Defense Manpower Data Center
Personnel Security & Assurance
Secure Web Fingerprint Transmission Plus Enrollment
(SWFT+)
Web Enroll Startup Guide
Document Version 2.0
February 2017
Prepared by
DMDC
Web Enroll Startup Guide
2
REVISION HISTORY
Date Version
Number Section Comments Name
10/13/2016 0.5 All Initial Draft for SWFT+ Startup
Guide Release 1.0
(Combined Org/Site and Exec
Guides)
Jacob Sisko
10/21/2016 1.0 All Updated Draft for SWT+ Startup
Guide
Added COE Scanner Set-Up,
improved language, added
appendixes and updated fonts
Douglas Weller, Kingston
Benjamin
02/23/2017 2.0 Appendi
x A
Updated AWARE Supported
Livescan Devices November 2016
Kingston Benjamin
Webenroll Startup Guide
3
TABLE OF CONTENTS:
Contents
1.0 INTRODUCTION .................................................................................................................4
2.0 SYSTEM OVERVIEW..........................................................................................................4
4.0 NETWORK REQUIREMENTS ............................................................................................6
5.0 LOCAL WORKSTATION CONFIGURATION .....................................................................6
5.1 Prepare the Fingerprint Device ..............................................................................................6
6.0 INITIAL TEST OF THE DEVICE .........................................................................................8
7.0 GETTING STARTED WITH SWFT+ ...................................................................................9
8.0 RESOLVING COMMON ERRORS ...................................................................................11
1. ERROR INITIALIZING DEVICE ............................................................................................. 19
2. RESETTING THE SESSION .................................................................................................... 21
3. WEB ENROLL ADD-ON FAILED TO RUN............................................................................. 22
Webenroll Startup Guide
4
1.0 INTRODUCTION
The Secure Web Fingerprint Transmission Plus Enrollment (SWFT+) is a Department of Defense (DoD) enterprise system for centralized collection and distribution of electronic fingerprints for
applicants requiring a background check. SWFT+ provides the means for collecting biometric data for personnel only once, and then reusing and sharing the data with designated DoD agencies.
SWFT+ eliminates the need for paper-based capture and handling of fingerprints, expedites the background check process by reducing invalid fingerprint submissions, provides end-to-end accountability for sensitive PII data, and implements stringent security standards.
2.0 SYSTEM OVERVIEW
SWFT+ system consists of two major components:
System for web-based enrollment of fingerprints
Store-and-forward system (SWFT) for collection and distribution of electronic fingerprints.
The enrollment component of the SWFT+ system is a light-weight web-based application that enables authorized users to capture biographic data and fingerprint images by means of their local fingerprint
capture workstations. A centralized server-based application collects and integrates the captured data into standard FBI electronic biometric transmission specification (EBTS) files, and forwards the files
to SWFT. SWFT then transmits the electronic files to OPM Fingerprint Transaction System (FTS) or to other authorized destinations.
There are only minimal system requirements for the participating client systems such as a compatible Internet browser, installation of freely available Java and Adobe runtime libraries, and installation of
fingerprint capture device drivers.
System users engage their local fingerprint capture devices by means of SWFT+ web-based
component to enroll biographic data and fingerprint images, which are securely transmitted and integrated into an eFP file in secure SWFT+ environment. The web application also provides a utility
to prefill frequently used on-screen data, to post-edit the enrollment data, and to convert a paper fingerprint card into electronic fingerprint file. Completed eFP files are automatically forwarded to the SWFT system for validation and transmission to OPM. Users can also print an electronic fingerprint
onto a paper card in multiple Federal Government or State form standards.
3.0 SYSTEM REQUIREMENTS
Operating System: Windows 7 (32bit and 64bit), Windows XP.
Web Browsers: Internet Explorer 9.0 or above (32bit version), IE10 (32bit) or higher is recommended.
NOTE: SWFT+ supports IE 11 (32bit only) and running in compatibility mode.
Webenroll Startup Guide
5
Java Runtime Environment (JRE): Java 32bit version 7 Update 45 or higher.
Java download is available at http://java.com/en/download/installed.jsp . Check your local IT policy on having it installed.
NOTE: Only 32bit JRE is currently supported. It is recommend to uninstall previous versions.
Adobe Flash Player: Adobe version 9.0.24 or higher. Check your local IT policy.
Adobe Flash Player download is available at http://get.adobe.com/flashplayer. Check local IT
policy.
Software Development Kit (SDK) for Fingerprint Capture Device:
See the tables below to determine which IE, JRE, and SDK to install for your specific device, OS, and environment.
32bit Windows
Can install only the 32bit JRE and 32bit SDK as show in the table below:
64bit Windows
SWFT+ supports only 32bit browsers and 32bit JRE. The bit version of SDK is shown in the table below:
Webenroll Startup Guide
6
4.0 NETWORK REQUIREMENTS
Access to SWFT URL https://swft.dmdc.mil via NIPRnet or the Internet.
Add https://swft.dmdc.mil to the White List if the SWFT website is not reachable from your location. Contact your IT administrator for assistance.
Add https://swft.dmdc.mil to the Trusted Sites List in IE browser to ensure full support of all
SWFT functions. Contact your IT administrator for assistance.
Obtain permission to use your USB port. Most locations have the port blocked. Contact your IT administrator for assistance.
5.0 LOCAL WORKSTATION CONFIGURATION
5.1 Prepare the Fingerprint Device
Verify that the device is supported by SWFT+. List of compatible devices is available on the SWFT
Information Website at https://www.dmdc.mil/psawebdocs/docPage.jsp?p=SWFT in section “eFP Enrollment (SWFT+)”. After confirming the device support, follow the setup process provided by the device vendor.
See Appendix A for list of supported devices along with the appropriate SDK and other information.
Download the SDK from the appropriate DOD Service Portal (e.g., Army Knowledge Online, AF Portal, Navy Knowledge Online, etc.) or obtain from the device vendor.
5.2 Install the Device Drivers and SDK
Install the software that has been provided from vendor with the device. Run the installation program the default settings. Contact your IT administrator for assistance if need to determine any setup entries that are specific to the local system.
5.3 Verify the Access to Dynamic Link Library (DLL) path
Some DOD systems restrict the access to local DLL libraries.There is a Windows feature called App
Locker that needs to be bypassed in order for SWFT to operate.
NOTE: Not every PC user has the privileges to access or change Windows settings. Contact your IT
administrator for assistance if needed.
Add C:\Users\%username%\Aware\Multi-Component\_swft_dmdc_mil_-1\library to the DLL Path.
Webenroll Startup Guide
7
5.4 Verify and Configure the System Path
After completing the installation, the location of the device driver needs to be added to the system path. The path is often automatically configured as a part of the installation process for all devices.
Follow the directions below how to open the Environment Variables window and verify or configure the path to the device drivers.
Step-by-step procedure for verifying or configuring the System Path:
Step 1: Determine the drivers’ location
The device driver is usually in the install root of the device software. Refer to the vendor installation guide to determine the drivers’ location.
Step 2: Verify and/or Configure Windows System Path
Windows 7 Instructions:
1. From the Start Menu, right-click My Computer and click Properties.
2. Click Advanced System Settings link in the left column.
3. In the System Properties window click the Environment Variables button.
4. In the bottom window, labeled “System variables”, scroll down until you come to Path. Highlight Path and click Edit. Add the location of the device software installation root. The
default installation directory should be:
C:\Program Files (x86)\ManufactureName\ApplicationName\
Example:
Old Value: .;C:\Windows\System32
New Value: .;C:\Windows\System32;C:\Program Files
(x86)\ManufactureName\ApplicationName\
System Path for several frequently used devices and the appropriate command for path configuration (Command Prompt ran as an Administrator) is listed below:
NOTE: Some sites implemented Group Policies that overwrite the System PATH Environment
Variable modifications made by the local System Administrator. To verify that the System Path was appended permanently, restart Windows, open the Command Prompt and run the command SET PATH to display the current System Path content. If the original System Path was restored to its
original version (i.e., the newly made modification was lost), contact your IT Support to assist with making the necessary System PATH modifications permanent.
Upon completion you may need to perform a system reboot for the settings to take effect.
Webenroll Startup Guide
8
Cogent Fingerprint Capture Device on a Windows 32-bit OS
SET PATH = %Path%;C:\Program Files\Cogent\FpCapture Access\bin;C:\Program Files\Cogent\FpCapture Access\driver\USB\32bits
Cogent Fingerprint Capture Device on a Windows 64-bit OS
SET PATH = %Path%;C:\Program Files (x86)\Cogent\FpCapture Access\bin;C:\Program
Files (x86)\Cogent\FpCapture Access\driver\USB\64bits
Cross Match Fingerprint Capture Device on a Windows 32-bit OS
SET PATH = %Path%;C:\Program Files\Cross Match Technologies\L SCAN
Essentials;C:\Program Files\Cross Match Technologies\L SCAN Essentials\Drivers\LSCAN_USB
Cross Match Fingerprint Capture Device on a Windows 64-bit OS
SET PATH = %Path%;C:\Program Files (x86)\Cross Match Technologies\L SCAN
Essentials;C:\Program Files (x86)\Cross Match Technologies\L SCAN Essentials\Drivers\LSCAN_USB
Morphotrust Identix Fingerprint Capture Device on a Windows 32-bit OS
SET PATH = %Path%;C:\Program Files\L1ID\TP-LSMULTI SDK\bin;C:\Program
Files\L1ID\TP-LSMULTI SDK\bin\idUsb
Morphotrust Identix Fingerprint Capture Device on a Windows 64-bit OS
SET PATH = %Path%;C:\Program Files (x86)\L1ID\TP-LSMULTI SDK\bin;C:\Program
Files (x86)\L1ID\TP-LSMULTI SDK\bin\idUsb
digID Fingerprint Capture Device on a Windows 32-bit OS
SET PATH = %Path%;C:\Program Files\Identification International\inVize ID 4
digID Fingerprint Capture Device on a Windows 64-bit OS
SET PATH = %Path%;C:\Program Files (x86)\Identification International\inVize ID 4
6.0 INITIAL TEST OF THE DEVICE
Many vendors provide a test application to verify that the installation was completed correctly and the device is working properly. It is recommended to run this application at least once before engaging the device by SWFT+. When ready to test the device with SWFT+, make sure that no other application
(e.g., test application) is running and communicating with the device. Please refer to the installed SDK for location of this test application. It should be installed in the same location as the SDK documents.
Webenroll Startup Guide
9
7.0 GETTING STARTED WITH SWFT+
7.1 Request for SWFT Access
Obtain the SWFT account by submitting completed Personnel Security System Access Request (PSSAR) Form to the appropriate account administrator. The PSSAR Form and directions for
obtaining the SWFT account are available on the SWFT Information Website at https://www.dmdc.mil/psawebdocs/docPage.jsp?p=SWFT in section “eFP Enrollment (SWFT+)”.
7.2 SWFT Login
After receiving the account information, log into the SWFT and register your Smart Card. Once signed
into the SWFT, navigate to SWFT+ by clicking the WebEnroll icon in the navigation pane.
NOTE: Some browsers might prevent users from accessing SWFT. When experiencing this issue, click
on the sprocket at the top right of the Internet Explorer browser and click “Compatibility View Settings”. Verify that the SWFT URL is not listed among sites in the Compatibility View. If it is,
remove it from the list.
7.3 Fingerprint Scanner Registration
Every fingerprint capture device (live scan or card scan) must be registered in the SWFT system and tested before enrolling official biometric data. For detailed information on the registration procedure
refer to the Scanner Configuration and Registration Guide that is available in Help upon successful login to SWFT. General guidance is provided in Standard Operation Procedures (SOPs) for SWFT+, and in the SWFT Access, Registration and Testing Procedures document that are available at
https://www.dmdc.mil/psawebdocs/docPage.jsp?p=SWFT.
7.4 Testing
Every registered device must be tested for use with the SWFT system. General guidance is provided in Standard Operation Procedures (SOPs) for SWFT+, and in SWFT Access, Registration and Testing
Procedures that are available at https://www.dmdc.mil/psawebdocs/docPage.jsp?p=SWFT.
NOTE: Besides obtaining SWFT user account, the WebEnroll Location Profile and Application
Profile for the user and device must be configured by the SWFT Coordinator before proceeding to the next step. See the above referenced documentation for details.
Step-by-step procedure for fingerprint device test and authorization: WARNING: Failure to adhere to critical requirements for fingerprint test transactions may result in suspension of user privileges. 1. Make sure that your Live Scan or Card Scan device is connected to your workstation.
2. Log into SWFT at https://swft.dmdc.mil and navigate to “Web Enroll”. 3. Navigate to page Applicant Biographic Data in TAB WebEnroll.
Please refer to an example of test Biographic Data on the next page.
4. Enter this Last/First Name: Test, Test <= CRITICAL REQUIREMENT
5. Enter the Address (any valid address).
Webenroll Startup Guide
10
6. Enter the Date of Birth (any valid date).
7. Enter the Place of Birth (select any from the dropdown list).
8. Enter the Citizenship (select any from the dropdown list).
9. Enter the Gender, Race, Height, Weight, Eyes, and Hair (select any from the dropdown list or
type any valid entry) NOTE: Height is in the format Feet Inch Inch. I.E.6’ 2” is 602 and 5’ 11”
is 511.
10. Enter a SSN that begins with 9. <= CRITICAL REQUIREMENT
Example: 9 + date of birth of the test subject => 9MMDDYYYY
11. Enter the Reason Finger Printed: Test. <= CRITICAL REQUIREMENT
12. Enter the SON (leave default system value or provide any valid entry).
13. Enter the SOI (leave default system value or provide any valid entry).
14. Enter the IPAC (leave default system value or provide any valid entry).
15. Review all entries and correct as needed.
16. Click the button Next.
17. Provide all fingerprint images (see the User Training video in section eFP Enrollment (SWFT+)
available at https://www.dmdc.osd.mil/psawebdocs/docPage.jsp?p=SWFT ).
18. Click the button Next.
19. Review all data presented on the page.
20. Click the button Enroll Transaction.
21. Send email notification to the SWFT Coordinator:
SUBJECT: Web Enroll Test (UNCLASSIFIED)
MESSAGE: Test submission was completed by: <enter your WebEnroll User ID>.
Test SSN: <enter the test SSN >
22. SWFT Coordinator reviews the Test submission and forwards to OPM for EBTS compliance check. Errors in the Test submission must be corrected and the test may have to be repeated.
23. SWFT Coordinator promotes the device to Production status.
Example of screen showing enrollment data for Test fingerprint enrollment:
Please note that the Name MUST be “Test, Test”, the SSN MUST begin with ‘9’ and the
Reason Fingerprinted MUST be “Test”.
Values in the rest of the test entries are optional, but they must be provided.
Webenroll Startup Guide
11
8.0 RESOLVING COMMON ERRORS
Most of the issues and their resolution that users might experience when operating or attempting to
operate a fingerprint capture device with SWFT+ have been documented in the “Troubleshooting Guide” that is available on the SWFT Information Website. Users are encouraged to use the “Troubleshooting Guide” to resolve common issues before contacting the DMDC Customer Service.
When contacting the Customer Service, be prepared to provide the information as shown in Appendix C - Web Enroll Troubleshooting Data Call Form. The Data Call Form is also available on the SWFT
Information Website as “Troubleshooting Report Form”.
Most common issues when trying to engage live scan device for the first time:
Error Initializing Device
Resetting the Session
Web Enroll Add-On Failed to Run
Solutions for these most common issues are in Appendix B.
9.0 CUSTOMER SERVICE
Report issues that could not be resolved locally by the operator or local technical support to DMDC
Customer Service. Refer to most current contact informarmation that is available at the SWFT Information website.
For general inquiries, contact DMDC Contact Center, phone (800) 467-5526.
For data issues and complex issue resolution, contact SWFT Coordinator, email [email protected].
Webenroll Startup Guide
12
Appendix A – Web Enroll Supported Devices
Webenroll Startup Guide
13
Webenroll Startup Guide
14
Webenroll Startup Guide
15
Webenroll Startup Guide
16
Webenroll Startup Guide
17
Webenroll Startup Guide
18
Webenroll Startup Guide
19
Appendix B – Troubleshooting Most Common Startup Errors
1. ERROR INITIALIZING DEVICE
The “Error initializing device” error in Web Enroll occurs because either the directory path to
the fingerprinting capture device dlls are missing from the System PATH Environment Variable or the incorrect Software Development Kit (SDK) is
installed.
The first step in resolving this error is to determine the make and model of the capture device which can normally be found on a plate or
sticker on the back or bottom of the device.
Next you will need to determine whether the system with the attached capture device is running a Windows 64-bit Operating System or a 32-bit Operating System. This can be done by clicking the Windows Start button and then Right-clicking
Computer and selecting Properties.
Once you have determined the make and model of the capture device as well as the system type you can check to verify that the correct SDK has been installed for your device.
Webenroll Startup Guide
20
For Cogent fingerprint capture devices you should
have FPCapture Access Version 4.1.0 or 4.1.1 installed. This can be verified by clicking the Windows Start button and Left-clicking Control
Panel. Then change the View by to Large or Small Icons and selecting Programs and Features.
Cross Match fingerprint capture devices need to have the L SCAN Essentials (x32) or (x64) SDK 7.2.3.30.
Morphotrust Identix capture devices require L-1
Identity Solutions TP-LSMULTI SDK (x32) or (x64) 7.11.
digID fingerprint devices require the inVize ID SDK, Version 4.8.5360.
To find the above mentioned SDKs, email your SWFT administrator and ask if they have a repository.
After verifying you have the required software installed you will need your IT Support to run the corresponding command with the type of SDK as an Administrator. (The bulleted list is found on pages 4-5 of this guide. Follow the guidance to the end of that section).
Webenroll Startup Guide
21
2. RESETTING THE SESSION
Web Enroll opens a session with the local machine so that it may collect and transmit electronic fingerprints through a secure channel to the Office of Personnel Management. This session may need to be reset on the local machine. To reset a connection follow the procedure below;
1. Clear your cache
a. . Click on the icon that looks like a gear on the upper right hand corner of your Internet browser.
b. . From the menu that appears click on the option that reads “Internet Options”
c. . At the Internet Options Screen, in the middle of the window, click on the button that reads “Delete…”
d. . In the “Delete Browsing history“ window, make sure to check all the items in the window. When completed click on the button that reads “Delete”.
e. This will clear your internet history and your cache.
2. Clear your Java Cache
a. Click on the Start Button
b. Click on the option that reads Control Panel
c. In the Control Panel Find the icon that reads Java
d. In the Java applet click on the tab that reads ‘General’, click on the command button that
reads Settings…
e. In the Temporary Files Settings Window, click on the button that reads ‘Delete Files’.
f.
3. Delete the aware folder
a. Close all windows
b. Click on the start menu
c. Click on the option that reads Computer.
d. In the computer windows double click on the Disk that reads “Local Disk(C:) (This may read something different depending on the Label of your disk.
e. Navigate to the following path C:\users\<Current users logon name>
f. Locate the folder called Aware
g. Delete this folder.
h. Empty your Recycling Bin
i.
4. Restart the Computer
Webenroll Startup Guide
22
3. WEB ENROLL ADD-ON FAILED TO RUN
The “Add-On Failed to Run” error in Web Enroll occurs because swft.dmdc.mil is
missing from your Trusted Site list in Internet Explorer. This site can be added by contacting
your local Network Operations Center (NEC) and requesting it be added to the Trusted Sites through Group Policy or by having your local
IT Support create a registry key on each system that will be used to capture fingerprints
electronically using the Web Enroll System.
1. Click Start and type regedt32 in the
Programs and Files Search Bar
2. Right-click the regedt32 application and select Run as administrator
3. Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\InternetSetti
ngs\ZoneMap\Domains
Webenroll Startup Guide
23
4. Right-click the Domains key and select New > Key
5. Name the key swft.dmdc.mil
6. Select the new key swft.dmdc.mil and in the Right-hand side for the key values Right-click and select New > DWORD (32-bit) Value
7. Give the new DWORD a name of * and double-click to set the value to 2
Webenroll Startup Guide
24
8. Right-click the swft.dmdc.mil key and select Permissions
9. Click the Advanced button
Webenroll Startup Guide
25
10. Edit each user and check the Deny Set Value and Deny Delete permissions, then click OK
11. Once all users have been given the Deny Set Value and Deny Delete permissions check the Replace all child object permissions with inheritable permissions from this object box and click Apply and accept any messages that appear.
(Note: A System restart may be required for settings to take effect)
Webenroll Startup Guide
26
APPENDIX C – Web Enroll Troubleshooting Data Call Form
1. Issue/Concern
2. User / Location Response:
Full Name
Username
Contact (phone, email address)
Location
Date/Time when issue was first noticed
3. System Information
Computer make and model (e.g., HP dv6100)
Operating system and bit version (e.g., Win 7 64bit)
Browser and bit version (e.g., IE 32 bit)
Java JRE version and bit version
Adobe Flash version
Windows System path
Recent system changes (e.g., patches, updates,
configuration change, network, etc.)
4. Fingerprint Device Information
Device Make/Model (e.g., i3 DigID; Identix 5300)
Fingerprint Device SDK version
File path to Fingerprint Device SDK (see the SWFT+ Startup Guide for the key .dll for each scanner type)
Is the device plugged directly into the USB ports
of the computer or into a USB hub?
If desktop PC, device plugged-in to front or back USB?
Have other USB ports been tried?
5. Actions taken or attempted
Scanner Test Wizard output (Crossmatch devices only).
Attach the output file to email
Was Java version recently updated?
If Java recently updated, have you deleted the "Aware" folder on your computer?
Have you cleared the Java Cache?
Java Log (attach the file)
Webenroll Startup Guide
27
6. Other Info
Web Enroll Troubleshooting Data Call Form with Sample Data
1. Issue/Concern
Web Enroll will not load successfully. The java application appears to fail every time Web Enroll tries to load.
2. User / Location Response:
Full Name John Doe
Username jDoe
Contact (phone, email address) (123) 456-7890, [email protected]
Location DMDC
Date/Time when issue was first noticed 10/05/16, 10:30AM PDT
3. System Information
Computer make and model (e.g., HP dv6100) HP Pavilion dv6100 CTO Notebook
Operating system and bit version (e.g., Win 7 64bit) Windows 7 64 bit
Browser and bit version (e.g., IE 32 bit) Internet Explorer 32 bit
Java JRE version and bit version JRE 8u101 32bit
Adobe Flash version 23.0.0.162
Windows System path
%SystemRoot%\system32;%SystemRoot%;C:\Program Files (x86)\Cross Match Technologies\L
SCAN Essentials;C:\Program Files (x86)\Cross Match Technologies\L SCAN Essentials\Drivers\LSCAN_USB\;
Recent system changes (e.g., patches, updates,
configuration change, network, etc.) None within last month.
4. Fingerprint Device Information
Device Make/Model (e.g., i3 DigID; Identix 5300) Crossmatch Guardian R
Fingerprint Device SDK version L Scan Essentials 7.2.3
File path to Fingerprint Device SDK (see the SWFT+ Startup Guide for the key .dll for each scanner type)
C:\Program Files (x86)\Cross Match
Technologies\L SCAN Essentials\
Is the device plugged directly into the USB ports
of the computer or into a USB hub? Direct plug-in
If desktop PC, device plugged-in to front or back USB?
N/A
Have other USB ports been tried? Yes
Webenroll Startup Guide
28
5. Actions taken or attempted
Scanner Test Wizard output (Crossmatch devices only).
Attach the output file to email Included in email.
Was Java version recently updated? Yes
If Java recently updated, have you deleted the "Aware" folder on your computer?
No
Have you cleared the Java Cache? No
Java Log (attach the file)
6. Other Info
