OCR homepage
This guidance is for IT staff members who are involved in the set up of on-screen tests.
At OCR, we use SecureClient to deliver the Cambridge Technicals on-screen tests which must be installed on all on-screen test computers. We use the ‘unified’ SecureClient which is also used by other awarding organisations, meaning you only need to install unified SecureClient once.
To help you with installing SecureClient, you may find our handy checklist useful:
To confirm you can use SecureClient, check your computers meet the minimum system requirements.
SecureClient can only be installed on Windows – versions 10 and 11 are currently supported. Windows versions 7, 8 and 8.1 can be used, but are not supported. Microsoft .NET framework v3.5 is also required.
You can view the full system requirements on the Surpass Help website.
SecureClient must be installed by a user with full system administrator rights and not a standard user with elevated permissions.
If you've not installed SecureClient before, you can download here:
If you’re using a proxy server and/or firewall to access the internet, it will need to be configured to allow SecureClient to access the following sites on ports 80 and 443:
These URLs should also be added to the safe list of any firewall.
If you already have SecureClient installed on your computers, please make sure you update it before delivering tests. Depending on when you last used SecureClient, there may be more than one new version to install. These must be installed in the order they were released, see Checking for updates below.
A new version of SecureClient is released 3–4 times a year and it's important to keep it updated on your test computers. To check for updates:
SecureClient can only be updated from the two most recent major versions. If more than one update is necessary, these are applied automatically and in sequential order of release.
If you haven't used SecureClient for a long time and have not kept it updated, it may not be possible to update to the latest version. In these circumstances, we recommend you completely uninstall SecureClient and then reinstall from the Launch Test – Secure Delivery website (select Download for Windows).
When you have finished updating or reinstalling SecureClient, we recommend you schedule the installation test to confirm you can use SecureClient to deliver tests in your environment. This should be done well before you need to schedule practice tests for your candidates and before the live timetabled tests take place, see Testing the installation below.
We'll let you know when major versions of SecureClient are released.
Tip: Keep SecureClient updated regularly when new versions are released – don’t wait until the next on-screen test session. To check which version of SecureClient you have installed, from the Enter Keycode screen, click ‘Surpass, Powering Assessment’ in the bottom right-hand corner.
From version 24.01.068.050 (released on 24 April 2024) onwards, SecureClient cannot be launched if 'Windows Text Suggestions' are enabled. Before continuing with the test installation, make sure all the settings in 'Windows Text Suggestions' are disabled. Windows 11 and Windows 10 users can view further guidance on the Surpass Help website.
Once you've installed or updated SecureClient, it's important to check it works as expected in your environment. To do this we suggest you schedule and sit an HTML Installation Test on one or more test computers. There is no charge for using the HTML Installation Test.
It's important to test the installation so you can identify any issues well ahead of the scheduled test date. It also allows time for troubleshooting and means we have time to provide help if needed.
Please don't leave your preparation to the test date, as there’s little time to troubleshoot issues on the day.
We've set up a dummy candidate in your centre (InstallationTest Candidate) you can use to schedule an Installation Test, which can be sat in SecureClient logged in with a candidate account.
To schedule an HTML Installation Test follow the steps below:
To help understand the on-screen test process, we've listed the sequence of events below. This may help when troubleshooting any issues.
If your version of SecureClient is more than two versions behind, SecureClient may get stuck in an ‘update loop’ as it continues to find new updates. You can fix this by uninstalling and reinstalling SecureClient. Make sure the SecureClient folder is empty before reinstalling. You can view further information in the SecureClient Update Loop section on the SecureClient for Windows troubleshooting web page.
For other updating issues, you may find it helpful to check the update logs in the log.xml file at C:\Users\Public\Surpass\SecureClient\UpdaterProgramme.
When entering a keycode, the following issues may occur:
These problems can occur because of several reasons, which we've listed below. When troubleshooting, we recommend you eliminate these causes one by one.
Keycode has not been entered correctly
SecureClient isn't communicating with one or more of the four sites, listed in the Installing SecureClient section above
The test hasn't downloaded and isn't saved in the SecureClient folder
Introduction screen is not loading after confirming candidate details
To allow the test to be downloaded and to upload the candidate’s responses, your test computers must have an internet connection at the start and end of the test.
You may experience problems during a test if:
We've provided support for these issues below:
For further support on using SecureClient, you can refer to the ‘SecureClient best practice’ guidance, on the Surpass Help website. This includes advice on configuring antivirus software, downloading tests ahead of time, troubleshooting and whitelisting and more.