What is Restriction and Certification?

1. Every user can log into iCarol from any computer and see all sensitive information, unless the Restriction and Certification tool is enabled
   
2. Users can be given permission as exempt from restriction, meaning they can log into iCarol from any computer
   
3. Only users with permission to do so can certify computers
   
4. Reports are available to quickly see what computers are certified to access your iCarol system, and computers can easily be uncertified
   
5. The certification tool is actually certifying an entire IP Address, so if you have multiple devices accessing iCarol from the same IP Address, the tool only needs to be installed and run once on a device using the IP Address
   
6. A single computer can only certify a single IP Address. For example, if a computer certifies an IP Address at home and that same computer then certifies a different IP Address at a local coffee shop, their home IP Address is no longer certified and would need to be recertified  

Task 1. Decide how to certify computers

Task 2. Complete Certification

1. To access the tool as an Admin level user, click Admin Tools in your left side menu, then click the 'Tools' tab at the top of the page, and under the Restriction and Certification section click the link 'To certify or uncertify a computer, click here'. 
   
2. To access the tool as a Supervisor level user (after permission has been given to do so), click 'Home' in your left side menu, then click the link 'Click here to view the home page everyone else sees.', and at the bottom of the page click the 'Certification' link.
   
3. To access the tool as an Enhanced, Standard, or Trainee level user (after permission has been given to do so), click 'Home' in your left side menu, and at the bottom of the page click the 'Certification' link.
   

Note, each time a user who is not an Admin level user certifies a computer, a notification email is sent to all Admin level users to notify them a new computer has been certified. 

Task 3. Enable the Restriction and Certification tool

1. Click 'Admin Tools' in your left side menu
   
2. Select the 'Tools' tab at the top of the page
   
3. Under the Restriction and Certification section, select the checkbox next to the 'Use restriction' setting to enable the tool, or deselect the checkbox next to the setting to disable the tool and click 'Save all settings'
   
1. If you deselected the checkbox to disable the tool, skip to task 4 at the end of this help article to finish disabling the tool, or if you wish to uncertify individual computers; if you're enabling the tool, proceed to the next step
   
4. By default, Admin and Supervisor levels are exempt from restriction. This means if an Admin or Supervisor level user logs into iCarol from a computer that isn't certified, they'll still be able to access call report and caller profile information. If you wish to apply the restriction to Admin or Supervisor level users, select the appropriate checkboxes next to the 'Admins/Supervisors are also affected by Restriction' settings and click 'Save all settings'
   

Task 4: View Certified Computers and Uncertify Any Computer

1. Click 'Statistics' in your left side menu
   
2. Select the 'Security' area at the top of the page
   
3. Choose the radio button under Choose a Report for 'Computer Certification' and you can review all certifeid computers
   
4. If you wish to uncertify any computer, click the 'Uncertify' link next to any computer you wish to uncertify, and a confirmation message appears telling you the computer will be uncertified the next time a user tries logging into iCarol from that computer
   

Troubleshooting Tips

Troubleshooting: Error during certification installation process

During the iCarol computer certification installation process, you may get the following error message:

 "Setup cannot continue because this version of the .NET Framework is incompatible with a previously installed one. For more information, see http://support.microsoft.com/kb/906894"

Why am I getting this error message? 

1. The system detects the user already has a more recent version of the prerequisite .Net Framework installed on the computer. The earlier version cannot be installed over the later version.
2. Proceed with installing the iCarol Certification Tool directly
   

If unable to  proceed:

1. uninstall the .NET Framework 2.0 Service Pack 1 from your computer before you install the .NET Framework 2.0. 
   

Troubleshooting: We can still see restricted info from our non-certified computer in the office

If restricted info is being accessed through a non-certified computer in your office, there are two reasons this could be happening.  

1. One reason is because that computer is sharing the same network as a certified computer.  Computers that are sharing the same internet connection (at home or in an office building) would be considered to be on the same network. So if any computer on that network is certified, then iCarol would treat all of them as if they are certified. The most straight-forward way to ensure people on your WIFI network are not treated as "certified" is to have two different internet connections (from your internet service provider) so that they each have different/unique IP addresses when they are connected to the public internet.  A WIFI router can be connected to one of these internet connections so that the staff and volunteers can use this connection with their own devices.
   
2. The second internet connection (wired or wireless, doesn’t matter as long as the WIFI password is not shared) will be used to connect to iCarol. If you then only have certified computers accessing iCarol from the second internet connection, then only devices on this second internet connection would be treated as “Certified”, so only these devices can access the confidential information on iCarol. 

Also keep in mind that Admins and Supervisors can always see restricted information (even from non-certified computers) unless that capability has been restricted inside the Admin Tool (Tools tab).

Troubleshooting: Restriction and Certification on Wireless Internet Connections

Some organizations have a wireless network (WIFI) at their offices so that their staff and volunteers can access the internet while they are there. However, since WIFI networks can often have a range that extends outside of the office's physical walls, these organizations would prefer that people using iCarol over these WIFI networks not be treated as "certified". As a reminder, note that if any computer on a network that shares an internet connection is certified, then all devices on that network will be treated as certified.

The most straightforward way to ensure people on your WIFI network are not treated as "certified" is to have two different internet connections (from your internet service provider) so that they each have different/unique IP addresses when they are connected to the public internet. 

A WIFI router can be connected to one of these internet connections so that the staff and volunteers can use this connection with their own devices. The second internet connection (wired or wireless, doesn’t matter as long as the WIFI password is not shared) will be used to connect to iCarol. 

If you then only have certified computers accessing iCarol from the second internet connection, then only devices on this second internet connection would be treated as “Certified”, so only these devices can access the confidential information on iCarol. 

 

There may be ways to accomplish the above using only one internet connection but it would require a more advanced router and more advanced IT expertise.  You will very likely need to consult with an IT expert to determine if this can be accomplished in your agency.