Participant Technical Reference Manual - IESO

Participant Technical Reference Manual
2. Participant Workstation, Network & Security
Figure 2-3: Internet Explorer, Untrusted Publishers Certificates Listing
Internet Explorer - Internet Options - Security
46 A number of security configuration settings may need to be made in order for
proper functioning of the browser with various IESO web sites. The market
participant can choose to define and place the MPI and Portal URLs for the
Production and Sandbox environments into the Trusted Sites zone under IE
Security or leave those URLs in the Internet zone by default for Windows XP.
If the URLs are left in the Internet zone by default then it is recommended that
the Security settings for that zone be configured as defaulted (medium security
level) except where noted. However for Windows Vista is important that the
URLs be placed in the „Trusted sites‟ zone as well as the IESO corporate site as
discussed previously.
47 When the URL's are included in the 'Trusted Sites' zone for XP then it is
recommended that the Security settings be configured as Medium-low instead
of the default Low. This provides reasonable security but eliminates most
prompts. For Vista, the default is medium and this can be left as is.
48 However the market participant's IT security people should be involved in
deciding the appropriate settings and implement based on their own rules and
policies, which may take precedence over the settings recommended here. The
choice is in the end, up to each market participant.
Internet Zone Security Settings
49 When leaving the IESO MPI and Portal URLs by default in the IE 'Internet'
zone for XP it is recommended the following settings be made:
4. Under the Tools menu select Internet Options
Select the Security tab. See Figure 2-4 and Figure 2-5. (IE / Windows XP shown). For
Windows Vista some additional security has been added in the form of Protected Mode as
mentioned above. This can be turned on or off for each security zone. It is required under
Vista for the MPI web sites that Protected Mode is turned off. This can be done in the
Issue 21.1 – March 15, 2010 - estimated Public 15