For configuring the Entrust IdentityGuard Soft Token application, and gaining access to your Paychex machine remotely.
This document is a work in progress to replace (or at least supplement) the Soft Token Setup document provided by Paychex, and is currently under review.
Prerequisites
Physical LAN connection to Paychex network (the office is configured as such).
Credentials and other details:
Paychex Machine Name
Paychex Username
Paychex Password
Token Serial
PVN
Make sure that you are not on the “croop” domain on your local machine. You will need to use your local account (“Solu-AccountName”) as we need administrative privileges.
NOTE: Please check out the original word document this page is based on for more information.
Would it be acceptable to attach the Paychex provided instructions here? Would provide easier access if a user doesn't have the document open, but I'm not sure about rules of duplicating Paychex documentation.
Four will need to be selected from drop-down lists; you will need to create the fifth yourself.
After you have selected and answered your five questions (1 custom and 4 from the drop-downs), click “Next”:
You should be returned to the main menu. Select "I’d like to activate my soft token so I can start using it."
Confirm that you wish to activate your token:
Select option 2, manual activation:
You should see a page like the following, containing all the details you will need to activate the application. Wait here:
Configure the Soft Token Application for Desktop
Check to see if the application is already installed under Start > All Programs > “Entrust IdentityGuard Soft Token”. If so, run it, and skip to the next section.
Locate the downloaded installer file and run it. You will see this screen:
Click “Next” through the installer, accepting the license agreement along the way.
Connecting your Account and Soft Token Application
Go back to the Self-Service website, and copy the information from the page we left off at to the Soft Token application.
Create your pin for logging into the soft token application when prompted. Note that this is a different pin than your PVN.
Once configured, the application should provide you with a Registration Code. Input this into the next page on the Self-Service site:
Confirm successful registration. If you see the page below, your token is set up correctly. If not, please ensure all information is correct and retry.
Next, change your PVN. From the Self-Service main menu, select “I’d like to change my PVN the next time I authenticate.”
At the confirmation prompt, click “Yes”:
Click “done”.
Log out and back into Self-Service which will prompt you to change your PVN.
Enter your old PVN in the first field (provided via email), followed by your desired new PVN in the next two, and a response from the token application in the last field:
Login using your Paychex username and password. Pin and Passcode is combination of PVN + Response Passcode from the soft token application. e.g. PVN: 1234 + Passcode: 12345678 = 123412345678
This screen gives you access to all of the various environments you will need to connect to for Paychex.
Connecting to your Paychex Machine
Complete the steps in the above section, Connecting to Paychex.
You should have access to the Remote Desktop service from here. If not, contact Mark V.
Click Remote Desktop Connection
For the Computer name you will use the name of the Paychex-provided machine, ex: dev-d-NNNNN, and Username is PAYCHEX\<yourpaychexusername>
Before clicking Connect, go to the Experience tab and set your performance speed to High-speed broadband
Now click Connect
Log into your Paychex machine with the same credentials again and you're in!
If this is your first time on the network and you'll be moving onto Paychex onboarding start here: https://wiki.paychex.com/pages/viewpage.action?pageId=77806382 (NOTE: This link will only work from within the Paychex network, and once Mark has given you access to the specific Space within the wiki.)
Configuring the Soft Token application for desktop should be more than sufficient for most employees. Here are the abbreviated steps for mobile configuration if you need them.
Configuring the Soft Token Application for Mobile
From the Self-Service website main menu, click on "I'd like to activate my soft token so I can start using it."
Confirm your serial number.
Select option 1, you should get a page containing a QR code and a password:
Go to the App Store (iOS) or the Google Play Store (Android), search for the "Entrust IdentityGuard Mobile" application and install it.
Go to the "Scan QR Code" feature of the application (top-left menu in Android, bottom-right button in iOS) and scan the code on the Self-Service page.
Enter the password below the QR code when prompted.
Create your pin for logging into the soft token application when prompted. Note that this is a different pin than your PVN.