N E T R U S T

LTALink Guide

1) Action for Obtaining Netrust Token & Certificate

2) Action for Maintaining Netrust Token & Certificate

Action for Obtaining Netrust Token & Certificate

Step 1	If your application to LTA as an Approved Electronic Service Agents of the LTALink has been successful, you would be at Step (4a) of the Electronic Service Agent Sign-up Workflow. Determine place of transaction Employees transacting on behalf of an Electronic Service Agent are required to obtain a Netrust token (& certificate) for the system to authenticate them. Employees can obtain one by going down to the Netrust office or have Netrust come to your office. The applicant must register in person, to facilitate the mandated face-to-face verification process. Apply at Netrust Office Please refer to Netrust FAQs for details on location of their office, documents to prepare, liabilities and costing of the token and subscription. Netrust FAQ for Netrust Digital Certificate The turnaround is very much dependent on the waiting crowd present at that moment. The applicant will take a queue number and wait for his turn to be served. The registration process, (assuming he has prepared all the required documents to be submitted and has thought of a suitable password) takes no more than 10-15 minutes. Request Onsite Service You could engage Netrust on-site services. This will be a chargeable service, whereby a Netrust engineer will visit the customer's premises for registration and certificate issuance. The standard charges apply: $150 for first hour, $100 per hour for subsequent hours (minimum one hour charge), and $50 (transport fee) per site visit.
Step 2	Fill up required forms from Netrust The forms that you are required to fill up are as follows: 1. Netrust Digital Certificate Application Form Click Here to view required forms Note: Please use these customised forms when applying for Netrust Tokens for accessing LTALink and note the accompanying documents that need to be submitted.
Step 3	Post Application Task Upon issuance of the USB Token containing the Netrust Certificate, you should be given a hardcopy of the Certificate DN (Distinguished Name) and an installer CD by the Netrust officer. A hardcopy of the Certificate DN is a mandatory document for application of an LTALink User Account with LTA. Creation of LTALink User Account ties the Netrust Certificate to the user profile details. The installer CD contains software to be installed on the PC that you will operate from. The installation will enable your PC in recognizing the Netrust USB token & certificate. (Refer to “Client PC Setup Guide” for more details on how to configure your PC).

Action for Maintaining Netrust Token & Certificate

Lifespan of Certificate

The certificate has a lifespan of 3 years from the date of issue. Netrust Certificate renewal is automatic as long as Electronic Service Agents continue to use and pay for the certificate subscription annually.

Certificate renewal can occur much earlier before the actual expiry date refer below to attach link for more details on certificate renewal.

Should your certificate become invalid due to failure to renew certificate, please submit the Certificate Management Request Form (Annex C) to Netrust to carry out a certificate recovery. This service is chargeable as stated in the Netrust FAQ attached.

Lifespan of Netrust Certificate.pdf

Note: If you are accessing LTALink via Meg@POP, please note you need to login to LTALink via Internet to enable Netrust’s automatic renewal of the certificate.

The other condition for automatic renewal is that if you are using a corporate firewall, firewall ports 829 and 389 must be open. It is through those 2 ports that the Netrust CA server and directory communicate with the user certificate.

Please read the above advisory from Netrust on certificate expiry for more information, in there you will find step-by-step guide on how to check the expiry date and renew your certificate.

Reusing USB Tokens

The Netrust Certificate residing on the USB tokens can be re-initialized for reuse purposes.

For example, when there is a staff turnover, the token belonging to the staff leaving can be transferred to another staff, and the certificate re-initialized for the staff taking over the token. The Netrust Certificate Management Request Form will have to be submitted for Netrust to affect such a transfer. Both employees have to visit Netrust office to effect such a change.

In addition, the staff taking over must submit the required form and Authorization Letter as stated in Step 2 of Action for Obtaining Netrust Token & Certificate.

Netrust will issue a hardcopy of the Certificate DN to the staff taking over the token.

Note: The staff taking over the token must submit the original LTALink Electronic Service Agent User Account Application Form to LTA together with the hardcopy of the Certificate DN to apply for a user account.

Each Electronic Service Agent is differentiated by its ACRA Business or Company reference number. An employee working for different Electronic Service Agents (sister company, affiliated companies, etc.) are allowed hold more than one token, each token belonging to a different Electronic Service Agent.

For such an employee, separate LTALink User Account Application forms have to be submitted, stating the Electronic Service Agent which the specific token is tied to.

Using the Token with LTALink

Connection with LTALink

LTALink is automatically integrated with Netrust authentication; hence simply start LTALink ( ONE.MOTORING ) and just click on “Login” button to login using Netrust token.

You can refer to the following document for a step-by-step login guide to LTALink:

Netrust Login Guide for LTA Download

Firewall Settings

If you are using a corporate firewall, and is connecting to LTALink via the Meg@POP dedicated connection, firewall ports 448 must be open.

Contact Customer Service

If there is any unanswered questions please feel free to contact

Netrust office @ 62121388 or email to infoline@netrust.net