OASYS Workstation F5 SSLVPN Device Upgrade

DTCC is committed to provide secure and efficient access to OASYS workstation users. Since F5 Fire Pass is out of support we've upgraded the F5 SSL VPN device to BIG IP Edge to improve security when connecting to our service. As a result OASYS workstation users will need to take appropriate actions before the deadline to avoid disruption and loss of connection to the OASYS service in Production.

Client Action

OASYS workstation users need to install the BIG IP Edge Client software and connect to the new VPN URL. Below you will find step by steps instructions on how to install the BIG IP Edge Client software and modify your OASYS workstation connection configuration settings specific to the version of OASYS you are currently using.

 

If required, the below instructions can be printed and/or saved to PDF by using your browser printer options.



1. BIG IP Edge Client can be installed on your machine using either of the below 2 options. Please work with your desktop administrator to ensure you have administrator (admin) rights prior to following either of these options:

Option 1 - Web Download

a. Open a new web browser and enter the URL https://vpn.omgeo.net using Internet Explorer 11

b. Follow the IE 11 settings outlined below depending on whether you connect to SSL VPN using the Web or the Workstation:

SSL VPN using the Web

Location of Setting Action
Tools - Compatibility View settings Add omgeo.net and save your settings
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required for a standard and second Windows user to connect to and access the 7.1 workstation

SSL VPN using the Workstation

Location of Setting Action
Tools - Internet options - Security tab 

Ensure that the settings are set to the default values as follows:

Internet zone is set to Medium-high with the Enable Protected Mode radio button selected.

 

 

Trusted sites zone is set to Medium with the Enable Protected Mode radio button not selected. Also ensure that omgeo.net is listed under Sites

Tools - Internet options - Privacy tab

Ensure that the settings are set to the default values as follows:

  • Settings is set to Medium
  • Turn on Pop-up Blocker radio button is selected
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required for a standard and second Windows user to connect to and access the 7.1 workstation

c. Login with your VPN credentials. 

After logging in successfully the Privilege Guard ActiveX Installer window will open.

d. Click Install to download the BIG IP Edge Client software on your machine. Follow the install instructions.

e. To check if the BIG IP Edge Client software has installed go to Control Panel - Programs and Features and look for the following:

 

Option 2 - Installation Package

a. Download the BIGIPEdgeClient.zip file by clicking here. Extract the .exe file.

b. Follow the IE 11 settings outlined below depending on whether you connect to SSL VPN using the Web or the Workstation:

SSL VPN using the Web

Location of Setting Action
Tools - Compatibility View settings Add omgeo.net and save your settings.
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required of a standard and second Windows user to connect to and access the 7.1 workstation

 SSL VPN using the Workstation

Location of Setting Action
Tools - Internet options - Security tab 

Ensure that the settings are set to the default values as follows:

Internet zone is set to Medium-high with the Enable Protected Mode radio button selected.

 

 

Trusted sites zone is set to Medium with the Enable Protected Mode radio button not selected. Also ensure that omgeo.net is listed under Sites.

Tools - Internet options - Privacy tab

Ensure that the settings are set to the default values as follows:

  • Settings is set to Medium
  • Turn on Pop-up Blocker radio button is selected
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required of a standard and second Windows user to connect to and access the 7.1 workstation

c. Launch the BIGIPEdgeClient.exe file and click Next.

d. Click Install.

e. Once the install is complete, click Finish.

2. To check if the BIG IP Edge Client software has installed go to Control Panel - Programs and Features and look for the following:

3. Once the BIG IP Edge Client is installed, open your OASYS workstation:

  1. Go to Tools - Connection
  2. Change the VPN Connection to vpn.omgeo.net and Service Name to /Common/Oasys under your active Oasys F5 SSL VPN Network Connection to appear as in the below image:

c. Test your connection to make sure you can connect to the new VPN URL.

 

1. BIG IP Edge Client can be installed on your machine using either of the below 2 options. Please work with your desktop administrator to ensure you have administrator (admin) rights prior to following either of these options:

Option 1 - Web Download

a. Open a new web browser and enter the URL https://vpn.omgeo.net/my.policy using Internet Explorer 11

b. Follow the IE 11 settings outlined below depending on whether you connect to SSL VPN using the Web or the Workstation:

SSL VPN using the Web

Location of Setting Action
Tools - Compatibility View settings Add omgeo.net and save your settings.
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required of a standard and second Windows user to connect to and access the 7.1 workstation

SSL VPN using the Workstation

Location of Setting Action
Tools - Internet options - Security tab 

Ensure that the settings are set to the default values as follows:

Internet zone is set to Medium-high with the Enable Protected Mode radio button selected.

 

 

Trusted sites zone is set to Medium with the Enable Protected Mode radio button not selected. Also ensure that omgeo.net is listed under Sites.

Tools - Internet options - Privacy tab

Ensure that the settings are set to the default values as follows:

  • Settings is set to Medium
  • Turn on Pop-up Blocker radio button is selected
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required of a standard and second Windows user to connect to and access the 7.1 workstation

c. Login with your VPN credentials. 

After logging in successfully the Privilege Guard ActiveX Installer window will open.

d. Click Install to download the BIG IP Edge Client software on your machine. Follow the install instructions.

e. To check if the BIG IP Edge Client software has installed go to Control Panel - Programs and Features and look for the following:

 

 Option 2 - Installation Package

a. Download the BIGIPEdgeClient.zip file by clicking here. Extract the .exe file.

b. Follow the IE 11 settings outlined below depending on whether you connect to SSL VPN using the Web or the Workstation:

SSL VPN using the Web

Location of Setting Action
Tools - Compatibility View settings Add omgeo.net and save your settings.
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required of a standard and second Windows user to connect to and access the 7.1 workstation

 SSL VPN using the Workstation

Location of Setting Action
Tools - Internet options - Security tab 

Ensure that the settings are set to the default values as follows:

Internet zone is set to Medium-high with the Enable Protected Mode radio button selected.

 

 

Trusted sites zone is set to Medium with the Enable Protected Mode radio button not selected. Also ensure that omgeo.net is listed under Sites

Tools - Internet options - Privacy tab

Ensure that the settings are set to the default values as follows:

  • Settings is set to Medium
  • Turn on Pop-up Blocker radio button is selected
Tools - Internet Options - Advanced tab

In the Security section of the Settings panel, ensure that the following boxes are selected:

  • Check for publisher's certificate revocation - This action stops the following pop-up message that sometimes appears when a connection attempt is made: "Error: Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issue this certificate."
  • Check for signatures on downloaded programs - This action is required of a standard and second Windows user to connect to and access the 7.1 workstation

c. Launch the BIGIPEdgeClient.exe file and click Next.

d. Click Install.

e. Once the install is complete, click Finish.

f. To check if the BIG IP Edge Client software has installed go to Control Panel - Programs and Features and look for the following:

 

2. Download the F5_files.zip file by clicking here. Extract the f5fpapi.dll and scew_uls.dll files and copy them to C:\Program Files(x86)\Omgeo\Omgeo OASYS 6.4  

3. When prompted, select Copy and Replace.

4. Check that the properties of the f5fpapi.dll file correspond to the below:

5. Check that the properties of the scew_uls.dll file correspond to the below:

6. After copying over the f5fpapi.dll, you must unregister the existing file and register the new f5fpapi.dll. To do this, navigate to C:\Program Files(x86)\Omgeo\Omgeo OASYS 6.4 and double-click Register.bat. This will open a command prompt that will unregister the old DLL and register the new one automatically. When complete, the command prompt will exit automatically.

7. Once the BIG IP Edge Client is installed, open your OASYS Workstation:

a. Go to Tools - Connection

b. Change the VPN Connection to vpn.omgeo.net and Service Name to /Common/Oasys under your active Oasys F5 SSL VPN Network Connection to appear as in the below image:

c. Test your connection to make sure that you can connect to the new VPN URL.

If you experience any technical difficulties with your OASYS Workstation F5 Upgrade or if you have any additional questions, please contact our Client Center at www.dtcc.com/client-center. Our support engineers are available to answer your call 24 hours a day, 6 days a week.