Internet Explorer Settings for Federated Identity Service

Internet Explorer Settings For

Federated Identity Service Certificate Download Requirements

Version 3.3 Exostar, LLC May 2011

Adding Exostar as a trusted Internet Site

The section describes the steps that must be performed to add Exostar to the Internet Explorer (IE) list of trusted internet sites. The process differs between IE 6.0 and IE 7.0. Details of each version are provided below.

Note: Internet Explorer 6 is not supported on the Windows Vista OS. As such the IE6 settings described in this section only apply when using the Exostar ActiveX component on Windows 2000 or Windows XP.

Internet Explorer 6.0 settings

The section describes the steps that must be performed to add Exostar to the Internet Explorer 6.0 list of trusted internet sites.

1. Launch Internet Explorer. 2. Select “Internet Options…” from the Tools menu. This will open a tabbed dialog that allows Internet Explorer settings to be viewed and modified. 3. Select the Security tab and then select the “Trusted sites” Web content zone by clicking on it as shown below:

4. Click the Sites... button. This will open a window that allows the entry of a trusted site. In the “Add this Web site to the zone:” edit box add the web site https://*.exostar.com as shown below. Click the OK button to close this window and return to the Security tab. Note that this Web site may have previously been added as a trusted site so performing this step may be unnecessary.

5. Click the “Custom Level…” button towards the bottom of the Security tab to display the Security Settings window. 6. Follow the table below to verify and change if needed, settings that will allow the download and use of Exostar ActiveX controls:

Section Setting Name Required Value

ActiveX controls and Allow previously unused ActiveX Enable plug-ins controls to run without prompt Automatic prompting for ActiveX Enable controls Binary and script behaviors Enable

Download signed ActiveX controls Enable

Run ActiveX controls and plug-ins Enable

Script ActiveX controls marked safe for scripting

Miscellaneous Don’t prompt for client certificate when Enable no certificates or only one certificate exists Use Popup Blocker* Disable

NOTE: The ”Use Popup Blocker” setting will disable popup blocking for all Web sites in the Trusted Internet zone. Alternatively, popup blocking can be disabled specifically for the Exostar web site by adding the Exostar website to the list of sites not blocked by the popup blocker functionality in Internet Explorer.

7. Click OK to close the zone setting dialog. 8. The Exostar MAG product takes advantage of the advanced security features of the TLS 1.0 protocol. To enable use of this protocol click the advanced tab on the Internet Explorer options dialog then scroll down to the security section. Check the “Use TLS” setting (as shown below) if it is not already checked.

Internet Explorer 7.0 and 8.0 settings

The section describes the steps that must be performed to add Exostar to the Internet Explorer 7.0 and Internet Explorer 8.0 list of trusted internet sites.

Adding Exostar as a Trusted Internet Site

1. Launch Internet Explorer.

Note: If using the Windows Vista operating system and UAC is enabled, some Internet Explorer settings cannot be changed unless you have administrator permissions. In this case, launch Internet Explorer by right clicking on its icon and select “Run as Administrator” from the popup context menu.

2. Select “Internet Options…” from the Tools menu or from the Tools Icon on the Internet Explorer toolbar. This will open a tabbed dialog that allows Internet Explorer settings to be viewed and modified. 3. Select the Security tab and then select the “Trusted sites” Web content zone by clicking on it as shown below:

Section Setting Name Required Value

ActiveX controls and Allow previously unused ActiveX Enable plug-ins controls to run without prompt

Automatic prompting for ActiveX Enable controls

Binary and script behaviors Enable

Download signed ActiveX controls Enable

Run ActiveX controls and plug-ins Enable

Script ActiveX controls marked safe for Enable scripting

Miscellaneous Don’t prompt for client certificate when Enable no certificates or only one certificate exists Use Popup Blocker* Disable

Note: The ”Use Popup Blocker” setting will disable popup blocking for all Web sites in the Trusted Internet zone. Alternatively, popup blocking can be disabled specifically for the Exostar web site by adding the Exostar website to the list of sites not blocked by the popup blocker functionality in Internet Explorer.

On Windows Vista operating systems there is an additional setting on the security page which is used to enable or disable protected mode. For Trusted Sites, protected mode is disabled by default. To use the Exostar ActiveX control, please ensure that the “Enable Protected Mode” setting is not checked.

7. The Exostar MAG product takes advantage of the advanced security features of the TLS 1.0 protocol. To enable use of this protocol click the advanced tab on the Internet Explorer options dialog then scroll down to the security section. Check the “Use TLS” setting (as shown below) if it is not already checked.