ISL AlwaysOn 1.0 Manual

(1)

(2)

2 Contents

Part I Introduction

3

Part II Security Statement

4

Part III System requirements

6

Part IV Setting up ISL AlwaysOn on a computer

7

... 71 Register ISL Online account ... 82 Login at ISL Online Netw ork ... 93 Install ISL Alw aysOn on a computer

Part V Accessing ISL AlwaysOn computer

13

... 131 Login at ISL Online Netw ork ... 162 Connect ... 183 Control

Part VI Enable / Disable access to a remote

computer

22

Part VII Instruct remote user how to install ISL

AlwaysOn

23

Part VIII FAQ

28

(3)

Introduction

ISL AlwaysOn 1.0 Manual 3

1 Introduction

ISL AlwaysOn is a business software for fast and secure access to your PC over the Internet. ISL AlwaysOn automatically handles all special network configurations, therefore remote access can be easy even if both computers are behind a firewall and complex networks. Be more flexibile and save time. You can work on your office PC or administer a remote server from home, while on vacation or anywhere else.

This document explains the following topics: security aspect

system requirements setting up ISL AlwaysOn accessing a remote computer enabling / disabling access

(4)

Security Statement

2 Security Statement

Introduction

Security should be a crucial part of a remote access product, no matter for what purposes you are using it; business or personal. ISL AlwaysOn uses maximum security.

ISL AlwaysOn is secured on multiple layers:

1. ISL AlwaysOn computer to ISL Online products user visibility. 2. ISL AlwaysOn computer access password.

3. ISL Light remote desktop session security. 4. MS Windows OS access security scheme.

An ISL AlwaysOn connection from a computer to a ISL Conference Proxy server is encrypted with SSL.

The ISL AlwaysOn's activities can be monitored by tracking the history of accesses to a computer. This report shows which ISL Online users accessed the computer and when they accessed it.

A user can always lock access to his/her computer. By disabling access, the computer becomes inaccessible until further action.

Security, 1st layer - ISL AlwaysOn computer to ISL Online products user visibility

To access a remote computer, you need to establish a link between your ISL Online account and a computer you want to add access to. To do this, you need to log into your ISL Online product account at www.islonline.com (see detailed instructions in the Setting up AlwaysOn chapter), where you install ISL AlwaysOn on your computer. Each user has its own digitally signed executable identifying his/her ISL Online user account. No other ISL Online user will be able to see or try to start a remote connection if an ISL AlwaysOn computer administrator has not installed a customized ISL AlwaysOn program.

Security, 2nd layer - ISL AlwaysOn computer access password

Installing ISL AlwaysOn on a computer does not yet enable the access. To enable the access, a strong access password must first be set. ISL AlwaysOn accepts only a strong access password. This password is stored in the Local Machine registry as MD5 hash. The plain text password is not available anymore.

(5)

Security Statement

md5=md5(challenge,md5(password))

send encrypt("authenticate({chmd5, <chal-pass-md5>})")

4. request = decrypt(received_data)

if request[key] = chmd5 then

load md5-password from registry into memory if request[1] = md5(challenge, md5-password) then

set authenticated user = true send encrypt("get_code") else

send encrypt("error authentication failed") end

else

send encrypt("error authentication not supported")

end 5. if received = get_code then

start ISL Light Desk, request code

send encrypt("code <ISL Light session code>") else

goes again to step 3. end

6. received = decrypt(recieved_data)

if received = "code <code>" then

start ISL Light Client with --connect <code> set authenticated user = false

end

7. ISL Light Desk is connected into session ISL Light Client is connected into session

Security, 3rd layer - ISL Light remote desktop session security

The remote desktop control session is enabled by ISL Light. ISL Light (version 3.1) enables to create an instant remote desktop control session, which is secured with SSL (a 1024-bit RSA key for the handshake and a

256-bit AES session key). Once a session is established, no one can see this session's encrypted data. And when

an ISL Light session is ended you cannot connect to the same session again. Read more on ISL Light security at http://www.isllight.com/help/security_statement.htm.

Security, 4th layer - MS Windows OS security

Once an ISL Online user is connected to a remote computer, he/she can see the Windows console desktop session running on the computer. It is recommended that the user sets passwords for all Windows

accounts and disables accounts which are not in use. The user should always log off the computer when not

(6)

System requirements

3 System requirements

Operating Systems:

Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008

Internet Connection:

(7)

Setting up ISL AlwaysOn on a computer

4 Setting up ISL AlwaysOn on a computer

Setting up ISL AlwaysOn requires the following steps: 1. Register ISL Online account.

2. Log into ISL Online Network 3. Install ISL AlwaysOn on a computer

Please read the following text carefully as it is very important for ISL AlwaysOn's successful setup.

4.1 Register ISL Online account

If you already have an ISL Online account, please use your existing username and password (ISL Light username and password). Please continue with the next step.

Before you start using ISL AlwaysOn, you will need to create your ISL Online account. You are welcome to register your ISL Online account now.

Once you are finished with the registration procedure, you will get an ISL Online account together with your ISL Online products username and password.

(8)

4.2 Login at ISL Online Network

To install ISL AlwaysOn on a computer, you need to have ISL Online products username and password.

You need to be at the computer that you want to add remote access to. You also need administrative privileges to install ISL AlwaysOn.

Please open your Web browser, navigate to the ISL Online home page (http://www.islonline.com) and click the

(9)

If you have created an ISL Online domain on your ISL Online account, the username should be entered in a

\\your-domain\username form (example: \\CompanyName\Tom) Next step: Install ISL AlwaysOn on a computer

4.3 Install ISL AlwaysOn on a computer

(10)

Continue to install ISL AlwaysOn by pressing Run.

(11)

The ISL AlwaysOn Setup Wizard screen appears. Select Next to continue and follow the wizard.

The program will download and install in seconds. Now, you need to select a strong access password to additionally secure access to your computer.

(12)

And finally click OK to grant the access.

After the access is granted, you will see the ISL AlwaysOn Computer Access Configuration screen with some basic information about accessibility settings.

(13)

Accessing ISL AlwaysOn computer

5 Accessing ISL AlwaysOn computer

Please read the following text carefully as it is very important for ISL AlwaysOn's successful setup.

Once ISL AlwaysOn is set up and you have created a list of remote computers, you can access them immediately practically from any computer using Windows 2000 and newer. As the access is done through a Web page, you only need to have an Internet connected computer.

Accessing ISL AlwaysOn computer requires the following steps: 1. Login at your ISL Online Network account

2. Connect 3. Control

5.1 Login at ISL Online Network

To access one of your remote computers, you need to:

(14)

(15)

(16)

Next step: Connect

5.2 Connect

(17)

(18)

3. Enter the remote computer's access password and click OK.

Next step: Control

5.3 Control

(19)

The ISL Light Desk application opens in the right bottom corner of your desktop and the ISL Light Client

application opens in the right bottom corner of the remote desktop. You can Minimize them or Minimize them to

(20)

Resizing the ISL View Window

(21)

Closing the remote desktop connection

During a remote desktop session there are ISL Light Desk and ISL Light Client applications running on your computer. Closing either the ISL Light Desk application or the ISL Light Client application will close the remote desktop session itself.

(22)

Enable / Disable access to a remote computer

6 Enable / Disable access to a remote computer

Locking or unlocking access to a remote computer is very simple. You need to be at the remote computer, click on the ISL AlwaysOn icon in the system tray and open Computer Access Configurations. Press the Enable or the Disable button to change the status.

To be able to access a remote computer, you should leave it Enabled.

To change the computer's access password, click the Change Password button, enter a new password and confirm it. If you have granted access to a third party, notify him/her of the change.

(23)

Instruct remote user how to install ISL AlwaysOn

7 Instruct remote user how to install ISL AlwaysOn

An alternative option to adding access to a computer yourself is to instruct another user to install ISL AlwaysOn on a remote computer. In this case, you don't need to be present at the remote computer.

To instruct the remote user on how to add access, please navigate to the ISL Online Web site (www.islonline.com) and click the Product login button in the ISL AlwaysOn window. Login with your ISL Online products username and password (see detailed instructions in the Setting up AlwaysOn chapter). When logged in your account, check the Show more possibilities box to see instructions.

(24)

Instructing a remote user yourself

The remote user should navigate to the ISL Online Web page at www.islonline.com, enter the session code and click Connect:

(25)

File Download - security warning appears. Select Run.

(26)

The program will download and install in seconds. Now, you need to select a strong access password to additionally secure access to your computer.

(27)

(28)

FAQ

8 FAQ

What is ISL Online account?

An ISL Online account is a common user account for all four ISL Online products. When logged in, you can manage your ISL Online license, create and manage product users, and view reports on history of using your ISL Online services.

A common ISL Online license was introduced in March 2008. One license grants you rights to use all four products:

ISL Light - Instant Assistance

ISL AlwaysOn - Easy Remote PC Access ISL Pronto - Live Chat

ISL Groop - Online Collaboration

To log into your account, open your Web browser and navigate to the ISL Online Web site at

www.islonline.com. Login by entering My account.

To create your ISL Online account, you need to register. At the same time, you will be assigned a free trial of

(29)

FAQ

What is ISL Online products username?

An ISL Online products username is the username for using ISL Online products - ISL Light, ISL AlwaysOn, ISL Groop, and in the future also ISL Pronto. You are provided with the ISL Online products username at the ISL Online account registration.

Access disabled?

If you get an error message when connecting to a remote computer saying "Remote computer has remote

access service temporarily disabled", the owner of that computer must have locked it. In this case, please

(30)

FAQ

For more detailed information on locking / unlocking access to a remote computer, please go here.

How do I access my computer?

(31)

FAQ

When logged in, you can see the list of your remote ISL AlwaysOn computers. To access a computer, click the

(32)

FAQ

Who can access the computer with installed ISL AlwaysOn?

A computer can be accessed remotely if all of the following conditions are met: 1. ISL AlwaysOn is installed on that computer.

2. ISL AlwaysOn access is enabled for that computer.

3. Access to that computer has been granted to a specific ISL Online user. 4. The ISL Online user knows that computer's access password.

If one of the four conditions does not comply, a user cannot access a computer.

(33)

FAQ

2. You have granted access to a third party.

If you have ever granted access to your computer to a third party, you can see that person in the ISL AlwaysOn User list. To see the User list, open ISL AlwaysOn by clicking the ISL AlwaysOn icon minimized to the system tray and selecting the Computer Access Configuration option.

The person, whose username is displayed in the User list, can access and control your computer remotely and whenever he/she wishes to. Nevertheless, you can either temporarily lock your computer and unlock it again when needed, or permanently remove the user from your User list. To temporarily lock your computer, choose to disable ISL AlwaysOn. If you wish to permanently remove a specific user, right-click its username and choose to remove it.

3. Your computer is enabled for access

To see if your computer can be accesses remotely, open ISL AlwaysOn by clicking the ISL AlwaysOn icon minimized to the system tray and selecting the Computer Access Configuration option. Your computer can be accessed remotely if it says that access to this computer is enabled.

(34)

FAQ

4. Computer access password

As an important part of security, you need to set a strong access password when installing ISL AlwaysOn on a computer. You will be prompted to enter its access password every time trying to access that computer. If you are granting access rights to a third party as well, be careful to provide them with the computer access password. Without the access password you or another person will not be granted access to the computer. If you change your computer access password, be careful not to forget to inform other people with access rights about the change.

Changing computer access password

(35)

FAQ

Type in a new password, repeat it and confirm the change by clicking Ok.

Be careful not to forget to inform other people with access rights about the password change.

Changing ISL Online products password and other Profile settings

An ISL Online products password enables you to login at ISL Online products pages and use ISL Online products. To change the password, open a Web browser, navigate to www.islonline.com and click Product

(36)

FAQ

(37)

FAQ

And change the password and other profile settings.

Sending CTRL-ALT-DEL to the remote computer

(38)

FAQ

Logoff and restart the remote computer

(39)

FAQ

ISL AlwaysOn 1.0 Manual

Table of Contents

Part I Introduction

Part II Security Statement

Part III System requirements

Part IV Setting up ISL AlwaysOn on a computer

Part V Accessing ISL AlwaysOn computer

Part VI Enable / Disable access to a remote

computer

Part VII Instruct remote user how to install ISL

AlwaysOn

Part VIII FAQ

1

Introduction

2

Security Statement

Introduction

ISL AlwaysOn is secured on multiple layers:

3

System requirements

4

Setting up ISL AlwaysOn on a computer

4.1

Register ISL Online account

4.2

Login at ISL Online Network

4.3

Install ISL AlwaysOn on a computer

5

Accessing ISL AlwaysOn computer

5.1

Login at ISL Online Network

5.2

Connect

5.3

Control

Resizing the ISL View Window

Closing the remote desktop connection

6

Enable / Disable access to a remote computer

7

Instruct remote user how to install ISL AlwaysOn

Instructing a remote user yourself

8

FAQ