C4C Document

What is C4C?

Client for Contractors (C4C) is a new Shell IT service developed to allow contractors access to selected Shell

applications and services using their company-provided laptop, working inside or away from Shell offices.

Contractor staff can access Shell IT resources - Web and Win32 applications, Functional Mailbox (OWA), File

Shares and Network Printers - via a secure web portal, directly from their company supplied computer anytime

and anywhere.

C4C service is an alternative to GI, not a straight replacement. Shell provides the gateway to the contracting

company to access Shell resources with access configured based on the direct needs of each contractor. Shell

provides no software license, hardware, email, storage or associated ‘full’ GI-D offering to the contractor. The

ultimate goal of the C4C service is to reduce the reliance from the contracting company on the use of Shell IT

infrastructure and support services. It is expected that Shell contracting companies will have support and

maintenance services available for their staff as Shell will only support connectivity to the SSL/VPN gateway on

the Shell network.

Who can use the service?

Eligible users

• Any Shell Non-Employee – ‘Contractor’ from a “trusted” company is eligible, subject to constraints

listed below. A “trusted” company is a contracting company that has:

• Signed up to the C4C specific contractual clauses, and

• Provided with a satisfactory level of assurance that they’re adhering-to to their business contract

holder in Shell

Ineligible users

• It is important to note that the following end users are not eligible for the C4C registration:

• Shell Group Employees (except Shell business application testers)

• People in or nationals of US Generally Embargoed Countries (GEC) or Highly Restricted Countries

(HRC)

• Those who need to access data classified “Most Confidential”

• The C4C Users residing in countries, where the service is prohibited by law (for example, where

use of encryption is not allowed)

• C4C Users who need access for “business critical” operations

A “trusted personal computer (PC)” is a computer that is managed by a trusted company and has been

registered for use on the C4C Service by being granted a certificate by the client certificate service or being

registered as trusted through the C4C First-Time registration process.

For contractors:

• Flexible working – Access to Shell applications inside and outside Shell, using their company computer

• One computer – No need to work between multiple computers

• Reduced costs- Reduced operational costs as suppliers may be charged by Shell for using their

Hardware/ Software & maintenance support

For Shell:

• Reduced costs - C4C removes the need to provide contractors with a full GID Service and Hardware

which is costly

• Removes liability - Removes Shell’s liability for hardware, software licenses & management, and

associated support

• Manage access - Manages information risk through restriction of contractor access to the required

applications only

PC/token Registration:

For C4C users to register their PC, there are certain pre-requisite to be met, Following are the pre-requisite needed for user to register their PC,

Pre-Requisite:

1. Requirement for Anti-Virus, Anti-Spyware and Personal Firewall Software

2. Full admin access to the user PC

3. The supporting OS version

4. Active-X enable

Now let us see the above steps in detail,

1. Requirement for Anti-Virus, Anti-Spyware and Personal Firewall Software:

• The C4C user’s PC must have the complying Anti-Virus, Anti-Spyware and Firewall installed on the system.

• The complying C4C Anti-Virus, Anti-Spyware and Firewall can be found in the below link.

Link: http://is.j-parc.jp/uo/page_network/sslvpn_man/service/documents/HostCheck_ESAP.pdf

2. Full admin access to the user PC:

• The user should have full admin rights to his PC.

• The admin rights is used for first time registration of PC and to install the Secure application Manager and other dll files to the user PC.

3. The supporting OS version:

• The supported OS version is given in the table below:

Windows 7

Windows 8.1

Windows 10

64bit

64bit

64bit

4. Active-X enable:

• Active X must be enabled on your corporate (non-Shell) PC in order to install Host Checker in the Internet Explorer Web Browser 11 as it is the supported IE Web Browsers for the C4C Service.

Steps to check whether the Active-X is enabled in the user’s PC or not:

• Open Internet Explorer and Run it as admin

• On top right corner you will find the settings option -> Internet options as shown in the image

below.

• Select the ‘Security’ tab and click on the ‘Custom level’ button as shown in picture below

• Click on Custom level tab and look through the list for “Run Active-X controls”. Make sure that the option ‘Enable’ is ticked and then click the ‘OK’ button to confirm as shown in the picture

• Once you find the ‘Run Active-X controls and plug in’ select option ‘Enable’ and then click the ‘OK’ button to confirm.

Registering user’s PC:

• Once user’s have all the pre-requisites met, the user can start registering there PC.

• The link is provided below where the user’s can register there PC.

• Link : https://c4c.shell.com or user’s can directly try accessing the

following links based on the regions.

• Links:

1. https://sslvpngate-ap-ecz.shell.com/register - Asia-Pac PROD gateway

2. https://sslvpngate-am-ecz.shell.com/regsiter - America PROD gateway

3. https://sslvpngate-eu-ecz.shell.com/register - Europe PROD gateway

4. https://sslvpngate-ap-staging-ecz.shell.com/register - Asia-Pac testing

gateway

Note:

• Once user access any of the above link, the above page appears

where the user can enter there C4C ID and password.

• The C4C ID will be like “username-x”

• Once user enters the username and the password, the host

checker policy will load, and the registration process begins.

• The user will be seeing the below page when the host checker

loaded successfully.

• Enter a description for you PC and click on? Click to register this PC.

Then, click on Submit.

• Complete the machine/computer registration by clicking the Button No 1 and

followed by the Button No 2 (you can put any name for computer name (not

necessary your actual computer name as C4C will auto capture the details) &

then close the IE

• Once registration process is over, you can login to C4C with the

help of below links:

Links:

https://sslvpngate-ap-ecz.shell.com/trusted - Asia-Pac PROD gateway

https://sslvpngate-am-ecz.shell.com/trusted - America PROD gateway

https://sslvpngate-eu-ecz.shell.com/trusted - Europe PROD gateway

https://sslvpngate-ap-staging-ecz.shell.com/trusted - Asia-Pac testing

• Once accessing any one of the links from the above list, you will

get the login page as shown below :

• You can enter your credentials in the respective box and try login

to C4C.

• The C4C login details can be given by,

1. Username: Username-x

2. Password: xxxxxxxx

3. PIN + token: xxxxxx + token from digipass

application.

• If you face any issues , you can contact the Shell Service Desk

and they will route the issue to us if the issue is out of their

scope.

Setting up of Vasco Digipass application in Mobile or Desktop:

• It is always best to download or install the digipass application

on Mobile.

• The app can be found in the app store with the name ->

“DP4Mobile Enterprise Sec.”

• Once installed in the device, the application will ask for activation

code and the Vasco serial number.

• The Activation code and serial number can be given by raising a

request in the Service now portal.

• Link:https://shell.servicenow.com/sp?id=sc_cat_item_guide&sy

sid=9afeb882dbae5b88f16ef1951d96196d

• Once set, the application will generate the OTP which is used for

login to C4C.

• Note: This are all the steps should be followed by a user to

register his PC and try login to C4C to register his PC and try

login to C4C

***********