Introduction
Sure, here is the new user guide in markdown format based on the Connect@Plant End User.docx document. I’ve added placeholders for images where necessary.
# Connect@Plant User Guide
## Table of Contents
- [Connect@Plant - A Quick Introduction](#connectplant---a-quick-introduction)
- [Quick Start Guide](#quick-start-guide)
- [Client Requirements and Prerequisites](#client-requirements-and-prerequisites)
- [Installing the Client](#installing-the-client)
- [First Time Login](#first-time-login)
- [Accessing Connect@Plant using the Citrix Client](#accessing-connectplant-using-the-citrix-client)
- [Accessing Connect@Plant using HTML Client](#accessing-connectplant-using-html-client)
- [Work Permit](#work-permit)
- [Create Work Permit](#create-work-permit)
- [Profile](#profile)
- [Edit Profile](#edit-profile)
- [Edit Secret](#edit-secret)
- [Reset Password](#reset-password)
## Connect@Plant - A Quick Introduction
Connect@Plant is a complete security solution to control, protect, and log all access to onshore and offshore installations and plants.
The solution gives external vendors secure access to onshore and offshore installations to perform maintenance and changes on ICS/PCSS systems – designed for the oil and gas industry and compliant with the recommendations in the NORSOK standards and OLF/NOG104 guidelines.
## Quick Start Guide
Welcome to your first time logging on to Connect@Plant. Open a web browser and go to the address provided. Use Internet Explorer with Citrix Receiver 4.5 or later for a rich experience, or use Chrome or Firefox for HTML5 Client.
Username and password for first time login should be provided to you by a user manager. The two-factor authentication code is delivered to you by SMS or e-mail, depending on what your user manager has configured. After you enter your username and password and press “Login”, you must enter the two-factor code. Press “Login” again to be taken to the Connect@Plant portal.
If the Connect@Plant session does not auto-launch, press "Open" or check for blocked pop-ups.
From this portal, you can also launch the “File Transfer” application. This will allow you to transfer files between your PC and Connect@Plant.
Your first meeting with the Connect@Plant Dashboard should take you to “Security Settings”. This lets you set your password as well as a personal secret. The secret is used with a hint so that we can help you recover your password should you forget it.
Please notice that you will be logged out when this is done, and will need to log back in.
If you have active Work Permits or you are qualified to use applications that do not require a work permit, it should be displayed on the front page with a “Start” button. If you are qualified for applications but you do not yet have a work permit, you can select “Request work permit” and apply from there.
To view a work permit status, you can select the “Work Permits” link on top of the page.
## Client Requirements and Prerequisites
Subject to the system configuration, a dedicated client may be required to access the system. This is typically required if using hardware that is not already set up to access Connect@Plant.
Subject to the system configuration, it may be required that training has been performed in the relevant training system – if that is the case for this installation you should have gotten information about this and will not be able to access Connect@Plant before this has been done.
Subject to the system configuration, the F5 plugin will check your computer for antivirus (version, configuration, last update), OS Patches.
Subject to the system configuration, if the host checker is enabled the only operating systems and web browsers supported are the following (Since this is what the client supports):
- Supported operating systems: Windows 7, 8 & 10
- Supported web browsers: Internet Explorer 9, 10, 11
If the company does not use the host checker, users that do not have the client will be routed to use HTML5 client and be able to access the system using browsers with HTML5 support.
## Installing the Client
Download the Connect@Plant Client from the location specified by the company.
Run and install the Connect@Plant Client on your computer. Your computer is now ready for Connect@Plant access. The following changes will be made to your computer while installing `C@P Client.msi`. Local administrator rights are necessary for this installation.
Changes made to the registry (`HKEY_LOCAL_MACHINE`):
- Following will be added to trusted sites:
- `fileuploadconnectatplant`
- `connectatplant`
- `launchconnectatplant`
- Pop-up blocker will allow pop-ups from `connectatplant`
- For all URLs added to the registry, they will also contain the domain name, for example `connectatplant.cegal.com` if the company was Cegal.
### F5 VPN Client
We have taken the `BIG-IP Edge Client.exe` and extracted installation files in order to not install the full client on each computer. The following components will be installed if you run the `CAPF5Client Installer`:
- Features used for establishing VPN:
- `CUSTOMDIALER`, `VPN`
- Features used for allowing F5 programs to be run without UAC prompt:
- `PortRedirector`, `InstallerService` (Installed as Windows services)
- Features used for system prerequisites check:
- `Win32SystemCheck`, `OesisInspector`
Complete install command:
f5fpclients.msi ADDLOCAL=CUSTOMDIALER,PortRedirector,InstallerService,Win32SystemCheck,OesisInspector,VPN
More information regarding the client can be found on [F5 Support](https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-client-configuration-11-4-0/1.html).
### Citrix Receiver
This client is set up to install Citrix Receiver v4.4, but if Citrix Receiver is already installed on your machine, setup will ignore this and finish. In other words, if you want to use a newer version of the Citrix client there is no reason to not upgrade or keep a newer version already installed on the system. Please visit [Citrix Receiver](https://www.citrix.com/products/receiver/) to download the newest version and read about the client.
## First Time Login
Subject to the system configuration, you have one or two options when accessing Connect@Plant. If the host checker is enabled, you will only be able to access using the Citrix client. If it’s disabled, you will be able to access using Citrix client or HTML5 client (from HTML5 supported browsers).
## Accessing Connect@Plant using the Citrix Client
Start Internet Explorer and go to the URL from the email and log on using username/password/two-factor authentication code as shown below.
After you have pushed the “Logon” button, a new page will appear and a session will automatically be initiated. Choose “Open” to start the session.
After a while, you will see the Connect@Plant dashboard. First, you will need to set a new password and a secret. This is so only you know your password and secret – and that you will be able to reset your password in the future by using the secret. Notice that you will be logged out when this is done, and will need to log back in.
If you have Work Permits that have been approved or you have access to applications that do not need a Work Permit – you should be able to start them. For applications needing Work Permit where you are qualified to request a work permit, you can select “Request work permit” and apply for a work permit.
## Accessing Connect@Plant using HTML Client
Start an HTML5 compliant browser and go to the URL given to you by the customer and log on using username/password/two-factor authentication code as shown below.
Supported browsers: Google Chrome, Mozilla Firefox, Microsoft Edge
Then you will see a new page, and a new tab will open and automatically log you on to the Connect@Plant dashboard using the HTML5 client.
The HTML5 client will look like this, you will have the session inside of your browser. After a while, you will see the Connect@Plant dashboard. First, you will need to set a new password and a secret. This is so only you know your password and secret – and that you will be able to reset your password in the future by using the secret. Notice that you will be logged out when this is done, and will need to log back in.
## Work Permit
### My Work Permits
View, create, or edit work permits, available to all users. If you are qualified for any applications that need a Work Permit, you can go to the Work Permits tab and select My Work Permits to go to the permit overview. From there, start the process of creating a new work permit.
### Work Permit Administration
View, create, edit, or approve Work Permits, only shown to Work Permit Administrators.
Here you can see the status of your work permits. To start the process of creating a new work permit, select Create work permit.
## Create Work Permit
Fill in the necessary information to create a work permit, fields described below.
- **Description**: Describe the work you are going to do.
- **Applications**: Applications that you need to get the work done. It will automatically show you a list of the ones you are qualified for.
- **Start time**: Work permit start time.
- **End Time**: When are you finished with the work.
Select Save and the Work Permit Manager will be notified that there is a pending work permit that needs to be either approved or declined. When the work permit is approved or declined you will be notified by email (if that’s configured on your profile), the status will update in the portal and the application will be available to start when Start Time is reached. When End Time is reached your session will be terminated. Your work will not be lost, so in case you get another Work Permit to continue the work you will be able to stay connected.
Note: You can also ask a work permit manager to create a work permit for you.
## Profile
Your profile page displays information about you. It will show you which roles you have, and what applications you are qualified to use. It also states if an application requires a work permit.
## Edit Profile
For security reasons, you cannot change mobile or e-mail. If you need to change user information, please contact the helpdesk for Connect@Plant. You can decide if you would like an e-mail when your work permits are approved.
## Edit Secret
You can change your personal secret which is used if you forget your password. You will need to enter your current password to change the secret and your secret hint.
## Reset Password
Enter your current password to be able to change it to a new one.
