Introduction:
CA Transaction Manager requires cardholder data to be uploaded via Data Upload Tool (DUT). This data will be used during cardholder authentication during a 3DSecure transaction where in the cardholder would be asked to enter the correct values for the security questions asked in the authentication page.
Background:
Keeping the data upload tool up to date ensures that the upload of card data continues to happen for cardholders.
Environment:
CA Transaction Manager Installed on Windows Environment.
Instructions:
In this document we shall cover the important points to keep in mind while assisting a client with an upgrade on this existing DUT setup.
It is always advised to ensure user takes a backup of the existing configuration primarily the ~ssl folder and ~conf folder present inside $ARCOT_HOME.
~ssl folder present inside $ARCOT_HOME is a folder which contains the Certificate which the help of which the Data Upload Client establishes a connection with the CA Server.
~conf folder present in the $ARCOT_HOME contains the configuration file upload.ini where the reference of certificate is mentioned which our DUT Client uses to establish connection with the CA Server.
One the customer has taken sufficient backup of the existing setup (at a location outside $ARCOT_HOME), he should be advised to uninstall the existing version. In windows the customer would need to uninstall the existing version by going to the Control Panel >>Programs>>Uninstall a program.
<Please see attached file for image>
Once un-installed, the user would then need to run the base installer version for example DUT 7.4.
<Please see attached file for image>
Once the above base version is successfully installed, one could proceed by adding the 7.4.1.7 TSL patch to the above installed version. In order to do this, one would need copy the below shown list of five files provided in the patch
<Please see attached file for image>
And the same should be replaced with the set of files found in C:\Program Files (x86)\Arcot Systems\VPAS Client\bin
<Please see attached file for image>
Once the 7.4.1.7 patch is successfully applied with the replacing the five files as shown above the next check the customer should do is weather the $ARCOT_HOME is properly set in Environmental Variables.
The same could be done in windows by going to Control Panel\System and Security\System and then clicking on Advance System settings
<Please see attached file for image>
In Environmental variables, ARCOT_HOME needs to exists with the variable value as C:\Program Files (x86)\Common Files\Arcot Shared . If this is not found please have it set as below
<Please see attached file for image>
Once the above is set the customer could check the environmental variable using the below command in command prompt
CD %ARCOT_HOME%
The above command would take the customer straight to C:\Program Files (x86)\Common Files\Arcot Shared indicating that the environment, the system would point to, when ARCOT_HOME is asked for would be the above.
<Please see attached file for image>
Once the above is set, customer would need to check if the ~ssl folder is existing under location C:\Program Files (x86)\Common Files\Arcot Shared. If it does not exists then he would need to create a folder ~ssl and ensure to place it in C:\Program Files (x86)\Common Files\Arcot Shared. He would need to put all the files from the backed up ~ssl folder and place it in this folder.
He would then need to open the upload.ini file and ensure to comment out the below certificate references and ensure he points the CA Server cert reference to the certificate in the ~ssl folder.
sslCert=/opt/arcot/ssl/uploadclientcert.pem and sslKey=/opt/arcot/ssl/uploadclientkey.pem needs to be commented as below
“# Set the absolute path to the client certificate that the DUT must use for SSL communication.
#sslCert=/opt/arcot/ssl/uploadclientcert.pem
# The absolute path to the SSL key.
#sslKey=/opt/arcot/ssl/uploadclientkey.pem”
The only reference which should be un commented should be the one below and it is here that the reference of the silo server CA certificate needs to be provided.
serverCACert=C:\Program Files (x86)\Common Files\Arcot Shared\ssl\secure5.pem
Once the above change is made, the new version of DUT is all set and needs to be invoked by clicking on the ArcotUpload.exe from the location C:\Program Files (x86)\Arcot Systems\VPAS Client\bin.
Additional Information:
In this document we have taken the DUT upgrade from any Old DUT version to DUT 7.4.1.7 as an example. The above mentioned steps still remains the same in case of any DUT upgrade from an older version to a latest version.