Embed Size (px)
Citation preview
PKI CERTIFICATE USER GUIDE
AGRESSO
Before using Agresso
1st certificate or renewal
AUTO-ENROL (council
employee)
Manual Enrolment
(non-council employee)
Notes on renewals
PKI Certificate user guide March 2017 2
CONTENTS
Contents 2
Downloading a PKI Certificate before using agresso 3
Agresso First Time User or renewing PKI Certificate (council employee) 3
Agresso First Time User or renewing PKI Certificate (not employed by council) 6
Notes on renewals 9
How do I know when to install a new PKI Certificate? 9
Finding your Employee ID Number and line manager’s surname 9
This user guide explains why you need a PKI Certificate to use Agresso; auto-enrol for council employees; manual
enrolment for non-council employees; and notes on renewing PKI Certificates when they expire.
Key points:
A PKI Certificate must be downloaded before an employee can access Agresso
Council employees need their Employee ID Number to download their certificate using
AUTO-ENROL
Non-council employees download their certificate using Manual Enrolment
PKI Certificates expire – ones issued in 2015 lasted for 12 months, from the first renewal
and on-going, PKI Certificates now last for 24 months
H&F staff need one certificate, RBKC and WCC staff need one certificate per device
Key policy documents:
Not applicable
PKI Certificate user guide March 2017 3
DOWNLOADING A PKI CERTIFICATE BEFORE USING AGRESSO
In order to use Agresso you must download a PKI Certificate to ensure the safety of your and others’ information in
the system. The certificate protects all data when carrying out transactions in Agresso.
Note on renewing PKI Certificates: The initial PKI Certificates issued in 2015 lasted for 12 months. From the first
renewal and on-going, PKI Certificates now last for 24 months.
AGRESSO FIRST TIME USER OR RENEWING PKI CERTIFICATE (COUNCIL EMPLOYEE)
If you are a council employee use AUTO-ENROL. You will need your Employee ID Number which BT SSC
emailed to you.
Follow the instructions below.
1. Click on AUTO-ENROL
PKI Certificate user guide March 2017 4
2. Complete the Enrolment Form
a
b
c
d
e
PKI Certificate user guide March 2017 5
(2) Enter the following information:
a) Device: Enter the name of the device that this PKI Certificate will be used on. For example Laptop21March2017. Add a date to make the name unique from previous and future certificates.
b) Employee ID Number: Enter your Employee ID Number. BT SSC email this number to staff as they are set up in Agresso. Do not enter any prefix e.g. TB, just type the numbers.
c) Date of Birth: Enter your date of birth.
d) Line Manager’s Surname: Enter your Line Manager’s Surname. Just type the surname starting with a capital letter e.g. Smith.
e) Challenge Phrase: Enter a phrase that you can remember in case you need to revoke this PKI Certificate.
3. Click on Submit, two further information boxes will appear.
4. Click ‘OK’ and then ‘Yes’.
5. The PKI Certificate will then be issued.
When you click on the ABW Self Service link you will be taken to the Agresso login screen. You can also access
Agresso by clicking on the Quick link at the bottom of your intranet’s home page.
NOTE - if you receive an error message with Status Code: A001 check that you have entered the correct information
and spellings. If you continue to receive an error message contact BT SSC.
PKI Certificate user guide March 2017 6
AGRESSO FIRST TIME USER OR RENEWING PKI CERTIFICATE (NOT EMPLOYED BY COUNCIL)
If you are a third party external user i.e. you are not employed by the council use Manual Enrolment.
Follow the instructions below.
1. Click on Third party external users (not employed by the council please click here.
2. Click on ENROL
PKI Certificate user guide March 2017 7
3. Complete the Enrolment Form
First Name: Enter your first name e.g. John.
Last Name: Enter your last name e.g. Smith.
Your E-mail Address: Enter your email address e.g. [email protected]
Employer: Enter your employer’s name e.g. Verisign
Challenge Phrase: Enter a phrase that you can remember in case you need to revoke this PKI Certificate.
4. Enter a Justification e.g. NHS line manager of Westminster staff so access to Agresso required.
5. Click on Submit and the following message appears.
PKI Certificate user guide March 2017 8
6. Once your Manual Enrolment has been approved you will receive an email (example below).
7. Make a note of your PIN number (Step 2).
8. Click on the London Framework PKI Certificate retrieval web page link (Step 1).
9. Enter your PIN number and click Submit.
10. The PKI Certificate will then be issued.
When you click on the ABW Self Service link you will be taken to the Agresso login screen. Save this url in your
Favourites for future access to Agresso.
PKI Certificate user guide March 2017 9
NOTES ON RENEWALS
Follow the guidance above to renew your PKI Certificate.
HOW DO I KNOW WHEN TO INSTALL A NEW PKI CERTIFICATE?
Before your PKI certificate expires, you will receive an email from [email protected]
To renew your certificate click on https://pki.sharedservices.bt.com/msp/ which takes you to the London Framework PKI Certification Centre.
If you do not renew your PKI Certificate before it expires, when you log-in to Agresso you will automatically be redirected to the London Framework PKI Certificate Centre website. You will need to renew your PKI Certificate before you can access Agresso again.
FINDING YOUR EMPLOYEE ID NUMBER AND LINE MANAGER’S SURNAME
For renewals this is where you can find your Employee ID Number and your line manager’s surname in Agresso. Click on the ‘UNIT 4 Agresso’ link on the front page:
PKI Certificate user guide March 2017 10
If you are unsure who your line manager is in Agresso, you can find it following this path: Your employment > Your personnel information > Employment tab > click on your position > Employment relations tab. Your line manager is next to the Employees (RESNO) under Contract.
Your line manager
Further advice and information:
Not applicable
Relevant Service Now forms:
Not applicable
