Sei sulla pagina 1di 17

Service Bulletin

2020-03-28
Supersedes 2018-04-17

All DIRECTVIEW CR, DR, DRX and IMAGEVIEW CBCT Systems


All DRYVIEW Laser Imagers
TRIMAX TX65 / TX55 / TX40 Laser Imagers
MyVue Center III (China Kiosk Terminal)
TRIMAX FK Terminal
PACS Link Medical Image Manager (MIM) 100/200

Announcing CARESTREAM SecureLink Client Software V3.2.4.02

When doing the procedures in this document, you must use safe work practices and wear the correct
Personal Protective Equipment (for example, Safety Eyewear) according to your Company's Standard
Operating Procedures.

Announcement and Instructional


Announcing the release of updated CARESTREAM SecureLink Client Software V3.2.4.02, which is a
replacement for all previous versions of the CARESTREAM SecureLink Client software currently
loaded on Service PCs.

Affected Systems
• CR Systems—Version 4.1 and above
• DR Systems
• All DRYVIEW and TRIMAX Laser Imagers that use SecureLink
• MIM—Version 6.0 and above
• 25 PS—Version 6.0 and above

Training and Documentation


The Installation Instructions for the CARESTREAM SecureLink Client Software are included in this
Service Bulletin. Training is accomplished while in class for affected equipment.

Page 1 of 18 Carestream Health, Confidential Pub No. SBAG8704


Implementation

This software replaces the current CARESTREAM SecureLink Client Software installed on Carestream
Service PCs that is used to access:

• MIM—Version 6.0 and above


• 25 PS—Version 6.0 and above
• CR Systems—Version 4.1 and above
• DR Systems
• DRX Systems
• IMAGEVIEW CBCT Systems
• All DRYVIEW and TRIMAX Laser Imagers that use SecureLink

Upgrading Software

This version of SecureLink installs itself into the following location in your program files directory.
• The new location is C:\ProgramFiles (x86)\Carestream\Securelink
• To install this version, Execute/run the <SecureLink Client.exe> file.

NOTE: Do not copy an old config.xml file into the installation directory. This will cause errors to
occur with the new version.

1. Purpose
SecureLink is a common tool used for service authentication across Carestream Health Imaging
devices. The purpose of this document is to provide the guidance for service personnel to install
and configure the new version of the SecureLink client.

2. Supported Operating Systems

SecureLink Client was verified with the Operating Systems below:

Operating System Comment


WINDOWS XP, 32-bit
WINDOWS 7, 64-bit
WINDOWS 8.1, 64-bit
WINDOWS 10, 64-bit

3. Installation of the SecureLink Client

SecureLink Client installer does not support update mode. If an old version of SecureLink Client
was installed, please uninstall the old SecureLink Client on Chapter 7 on page 14 before installing
the new SecureLink Client.

NOTE: It is recommended to also remove the SecureLink Digital Certificate.

Page 2 of 18 Carestream Health, Confidential Pub No. SBAG8704


Please follow the steps below to install the SecureLink Client:

a. The SecureLink Client.exe is posted on the Service Portal: Service Site > Health-Medical >
Service Systems > Secure Link folder. Download SecureLink Client.exe from the Service Portal
and save the file to the local drive.

b. Double-click SecureLink Client.exe to begin the installation.

c. Click Yes if the dialog below appears.

NOTE: The dialog may appear to ask for installation rights.

d. Click Next >

e. Read the license agreement, then check I accept the agreement and click Next >

Page 3 of 18 Carestream Health, Confidential Pub No. SBAG8704


f. Check the installation folder and click Install.
NOTE:
• In WINDOWS 32-bit system, the default folder is C:\Program Files\Carestream
• In WINDOWS 64-bit system, the default installation folder is C:\Program Files
(x86)\Carestream

g. Click Next > if the dialog below appears.

NOTE: The dialog may ask you to close the other applications.

Page 4 of 18 Carestream Health, Confidential Pub No. SBAG8704


h. Wait until the installation is complete.

NOTE: If the SecureLink Client was uninstalled before, the dialog below may
appear. In that case, click Retry to continue.

i. Click Finish to complete the installation.

4. Request and Install SecureLink User Certificate


NOTE: You must have a SecureLink account before requesting the certificate. If needed, please
enter into the IT Service Desk portal a request for a SecureLink account.

4.1 Request User Certificate


a. Start the SecureLink Client by going to Windows Start Menu > Programs >
Carestream > SecureLink Client Software.
b. Click OK.

Page 5 of 18 Carestream Health, Confidential Pub No. SBAG8704


NOTE The dialog below will display if no user certificate is installed on the computer. It provides
simple steps to create and install a user certificate.

c. Go to the Certificate tab and click Request New Certificate.

d. Enter SecureLink user account information.

Page 6 of 18 Carestream Health, Confidential Pub No. SBAG8704


e. Check Include USB Key Support and insert supported USB key if you need to log in to a
product with a USB key.
f. Click Create Request File to generate the request for a .pem file.
g. Enter the password in the dialog that opens.

NOTE: Limit the password to six or more characters with a mix of upper and lower case and
including at least one numerical digit. This password will be used to:
• Install SecureLink user certificate
• Log in to the SecureLink client
• Log in to the product via USB key
h. Select the USB key as shown below if Include USB Key Support was checked on the previous
dialog:

i. Save the .pem file.


j. Email the .pem file as an attachment to certusers@carestream.com.

NOTE: Only one attachment will be processed per email. The subject and any other content in
the body of the message will be ignored. If you have a logo in the signature, it is considered as
a second attachment and the request will fail.

k. AccessLink will send back the SecureLink User Certificate package if the .pem file contains the
correct SecureLink user information.

4.2 Install SecureLink User Certificate


NOTE: You can reinstall the valid certificate if upgrading the SecureLink Client version from an
older one.

Page 7 of 18 Carestream Health, Confidential Pub No. SBAG8704


4.2.1 Install Zip certificate package
Since Sep 2019, there is only ZIP and ZIP without extension of certificate package granted to
user. There are two options to install ZIP certificate packages.

4.2.1.1 Install with Certificate Utility


Since SecureLink client 3.2.4, the certificate utility has been included in the client. The utility can
be launched directly from the SecureLink installation folder.

If your SecureLink client version is lower than 3.2.4, you can get the utility in either of two ways:
• Certificate Utility location in Service Portal: Service Site > Health-Medical > Service
Systems > Secure Link > SecureLink certificate utility.
• You can also download the utility directly from the link:
https://rmsportal.carestream.com/Monitor/ProxyPages/downloads/SecureLinkCertificat
eUtility.zip

a. Save ZIP certificate package into any directory.


b. Launch SecureLink ZIP certificate utility.
Click Select & Install to select your ZIP certificate package:

c. Wait a while until the installation finishes.

Page 8 of 18 Carestream Health, Confidential Pub No. SBAG8704


d. Launch the SecureLink client, go to the Certificate tab and click Install Certificate.
e. Select your new certificate file (V1_crt) in the directory where SecureLink is installed, and
enter the password. Update to USB key if there is a USB key.

4.2.1.2 Install Manually

Important!
a. Close the SecureLink client. If not open, go to the next step.

b. Download the ZIP attachment, extract the files into SecureLink folder (32bit) C:\Program
Files\Carestream\SecureLink\, (64bit) C:\Program Files(x86)\Carestream\SecureLink\),
and replace the existing files.

Note: If the save permission is denied, please try to save the ZIP file to any other local
temp folder, then copy the files inside from temp folder to SecureLink folder.

c. Launch the SecureLink Client, enter the password, click the Certificate tab, and verify if
the date of “Expires On” updates. If not, click the Install Certificate button and select
*_V1 certificate and install. Verify the Expiration time updates.

Page 9 of 18 Carestream Health, Confidential Pub No. SBAG8704


Note: If you also want to update the certificate to USB, this step is mandatory.

d. Run the SecureLink Client, go to the Certificate tab and click Install Certificate.
e. Select your new certificate file in the directory where SecureLink installed and enter the
password. Update to USB key if there is a USB key.

4.3 Configuring USB Key


a. Select the Certificate tab.
b. Insert the USB Key into the laptop USB port.
c. Press the Check USB Key button.

d. Select the USB Key from the pull-down list and press the Update button.

Page 10 of 18 Carestream Health, Confidential Pub No. SBAG8704


e. The USB Key can now be removed and used in the field for the duration of the current
certificate. Whenever a new certificate is received via email, this sequence must be
repeated to renew the data on the USB Key.

5. Establishing the Tunnel Connection


a. Start the SecureLink Client application on the service PC and enter your password.
b. Enter the IP Address and port of the product where SecureLink Server is running.

NOTE: The default port is 443, and each product team can change it during the SecureLink
Server integration. For example, XRS IMAGEVIEW changes the port to 2104.

Page 11 of 18 Carestream Health, Confidential Pub No. SBAG8704


c. Press the Connect button.

d. To connect with another service application or VNC, run the client application and set the
application to connect to the local host IP address (127.0.0.1). Applications support list is
in the table below.
Application Port
Web Browser 80
PACS Link MIM 4190,4191,210,5199
PC Anywhere 5631
VNC 5900
Smart Link Agent 9520

Page 12 of 18 Carestream Health, Confidential Pub No. SBAG8704


6. SecureLink Troubleshooting Suggestions
If you have followed the instructions in this bulletin and you still cannot gain access, check
the following items:
a. If you receive the following BIND error:

• Click the WINDOWS Start button and type Control Panel.


• Open Administrative Tools.
• Open Services.
• Navigate to the BranchCache service and double-click it.
• Click Stop and change the Startup type to Disabled.

• Click OK and try to reconnect again with SecureLink.

b. Another option for the BIND error:


• Open a Command Prompt window on the service PC.
• Enter netstat –a in a command prompt. Is anyone using the port that the web
browser application is configured for? Is anyone using the port that PC Anywhere
or other service tools are configured for? The first example screen below showed
that PID 9008 used port 80, then you can open task manager and find PID 9008 is

Page 13 of 18 Carestream Health, Confidential Pub No. SBAG8704


for Communicatork9.exe, now you can end communicatork9.exe to solve this
issue.

c. Check the System Event applications log. When the SecureLink server starts, it reports the
target ports it has been configured to process and the port it is listening to for secure
connections. The screens below show examples for your reference.

If a connection error is reported for a specific laptop or service PC, consider the following.
The firewall on the client may not be allowing SecureLink client (1) to listen (accept incoming
connections) on application ports (HTTP, PCAW, MIMDUI) or (2) to establish outgoing
connections (to SecureLink server on the product). The firewall must be open to allow the
client to make outgoing connections and to accept incoming connections for Port 80 (HTTP)
and application input ports.
d. If a connection error is reported for a specific device, consider the following. The firewall on
the server may not be allowing SecureLink server (1) to listen (accept incoming connections)
on SSL port or (2) to establish outgoing application connections (HTTP, PCAW, MIMDUI). In
version 2.1, SecureLink opens the WINDOWS XP firewall for the SecureLink server, but it does
not address third party firewall and security applications.
e. Log data may be helpful for troubleshooting the SecureLink server. If you have access to the
desktop (e.g. in a development lab), check the NT Event Application logs using the WINDOWS
Event Viewer to check for activity. You can also open a debug monitor window (dbmon.exe or
DbgView.exe) to see if there is any other activity reported.

Page 14 of 18 Carestream Health, Confidential Pub No. SBAG8704


7. Uninstall SecureLink Client (If need to remove an older version)
Follow the steps below to uninstall SecureLink Client:
a. Open Control Panel and click Programs and Features.

b. Double-click SecureLink Client Software version X.X.X to begin the uninstallation.

c. Click Yes.

d. Wait while the uninstallation is in progress.

Page 15 of 18 Carestream Health, Confidential Pub No. SBAG8704


e. Click OK to complete the uninstallation.

NOTE: SecureLink Client uninstaller occasionally fails to delete SecureLink_Client.exe file,


which will block the client reinstall.

Impact: Reinstalling SecureLink Client will fail because it cannot replace SecureLink_Client.exe.
Workaround 1:
1) Stop prompted WINDOWS service in service manager.
2) Delete files manually.
3) Reinstall SecureLink Client.

Workaround 2:
1) Restart system then delete SecureLink_Client.exe manually.
2) Reinstall SecureLink Client.

Page 16 of 18 Carestream Health, Confidential Pub No. SBAG8704


For more information, please contact:

Carestream Health
Center of Excellence (COE)
1049 West Ridge Rd
Rochester, NY, USA 14615
USA Only: 1-800-328-2910
Outside the USA: 585-627-1864
Canada: 1-866-927-1017
Outside the USA and Canada: Contact
your local Shared Service Center (SSC)

Carestream Health, Inc.


150 Verona Street
Rochester, NY, USA 14608

© Carestream Health, Inc., 2020

Made in USA.

CARESTREAM, DIRECTVIEW, and DRYVIEW are trademarks of Carestream Health.

Publication History:
Rev A: 2018-04-17 - Released for SecureLink v3.2.2.05
Rev B: Updated for SecureLink v3.2.4

Page 17 of 18 Carestream Health, Confidential Pub No. SBAG8704

Potrebbero piacerti anche