Configuring Internet Options

10.1 Configuring Internet Options

Microsoft have announced that Internet Explorer is being retired and will not be available on future Windows versions, including updates to Windows 10. MyID no longer has dependencies on Internet Explorer; however there are still some circumstances where Windows Internet Options configuration is still required for some parts of the product.

The table below lists the affected areas, and describes the configuration required and alternatives available that do not require the configuration changes specified. The affected features are used only as part of MyID Desktop – other MyID clients for Windows (the MyID Operator Client, the Self-Service App, and the Self-Service Kiosk) do not make use of these technologies. If you do not use the affected features, then you do not need to make the relevant configuration changes to the Internet Options.

MyID Desktop Feature	Internet Options Configuration	Alternative (Internet Options not required)
Exporting MI Reports to Microsoft Excel	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker Exceptions (Initialize and script ActiveX controls not marked as safe for scripting)	Download report results as CSV from the MyID Operator Client and open in Excel.
Collecting a device using the Collect My Card workflow	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker
Image Capture using the Edit Person workflow	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker Exceptions (Initialize and script ActiveX controls not marked as safe for scripting and Only allow approved domains to use ActiveX without prompt)	Image Capture using the Edit Person screen in the MyID Operator Client.
Print Mailing Document using Microsoft Word Mail Merge	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker Exceptions (Initialize and script ActiveX controls not marked as safe for scripting)	None
Issue Card	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker	Request a device using the MyID Operator Client, then use Collect Card in MyID Desktop.
Card Layout Editor (layout preview)	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker	None
Print Badge (layout preview)	Adding the MyID website to the Trusted sites or Local intranet group Disabling the pop-up blocker	None

10.1.1 Adding the MyID website to the Trusted sites or Local intranet group

SIU references: SIU-144, SIU-145.

To add the MyID website to the Trusted sites or Local intranet security group in the Internet Options:

Double-click Internet Options in the Control Panel.
Click the Security tab.
Add the MyID site to the list of Trusted sites or Local intranet:
1. Click the Trusted Sites or Local intranet icon, then click Sites.
2. For the Local intranet zone, click Advanced.
3. Add the web address of the MyID Web Server to the list of sites.
  
  If the MyID website does not use https, make sure the Require server verification (https:) for all sites in this zone option is not selected.
  
  Note: Do not use wildcards in the Trusted Sites list. Also, make sure you use the same URL as you are going to use when you access MyID; for example, do not add the IP address to the list if you are using the domain name to access MyID. Make sure you use the correct protocol – http or https.
4. Click Close.
Click OK.

You can also set these options using Group Policies rather than setting up each client PC individually.

10.1.2 Disabling the pop-up blocker

SIU reference: SIU-146.

MyID requires the ability to display pop-up windows.

To disable the pop-up blocker for the MyID web site:

Double-click Internet Options in the Control Panel.
Click the Privacy tab.
If the Turn on Pop-up Blocker option is selected, click Settings.
Type the address of the MyID Web Server and click Add.
Click Close, then click OK.

10.1.3 Exceptions

SIU references: SIU-147, SIU-148.

This version of the client components allows you to use MyID website using the default level of security for the Trusted sites or Local Intranet zones. However, some features do not operate correctly with the default settings.

If you intend to use the following features, you must carry out some additional configuration:

Exporting MI Reports to Excel – requires the Initialize and script ActiveX controls not marked as safe for scripting option in Internet Options.
Mail Merge – requires the Initialize and script ActiveX controls not marked as safe for scripting option in Internet Options.
Image Capture – requires the Initialize and script ActiveX controls not marked as safe for scripting option in Internet Options. You must also disable Only allow approved domains to use ActiveX without prompt.

Note: For some customized systems, you may experience problems when printing from MyID. If you experience problems printing (for example, if the list of printers does not appear), set the Initialize and script ActiveX controls not marked as safe for scripting option in Internet Options.

10.1.4 Performance improvements for client PCs without internet access

SIU reference: SIU-149.

If your client PC has no internet access, you may experience a delay when performing some actions within MyID for the first time in a browser session. This is because Windows is attempting to verify the certificate that was used to sign the MyID .NET components, or checking Windows Update. You may want to consider disabling these checks or allowing internet access. Contact your network administrator.

To disable the certificate revocation check:

Double-click Internet Options in the Control Panel.
Click the Advanced tab.
In the Security section, disable the Check for publisher's certificate revocation option.

Note: This setting affects the security of all .NET components on the client PC that are accessed by browser. Do not set this option if your PC has internet access.
Click Close, then click OK.

10.1.5 Compatibility mode on the web server

SIU reference: SIU-295.

The installation program sets up the compatibility mode on the web server to be appropriate for MyID. You may experience problems if another system changes this mode. To ensure that the web server is correctly configured, after installing MyID check the following:

In Internet Information Services (IIS) Manager, select Default Web Site > MyID.
Double-click HTTP Response Headers.
Ensure that the X-UA-Compatible option is set to the following:

IE=edge