Getting Connected

A guide for first time use of iLink 6

 

 

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Introduction

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

iLink 6 requirements

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Selecting an iLink gateway

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Logging in to iLink with a token

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

The iLink webtop

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Downloading required software

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Troubleshooting login problems

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Logging out

 

 

Description: Description: Description: Description: Description: Description: Description: Description: Full Text

Important SecurID Token information

 

 

 

 

 

 

 

 

 

 

 

 

Introduction to iLink 6

 

 

BP iLink is a virtual private network (VPN) which allows you to securely connect to BP resources anywhere there is an Internet connection.   Each user is a registered member of a profile which defines specific BP applications and resources you can access.   iLink can be run via a web browser or as a standalone installed client application (also known as CrossLink).

top


iLink 6 Requirements

 

 

A Windows computer with Internet Explorer is needed for enabling all iLink features and for the best compatibility with BP internal content.    However, iLink can be used on many different kinds of computers using any web browser with limited connectivity into BP.   

·       Internet access

o   iLink requires HTTPS/SSL (port 443) to provide secure encrypted communications into BP over the Internet.    If you work from a corporate network, you may be prompted to authenticate to your corporate proxy server in order to access the Internet.

·       A web browser

o   Internet Explorer (IE) is recommended.  Other full-featured browsers such as Firefox, Chrome, and Safari also work fine with iLink but there are known compatibility issues with some internal BP sites which expect IE.

o   For Windows users only, there is an optional standalone CrossLink client that can be locally installed instead of the browser version.

·       Java

o   For Internet Explorer users, a CrossLink ActiveX control will be used to launch the CrossLink software; if the system configuration prevents ActiveX controls from running, Java will be used instead.

o   Java is required to launch the CrossLink software from a different (non-IE) web browser.

o    Java is also required for a few integrated connectivity tools that are optional.

o   To install the latest plugin for your browser please go to http://www.java.com

·       BP Credentials and a token

o   A BP-issued RSA SecurID token is required to authenticate to iLink.  Additional BP credentials will also likely be required such as a BP NT userid, which should be assigned at registration.

o   When you register and are approved for iLink, you will be issued an RSA SecurID token. 

top


Selecting an iLink gateway

 

 

1.     First, start your web browser, and go to:  http://ilink6.bp.com

 

2.     The iLink global map of all active gateway cities appears (as shown below).

 

 

3.     Click on the gateway location (blue dot) on the map that is closest to the BP resources you want to access for optimum performance.  Note that this is not necessarily the site closest to where you are physically located.

 

4.      A message appears saying “Now connecting to the selected iLink gateway…” followed by a login window.   (See “Logging in to iLink” below).

 

5.      If you are registered for more than one profile, a profile selection menu will appear after successfully authenticating.

 

6.       Important notes about iLink gateways:

·       There are multiple iLink servers at each gateway location.    Load balancing and automatic failover is only possible if you connect via iLink6.bp.com (or iLink.bp.com).  Do not use any other URL to connect to these gateways.

·       Please do not create saved favorites/bookmark links with https://webtopxyz.bp.com as the first part of your saved bookmark/favorites.   Doing so will mean that these links will only work when connected to that specific iLink gateway, and no other. 

·       If there is a complete outage at a particular site, a message will appear within 30 seconds instructing you to select an alternate location.

·       If a blue dot for a preferred location is missing, there is either a known outage or scheduled maintenance at that site, so just select an alternate location.

top


Logging in to iLink with a token

 

 

 

·       iLink currently requires an RSA SecurID token for secure 2-factor authentication.  Please follow the steps below for how to set up and login with this token.  

·       Once the selected iLink gateway is accessed, a SecurID Authentication prompt will appear, as shown below.

 

·       UID:  Enter your iLink userid that you were assigned with your token.  Tab or click the next field to enter the passcode.

·       Passcode:  If you have logged in before and have set up your PIN, your passcode consists of your PIN immediately followed by the current 6-digit token display. If you are logging in for the first time, or your token has been reset to “new PIN mode”, please see the “Setting up your PIN for first time use” section below.

Press Enter or click Login after entering the ID and passcode.

Setting up your PIN for first time use

·       If this is the first time to login with this token or your token has been reset, the initial passcode is just the current 6-digit number now being displayed on the token

·       You will next be prompted to enter a PIN which is 4 to 8 digits that you can commit to memory.   This PIN must never be written down where it can be associated with the token.

·       Next, you will now be asked to enter a new passcode, which is your PIN followed by a new 6 digit token code.   You must wait for the token to display a new code, before entering it.  

·       Assuming your authentication was accepted, the iLink 6 “webtop” page will now appear.   See the troubleshooting section if you get "Authentication Failed".

·       You may sometimes see the prompt "Next PASSCODE".  Just wait for the next code to appear and enter the 6 digits without your PIN.  

 

·       You may also find this RSA tutorial helpful:  http://www.rsa.com/node.aspx?id=1159   To skip all the intro stuff, immediately click on “Select A Token” on the bottom, then on the next screen, click on the “key fob/card” picture on the far left.

 

top


The iLink 6 webtop

 

 

Upon a successful authentication, the iLink webtop home page will appear in your browser.  An example webtop appears below.  Your webtop page will look different depending on the profile you are a member of.

Windows Users

On Windows PC’s, the CrossLink 6 VPN software will now be launched… 

When CrossLink has finished loading, a yellow lock icon appears in the Windows notification taskbar.   This same icon is used to open the CrossLink control panel which is essential for viewing settings and making customizations to your connections and the links on your webtop.   Please see the CrossLink online help for more information on how to use this control panel (available only when logged into iLink).

Windows 7 users:  For convenience, you should configure the CrossLink icon to always be visible.   Click the small white triangle to show the hidden icons.  Then click Customize.

 

Next, locate the CrossLink 6 icon and change it to “Show icon and notifications”.   Alternatively, you can check the box at the bottom to show all icons.

Non-Windows Users

Non-Windows users of iLink require a Java-enabled web browser to launch the CrossLink 6 “Java Edition” applet.   On these platforms only, this is sufficient to be able to connect to Citrix and access a complete BP desktop or other Citrix-hosted applications provided the Citrix Receiver client software is also installed.   Other utilities, like SSH can also be accessed. 

Below is an example of the CrossLink 6 Java Edition pop-up window on an Apple Mac computer.   This window must remain open for connectivity into BP.   

Note: pop-up blockers will prevent CrossLink from loading fully, and must be configured to allow pop-ups from any BP site (allow *.bp.com).  iLink will detect if a pop-up blocker is enabled and will display a warning message to that effect.

top


Downloading required software

 

 

All downloadable software BP iLink uses is signed by trusted 3rd party companies and must be approved by you before the download will commence.  

Here is the list of 3rd party companies that provide securely signed software that iLink may require depending on your environment and profile:

·       Cognitas Technologies (for loading the CrossLink VPN Java or ActiveX)

·       Citrix ICA  (for access to Citrix servers via Java clients)

·       Microsoft (for access to Terminal Servers via RDP web client)

·       Unlimited Tech (for the  FTP or SFTP Java applet)

·       Mochasoft  (for Telnet, TN3270, and TN5250 Java applet emulators)

Depending on the browser you use, you will get a warning message similar to the one below requesting your permission to install CrossLink or other signed software.

.

Please note that unless you select otherwise, you may always be prompted to accept a download every time you run iLink or whenever the code is updated.   Clicking “More options” and then “Always install software from “Cognitas Technologies, Inc.”, will avoid this warning in the future, as shown below.

top


Troubleshooting Login Problems

 

 

An Authentication Failed window appears if your login was unsuccessful.  

·    The first thing to do, is return to the login page, and just try again - make sure you entered the PIN immediately followed by the SecurID passcode.  Be careful in entering the correct passcode.  Entering it wrong several times in a row can cause your token to be locked out.  

·    Make sure you are using your assigned SecurID token. You cannot borrow someone else’s token or allow someone else to use your token.

·    If you are a new user and have never logged in before, but do not get a prompt to enter a new PIN, you must contact the helpdesk/Token administrators to have your token reactivated or reset to "New PIN mode".

·    If you get an "Authentication requires a user Profile" error, this means that your login was accepted, but your ID was not found associated with any iLink profile.  This could happen if your token was activated before your ID was added to iLink.

·    If you were connecting fine, then all of a sudden all you get are Authentication Failed errors, it is possible that BP's security system has disabled all your accounts.  This could happen due to a failure to respond to the security challenge/response email.    It also could happen if you have not used your token in a long time.  Contact your BP Sponsor or the helpdesk to get this rectified.

top


Logging out of iLink

 

 

·        You should always logout of iLink rather than just closing the window.   When using various applications via iLink such as WTS/Citrix, you should also first log out of those before logging out of iLink.   Otherwise your sessions may stay connected for some time until they time out.

·        From the iLink webtop, click on Logout in the top-right

·        You can also logout via the CrossLink icon by selecting “Exit”.

·        If you are using a public computer, please ensure that every window you have opened to any BP website or application has been closed.   While these connections are no longer viable, the windows may contain sensitive information.

top


 

Important SecurID Token Information

 

·        Please memorize your PIN.  Never write the userid or PIN down where it could be associated with the token if it were lost.  Never disclose your PIN to anyone.

·        If you forget your PIN, contact the BP help desk or the token administration team. 

·        Do not let anyone access the system under your identity.   Do not share your ID or token.   All access is closely monitored.

·        A token that says "Card Off" or has flashing digits has expired or is faulty, and must be replaced.

·        To replace a lost, broken, or stolen token, or for any other questions regarding the token, please contact the BP helpdesk or the security tokens administration team.  Their contact details were included in the email and letter accompanying your token.

·        To return an unexpired working token, please contact your BP sponsor.  Unexpired tokens will be put to good use again.

top