should be made here.
Click <Next> to proceed with the installation.
Note:
• The number of subfolders can be no more than 5.
• When using Windows 2000 the number of characters in the path can
be no higher than 33 (this includes spaces).
• In order to be able to share files on each computer where OfficeNet
Extra will be installed the same folder on the networkserver should
be selected during each installation.
• Make sure to always use a driveletter and directoryname (for
instance M:\Ondata). Universal Naming Convention names are not
supported. .
Step 4
The following screen (“Select Features”) allows you to select which of
the available modules should be installed. A module can be (de)selected
by clicking the check box in front of the name of the specific module.
The OfficeNet Direct module is the central module and should always
be installed. Therefore, it cannot be deselected. A short description of
the usage of a specific module is available by clicking the name of a
module and will appear in the field to the right of the selection field.
Click <Next> to proceed to the next step.
Step 5
The following installation screen allows you to select how domestic
payment orders created in your financial software should be processed.
Batch: All payments are kept together and reported as one payment .
Individual: All payments are processed and reported individually.
Standard selection is Batch. If necessary this setting can also be changed
after installation by selecting <Settings\General> in OfficeNet Direct.
Make a selection and continue by clicking <Next>.
Note: in order to have your payments processed as batch a contract
should be signed with Interpay. Contact your account manager for more
information about such a contract.
Step 6
It is possible to transfer data from OfficeNet Plus to OfficeNet Extra. If
you do not have OfficeNet Plus installed or choose not to transfer the
data select <No>. Make your selection and click <Next> to proceed with
the installation.
Note: The actual conversion of OfficeNet Plus data takes place after the
installation is finished. See the “conversion manual” for more
information.
Stap 7
When all files have been copied a screen is shown that signals the end of
the installation process. This screen offers the choice whether to start
OfficeNet Direct after completion. You need to start OfficeNet Direct to
enter essential data to be able to work with OfficeNet Extra (see also the
information in “Starting OfficeNet Extra for the first time”).
If you prefer not to start OfficeNet Direct after installation you can
deselect this option by clicking in the check box.
Click <Finish> to complete the installation.
Starting OfficeNet Extra for the first time (Clean installation)
To start OfficeNet Extra for the first time select the module OfficeNet Direct. If you were using a previous version
of OfficeNet Extra you should continue at Starting OfficeNet Extra for the first time (Upgrade installation).
Step 1
When starting OfficeNet Direct for the first time you are
required to enter the name and password for the superuser.
The superuser is the user that can create users, reset
passwords and change settings in OfficeNet Direct. Upon
entering the username and password and the confirmation
of the password click the <Ok> button to continue.
Step 2
A screen is shown next indicating which data is needed to
be able to work with OfficeNet Extra.
Click <Ok> to enter the data.
Step 3
Next the user settings screen is shown. You can enter an
abbreviation for the superuser here In this screen also the
contract number, contract PO box and the user serial
number should be entered. These can all be found on your
EB contract.
Click <Apply> when the data is completed.
Step 4
If you are using financial software to create your payment
orders select <Yes>. When you are going to use OfficeNet
Extra to create your payment orders select <No> (continue
at step 9).
Step 5
The next screen offers the choice to select whether the
folders standard to OfficeNet Direct or the folders used by
your financial software will be used to place payment files
for import.
If you select <No> the standard folders for OfficeNet Direct will be used and you will have to change the settings in
your financial software (continue at step 9). Selecting <Yes> indicates that OfficeNet Direct should use the folders used
by your financial software for import.
Step 6
Select <Yes> to add folders where files to be imported
will be placed.
Step 7
In the OfficeNet Direct “Import OfficeNet Direct” click
<Add> in the bottom right. In the pop-up screen you can
select for which type of payment you want to add an
import folder.
Select the type of payment and click <Ok>.
Step 8
Enter a name for the new location and select the folder
where this type of import files will be stored. To save the
new settings click <Apply>.
Note : the selected folder should contain only files that are
in a format that can be imported by OfficeNet Direct.
OfficeNet Extra can import files that comply with the
ClieOp-03 or BTL-91 specifications.
Step 9
Next step is to enter the security token used and the way in
which you will be connecting to the ABN AMRO server.
When the entries are complete click <Apply> to continue.
Step 10
As a final step in your first session with OfficeNet Extra
you can choose to start a communication session to collect
account information that is available on the ABN AMRO
server. Click <Yes> to start a communication session.
Starting OfficeNet Extra for the first time (Upgrade installation)
To start OfficeNet Extra for the first time select the module OfficeNet Direct.
Step 1
If OfficeNet Extra is installed over a previous version of OfficeNet Extra, you can use your existing username and
password to start OfficeNet Direct. The settings for the connection, contract info and import are kept from the previous
version of OfficeNet Extra.
Step 2
In the next screen you can choose whether you want to use
the account statements received in OfficeNet Direct in
your financial software. Select <Yes> if you want to make
use of this possibility. (Some additional changes need to
be made in OfficeNet Direct, these are described at step
4). If you just want to use the account statements in
OfficeNet Direct select <No>.
Step 3
(only applicable if you have used the reporting module
in a previous version of OfficeNet Extra)
In previous versions of OfficeNet Extra reports were
shown in a separate reporting module. OfficeNet Extra 1.4
no longer uses this reporting module. Reports will be
shown in OfficeNet Direct. Existing reports have been
converted to OfficeNet Direct.
Note: Users that were set up in the reporting module will
no longer be available in OfficeNet Extra 1.5. You need to
create new users in OfficeNet Direct.
Step 4
If at step 2 you selected to use the received account
statements in your financial software you need to set up
OfficeNet Direct to place the statements in a folder for the
financial software to use. This setting can only be changed
by the superuser.
Select <Settings/Conversion/ Export OfficeNet Direct>
and select account status.
If you want to use a different folder than the pre-selected
you can change the folder by clicking the
button and
then browse to the folder of your choice.
Conversion manual (Migration of data from OfficeNet Plus)
Before starting migration:
♦ Even though you select to migrate OfficeNet Plus data during installation the actual migration takes place after
installation is finished.
♦ If OfficeNet Extra is installed in a network, migration only has to take place on the computer that will communicate
with the bank server. Standard installation will suffice on all other computers.
Step 1
When the installation process has ended start the
OfficeNet Direct module. When the standard information
(username, contractnumber, security token, connection
type) has been entered the “Migration” screen appears.
Click <Ok> to start the migration of data.
Step 2
In OfficeNet Direct a migration page will appear.
Select OfficeNet Plus.
Specify in which folder OfficeNet Plus is installed on your
computer. Last step is to select the items that need to be
migrated to OfficeNet Extra. By clicking
you can
select all items.
Click <Apply> to start the migration of data.
Step 3
OfficeNet Direct will now migrate the selected data from
OfficeNet Plus. During migration you can check the
progress, for data that have been migrated successfully the
display colour of the name will change to green. After
completion of the migration the following screen is
displayed. Click <Ok> to finish the migration. The data
will now be available in OfficeNet Extra.
Note:
• During migration of OfficeNet Plus data the passwords of the existing users will be reset. After migrating to
OfficeNet Extra users can log on with the same username as in OfficeNet Plus. However, the password has been
changed and is the same as the username.
• After migration the created payments and cancellations that were present in OfficeNet Plus are placed in a sheet for
each module. These payments can be imported in OfficeNet Direct by opening a module (e.g. domestic payments)
and then opening this file. The name of the file will start with NOTSENT.
Using OfficeNet Extra in combination with a connection via a gateway
OfficeNet connects to the ABN AMRO server using active FTP. If your internal network uses a gateway
(proxyserver/firewall) this means that adjustments to this gateway may be necessary.
General
Considering the wide variety in gateway hardware and software it unfortunately is impossible to indicate where in your
environment the necessary adjustments should be made. If performing the changes to your gateway raises questions
and/or problems ABN AMRO unfortunately cannot supply support. In such a case we will have to refer you to the
supplier of your gateway
Attention: Contact your network administrator before changing settings on your gateway.
Explanation of active FTP
With active FTP a client connects to the command port of the server (port 21). The client uses a standard TCP port
where the port number is higher than 1023. During communication the client will listen to the TCP port that is 1 higher
than the original port. Also the FTP command Port+1 is sent to the server.
The server will then set up a connection with the data port specified by the client using its own local data port (TCP port
20).
Server
20
Data
Client
21
Command
1026
Command
1027
Data
1
2
3
4
In step 1 the command port of the client (here 1026) makes a connection to the command port of the server. After
establishing a connection the client will send the command Port 1027 (Portnumber 1 higher than command port).
The server will send an ACK (acknowledgement) to the command port of the client (step 2). In step 3 the server will
make a connection using the local data port and the data port specified by the client (here 1027). Finally the client sends
an ACK (acknowledgement) to the server (step 4). After this the data will be transferred.
In this document the term gateway will be used.
Active FTP using a gateway and security
In order to be able to use a gateway (proxyserver/firewall) for setting up a safe way of communication using active FTP
the gateway should meet a number of demands. First the gateway should be able to use active FTP sessions. On top of
that the gateway should be able to use some intelligence in handling active FTP.
With active FTP ‘agreements’ are set on which (source and data) ports to use and also on the (local and destination) IPaddresses to use. Using these agreements the gateway will accept traffic on the agreed data port. In other words the
gateway should be able to distinguish a ‘trusted’ session on the basis of the ports and IP addresses specified by the
client. The gateway should be intelligent enough to open or close ports on the basis of the active FTP protocol. This is
further explained in the following diagram.
(Bank)server
20
Gateway
21
Command
Data
21
Command
Client (OfficeNet)
20
Data
1026
Command
1027
Data
1
4
6
7
1028
Command
1029
Data
2
3
5
8
If more gateways are being used in a chain setting (for instance a proxyserver and a seperate firewall) all should meet
these demands.
Limitations
It will not be possible to set up communication to the ABN AMRO FTP servers in the following situations:
•
•
A username and password needs to be specified on the gateway.
The gateway uses 1 IP address but multiple port numbers for address translation to the Internet, this is also called
PAT (Port Address Translation) or NAT-overload.
Possible exceptions
DNS-problems
If DNS look-up is not possible using your gateway the IP-address for the bankservers should be entered in OfficeNet
Direct instead of the URL. This can be done by using the following instruction.
Start the module OfficeNet Direct, select
<Settings> and then <Advanced>.
Note! In order to make the changes you
need to log on as superuser.
Change the settings in the field server
addresses using the table below.
Server addresses
Software Update
Server addresses
URL
viaebt.eb.abnamro.com
viaebt1.eb.abnamro.com
iigprod1.eb.abnamro.nl
iigprod2.eb.abnamro.nl
Change to
IP-address
193.172.44.45
194.151.107.44
193.172.44.78
194.151.107.76
Note : ABN AMRO does not recommend using IP-addresses instead of the URL of bankservers as IP addresses may
change in time.
Routing problems
General
When a gateway does not use NAT (Network Address Translation) a number of alterations are necessary. Changes need
to be made to the gateway as well as to OfficeNet Direct.
Changes to the gateway
Configure the gateway to use port forwarding using unused ports. Note! The selected ports can not be used for other
communication in the internal network. A minimum of two free ports need to be available to be able to distinguish the
bankserver and the update server. Create the following rules for portforarding on the gateway1:
•
•
Create a rule where all FTP traffic that is received from the internal network through port X be redirected to the
bankserver through port 21.
Create a rule where all FTP traffic that is received from the internal network through port Y be redirected to the
bankserver through port 21.
An important condition is that the gateway should have a fixed IP address. If on the internal network DHCP is used for
dynamically assigning IP-addresses, a fixed IP address should be assigned to the gateway being used for
communication with the bank.
Changes in OfficeNet Direct
In OfficeNet Direct the IP address of the gateway should be entered as address for the bankservers and software update
servers.
1
In this document the free ports used are named X (for communication with the bankservers) and Y (for
communication with the software update servers). Replace X and Y with values for available ports on your network.
Start the module OfficeNet Direct, Select
<Settings> and <Advanced>. Change the
entries for server addresses and Software
update servers using the table below.
Server addresses
Software Update
Server addresses
URL
viaebt.eb.abnamro.com
viaebt1.eb.abnamro.com
iigprod1.eb.abnamro.nl
iigprod2.eb.abnamro.nl
Change to
IP address
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
The IP address used in the table (0.0.0.0) is an example value. Replace this value with the actual IP address for your
gateway.
Note: the gateway used for connecting to the software update servers should be the same as the one used for connecting
to the bankservers.
In OfficeNet Extra the ports used (X and Y in the example) also have to be specified. You can do this by making an
adjustment to the ebca.ini file.
Changes in ebca.ini
The file ebca.ini can be found in the data folder of your OfficeNet Extra installation.
The following changes need to be made under the header [Transport Protocol]:
[Transport Protocol]
TPServerName=VIAEBT
TPServerPort=X
TPIIGPort=Y
Disclaimer: This document has been drafted with the highest possible care.
Nevertheless ABN AMRO can not be held responsible for the correctness and completeness of the information
supplied.
No rights can be derived from any information in this document.
Before changes are made a careful consideration should be made if these changes comply to the security strategy for
your network. ABN AMRO will not accept any liability for damage caused by changes mentioned in this document.