Online Banking for Business ®
SECUREID USER GUIDE
Alerts Customer Administrator User Guide
Contents Contents ................................................................................................... 2 Getting Started ......................................................................................... 3 Technical Requirements ......................................................................... 3 Supported browsers................................................................................... 3 Minimum system requirements .................................................................. 4 Contact Us ................................................................................................ 4 Setting Up a SecureID Soft Token On Your Computer ......................... 4 Downloading the RSA SecureID Software for your Computer............. 5 Installing the RSA SecureID Software on your Computer.................... 6 Importing a Software Token for your computer .................................. 10 Setting Up a SecureID Soft Token on your RIM Blackberry Smartphone ............................................................................................ 12 Download the RSA SecureID for your Blackberry .............................. 13 Installing a SecureID Soft Token on your Blackberry......................... 14 Importing a Software Token for your Blackberry................................ 18 Changing the Password for the SecureID Token on your Blackberry .............................................................................................. 19 SecurID Authentication with a PIN ....................................................... 20 SecurID Authentication When Setting Up a New PIN ......................... 21 Managing SecurID Tokens .................................................................... 24 Ordering SecurID Tokens...................................................................... 25 Enabling SecurID Tokens...................................................................... 27 Disabling SecurID Tokens..................................................................... 28 Reassigning SecurID Tokens................................................................ 29 Resetting SecurID Tokens to New PIN Mode....................................... 31 Returning SecurID Hardware Tokens................................................... 33
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
2
Alerts Customer Administrator User Guide
Getting Started Welcome to Online Banking for Business, a powerful suite of web-based treasury management tools to help you manage cash flow easily, effectively and strategically.
A customizable homepage allows you to control and personalize the information that is most important to your business, right up front. Monitor accounts and transactions in real time. Verify the status of payments and receivables. Search and retrieve cheque images at your convenience. Make electronic payments and transfer funds between accounts in seconds, all via the Internet. Like turning on the ignition in your car, simply login and you’ll access all of your treasury management services, including Canada, US, UK, Euro services, wholesale lockbox, cheque images, lockbox imaging, electronic funds transfer, and foreign exchange. This user guide is also available as an online help system. To open the help system from within Online Banking for Business, click the Help link any section title bar.
from any page or the help icon
on
Note about user access: Depending on your job, you may not be able to view all pages, or all functions in a page, or perform all the tasks outlined in this guide.
Technical Requirements The following browsers and system requirements are recommended for the best performance: SUPPORTED BROWSERS
Internet Explorer 6, 7, 8
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
3
Alerts Customer Administrator User Guide
M I N I M U M SY S T E M R E Q U I R E M E N T S
486/66-Mhz processor or higher (Pentium® III Processor recommended) with a Windows® based Operating system (Windows Me, NT® 4.0 with SP6a and higher, 2000, or XP).
Contact Us Online Banking for Business Help desk can be reached at: (416) 867-4818 (Local GTA) 1-800-565-6444 (North America)
Our hours of service are 7:30 a.m. - 7:00 p.m. EST Monday to Friday.
Setting Up a SecureID Soft Token On Your Computer Setting up a SecurID token on your computer requires the following main steps: 1. Download the RSA SecurID software from the RSA website 2. Install the RSA SecurID software on your computer 3. Import a software token for your computer Once you have completed this setup, you need to set up a new PIN. You can do this the first time you authenticate with SecurID.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
4
Alerts Customer Administrator User Guide
After you have set up a new PIN, you authenticate with SecurID as required, using your PIN.
REQUIREMENTS
RSA SecurID tokens are supported on the following operating systems: Microsoft® Windows® 2000 Professional (SP4 and later) Microsoft® Windows® XP Professional (SP2) Microsoft® Windows® Vista Business and Enterprise (32-bit only) Ensure that you have administrator privileges on your computer. Administrator privileges are required to install SecurID tokens.
Downloading the RSA SecureID Software for your Computer Before you download the RSA SecurID software from the RSA website, make sure you have reviewed the requirements. 1. Open the page for the RSA SecurID Software Token for Microsoft Windows software on the RSA website: http://www.rsa.com/node.aspx?id=1162 Note: The RSA website is external to BMO and is managed by RSA. 2. Follow instructions on the RSA website to download RSA SecurID Software Token for Microsoft Windows to support 128-bit (AES). Next, you need to install the software on this computer.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
5
Alerts Customer Administrator User Guide
Installing the RSA SecureID Software on your Computer Before you can install the RSA SecurID software on your computer, you must download it from the RSA website. For general information on setting up RSA SecurID software tokens, see "Setting Up a SecurID Soft Token on Your Computer". Note: Detailed RSA documentation is included in the doc folder of the zip file you downloaded. 1. On your computer, unzip the file you downloaded from the RSA website. 2. Browse to the folder that contains the unzipped installation file, for example, RSASecurIDTokenXXX.msi, and double-click this file.
The Install Wizard opens:
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
6
Alerts Customer Administrator User Guide
2. Click Next to begin the installation.
3. Click the appropriate radio button to select country where you ordered the software, and click Next.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
7
Alerts Customer Administrator User Guide
4. Click the appropriate radio button to accept the license agreement, and click Next.
5. Select the Typical setup type, choose Typical, and click Next.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
8
Alerts Customer Administrator User Guide
6. In the Ready to install the Program dialog box, click Install.
7. After the installation completes, click Finish.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
9
Alerts Customer Administrator User Guide
The RSA SecurID Token program is now installed, and RSA SecurID Token is displayed in the Start menu. Next, you need to import a software token for your computer.
Importing a Software Token for your computer Before you can import a software token for your computer, you must install it.
Before you begin:
Acquire the file with the .sdtid extension from BMO Security Services. Acquire the Database Distribution Password for each token from BMO Security Services.
You can import a software token either from an email attachment or from a file saved on your computer.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
10
Alerts Customer Administrator User Guide
IMPORTING A SOFTWARE TOKEN
1. If you are importing a software token from an email attachment: a. Double-click the file attachment, for example token1.sdtid. b. When prompted to open or save the attachment, click Open. 2. If you are importing a software token from a file saved on your computer, click Start > Programs > RSASecurID Token to start the RSA SecurID Token program. This program automatically detects token files that you saved either to Desktop or My Documents and imports them. 3. If prompted, enter the file password and click OK.
4. If prompted to select a device where the token will be stored, click the name of the device, for example, Local Hard drive (RSA). If the word "Enabled" is not displayed next to the device name, click the Enable button to activate the device. Click OK.
A success message is displayed, and you are prompted to rename your token.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
11
Alerts Customer Administrator User Guide
5. If you want to change the token name: a. Click Change Name. The Change Token Name screen opens.
b. Enter a name of between 1 and 24 characters, and click OK. 6. If you do not want to change the name, click OK to close the dialog box.
Next, you can set up a PIN for your SecurID token. You can do this the first time you authenticate with SecurID.
Setting Up a SecureID Soft Token on your RIM Blackberry Smartphone Setting up a SecurID token on your computer requires the following main steps: 1. Verify that your computer and BlackBerry meet all the requirements described below 2. Download the RSA SecurID software from the RSA website 3. Install the RSA SecurID software on your BlackBerry. 4. Import a software token for your BlackBerry.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
12
Alerts Customer Administrator User Guide
REQUIREMENTS
Verify that your computer and BlackBerry have met the following requirements before installing an RSA SecurID soft token: Your Blackberry must be running with RIM BlackBerry OS version 4.1 or higher. To find the OS version on your BlackBerry, select Options > About. Important: The import function does not work for RIM Blackberry OS version 4.5. BlackBerry Desktop Manager must be installed on your computer. Your BlackBerry must be connected to your computer.
Download the RSA SecureID for your Blackberry Before you download the RSA SecurID software from the RSA website, make sure you have reviewed the requirements. 1. Open the page for the RSA SecurID Software Token for Blackberry Smartphones software on the RSA website: http://www.rsa.com/bb Note: The RSA website is external to BMO and is managed by RSA. 2. Complete the RSA registration form and click Submit.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
13
Alerts Customer Administrator User Guide
3. Click the zip file link, for example, bbXXX.zip, to download RSA SecurID Software Token for Blackberry Smartphones, and follow the instructions on the page. 4. Choose to save the zip file on your computer. Next, you need to install the software on this computer.
Installing a SecureID Soft Token on your Blackberry Before you can install the RSA SecurID software on your BlackBerry, you must download it from the RSA website: http://www.rsa.com/bb. Note: Detailed RSA release notes are included in the zip file you downloaded. 1. On your computer, unzip the bbXXX.zip file you downloaded from the RSA website to a temporary location, for example: C:\Temp.
2. Browse to the folder that contains the unzipped installation file, and extract the SecurID.alx and SecurID.cod files to this temporary location. 3. Start the BlackBerry Desktop Manager, and double-click Application Loader.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
14
Alerts Customer Administrator User Guide
4. The Application Loader Wizard is displayed. Click Next.
5. Click Add to add a new application.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
15
Alerts Customer Administrator User Guide
6. The Open dialog box opens. Browse to the location on your computer where you extracted the SecurID.alxle file, and click Open.
7. Verify that RSA SecurID is selected. If not, then select it and then click Next.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
16
Alerts Customer Administrator User Guide
8. A summary window is displayed. Click Finish. 9. To start the RSA SecurID Token application on your BlackBerry, navigate to the Applications folder and click the RSA SecurID icon. 10. Read the license agreement. When you have finished, press the trackball and select Accept. Next, you need to import a software token for your BlackBerry.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
17
Alerts Customer Administrator User Guide
Importing a Software Token for Your Blackberry
Before you can import a software token for your BlackBerry, you must install it. Before you begin:
Acquire the software token file with the .sdtid extension from BMO Security Services.
Ensure that the filename has the prefix x-rimdevice. Otherwise, the RSA Soft Token Application does not recognize the file. For example, a valid filename is x-rimdevice2345678.sdtid.
You can import a software token either from an email attachment or from a file saved on your computer. IMPORTING A SOFTWARE TOKEN
1.
Open the email with the attached software token file.
2.
Scroll to the name of the attachment (for example, x-rimdevice-2345678.sdtid). Click the trackball or the BlackBerry menu key.
3.
Scroll to Import SecurID Token and click the Trackball or Enter.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
18
Alerts Customer Administrator User Guide
4.
Enter the password sent to you by email from BMO Security Services.
5.
When the success message is displayed, press OK.
Note: It is a best practice to delete emails related to the soft token files. Next, you can set up a PIN for your SecurID token. You can do this the first time you authenticate with SecurID.
Changing the Password for the SecureID Token on your Blackberry You can change the password for the SecurID token on your BlackBerry. 1.
On your BlackBerry, start the RSA SecurID Token application: Navigate to the Applications folder and click the RSA SecurID icon.
2.
Press the trackball.
3.
In the menu, select Manage Token.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
19
Alerts Customer Administrator User Guide
All available tokens are displayed on the screen. 4.
Highlight the token for which you want to change the password, and press the trackball again.
5.
In the menu, select Change Password, and enter the new password for your token.
SecurID Authentication with a PIN You may be required to authenticate using SecurID when logging into Online Banking for Business or when using certain services. When you are required to authenticate with SecurID, the SecurID Challenge page opens.
1.
In the UserID field, your SecurID user ID is displayed. This is generally your _. These are the same customer ID and user ID you use to log into Online Banking for Business. If necessary, you can change this information.
2.
In the Passcode field, do one of the following:
For a hardware token, type your PIN followed immediately by the tokencode displayed on your token. This is called your passcode. For example, if your PIN is 123456 and your tokencode is 204060, you type your passcode, which is: 123456204060.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
20
Alerts Customer Administrator User Guide
For a software token on your computer, select Start > Programs > RSA SecurID Token to start RSA SecurID Token. Type the eight-digit passcode displayed by the token. For example, if your passcode is 57569877, you type: 57569877.
Note: Your must enter your PIN in the software token before it displays the passcode.
For a software token on your BlackBerry Smartphone, navigate on your BlackBerry and click the RSA Application icon. Press the trackball. In the menu, select Re-enter PIN. Enter the PIN you created when you set up your PIN in Online Banking for Business. The BlackBerry displays a new passcode. In the Passcode field in Online Banking for Business, type the passcode displayed on your BlackBerry.
Note: Your must enter your PIN in the software token before it displays the passcode. 3.
Click Continue. The bank authenticates your SecurID.
If you are trying to log into Online Banking for Business, then your Home page opens.
If you are trying to use a service or feature in a service that requires SecurID, then the corresponding page opens.
SecurID Authentication When Setting Up a New PIN You may be required to authenticate using SecurID when logging into Online Banking for Business or when using certain services. When you use SecurID for the first time, or when your SecurID token is reset to new PIN mode, you must set up a new PIN for it.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
21
Alerts Customer Administrator User Guide
Note: If you have a SecurID soft token, you must set it up before you can set up a PIN for it. When you are required to authenticate with SecurID, the SecurID Challenge page opens.
1.
In the UserID field, your SecurID user ID is displayed. This is generally your _. These are the same customer ID and user ID you use to log into Online Banking for Business. If necessary, you can change this information.
2.
In the Passcode field, do one of the following:
For a hardware token, enter only the tokencode. For example, if your token code is 204060, you type: 204060.
Note: Do not use a tokencode that you entered previously. If necessary, wait until the tokencode changes so that you can enter a new tokencode.
Note: Do not use a tokencode that you entered previously. If necessary, wait until the tokencode changes so that you can For a software token on your computer, select Start > Programs > RSA SecurID Token to start RSA SecurID Token. Type the eight-digit tokencode displayed by the token. For example, if your tokencode is 30151477, you type: 30151477.
Note: The software token displays the tokencode when you click the arrow in the Options box without entering a pin.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
22
Alerts Customer Administrator User Guide
Note: Do not use a tokencode that you entered previously. If necessary, wait until the tokencode changes so that you can enter a new tokencode.
For a software token on your BlackBerry Smartphone, navigate on your BlackBerry and click the RSA Application icon. The Enter PIN prompt is displayed.
Enter 0000on your BlackBerry and click the Enter key.
The passcode is displayed on your BlackBerry. In the Passcode field in Online Banking for Business, type the passcode displayed on your BlackBerry.
3. Click Finish. The bank authenticates your SecurID.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
23
Alerts Customer Administrator User Guide
The SecurID PIN Setup page opens.
4. Enter and re-enter your new PIN. The PIN must be six characters long.
For a hardware token or a software token for a computer, the PIN can include letters and numbers.
For a software token for a BlackBerry Smartphone, the PIN can include only numbers. The first number cannot be zero (0).
5. Click Finish to save your new PIN and return to the SecurID Challenge page, where you are prompted to log in with SecurID, using your passcode instead of your tokencode.
Managing SecurID Tokens SecurID authentication is required to perform certain functions in the following services:
Direct Cheque/FACS Electronic Funds Transfer File Transfer Facility Safekeeping Wire Payment
SecurID authentication may also be required when certain users log in to Online Banking for Business.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
24
Alerts Customer Administrator User Guide
ADMINISTERING SECURID TOKENS You can perform the following administrative actions on SecurID tokens in the User Profile section, SecurID Settings subsection, of the Modify User page.
Ordering SecurID Tokens
Enabling SecurID Tokens
Disabling SecurID Tokens
Reassigning SecurID Tokens
Resetting SecurID Tokens to New PIN Mode Note: You cannot perform these actions for your own SecurID token
Ordering SecurID Tokens You can order a SecurID token for a user. Note: You do not need to enable a SecurID token unless it has been previously disabled: It is not part of the regular workflow to order a SecurID token for a user. Note: You cannot order a SecurID token for yourself.
1.
Select Administration & Preferences > Manage Users from the menu. The Manage Users page opens.
2.
Enter search criteria for the user for whom you want to order a SecurID token, and click Search.
3.
Select the user for whom you want to order a SecurID token, and click Modify. The Modify User page opens.
4.
In the User Profile section, SecurID Settings subsection, click Order Token.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
25
Alerts Customer Administrator User Guide
The Token - Order Request Form opens.
5.
Complete the fields:
Users: Select the user for whom to order the token.
Token Type: Select either Hardware or Software.
Software Type: If the selected token type above is software, select either PC, Blackberry, or Both.
All other fields are read only. The address fields are displayed only if the selected token type is hardware. 6.
Submit the form for processing, using one of the following options:
If changes are required to the email address or mailing address of this user before processing, click Requires Update to submit your request for processing. The Success message box reminds you to contact your bank representative to provide an updated address for token delivery. Your request will be processed only after you contact the bank with the updated information.
If the address is correct, click Confirm to submit your request for processing. The Success message box confirms that your request was submitted successfully. Your request will be processed immediately. You should receive the token within three to five business days.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
26
Alerts Customer Administrator User Guide
Enabling SecurID Tokens You can enable SecurID tokens assigned to a user. Enabling a SecurID token is required only if a token has previously been disabled: It is not part of the regular workflow required to set up a user with a SecurID token. Note: You cannot enable SecurID tokens assigned to you. 1.
Select Administration & Preferences > Manage Users from the menu. The Manage Users page opens.
2.
Enter search criteria for the user whose SecurID token you want to enable, and click Search.
3.
Select the user whose SecurID token you want to enable, and click Modify. The Modify User page opens.
4.
In the User Profile section, SecurID Settings subsection, click Enable Token. A dialog box opens.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
27
Alerts Customer Administrator User Guide
5.
Select the check boxes next to the serial numbers of the tokens to enable, and click Finish. Note: Approval may be required before the system enables the tokens.
Note: Clicking Cancel reopens the Modify User page, without enabling any SecurID tokens.
Disabling SecurID Tokens
You can disable SecurID tokens assigned to a user. Note: You cannot disable SecurID tokens assigned to you.
1.
Select Administration & Preferences > Manage Users from the menu. The Manage Users page opens.
2.
Enter search criteria for the user whose SecurID token you want to disable, and click Search.
3.
Select the user whose SecurID token you want to disable, and click Modify. The Modify User page opens.
4.
In the User Profile section, SecurID Settings subsection, click Disable Token. A dialog box opens.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
28
Alerts Customer Administrator User Guide
5.
Select the check boxes next to the serial numbers of the tokens to disable, and click Finish.
Note: Approval may be required before the system disables the tokens. Note: Clicking Cancel reopens the Modify User page, without disabling any SecurID tokens.
Reassigning SecurID Tokens You can reassign one or more SecurID tokens from one user to another, either among existing users or when creating a new user. Note: You do not need to enable a SecurID token unless it has been previously disabled: It is not part of the regular workflow to reassign a SecurID token among users.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
29
Alerts Customer Administrator User Guide
Note: You cannot reassign SecurID tokens to or from yourself.
1.
Select Administration & Preferences > Manage Users from the menu. The Manage Users page opens.
2.
Enter search criteria for the user to whom you want to assign a SecurID token, and click Search.
3.
Select the user to whom you want to assign a SecurID token, and click Modify. The Modify User page opens.
4.
In the User Profile section, SecurID Settings subsection, click Reassign Token. A dialog box opens.
5.
In the From user list, select the user currently assigned to the token, and click Finish. Note: The user to whom you are reassigning the token is identified in the To user field by . Together these are the SecurID user ID for logging in Another dialog box opens.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
30
Alerts Customer Administrator User Guide
6.
Select the check boxes next to the serial numbers of the tokens to reassign, and click Finish. Note: Approval may be required before the system reassigns the tokens. Note: Clicking Cancel reopens the Modify User page, without reassigning any SecurID tokens.
Resetting SecurID Tokens to New PIN Mode You can reset a SecurID token assigned to a user to new PIN mode. The user to whom the SecurID token is assigned must choose a new PIN at the next SecurID authentication request. Note: If SecurID tokens are assigned to you, you cannot reset them to new PIN mode.
1.
Select Administration & Preferences > Manage Users from the menu. The Manage Users page opens.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
31
Alerts Customer Administrator User Guide
2.
Enter search criteria for the user for whom you want to reset a SecurID token to new PIN mode, and click Search.
3.
Select the user for whom you want to reset a SecurID token to new PIN mode, and click Modify. The Modify User page opens.
4.
In the User Profile section, SecurID Settings subsection, click PIN Reset. A dialog box opens.
5.
Select the check boxes next to the serial numbers of the tokens to reset to new PIN mode, and click Finish. Note: Approval may be required before the system resets the PIN Note: Clicking Cancel reopens the Modify User page, without reassigning any SecurID tokens
If you are an administrator, you can also perform the following administrative actions on SecurID tokens:
Enabling SecurID Tokens
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
32
Alerts Customer Administrator User Guide
Disabling SecurID Tokens
Reassigning SecurID Tokens
Resetting SecurID Tokens to New PIN Mode
Returning SecurID Hardware Tokens If you no longer require a SecurID hardware token, you can return it. Contact your company administrator, who can contact the bank relationship manager. Include instructions indicating the company name, customer ID, user name, user ID, and token serial number. Note: For software token users, simply uninstall the RSA application. Return the SecurID hardware token to the following address: BMO Financial Group Information Security Operations 4100 Gordon Baker Road Toronto, ON M1W 3E8 Canada Attention: Security Analyst Note: Monthly token charges will continue until the hardware token is returned.
For assistance, please call the Help Desk at 1-800-565-6444 October 2010
33
