HSBCnet User Guide · 2018-09-25 · members of the HSBC group, please read the terms and...

User Guide

Indian Certificate Centre (ICC)

March 2016


Published: March 2016 i

Disclaimer

This document is issued by HSBC Bank plc (‘HSBC’). HSBC Bank Plc is authorised by the Prudential

Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation

Authority (Registration Number 114216). This document is for information purposes only and does not

constitute or form any part of (i) any invitation or inducement to engage in investment activity, or (ii)

any offer, solicitation or invitation by HSBC or any of the HSBC Group for the sale or purchase of any

products, services and/or any investments.

HSBC provides this document to the recipient on an ‘as is’ basis and except as provided herein, does

not warrant that the contents of this document is accurate, sufficient or relevant for the recipient’s

purposes.

HSBC may have obtained information in this document from sources including from third party

suppliers, it believes to be reliable but which have not been independently verified. In relation to

information on products and/or services supplied by a third party supplier, the recipient should obtain

further information on these products and/or services directly from the supplier.

Please note that this document may contain hypertext links to websites operated by other members of

the HSBC group and third parties respectively. In relation to hypertext links to websites operated by

members of the HSBC group, please read the terms and conditions of the linked website. In relation to

hypertext links to websites operated by third parties, please note that: (1) the recipient should read the

terms and conditions of the website; and (2) HSBC does not have any control whatsoever over these

websites and shall not be liable for the recipient’s use of them.

HSBC will use its reasonable endeavours to ensure that the contents of this document are current at

the date of its first publication. HSBC gives no undertaking and is under no obligation to provide the

recipient with access to any additional information or to update all or any part of the contents of this

document or to correct any inaccuracies in it which may become apparent.

HSBC is not responsible for providing the recipient with any legal, tax or other advice regarding the

contents of this document and the recipient should make its own arrangements in respect of this

accordingly. This document has not been prepared to address the specific requirements or objectives

of any particular client. The recipient is solely responsible for making its own independent appraisal of

an investigation into the products, services and other content referred to in this document.

This document should be kept confidential and shall be used for internal business purposes only by

the recipient to whom it is provided and its officers, employees and agents. This document should be

read in its entirety and shall not be photocopied, reproduced, distributed or disclosed in whole or in

part to any other person without the prior written consent of the relevant HSBC Group member. This

document is proprietary to HSBC and the recipient agrees on request to return or, if requested, to

destroy this document and all other materials received relating to the information contained herein.

Except in the case of fraudulent misrepresentation and/or breach of these terms, no liability is

accepted whatsoever by HSBC and the HSBC Group for any direct, indirect or consequential loss

arising from the use of this document.

Please contact your local HSBC representative for further information on the availability of products

and/or services discussed herein in your region.

© Copyright. HSBC Bank plc 2016 ALL RIGHTS RESERVED..


Published: March 2016 ii

Contents Disclaimer ................................................................................................................................ i

About Indian Certificate Centre ............................................................................................ 3

Before you begin ................................................................................................................. 3

Entitling Users ........................................................................................................................ 4

Linking Certificate .................................................................................................................. 6

Initiate certificate linking .................................................................................................... 6

My certificate enquiry .......................................................................................................... 8

Indian Certificate Centre Admin ........................................................................................... 9

Authorise certificate linking request ................................................................................. 9

Initiate certificate de-linking ............................................................................................. 11

Authorise certificate de-linking request .......................................................................... 11

User certificate enquiry ..................................................................................................... 13

Select opt-in challenge level ............................................................................................ 13

Authorise opt-in challenge level ...................................................................................... 14

Digital signature certificate authentication ....................................................................... 15


Published: March 2016 3

About Indian Certificate Centre

This User Guide has been provided to assist in the linking and administration of the Indian Digital

Certificate for Users on HSBCnet. Certificates must be issued by a compliant Certificate Authority.

This option is available for companies with accounts in India.

Before you begin

To be presented with the options discussed in this guide, your company must be set up with the Indian

Certificate Centre (ICC) on HSBCnet.

Please contact your HSBC representative for further information.



Entitling Users

For a System Administrator (SA) to assign the My ICC entitlements to Users, complete the following

steps:

1. Select Modify User Access Level under the User Management service, under the User and

Account Management tab.

User Management – Modify User Access Level

2. Authenticate yourself with your Security Device or Smart Card.

3. Choose the User from the search results page by selecting the Username.

User tip: If you leave the Enter value field blank and select Search all Users will be displayed.

Search Summary

4. On the Maintain Access Control page, scroll down to Customer Services section and select the

checkbox next to My Indian Certificate Center.



Customer Services – My Indian Certificate Center

5. Select proceed at the bottom of the Maintain User Access Level page.

6. The Tool Summary page appears showing a summary of changes, select Submit to process the

changes. An acknowledgment confirms your action.

Tool Summary - Submit

.

If your company uses Dual Management Control, a second SA must authorise the entitlements in the

User Authorisation Summary in the User and Account Management page before they are available to

the User.



Linking Certificate

Initiate certificate linking

Once the necessary entitlements to the users are provided by the System Administrators, the End Users

(EU) will be able to initiate linking of the valid Digital Signature Certificate (DSC) issued by a compliant

Certificate Authority by following these steps:

Note: The User will need to have the USB Crypto – token plugged in with the DSC and installed the

necessary software on their computer system being used for logging into HSBCnet.

7. Locate My Digital Certificate Centre service on the User and Account Management tab and select

My ICC.

My Digital Certificate Centre

8. In the Digital certificate actions sections select Initiate certificate linking.

Initiate certificate linking



9. Select the Link certificate button.

Link certificate

10. The following prompt will list the registered certificates on your USB crypto token. Choose your

certificate and select OK.

Select Signer Certificate

11. Cypto Token PIN input prompt appears, enter the token PIN, select OK to continue. Crypto token

device and Token PIN are supplied by the issuer.

Crypto Token PIN

After successful authentication, details of your certificate will displayed when you select View.



Certificate Details

If your company is set up with Dual Management Control, an SA is required to authorise the linking

request. A message stating “This digital certificate is now pending linking by your System Administrator”

will be displayed on Initiate certificate linking page.

This digital certificate is now pending linking by your System Administrator

My certificate enquiry

My certificate enquiry tab will show the details and status of your certificate.

My certificate enquiry



Indian Certificate Centre Admin

ICC Admin is available only to SAs and is accessible by choosing the User Management option in

User and Account Management menu. ICC Admin provides SAs management capabilities on Users’

certificates such as:

Authorise certificate linking request

Initiate certificate de-linking

Authorise certificate de-linking request

User certificate enquiry

Select opt-In challenge level

Authorise opt-in challenge level

Indian Certificate Admin


For companies set up with Dual Management Control, SAs can find the pending list of requests that

have been submitted by EUs by following the below steps:

1. Choose the Authorise certificate linking request tab. You can narrow your results by selecting

the Filter option.




2. Select the pending request to review the details and choose Approve to complete the certificate

linking process. You can also choose Reject at this stage which will require the User to re-initiate

the process.

Authorise certificate linking request – Approve

An acknowledgement will confirm your action.

Digital Certificate linking application details - acknowledgement



Initiate certificate de-linking

By choosing the Initiate certificate de-linking tab, a list of all Users in the company profile will be

displayed. SAs can select the Users with linked certificates.

1. Select the User to de-link from a certificate. Choose the De-link button.

Initiate certificate de-linking - De-link

2. For Dual Management Control companies a message will be displayed advising the de-linking

requiring approval.

Your de-linking request is pending approval by your System Administrator


3. Choose Authorise certificate de-linking request tab and choose the pending action item.




4. Select Approve to complete the de-linking process.

Authorise certificate de-linking request – Approve

An acknowledgment will confirm your action.

Authorise certificate de-linking request – acknowledgment




The User certificate enquiry option is available to SAs to view the certificate details of all Users with

linked certificates. .


Select opt-in challenge level

The Select opt-in challenge allows SAs to choose at which point Users are challenged with the Digital

signature certificate based authentication.

Note: Depending on your HSBCnet profile’s set-up, Digital signature certificate based authentication

may only be available at payment authorisation. For local India HSBCnet profiles, there is also the

option of Digital signature certificate based authentication during the logon after the Security

Device/Smart Card authentication.

1. Select a User to determine the challenge level.

2. Choose one or both available check boxes labelled Log on (for India based HSBCnet profiles) and

Authorisation signing.

Select opt-in challenge level



Authorise opt-in challenge level

3. For Dual Management Control companies, an SA is required to choose Authorise opt-in challenge

level.

4. Select the pending action item and choose the Approve button to complete the opt-in challenge

process.

Authorise opt-in challenge level – Approve

An acknowledgement will confirm your action.

Authorise opt-in challenge level – acknowledgment



Digital signature certificate authentication scenarios

Digital signature certificate authentication during payment authorisation

1. As the payment authoriser chooses Authorise on a pending payment from an account domiciled in

India, they are presented with the Select Signer Certificate window.

2. They must choose a registered certificate and select OK to continue.

Select Signer Certificate window

3. They are prompted to enter the crypto token PIN on screen in the Enter the token PIN box and

select OK.



Crypto Token PIN – Enter the token PIN

An acknowledgment will confirm the authorisation.

Note: If a suggested change to the Value date is required by HSBCnet and the authoriser accepts, the

process will start from step 2.

Digital signature certificate authentication during logon

1. As the User logs into HSBCnet and enters their Username, they are presented with option to

authenticate using the Security device as per existing process. The User is required to enter the

One Time Password choosing Continue to proceed.

Capture One Time Password



2. They must choose a registered certificate and select OK to continue.

Capture Digital Certificate – Select Signer Certificate window

3. They then enter the crypto token PIN on screen in the Enter the token PIN box and select OK to

proceed to login on HSBCnet.

Crypto Token PIN – Enter the token PIN

HSBCnet User Guide · 2018-09-25 · members of the HSBC group, please read the terms and...

Documents

Transcript of HSBCnet User Guide · 2018-09-25 · members of the HSBC group, please read the terms and...