Open Database Connectivity (ODBC)

To create a connection to your school's Blackbaud database, you must make a Open Database Connectivity (ODBC) Data Source Name (DSN) connection from within your school. To do this, you'll first use a Virtual Private Network (VPN) to connect to Blackbaud's school network.

• Follow the instructions to use the VPN.

• The ODBC DSN must use Microsoft SQL Server 2008 ODBC driver or a more recent version. We recommend you use the latest version (Microsoft ODBC Driver 11 for SQL).

• Your contact at Blackbaud will provide a database login and password.

• Follow the instructions to create the ODBC DSN.

Ready only data views - dictionary and diagram

This connection provides read-only data views. The views you access are the same as the objects used in advanced list manager.

1. To view the data dictionary and data diagram, log in to your school's solution for Blackbaud Education Management and go to advanced lists.

2. Select to create an advanced list.

3. You'll find links to view the the data dictionary and data diagram near the options to Cancel or Save.

Enroll in FortiToken VPN

1. Open the email from Blackbaud Education Management K-12 Hosting operations which includes the VPN username you'll register.

2. Select the link from the email to register your VPN user.

3. Enter the required information.

   • Username

   • Password

   • Confirm password

   • First name

   • Last name

   • Email address

   • Confirm email address

4. Select Submit.

5. A prompt will ask you to verify your email address. Open your email, copy the verification code, and paste the code into the verification prompt.

6. Select Submit. A message will appear with a confirmation message indicating your registration was successful.

   

7. After registering, you'll receive an email which asks for a verification code to ensure the email address is valid.

8. Validate the email address.

9. After the email address is validated, Blackbaud's Education Management Operations team will review your submission and approve your enrollment.

10. After Blackbaud approves your enrollment, you'll receive an confirmation notification by email.

11. After you have confirmation from Blackbaud, you can continue the connection process.

    Don't proceed without this confirmation.

Data security for PCI

Multi Factor Authentication (MFA) increases security by requiring you to login with "something you know" (a password) with "something you have" (a token). This is required for compliance with data security standards for the Payment Card Industry (PCI).

This VPN implements the follow additional requirements for PCI.

• Passwords expire every 90 days. Watch your email for messages notices from hostingmfa@bbk12.com. If you don't reset your password promptly when emailed, you must create a ticket with customer support for help getting your access restored.

• Sessions will timeout when idle, possible as quickly as 30 minutes.

• You must have a smart phone with the FortiToken Mobile app installed. You'll use this for your MFA token.

Enroll in FortiToken Mobile

1. Log into FortiAuthenticator at http://kpe1-fgt-auth.bbk12.com

2. Select Register Token (left side).

3. Select FortiToken Mobile.

4. For the delivery method, select your email address (not SMS).

5. Select OK

6. Open your email. Ensure you receive a message confirming your enrollment.

7. After you have confirmation, you can continue the connection process. Don't proceed without this confirmation.

Install FortiToken Mobile on your mobile device

1. Using your smart phone, navigate to the app store on your mobile device.

   

2. Search for and install FortiToken.

3. After the app is installed, open it.

4. Select +Add (top right).

5. If prompted, select Allow access to your camera.

6. Active the app.

   • We recommend scanning the bar code from the email attachment.

   • Alternatively, you can manually enter the code.

7. Your FortiToken is activated.

   The token code may be hidden by default. Tap the "eye" icon to show the code.

   

Install FortiClient VPN on your computer

1. Using your computer's internet browser, go to http://forticlient.com/

2. You'll be automatically redirected to http://fortinet.com/endpoint-security/forticlient

3. Select Product Download.

4. Choose the current version of FortiClient - VPN ONLY.

   

5. Choose your operating system from the list of available. Download the installer file to your local device.

6. Open the downloaded installer file. This prompts the FortiClient download. Continue to Install FortiClient.

   

7. For each of the remaining prompts, accept the default settings and select Continue.

8. When the installation is complete, open FortiClient. A prompt will ask you to agree to their terms of use. Accept the agreement.

XML Settings

• Download for Mac OS

• Download for Windows

Configure FortiClient with IPSecVPN

Warning: If SSL-VPN connection already exists, don't edit the existing connection. You must make a new connection.

Tip: Download the .XML settings and import via CommandLine or Terminal. Edit the file to update the Preshared key, Username, and Phase 1 Local ID.

1. Add a new connection.

   • For Windows, select the gear icon (top right)

   • For Mac OS, select the "hamburger" icon (three lines) beside the connection name.

2. For VPM choose IPSEC VPN.

   

3. Enter a unique connection name.

4. Enter an optional description.

5. For Remote Gateway, enter remote.bbk12.com.

6. For Authentication Method, select Pre-Shared Key.

7. Enter the Domain Name System (DNS) value for your database For example odbc#.bbk12.com

8. For Authentication (XAuth), you can choose to save the login. Otherwise, retain the default.

9. You should have the username and password from previous setup steps.

10. Don't choose Single Sign On (SSO).

11. For Advanced settings, select + Advanced Settings.

    

12. Choose these VPN Settings.

    • For IKE, select Version 1.

    • For Mode, select Aggressive.

    • For Address Assignment, select Mode config.

    

13. Choose these settings for Phase 1.

    • For IKE Proposal, choose Encryption AES256 Authentication SHA1 and Encryption AES256 Authentication SHA256.

    • For DH Group, select 14. Don't select additional options.

    • For Key Life, use the default value of 86400.

    • For Local ID, enter the Domain Name System (DNS) value based on your database. For example odbc#.bbk12.com

    • Enable the Dead Peer Detection.

    • Enable Network Address Translation (NAT) Traversal.

    

14. Choose these settings for Phase 2.

    • For IKE Proposal, choose Encryption AES256 Authentication SHA1 and Encryption AES256 Authentication SHA256.

    • For Key Life, choose 43200 seconds.

      Don't select 5120 KBytes.

    • For DH Group, select 14.

    

15. Save the settings.

Connect to FortiVPN

1. Use your computer to open the FortiClient application.

2. Verify your VPN usernamen is correct.

3. Select Connect.

4. A prompt for MFA will appear. Enter the code from your mobile device's FortiToken Mobile app.

5. Select OK.

6. You should now be connected to VPN.

   If you aren't connected, review the configuration steps. If the issue continues, contact Blackbaud customer support.

7. When the FortiVPN is connected, continue to SDK/ODBC configuration.

Creating the ODBC DSN

1. Go to https://www.microsoft.com/en-us/download/details.aspx?id=36434 and download Microsoft ODBC Driver 11 for SQL Server Setup.

2. The following screenshots detail the creation of the ODBC DSN required to access to the Blackbaud school database. These steps are specific to Windows XP, and may vary in other Windows environments.

   1. Select User DSN.

   2. Add a User Data Source.

      • Name - ODBC test

      • Platform - 32/64-bit

      • Driver - ODBC Driver 11 for SQL Server

   

3. Select Finish.

   

Crystal Reports

If you plan to use Crystal Reports and run them in the app, configure the following.

1. From Control Panel, go to Administrative Tools, and open the OCBC Data Source Administrator.

2. Select System DSN.

3. Select Add.

   

4. Select ODBC Driver 11 for SQL Server, based on your needs.

5. For Name, enter "Blackbaud K-12 - Access".

6. Enter a description to help you identify this DSN.

7. Enter the Server, based on the information previously provided by Blackbaud.

   

8. Select Next.

9. Select With SQL Server authentication....

10. Login using the database Login ID and Password provided by hosting.

    

11. Select Client Configuration.

12. Review the settings and ensure TCP/IP is enabled for Network libraries.Then select Next.

13. Ensure Multi-subnet failover is enabled. Then select Next.

    

14. Use the default selections (Perform translation for character data should be the only option enabled) and select Finish.

    

15. Select Test data source.

    

16. When finished, select OK.