Installing SEC2KAS client software installation manual
General ... 2
Requirements for using KAS-Web SEC2KAS ... 2
Documentation and Software ... 2
Downloading Documentation and Client Software ... 3
Installation of ActivCard cardreader software ... 7
Installing KAS BANK N.V. Certificates ... 12
Installation of KAS BANK N.V. Signing Component ... 21
Internet Access ... 23
General
KAS BANK strongly recommends you as a SEC2KAS customer to take sufficient precautions against intrusive or malicious software.
The customer of SEC2KAS is responsible for the security of his/her computer and KAS BANK recommends that you ensure you have up to date Anti-Virus software, Anti-Spyware software and do not run any desktop search or logging software on any machine used to connect to the SEC2KAS Infrastructure.
Requirements for using KAS-Web SEC2KAS
Client PC with minimal Windows XP Professional SP1 and Internet Explorer 6.0 SP1
ActiveCard cardreader software and registry settings KAS BANK N.V. Certificate Chain
KAS BANK N.V. Signing Component Internet Access
Extra requirements for Operator PC
o Java Runtime 1.4.2_06
o Manage add-ons to enable Java o Flashplayer 8
Documentation and Software
The necessary Documentation and Client Software can be found at and downloaded from the site:
http://pki.kasbank.com
For the installation of the ActivCard cardreader software and the KAS BANK N.V. Signing Component you need to have administrator rights on the client PC.
Depending on how the configuring of the Internet Explorer is managed, it is possible that a policy change for the KAS-Web users is necessary.
When using Windows XP Professional SP2 make sure you have installed Microsoft Update KB884020
In the Installation Manual the location of the installation files depends on where you have saved the files!!!
Downloading Documentation and Client Software
Go to the site http://pki.kasbank.com
Click on ActivClient
Click Save
As soon as the message Download Complete appears, click Close Do the same for the ActivClient Registry Settings
IPSCA Signing Component, that is both the
o Signing Component application extension and o Signing Component ActiveX control
Certificate Links, that is both the
o Intermediate CA certificate and o Customer Issuing CA certificate.
Installation of ActivCard cardreader software
Before installing the ActiveClient PKI Only.msi make sure that the Card Reader is
NOT connected!
DoubleClick on the file ActivClient PKI Only.msi
Select I accept….. and click Next
check if you have the selection above and click Next
click Finish
click Run
click Yes
Click OK
Now you can attach the Cardreader to your PC and the device driver for the CardReader will be installed automatically.
Installing KAS BANK N.V. Certificates
Go to Start / Run and type mmc
click OK
Choose File Choose Add
click Add
select Computer account and click Next
click Close
Open in the left pane Intermediate Certification Authorities Right click on Certificates, choose All tasks, choose Import…
browse to the location where you have downloaded the certificates Cust_Prod_CA.cer and the Kas_Pol_Prod_CA.cer
click Next
select Place all certificates in the following store and check if the Certificate
click Finish
click OK
Installation of KAS BANK N.V. Signing Component
Copy the files KasbankSignObject.ocx and capicom.dll from the location where you have downloaded the files, to the c:\windows\system32 directory. Please make sure you use the capicom.dll (version, 2.1.0.1) that is delivered.
Open a command prompt
Type cd c:\windows\system32 and press Enter
Type regsvr32 kasbanksignobject.ocx and press Enter to register the KasbankSignObject.ocx
likewise, register the capicom.dll with the command shown above
click OK
Internet Access
Make sure the firewall allows outbound traffic for port 80 and 443
Extra requirements for Operator PC
Minimal Java Runtime 1.4.2_06 Manage add-ons to enable Java Minimal Flashplayer 8