Multi-Factor Authentication Reference Guide

Transcription

1 Multi-Factor Authentication Reference Guide March 2011 Support: (800)

2 Table of Contents Multi-Factor Authentication (MFA) Required for All Customers...page 2 Challenge Code Recommended...page 5 Phishing Security Optional...page 6 Page 1

3 Multi-Factor Authentication (MFA) Required for All Customers Once MFA is activated, you will log onto VIPbanker using your Login ID and Password. You will then be prompted to: 1. Select your Temporary Secure Access Code delivery preference by choosing a delivery option as previously input within VIPbanker. Click on Continue. A temporary, random access code will then be created for you. This temporary access code will remain valid for 15 minutes and will be delivered in the manner you specified. Delivery should only take a few minutes. This temporary access code will be valid for only one computer. If you wish to register another computer, you will need to request an access code from that computer. If you receive this code via telephone, VIPbanker will call you with a generic message indicating that you have requested a temporary access code and will then provide the code. For security purposes, this message will not indicate what the code should be used for, nor will it be left on voic . If you receive the code via , a message will be delivered to your address. The will be sent from notifications@pwbonline.com. Please configure any spam filters or white lists to accept s from this address. The will include the code but not the purpose of its use. If you receive the code via SMS text, a message will be delivered to your cellular phone. The SMS text will be sent from PacWest Bank. Page 2

4 Multi-Factor Authentication (MFA) Required for All Customers 2. Once you receive this temporary access code, enter it into the Secure Access Code field of VIPbanker within 15 minutes of receipt. Click on Continue. 3. Once the code is validated, you can register your browser. If you select Activate this computer for later use, a cookie will be placed on your computer. Use this option to register a home or work computer that is used exclusively by you. Selecting this option will prevent you from having to go through this registration process the next time you log in to VIPbanker. Click on Continue. NOTE: You must have your browser set to enable cookies to gain access. Do not allow your browser to clear this cookie when you log off or shut down your computer. If you do not currently allow cookies, please be sure to allow cookies from Pacific Western VIPbanker : Page 3

5 Multi-Factor Authentication (MFA) Required for All Customers 4. Select Give me one-time access only (do not activate this computer) when you are using a public computer (i.e., at a hotel, in a library, etc.). 5. Once registration is complete, you will see your Account Overview page. Page 4

6 Challenge Code Recommended The Challenge Code feature allows you to gain one-time access to VIPbanker when you are unable to receive a secure access code through standard methods (i.e., you do not have access to your account or you are away from your home or business phone). To use this feature, you must log in through the MFA process at least once. During a multi-factor authenticated session, you can create a challenge code found in the Preferences menu under Security. You will then see a set of tabs; click on Challenge Code. Input a code that meets the requirements listed to the right of the screen. You may not use your password; the challenge code must be unique. Once you have input your code, click on Submit Challenge Code. The next time you log in to VIPbanker from a different computer, you will see input of your Challenge Code as a delivery option. Once you click on Continue, you will be prompted to input your code. Click on Continue once more and you will be directed to your Account Overview page. Page 5

7 Phishing Security Optional Internet scams are increasing. Two common scams are Phishing and Pharming. Phishing is an internet scam that involves an which appears to be from a legitimate company, bank, or government agency. The typically warns of a potential problem with your account and requests that you follow a link and provide personal or account information to update your information. You should never reply to these s, open any attachments, or follow any of the links provided. If you believe an to be legitimate, you should contact the company using your usual contact information. Pharming is a type of fraud that involves redirection from a legitimate site to a site that appears to be legitimate, but has been created by fraudsters in an attempt to gain your personal or account information. To ensure that you are being directed to our site from the computer(s) you use most often, you can set a phishing phrase within VIPbanker. This phrase will be displayed to you on the login screen to verify you are on our site. To set your phishing phrase from within VIPbanker, go to Security under Preferences. You will then see a set of tabs, click on Phishing Phrase. Input a phrase or word that is easy for you to remember and click on Submit My Phrase. Page 6

8 Phishing Security Optional The next time you visit VIPbanker from your usual computer; you will see that phrase over the login fields. If you see the phrase, you know that you are logging in to VIPbanker. If you don t see the phrase when logging in from your usual computer, contact us immediately at NOTE: If you use two different computers, you will need to set the phishing phrase on each computer. If multiple users are accessing the same computer, they will see the phrase of the user to whom the computer is registered. Support If you require assistance or have questions, please contact us at 1 (800) or (760) Monday through Thursday from 8:00 a.m. to 5:00 p.m. PST and Friday from 8:00 a.m. to 6:00 p.m. PST. Page 7