DISA e-collaboration Workstation Preparation & New User Getting Started Guide Version 1.
Workstation Preparation & New User Getting Started Guide Table of Contents 1. QUICK START - TO CONFIGURE YOUR WORKSTATION FOR E-COLLABCENTER ................ 2 2. INTRODUCTION & OVERVIEW........................................................................................................ 4 3. WORKSTATION HARDWARE REQUIREMENTS ........................................................................... 5 ADDITIONAL CLIENT REQUIREMENTS FOR AUDIO/VIDEO ...................................................
Workstation Preparation & New User Getting Started Guide 1. Quick Start - To Configure Your Workstation for E-CollabCenter NOTICE: Our Unclassified was upgraded in August 2007 to be compliant with FIPS 140-2. The upgrade requires Sun Java release 1.5.0, update 12. If you are using the SameTime Thick Client, a compatible version is now available for download on our website (version ST 7.5.1 FIPS). 1. The E-CollabCenter solution requires Sun Java JRE release 1.5.0, update 12 or later.
Workstation Preparation & New User Getting Started Guide d. e. f. g. then click the Internet zone, then click on “Custom Level” go under the ActiveX controls and plugins section ensure the “Binary and Script behaviors” radio button is enabled Click OK 8. All ports necessary to access E-CollabCenter must be opened in your location’s firewall. See section 6 Network Requirements for more details 9. Two easy ways to test that you have satisfied all the requirements above is to: 1.
Workstation Preparation & New User Getting Started Guide 2. Introduction & Overview This document provides instructions to optimize a user’s local workstation, ensuring optimal readiness before logging in to E-CollabCenter. Once logged in, you will find a selection of training courses to take you from beginner to advanced proficiency in all collaborative service functions. Now that you have IBM® Lotus® Sametime® 7.5.
Workstation Preparation & New User Getting Started Guide 3. Workstation Hardware requirements See pages 16 & 17 in the Sametime 7.5 Critical Fix 1 (CF1) release notes on NIPRNet: http://www.elink.ibmlink.ibm.com/publications/servlet/pbi.wss?CTY=CA&FNC=SRX&PBL=G325258501# The workstation (also known as client) system requirements for operation with the e-collaboration center system are: Minimum: CPU RAM Pentium IV 1.
Workstation Preparation & New User Getting Started Guide 3.1 Additional client requirements for audio/video 3.1.1 Sound card or chip - A full-duplex sound card is required to participate in interactive audio/video meetings. Sound cards and cameras that work with the Multimedia Services are listed below.
Workstation Preparation & New User Getting Started Guide 3.2 Verifying the System Audio and Microphone are Enabled It is important that your local operating system has all sound devices enabled and volume levels configured properly prior to entering the E-CollabCenter portal. • Verify all sound peripherals (headsets, speakers, microphones, etc.
Workstation Preparation & New User Getting Started Guide • When the Volume Control window displays 4. Verify the following settings: • Volume levels are high • All Mute boxes are unchecked 5.
Workstation Preparation & New User Getting Started Guide 4. Client Software requirements This section describes the software requirements for the workstation that is accessing the ecollabcenter.com web site. The workstation is sometimes referred to as a client machine. Ensuring that your workstation meets these software requirements will enable it to work optimally the ECollabCenter environment. 4.1 IWS Conflict Previously Sametime and IWS could both use JRE 1.4.2_14.
Workstation Preparation & New User Getting Started Guide is based on Air Force customization of the Specialized Security-Limited Functionality (SSLF) recommendations in NIST SP 800-68 and DoD customization of recommendations in Microsoft’s Security Guide for Internet Explorer 7.0. The SDC is used by the USAF as a customized version of the FDCC. There are known java issues when using E-CollabCenter on a Vista FDCC, XP FDCC and SDC 2.0.4 machine.
Workstation Preparation & New User Getting Started Guide JRE 1.5.0, Update 12 NIPRNet: http://java.sun.com/javase/downloads/index_jdk5.jsp SIPRNet: https://patches.csd.disa.smil.mil/metadata.jsp?ID=76827 JRE 1.6.0, Update 3 (Latest version as of 20 February, 2008) NIPRNet: http://www.java.com/en/download/ SIPRNet: https://patches.csd.disa.smil.mil/metadata.
Workstation Preparation & New User Getting Started Guide 4.5.1 Enable TLS 1.0 in Java JRE 1.5.0 and later TLS 1.0 must be enabled in the Sun Java Control Panel. There are two ways to do this: 1) Via Java tea-cup icon To do this, right-click on the Java icon (Tea cup) and select “Open Control Panel.” Click on the Advanced Tab. Check the “Use TLS 1.0” box and hit apply. By default, Sun Java JRE 1.5.0 does not have TLS 1.0 enabled so these steps are necessary before using Sametime 7.5. Sun JRE 1.
Workstation Preparation & New User Getting Started Guide 2) Via Control Panel 1. Click on Start 2. Highlight Settings 3. Click on Control Panel 4. Double click on Java 5. Select the Advanced tab 6. Click the “+” sign at left of Security to expand o Once expanded the “+” changes to “-“ 7. Select/Check Use TLS 1.0 (See screenshot above) 8. Click the Apply button 9. Click the OK button 4.
Workstation Preparation & New User Getting Started Guide Internet Explorer 4.6.1.1 Cookies You must have enabled cookies for either the www.e-collabcenter.com (NIPRNet) or the www.ecollabcenter.nces.dod.smil.mil (SIPRNet) or if you are using an enclave have cookies enabled for the URL to that enclave site. The following Microsoft article (found on NIPRNet) describes cookies and how to configure them in Internet Explorer http://support.microsoft.com/kb/283185.
Workstation Preparation & New User Getting Started Guide 4.6.1.2 Sun Java To verify if the Internet Explorer browser is configured to use Sun Java: Usually IE (Internet Explorer) uses Microsoft’s Virtual Machine by default. To change this, from an IE browser, click on Tools>Internet Options Click on the ‘Advanced’ tab and verify that the Java (Sun) is checked. Make sure that all the options under ‘Microsoft VM’ are unchecked.
Workstation Preparation & New User Getting Started Guide 4.6.1.3 TLS 1.0 Now verify that Internet Explorer has TLS 1.0 Enabled (a government requirement to satisfy FIPS 140-2 encryption) • Launch Internet Explorer • click on Tools>Internet Options • Click on the ‘Advanced’ tab and verify that TLS 1.0 is checked (by default IE 6 does not have TLS 1.0 enabled, while IE 7 does) • If TLS 1.0 is not checked, check it and then restart IE 4.6.1.
Workstation Preparation & New User Getting Started Guide The default IE settings have “Binary and Script Behavior” enabled, here are instructions on how to enable it. In the Internet Explorer browser under the ActiveX Security controls and plug-ins area, the “Binary and Script Behaviors” must be enabled for both meeting rooms and alerts in chat rooms to function. To accomplish this within Internet Explorer (see the screenshots below): 1. Launch Internet Explorer, then select 2. Tools ….
Workstation Preparation & New User Getting Started Guide 4.6.2 Firefox 4.6.2.1 Sun Java To verify if the Firefox browser is configured to use Sun Java do the following: 1. Launch Firefox , then select… 2. Tools …. Options... 3. Then make sure “Enable Java” is checked. If not checked, check it and click OK 4. Close down and restart Firefox. The default for Firefox is to have Java Enabled 4.6.2.2 TLS 1.0 Now verify that Firefox has TLS 1.0 Enabled (Firefox enables this by default) 1. Launch Firefox 2.
Workstation Preparation & New User Getting Started Guide Page 19 of 51
Workstation Preparation & New User Getting Started Guide Page 20 of 51
Workstation Preparation & New User Getting Started Guide 4.6.3 Mozilla 4.6.3.1 Sun Java To verify if the Mozilla browser is configured to use Sun Java do the following: 1. Launch Mozilla , then select… 2. Edit …. Preferences... Advanced 3. Then make sure “Enable Java” is checked. If not checked, check it and click OK 4. Close down and restart Mozilla. The default for Mozilla is to have Java Enabled 4.6.3.2 TLS Now verify that Mozilla has TLS Enabled (Mozilla enables this by default) 1. Launch Mozilla 2.
Workstation Preparation & New User Getting Started Guide 5. File Upload Size Limitations In meetings, chat rooms, and instant message sessions, there are limits on attachment sizes. • For Web Conferences, the practical size limit is 20 MB.
Workstation Preparation & New User Getting Started Guide 6. Network Requirements The access statements (rules) for firewalls, and all packet forwarding or filtering devices, need to be in place in order to use the E-CollabCenter service are listed below. The NIPRNET Destination IP addresses are: 216.12.152.1 through 216.12.152.
Workstation Preparation & New User Getting Started Guide For an end user to determine if their workstation can communicate to the collaboration service over UDP, have the user attend a meeting or go to the Support Tab and click on the Attend a Test Meeting. Then click View ….
Workstation Preparation & New User Getting Started Guide 7. Trouble Shooting If you are having problems accessing the service and you have verified you have the proper Sun JRE and you browser settings are correct please perform the following steps. If you encounter a problem that you cannot correct using the steps below, please contact the NCES Help Desk. Internet Explorer:1) Control Panel > Internet Options> General tab - Delete Cookies - Delete Files (delete all offline content.....
Workstation Preparation & New User Getting Started Guide 1) Control Panel > Java > General tab > Delete Files...
Workstation Preparation & New User Getting Started Guide If problems still exist, ask the client to send the Java Console log to the NCES Help Desk. How to view the Java console log>>> Right-click on the Java icon (Tea cup) and select ‘Open Console’ to bring up the java console log. Contact List ‘Awareness’ does not work. What do you do? Check if the JRE version is correct and if browser is configured correctly to use it. If it is, then just clear the cookies and temporary internet files.
Workstation Preparation & New User Getting Started Guide This document is a user workstation requirements document designed to provide general software, hardware and configuration requirements for workstations for the e-collaboration solution that is based upon Sametime 7.5.1 FIPS. For more detailed information and support regarding e-collaboration products and services, refer to the on line guide, or contact the DISA Help Desk via phone or e-mail.
Workstation Preparation & New User Getting Started Guide APPENDIX A A.1 Steps to Test your Audio/Video Capabilities Prior to Entering a Web Conference (performed within the E-CollabCenter portal) • Log into E-CollabCenter and select the Web Conferencing tab • Click the Test Meeting link • For a few second the following Test Meeting window displays • Then if your workstation is configured properly to work with Sametime meetings (a.k.a.
Workstation Preparation & New User Getting Started Guide 5. Click File … Leave Meeting to leave the test and close this window Please Note: The following support options are available once you have logged into ECollabCenter • IBM E-CollabCenter Training o Log into the portal at https://www.e-collabcenter.com, then click on the Help and Training tab How Do I? • Provides a set of step-by-step written guides for basic E-CollabCenter functions.
Workstation Preparation & New User Getting Started Guide A.2 Additional Details on Microsoft’s Binary and Script Behavior Internet Explorer defines "interactive controls" as Java or ActiveX components which provide user interfaces. IBM Lotus Sametime does not use ActiveX controls but does use Java applets for chat rooms and web conferences.
Workstation Preparation & New User Getting Started Guide B.3 Run the Group Policy Editor as an Admin Go to the “Start” menu Type in “gpedit.
Workstation Preparation & New User Getting Started Guide Right-click on the “gpedit” program as seen below and select “Run as administrator” Page 33 of 51
Workstation Preparation & New User Getting Started Guide Click “Continue” to proceed with using the Group Policy Editor as an Admin Page 34 of 51
Workstation Preparation & New User Getting Started Guide B.
Workstation Preparation & New User Getting Started Guide B.5 Change Java Permissions By default under FDCC, java permissions is set to “enabled”, but the permission level is set to “disable java”. This setting disables the use of any java based application on the machine as in Sun JRE, and not just Microsoft JVM. This Internet Explorer security setting is discussed in detail on FDCC site at:http://blogs.technet.com/fdcc/archive/2008/01/31/internet-explorer-security-setting-java-permissionsdisable-java.
Workstation Preparation & New User Getting Started Guide To access and use Sametime services on E-Collabcenter portal, the above Java Permission settings must be changed to either ONE of the following options 1. Java Permissions set to “Disabled” 2. Java Permissions set to “Enabled: High” (most secure and recommend option) 3. Java Permissions set to “Enabled: Medium” 4.
Workstation Preparation & New User Getting Started Guide Java Permissions set to Enabled, with High, Medium, or Low B.6 Update Group Policy as an Admin Open the command prompt as an Admin, and run the following command: “gpupdate /force” For changes to take affect, a Windows restart is recommended.
Workstation Preparation & New User Getting Started Guide Right-click on the “Command Prompt” shortcut, and select “Run as administrator” Page 39 of 51
Workstation Preparation & New User Getting Started Guide If the command prompt is not listed under the Start Menu, type “cmd” under “Start Search” box in the Start Menu Click “Continue” to use the Command Prompt as an Admin Page 40 of 51
Workstation Preparation & New User Getting Started Guide Type in the command “gpupdate /force” and hit Enter When the “OK to Restart?” prompt appears, type “y” and hit Enter *Note that SDC v2.0.4 a restart was not prompted or required.
Workstation Preparation & New User Getting Started Guide Click “Close” or simply wait a few seconds for the Windows OS to restart Once the FDCC/SDC machine’s Windows Vista OS has been restarted, all group policy changes will have taken effect. B.
Workstation Preparation & New User Getting Started Guide Click on “Continue” Page 43 of 51
Workstation Preparation & New User Getting Started Guide Go to HKEY_Local_Machine - Software - Policies - Microsoft - Windows - Current Version - Internet Settings (Any of the following 3 items should be = 0) - Security_HKLM_only - Security_Options_Edit - Security_Zones_Map_Edit *Note that once you are done with this appendix you will want to come back and change these settings to their original values. Typically a restart will also cause these values to revert as well.
Workstation Preparation & New User Getting Started Guide Now run Internet Explorer 7 as admin and click on “Tools” then “Internet Options” Page 45 of 51
Workstation Preparation & New User Getting Started Guide Page 46 of 51
Workstation Preparation & New User Getting Started Guide Click on the “Security” tab and then highlight “Trusted sites” and click on the “Sites” button Page 47 of 51
Workstation Preparation & New User Getting Started Guide Add “*.e-collabcenter.
Workstation Preparation & New User Getting Started Guide Document Information and Revision History Revision 1.0 Date Feb 22, 2007 Feb 28, 2007 March 14, 2007 Author / Editor Jim Stroud Nature of Change Initial Draft Jim Stroud April 3, 2007 April 4, 2007 Jim Stroud 1.5 April 5, 2007 Jim Stroud 1.6 April 9, 2007 Jim Stroud Doruk Akan 1.6a April 9, 2007 Jim Stroud 1.7a April 11, 2007 Jim Stroud 1.7b April 12, 2007 April 13, 2007 Jim Stroud 1.7d 1.
Workstation Preparation & New User Getting Started Guide 1.7h 1.7i 1.7j 1.7k 1.8a July 17, 2007 July 25, 2007 Neil Starkey Misc corrections Ames Trebing James Stroud February 8, 2008 February 16, 2008 James Stroud May 28, 2008 Mostafa Sekandari Yasir Saleem Added notice for network changes to network systems: firewalls, packet forwarding and filtering devices. Added TLS java setting to summary. Added info that on the conflict with IWS due to JREs.