You are on page 1of 38

Guide to Configuring Digital

Certificates to Access the NMMS’


Market Participant Interface

Independent Electricity Market Operator of the Philippines, Inc.


30 October 2018
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

Table of Contents

1. Introduction ......................................................................................................... 3
2. Configuring your Workstation to Access the NMMS MPI .............................................. 4
3. Simultaneous to Access the Existing MMS-MPI and the NMMS MPI in One Workstation . 33

Page 2 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

1. Introduction

This document serves as a guide for Trading Participants on how to configure/install their
respective Digital Certificates so that they could access the Market Participant Interface of the
New Market Management System (NMMS).

Another section of this guide also discusses how users can simultaneously access the NMMS
MPI and the Existing MMS’ MPI in the same desktop/laptop.

In all instances, all desktops/laptops should meet the following minimum IT


specifications/requirements.

Item PEMC Specifications


Operating System Windows 8.1 Professional
Web Browser Internet Explorer 11
Java Runtime Java 6 Update 29
Internet Service Provider Any ISP
Internet Connection DSL / Broadband

Page 3 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2. Configuring your Workstation to Access the NMMS MPI

As a reminder, the following steps shall be executed in the workstation that meets the
requirements set in section 0 of this document. To add, these steps should only be executed
in the [user profile] or [local user account] of the workstation that was not configured for the
Existing MMS’ MPI.

2.1. Get a copy of your Existing MMS Digital Certificate (DC).


2.1.1. It is located the directory “C:\MI” of the workstation where you are currently
accessing the Existing MMS’ MPI.
2.1.2. Note: This shall be the same DC that will enable you to access the NMMS MPI
2.2. In the target workstation (where the NMMS MPI shall be accessed), create a new folder
named “MI_NMMS” in Drive C:\.
2.3. Paste the Digital Certificate retrieved in step 2.1 onto C:\MI_NMMS
2.4. Paste the NMMS Production Root Certificate that was provided by PEMC separately onto
the same folder “C:\MI_NMMS”.
2.5. Check the Java version installed.
2.5.1. Go to Start Control Panel
2.5.2. Double click the Java (32-bit) (as shown below)

Page 4 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.5.3. A Dialog box will appear


2.5.4. Under General tab, click the ‘ABOUT’ button

2.5.5. Check the Java version.

Minimum Required Java Version: Java 6 Update 29 or higher


Note: if version is lower, install the minimum required Java Version

2.5.6. Click Close.

Page 5 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.6. Open Internet Explorer 11.0 browser Click Internet Options.

2.7. Go to Content tab and click Certificates

Page 6 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.8. Click Trusted Root Certification Authority tab

Page 7 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.9. In Trusted Root Certification Authority tab, click ‘Import’ button

2.10. Click browse button.

Page 8 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.11. Locate the NMMS Production Root Certificate (the one pasted earlier in C:/MI_NMMS
folder), then click next

Page 9 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.12. Security Warning box will appear then Click Yes

2.13. Certificate Import wizard will display.


Note: certificate importation must be successful.
Click OK

Page 10 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.14. Check the if the NMMS Production Root Certificate is installed. See screenshot below.

Page 11 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.15. Go to personal tab, click import button.

2.16. Certificate Import Wizard. Click Next

Page 12 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.17. Click browse button.

2.18. Locate the Participant Digital Certificate (Drive C: /MI_NMMS folder).

2.19. Click Next

Page 13 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.20. The Certificate Import Wizard will then be displayed

2.21. Key the password of the digital certificate. In import options  check the enable strong
private key protection then click Next.

Page 14 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.22. Click Next

2.23. Click Finish.

Page 15 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.24. Import the new private exchange key. Click Set Security Level button

2.25. Click ‘MEDIUM’ then Next

Page 16 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.26. Click Finish

2.27. Click OK.

Page 17 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.28. Certificate Import wizard will appear. Click OK

2.29. Check the new installed Digital Certificate under Personal TAB.

2.30. To install MMSRTCA, go to trusted site then Click Import button

Page 18 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.31. Certificate Import window will appear then Click next

2.32. Click browse button

Note: Install the DC of participant, located at C:/MI_NMMS

Page 19 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.33. Click Open

2.34. Click Next

Page 20 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.35. Key in the password that was provided for the DC. Note: This is different from the MPI
User Credentials.

Note: Do not check ‘enable strong private key’, then click next

2.36. Click Next

Page 21 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.37. Click finish

2.38. Click YES

Page 22 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.39. Click OK

2.40. Add the NMMS MPI URL provided by PEMC in trusted sites

During Parallel Operations Program, the following URLs should be defined.

Main Site:
https://203.177.47.87/mpi/logon.do
https://203.177.47.90/mpi/logon.do
https://203.177.47.91/mpi/logon.do

Back-up Site:
https://112.199.90.170/mpi/logon.do
https://112.199.90.171/mpi/logon.do
https://112.199.90.172/mpi/logon.do

Page 23 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.40.1. Open Internet Explorer


2.40.2. Go to Tools> Internet Options

2.40.3. Under Internet Options, go to Security then click Trusted Sites.

Page 24 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.40.4. Click the Sites

2.40.5. Enter the MPI URL, then Add.

Page 25 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.40.6. Enter the 2nd MPI URL, then Add

2.40.7. Click Close

Page 26 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.41. Add the two URLs in Compatibility View Settings

2.41.1. Locate and click the Tools button found in the upper right corner. Select
Compatibility View Settings

2.41.2. Enter the first URL, then Click Add

Page 27 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.41.3. Enter the 2nd MPI URL, then Add

Page 28 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.41.4. Click Close

2.42. Finally, try to access the NMMS MPI

2.42.1. Open Internet Explorer 11.0 browser


2.42.2. Type any of the MPI URLs provided
2.42.3. Window Security Dialog box will appear. Verify the name and valid of the
installed digital certificate. Note: Certificate must not have expired
2.42.4. Click OK

Page 29 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.42.5. Enter the password of the Digital Certificate

2.42.6. Click Allow

Page 30 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.42.7. MPI Web User Interface will appear. Enter the NMMS MPI user credentials
provided. Note: This is different from the DC Username and Password.

2.42.8. Pop up will appear at the bottom. Click Options for this site.

Page 31 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

2.42.9. Select Always allow

2.42.10. Pop up will appear. Click Retry

2.42.11. NMMS MPI will appear after clicking the Retry button.

Page 32 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

3. Simultaneous to Access the Existing MMS-MPI and the NMMS MPI in One Workstation

This section discusses the steps on how you can set-up your workstation to access both the
Existing MMS-MPI and the NMMS MPI. It should be noted again that the following steps shall
be executed in the workstation that meets the requirements set in section 0 of this document.

3.1. On the user profile where the DC is installed for the Existing MMS’ MPI, upgrade/update
the version of the Internet Explorer to 11 (IE11)

3.2. Check the version of Windows 10. Enterprise Mode only works on the Professional and
Enterprise editions of Windows 10. Right click This PC, then click Properties. Or open
the Command Prompt and type systeminfo.

Page 33 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

3.3. Press the Windows Key + R, then type gpedit.msc to run the Group Policy Editor.

3.4. In the Group Policy Editor, go to the User Configuration -> Administrative Templates -
> Windows Components -> Internet Explorer. On the right side, find and double-click
the setting “Let users turn on and use Enterprise Mode from the Tools menu”.

Page 34 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

3.5. In the dialog window that just opened, select Enabled. Click Apply, then OK.

3.6. Close the Group Policy Editor and all open Internet Explorer windows.

Page 35 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

3.7. Open a new IE11 window. Press the Alt key and go to the Tools Menu. Click Enterprise
Mode to activate it.

Page 36 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

3.8. In the same Tools Menu, also check the Compatibility View Settings. Add the addresses
of the websites that need to be viewed in Enterprise Mode.

Page 37 of 38
Guide to Configuring Digital Certificates to Access
the NMMS’ Market Participant Interface

3.9. Check also the F12 Developer Tools to customize the view of the website for backward
compatibility with older versions of Internet Explorer.

3.10. Try to access the MPI for the Existing MMS.

3.11. For that same target workstation where the DC is currently installed for the Existing
MMS MPI, create a new user profile [or local user account] in the same workstation.
This shall be the user profile for the NMMS MPI

Note: A single user profile cannot be configured to access both the Existing MMS-MPI
and the NMMS-MPI.

3.12. Log-in to the newly created user profile, then, follow the steps set forth in section 2 of
this document.

Page 38 of 38

You might also like