secure application login service access … - installation 1 secure application login service access...

SALSA - Installation 1

SECURE APPLICATION LOGIN SERVICE ACCESS (SALSA) INSTALLATION GUIDE

WITH TOKEN FILE Version 1.8

19 January 2017


Instructions to install SALSA 2

Stage 1 3 Stage 2 4 Stage 3 4 Stage 4 8 Stage 5 12

How to solve common issues? 14

Issue 1 14 Issue 2 15 Issue 3 16 Issue 4 17


INSTRUCTIONS TO INSTALL SALSA

The installation procedure described in this document is to be followed by users that have received SALSA token file from their IT or site administrator for the installation of SALSA on their Windows PC or Mac.

This installation procedure is valid for:

OS Version

Windows

10 (32-bit & 64-bit)

8.1 (32-bit & 64-bit)

8 (32-bit & 64-bit) 7 (32-bit & 64-bit)

XP Service Pack 3

Mac OSX v10.8 (Mountain Lion) or higher

The screenshots and details are based on Windows 7. Some screenshots may vary using different version of Window / Mac.

Make sure you have the admin rights on the PC / Mac

Stage 1 Go to the Website:

http://www.sita.aero/solutions-and-services/secure-application-login-service-access

Download and install on the PC the following two pa ckages:

1) Token Software 2) Connectivity Software (SSL VPN client)

Follow the instructions and once installed you will see them in the Windows Start Menu or OSX Applications Folder


Stage 2 Save the Token file received from SITA and distributed internally through your administrator and corresponding to the User ID you want to install

Token file is in format <UserID>-<Serial_Number>.7mp

Open this Token file and enter initial PIN which is 0000

And click Ok The “Token” page is displayed

Stage 3

Open the Connectivity Software (FortiClient SSL VPN) from the Windows Start Menu.

Click Remote Access Tab Click on

Configure VPN


Enter details as per table below:

Connection Name SALSA_NAM SALSA_APAC SALSA_EUR

Description SALSA for Americas’users SALSA for Asia Pacific’s users SALSA for Europe and Africa’s users

Server Address salsa-us.aticloud.aero:443 salsa-sg.aticloud.aero:443 salsa-de.aticloud.aero:443

Do not warn… Checked Checked Checked

(Above details is filled up for SALSA APAC User)

Repeat for the three entries (SALSA_NAM, SALSA_APAC and SALSA_EUR)

clicking on New Connection again on the “Forticlient SSL VPN Settings” page

Click Apply on “Forticlient SSL VPN Settings” page when done with the three entries


Go back to the “Token” page and generate a token code

On “FortiClient SSL VPN” page

In the “Authentication Required” page:

Enter a PIN Code in the Answer field and remember it for using SALSA This PIN Code has to be between 6 and 10 characters long, and with at least one digit , one letter upper case and one letter lower case

(example: Sec536)

Important note : You will be requested to change this PIN every 90 days

(1) Click Generate Token Code

(2) Copy Token Code

Then click Connect


You may be asked to select a network location for the fortissl network name. Please select “Work network” as shown below.

Check that the connection is active on the “Forticlient SSL VPN” page: - The status displayed is “VPN Connected ” - The Bytes Sent and Received counters show increasing values


Stage 4

If you are installing SALSA for the first time please refer to the installation guide corresponding to the client/application you want to use.

If you are already using a client/application, you have to make sure the settings (IP addresses) are properly configured for this client/application, as per below:

SITA Smart Front End Basic (SFEB)

Application IP addresses

SITA Smart Front End Basic (SFEB) 57.5.64.250

57.5.64.251

Click Settings

Click Next for the next four pages


Change/configure the IP addresses

Select Advanced

Select Tcp/Ip

And click OK


The configuration is done for SITA Smart Front End Basic

Click Done

Click Finish


SITA Reservations Desktop (SRDT)

Application IP addresses

SITA Reservations Desktop (SRDT) 57.230.80.70

57.230.88.70

For SRDT Refresh, try below URL on your web browser.

https://57.230.80.70/srdt/Start

https://57.230.88.70/srdt/Start

Horizon Weight and Balance (HWB)

Application IP address

Weight and Balance – HMIG 57.230.80.200

Weight and Balance - Prod 57.230.88.32

local host file update Go to C:\Windows\System32\drivers\etc # Copyright (c) 1993-2009 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP /IP for Windows. # # This file contains the mappings of IP addresses t o host names. Each # entry should be kept on an individual line. The I P address should # be placed in the first column followed by the cor responding host name. # The IP address and the host name should be separa ted by at least one # space. # # Additionally, comments (such as these) may be ins erted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # s ource server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handled within DNS i tself. # 127.0.0.1 localhost # ::1 localhost 57.230.80.200 hm.horizon.dc.sita.aero #sita w&b demo 57.230.88.32 prod.horizon.sita.aero #sita w&b p roduction


Stage 5

At the end of the installation click on Disconnect on the “Forticlient SSL VPN” page to stop your connection.

Each time you want to establish a new connection, open the “FortiClient SSLVPN” page and the “Token” page to authenticate:

o On the “Token” page : Generate a new token code and copy it

o On the “FortiClient SSL VPN” page: In the field “Password ”, enter the PIN you have defined previously and paste the new token code


SALSA is installed and configured on your PC!

To find instructions to operate SALSA, please refer to SALSA page http://www.sita.aero/salsa

THANK YOU


HOW TO SOLVE COMMON ISSUES?

Issue 1

When does this happen? You have specified invalid PIN and/or invalid token code. Next Steps:

1) Enter correct PIN.

If you have forgotten your PIN, contact your Administrator or your usual help desk to reset the PIN. 2) Ensure token code is a newly generated code.

3) Ensure PIN + newly generated token code is entered in field "Password".


Issue 2

"Outer Window Authentication" generated on your PC:

When does this happen? When you have generated 10 token codes without using any of the 10 codes.

In this case the above window will appear requesting you to re-authenticate using the next response (PIN + new generated token code).

Next Step: You have to enter the PIN + new generated token code in the field "Answer". This will allow a resynchronization and you will be back in normal authentication mode.


Issue 3

Or

When does this happen? It seems that system minimum requirement is not met. Next Step:

1) Make sure the Windows version you are using is in the table below:

OS Version

Windows

8.1 (32-bit & 64-bit)

8 (32-bit & 64-bit)

7 (32-bit & 64-bit)

XP Service Pack 3

2) If your Windows version is in the list but “-5” error as above is still displayed, please do the following:

Step 1: Try to connect via your Internet browser (Internet Explorer version 8 minimum or Firefox) using one of the links below:

https:/salsa-sg.aticloud.aero

https:/salsa-de.aticloud.aero

https:/salsa-us.aticloud.aero

On the login page:

enter User Id in field "Name" and PIN + newly generated token code in field "Password "


If you are getting error message because of conflicting software, please note this message for further action. Report the results to your Administrator or your usual help desk.

Step 2: If you are still not able to connect, please report the problem to your Administrator or your usual help desk with following information for the PC you are using to get access through SALSA:

- Windows OS version: - Antivirus software name and version: - Software Firewall used?: Yes/No

if Yes which one: - Existing remote access or VPN software: Yes/No

if Yes which one:

Issue 4 Connected (98) and then Disconnected

Next Step:

Check options on the network connections menu

Disable IPv6 protocol on the physical network adapter, and RESTART the PC

Check if you can log into SALSA and connect after (98)

secure application login service access … - installation 1 secure application login service access...

Documents