Access Coordinator (AC) User Guide. September Customer Registration Service (CRS)

Transcription

1 User Guide Customer Registration Service (CRS) Access Coordinator (AC) September 2013 The Depository Trust & Clearing Corporation Distributed Systems Development

2 The primary purpose of this product guide is to familiarize members with the DTCC Customer Registration System (CRS). This guide is not intended to serve as a legal document. No statement in this guide should be construed as a legally binding rule or regulation, or as creating an obligation on the part of DTCC or any person. In addition, any time schedules or time requirements set forth herein are subject to change without notice. Participants should refer to the DTCC Rules & s for the legal obligations of any party utilizing the DTCC Customer Registration System. The Rules & s of DTCC, plus all updates and revisions, should be obtained by all participants from your DTCC Relationship Manager. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page i

3 Table of Contents What s New Introduction... 2 Purpose... 2 Audience... 2 Screenshots... 2 Structure... 2 Super ACs, ACs, And Operators... 3 User Levels... 3 User Profiles And Login IDs... 4 User Profiles... 4 Login IDs... 4 Web Login IDs... 4 Mainframe Login IDs... 4 Global Login IDs... 4 Logging Into CRS Home Page Help Dashboard Creating User Profiles Searching For User Profiles Adding/Modifying Products CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page ii

4 Emulating Login IDs Completing Registration Updating User Profiles Deleting User Profiles Adding Login IDs To Existing User Profiles Disabling Login IDs Enabling Login IDs Deleting Login IDs Resetting Passwords Reissuing Digital Certificates B2B Products Dashboard Registering Computers CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page iii

5 Managing Your Worklist Approving/Rejecting Requests Killing/Resubmitting Requests Claiming Existing Mainframe IDs Searching For Transactions Request Types Request Status Resubmitting And Rejecting Transactions Resubmitting Transactions Rejecting Transactions Generating Domain Reports Managing Domains Reverifying Users Managing Reverification Appendix: s CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page iv

6 New Web Login ID s New Global Login ID s Claim Existing Mainframe Login ID Existing User Registration Completion s Web Products Global Products Mainframe Products Reverification Reverification Reminder Reverification Period Reset Password Reissued Activation Code Web Login IDs Global Login IDs Mainframe Login IDs Digital Certificate Digital Certificate About To Expire Reissued Digital Certificate User Update s Updated Hint Questions Updated User Profile Claiming Existing Mainframe IDs Claim Request Approved Claim Request Rejected Worklist s Pending CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page v

7 What s New What s New If you ve used CRS before, you will notice several major changes in this release. These changes were made to improve usability and increase functionality: The Dashboard has been moved to a separate page. See Dashboard for further details. Creating user profiles has been completely redesigned. The separate User menu has been merged into the Home menu. See Creating User Profiles for further details. Search functionality has been unified under the Home menu. The separate Auditing and Reporting menu has been eliminated. See Searching For User Profiles for further details. Each user can have one and only one user profile. Each user profile can have an unlimited number of web, mainframe, and global login IDs. See User Profiles And Login IDs for further details. 0 (Participant) mainframe login IDs has been added. Global login IDs have been added. Resetting passwords has been separated by login ID type (mainframe, web, global). See Resetting Passwords for further details. Disabling, enabling, and deleting login IDs have been broken into separate functions. See Disabling Login IDs, Enabling Login IDs, and Deleting Login IDs for further details. Claim ID Requests has been moved to the Worklist menu. See Claiming Existing Mainframe IDs for further details. Login IDs and temporary passwords/activation codes/certificate retrieval codes are automatically ed to users. You no longer must communicate this information to users yourself. See New Web Login ID s, New Global Login ID s, Reset Password , Reissued Activation Code , and Reissued Digital Certificate for further details. Previously, if you removed all products from a login ID, the login ID was automatically deleted. This is no longer true. A login ID can exist without any products, although the user won t be able to use it to access anything. See Adding/Modifying Products for further details. Dashboard statistics are now updated in real time. See Dashboard for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 1

8 Introduction Purpose Introduction Purpose The purpose of this document is to describe how to use the Customer Registration System (CRS). CRS will enable you to register and manage users for DTCC products. This includes: Creating, modifying, and deleting user profiles Creating, modifying, deleting, enabling, and disabling login IDs Adding and removing products, roles, and accounts Resetting passwords Reissuing digital certificates Registering computers Reverifying users Managing your company s domains Claiming existing mainframe login IDs Audience The intended audience for this document is external Access Coordinators (ACs) and Super Access Coordinators (Super ACs). See the section on Super ACs, ACs, And Operators for further details. Screenshots The screens you see may vary, depending on your level of access. Wherever possible, we will indicate the differences. Structure This document is organized following the menu structure of CRS. Again, the menus and functions you see may vary depending on your level of access. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 2

9 Super ACs, ACs, And Operators User Levels Super ACs, ACs, And Operators User Levels CRS has three levels of users: Super Access Coordinators (Super ACs), Access Coordinators (ACs), and Operators. Operators are end users of DTCC s products. ACs are responsible for managing Operators. Super ACs are responsible for managing Operators, ACs, and other Super ACs. Table 1 summarizes this information: Table 1: Super ACs, ACs, And Operators Manages Operators ACs Super ACs Super ACs ACs Operators A user can be both an AC and an Operator, or a Super AC and an Operator, for his/her company; however, a user cannot be both a Super AC and an AC for his/her company. An AC can be given Inquiry Only access to CRS. Inquiry Only users can only display, not update, information in CRS. Creating, modifying, deleting, enabling, or disabling a Super AC requires approval by another Super AC at your company. If you submit one of these requests, the following warning will be displayed: This request requires approval by another Super AC at your company. See Managing Your Worklist for further details. If your company ever has less than two Super ACs, then you must contact DTCC to have additional Super ACs created. For further information, please go to: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 3

10 User Profiles And Login IDs User Profiles User Profiles And Login IDs Before you can start registering and managing users using CRS, you must understand the relationship between user profiles and login IDs. User Profiles Each user should have one profile. The profile contains basic information about that user: address Company Name First name Last name Phone number (including, optionally, country code and extension) Note: User profiles are unique by address and company name. If a user has more than one address, then he/she can have more than one profile. Login IDs Each user profile must have at least one login ID. There are three types of login IDs: mainframe login IDs, web login IDs, and global login IDs. Web Login IDs Web login IDs are used with web products, e.g., ACATS. Web login IDs may be up to 64 characters long. Typically, a web login ID is the same as the user s address, but it doesn t have to be. Mainframe Login IDs Mainframe login IDs are used with mainframe products, e.g., Settlement Web. Mainframe login IDs are in the format 0aaaa0uu, where 0 indicates Participant, aaaa indicates the account, 0 indicates PBS/PTS, and uu indicates the individual user. Global Login IDs Global login IDs are used with global products, e.g., Global Trade Repository. Like web login IDs, global login IDs may be up to 64 characters long. Typically, a global login ID is the same as the user s address, but it doesn t have to be. Unlike web login IDs, global login IDs can only be Operators. Global login IDs can not be ACs or SACs. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 4

11 Logging Into CRS Logging Into CRS CRS is like any other product managed by CRS: you must complete the registration request for CRS before accessing CRS. See Completing Registration for further details. Once you have completed the request for CRS, you can login to CRS. 1 Go to the appropriate URL. You will be prompted to enter your login ID and password: Note: Your login screen may look slightly different, depending on which URL you use. Note: If you forget your password and you are registered for Self-Service Password Management, then click Forgot your password? Go to the following URL for more on Self-Service Password Management: If you forget your password but you are not registered for Self-Service Password Management, then you must call Customer Support to reset your password for you: U.S. and Canada Callers: (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 5

12 Logging Into CRS International Callers: (Select option 5 then 2) 2 Enter your login ID and password and click Login. The Portal will be displayed. The Portal lists all products you have access to, including CRS: Note: Your Portal may look slightly different, depending on which URL you use. 3 Select CRS - Customer Registration System from the Portal. 4 If you have not acknowledged your responsibilities, then you will be prompted to acknowledge your responsibilities: Click Agree to acknowledge your responsibilities. Note: If you don t acknowledge your responsibilities, then you will not be allowed to access CRS; you will be logged off. The next time you try to access CRS, you will be prompted to acknowledge your responsibilities again. You must re-acknowledge your responsibilities twice a year: after January 1st and after July 1st. 5 If you have acknowledged your responsibilities, then the Home page will be displayed. See Home Page for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 6

13 Logging Into CRS 6 The first time you login, the Documentation window will be displayed: Clicking links on this window displays useful documentation (including this guide). You can redisplay this window any time by click on Help. See Help for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 7

14 Home Page Home Page When you first login to CRS, the Home page will be displayed. This is where you do most of your work. You can return to this page anytime by clicking Home. Note: Clicking Home also refreshes your search results. See Searching For User Profiles for further details. 1 Login to CRS or click Home. The Home page will be displayed: Note: The search results section says No profiles match the specified search criteria because you haven t run any searches yet. Note: Your login ID is displayed in the upper right-hand corner. Next to your login ID in parenthesis are three digits, e.g., (111). These are for diagnostic purposes only. If you ever have a problem with CRS, you may be asked for these numbers. 2 If you want to search for existing profiles, click Search Profiles. See Searching For User Profiles for further details. 3 If you want to create a new profile, click Create Profile. See Creating User Profiles for further details. 4 If you want to display links to documentation, click Help. See Help for further details. If you want to display statistics about your company, click Dashboard. See Dashboard for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 8

15 Help Help Clicking Help opens the documentation window: This is the same window that was displayed the first time you logged into CRS. See Logging Into CRS for further details. This window contains links to the following documents: Create a New Operator takes you to a quick guide for registering an end user of DTCC s products. Make Yourself an Operator takes you to a quick guide for registering yourself as an end user of DTCC s products. User Guide takes you to this document. Access Coordinator Forms takes you to forms for applying to become an AC or Super AC. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 9

16 Help Registration Completion Instructions takes you to a document prepared for operators describing how to complete the registration process. Clicking OK closes this window. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 10

17 Dashboard Dashboard The Dashboard displays statistics about your company. Statistics are for login IDs. For example, Active Users is the number of enabled login IDs, not the number of enabled user profiles. Clicking on a statistic displays the search results for that statistic. For example, clicking on the number of active user displays a list of all active users. These search results are returned in real-time, not a snapshot from the night before, so they may differ from the statistics. See Searching For User Profiles for further details. 1 If the Home page isn t already displayed, click Home. See Home Page for further details. 2 Click Dashboard. The Dashboard will be displayed: Note: Active users are all enabled login IDs within your company. See Enabling Login IDs for further details. Note: Disabled users are all disabled login IDs within your company. See Disabling Login IDs for further details. Note: Active Certificates are the number of login IDs with digital certificates that will not expire in 60 days or less. You can reissue digital certificates to login IDs whose certificates have been lost, corrupted, or expired. See Reissuing Digital Certificates for further details. 3 Click on any statistic to display the search results for that statistic. See Searching For User Profiles for further details. Note: The search results include in-flight requests; the Dashboard doesn t. This means the search results may show more matches than the Dashboard. 4 Click the X in the upper right-hand corner to close the Dashboard. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 11

18 Creating User Profiles Creating User Profiles Each user must have a profile. The profile contains basic information about that user: company, first name, last name, address, phone number, and (optionally) extension. Profiles are unique by company and address. That is, you cannot create more than one profile for the same company and address. Each profile must have at least one login ID. The login ID lets the user login and use the products he or she is registered for. The login ID can be a web, mainframe, or global login ID. 1 If the Home page isn t already displayed, click Home. See Home Page for further details. 2 Click Create Profile. You will be prompted to enter user profile information: Note: All fields are mandatory except Extension. Company defaults to the name of your company and cannot be changed. Note: If a profile already exists for the address you entered, the following warning message will be displayed: A matching profile already exists in CRS. You will not be allowed to create another profile with the same address. Either change the address or click Cancel and search for the existing user profile. See Searching For User Profiles for further details. 3 If the domain (the characters to the right of you entered doesn t match any of your company s domains, then you will be prompted to add the domain to your company s domains: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 12

19 Creating User Profiles Note: In this example, the domain is yyy.com. Click Yes and enter a comment to add the domain to your company s domains, or No. See Managing Domains for further details. 4 Fill in the user profile information and click Next. You will be prompted to select either a global, mainframe, or web login ID: Note: If you are uncertain which type of login ID to select, click the List Products buttons. The products for that that type of login ID will be displayed. If necessary, you can always add another login ID to the profile. See Adding Login IDs To Existing User Profiles for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 13

20 Creating User Profiles 5 If you want to create a new web login ID, click the radio button to the left of Web. You will be prompted to enter a web login ID: Note: If this is the first web or global login ID you are creating for a user profile, then it will default to the same as the user s address; you can keep it or change it. If this is not the first web or global login ID you are creating for a user profile, then the field will be blank and you must fill it in; the web login ID you enter must be unique. 6 If you want to create a new global login ID, click the radio button to the left of Global. You will be prompted to enter a global login ID: Note: If this is the first web or global login ID you are creating for a user profile, then it will default to the same as the user s address; you can keep it or change it. If this is not the first web or global login ID you are creating for a user profile, then the field will be blank and you must fill it in; the web or global login ID you enter must be unique. 7 If you want to claim an existing mainframe login ID, click the radio button to the left of Mainframe, select Claim Existing ID, then select one of the accounts listed, then enter CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 14

21 Creating User Profiles the last two characters of the ID: Note: If there are no accounts listed, then this indicates that your company has not been configured properly. Please contact Customer Support for assistance. Note: CRS will validate that the mainframe login ID you entered exists and has not already been claimed. An existing mainframe login ID can only be claimed by one user profile. Note: Users can also submit requests to claim existing mainframe login IDs. You can approve or reject these requests. See Claiming Existing Mainframe IDs for further details. 8 When you are finished, click Create. A summary of the user profile and login ID you created or claimed will be displayed: Note: If you created a new web login ID, CRS s the new login ID and temporary password to the user in two separate s, along with instructions on how to complete registration. See New Web Login ID s for further details. Note: If you created a new global login ID, CRS s the new login ID and temporary password to the user in two separate s, along with instructions on how to complete registration. See New Global Login ID s for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 15

22 Creating User Profiles Note: If you claimed an existing mainframe login ID, CRS s the existing login ID to the user, along with instructions on how to complete the claim process. See Claiming Existing Mainframe IDs for further details. 9 If you want to add products to the login ID you have just created, click S for Super AC, A for AC, or O for Operator. Note that S and A are not supported for global login IDs and are crossed out. See Adding/Modifying Products for further details. 10 If you don t want to add products to the login ID you have just created at this time, click Close. You can always come back and add products at a later time. See Adding/Modifying Products for further details. The user profile and login ID you have just created will appear in the search summary: Note: The status of the request will be Pending User Completion (PUC). See Request Status for further details. Note: If the status of the request is SY1, click Home to refresh the search results. This is an interim status that should not persist. If the SY1 status persists, contact Customer Support. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 16

23 Searching For User Profiles Searching For User Profiles You can search for existing user profiles several different ways: By user profile information: first name, last name, address, and/or login ID. By AC type and, optionally, product By Operator and, optionally, product, role, and/or account. Searches are not case sensitive. For example, they don t distinguish between John, john, and JOHN. Search supports wildcards. For example, entering j* in the First Name field searches for all users whose first name begins with the letter j. Entering *j in the First Name field searches for all users whose first name ends with the letter j. Entering *j* in the First Name field searches for all users whose first name contains the letter j. The more criteria you enter, the more precise your results will be. For example, if you enter first name John and last name Doe, this will return more precise results than if you just enter first name John. If your search criteria are too broad, you will get the following warning message: 1 If the Home page isn t already displayed, click Home. See Home Page for further details. 2 Click Search Profiles. You are prompted for the type of search you want to perform: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 17

24 Searching For User Profiles Note: By default, searches include: Mainframe, web, and global login IDs. Super ACs, ACs, Operators, and IDs without any products. In-flight results, i.e., uncompleted requests. You can limit your search results and accelerate your searches by clearing any of these check boxes. 3 If you want to search by user profile information, click Search by User Info (the default). You are prompted to enter user profile information: Note: Searching by address returns all login IDs for that address. Searching by login ID only returns that specific login ID. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 18

25 Searching For User Profiles 4 If you want to search for ACs, click Search by AC Type. You are prompted to select an AC type and, optionally, a specific product: 5 If you want to search for Operators, click Search by Operator Product. You will be prompted to, optionally, select a specific product, role, and/or account: Note: An account in this context can be an actual account, an O-code associated with an account, or a Deriv/SERV O-code; CRS doesn t differentiate. See the individual product documentation for descriptions of accounts, O-codes, and Deriv/SERV O-codes. 6 Once you have entered your desired search criteria, click Search. CRS will search for user profiles that match your criteria, then display the results: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 19

26 Searching For User Profiles Note: Profiles are listed alphabetically, by address. For each profile, the following information is displayed: address, first name, last name, phone number, and (optionally) extension. Note: Under each profile, login IDs are listed alphabetically, by login ID. For each login ID, the following information is displayed: login ID type ( for mainframe, for web, for global), user type (S for Super AC, A for AC, O for Operator), login ID, last login date (for web and mainframe IDs only), and current request status. See Request Status for further details. Note: If a login ID is disabled, then the login ID type is displayed with a red circle around it and a red slash through it. See Disabling Login IDs for further details. If a login ID is enabled, then the login ID type is displayed normally. See Enabling Login IDs for further details. Note: User profiles and login IDs that have completed being created are displayed in black. User profiles and login IDs that are in the process of being created are displayed in light and dark green. User profiles and login IDs that are in the process of being deleted are displayed in light and dark red and struck through. If you forget, click on Legend: Note: If you don t enter any search criteria, then CRS will return all user profiles for your company. Depending on the size of your company, this may be a large number of user profiles, and may take a long time to process. Consider entering some search criteria to reduce and accelerate your results. Note: You can export your search results to a spreadsheet by clicking the Export Overview and Export Details buttons. Export Overview exports all of the user profile information. Export Detail exports all of the user profile information and all of the login ID information. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 20

27 Adding/Modifying Products Adding/Modifying Products Operators use products. ACs and Super ACs manage products, i.e., register users for products. Adding a product to a login ID gives that login ID access to that product. Removing a product from a login ID takes away access to that product. Depending on the product, it may have roles and/or accounts. See the specific product documentation for further details. Adding a role or account to a product gives the login ID access to that role or account for that product. Removing a role or account from a product takes away access to that role or account for that product. For Operators, you must manually add the roles and accounts for a product. For ACs and Super ACs, CRS automatically adds all roles for a product; depending on how the product is configured, CRS may also automatically add all accounts. CRS also automatically adds the CRS product to all ACs and Super ACs. Products, roles, and accounts that have completed being added are displayed in black. Products, roles, and accounts that are in the process of being added are displayed in light and dark green. Products, roles, and accounts that are in the process of being removed are displayed in light and dark red and struck through. If you forget, click on Legend: You can copy products, roles, and accounts from one login ID to another login ID. See Emulating Login IDs for further details. 1 If the login ID you want to add/modify products for isn t already displayed, search for it. See Searching For User Profiles for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 21

28 Adding/Modifying Products 2 Click S for Super AC, A for AC, or O for Operator. The products that are currently added to that user type will be displayed: In this example, no products are currently added for this login ID (jdoe@yahoo.com) and user type (Operator). Note: Super Access Coordinators can create Super Access Coordinators, Access Coordinators, and Operators. Access Coordinators can only create Operators. The S and A options are crossed out for Access Coordinators. Note: Global login IDs can only be Operators. Global login IDs can not be Super ACs or ACs. The S and A options are crossed out for global login IDs, even if you are a Super AC. 3 Click Add/Modify Products. The products you can add to this login ID will be displayed: Note: Products are grouped together by lines of business. The products you see depend on the login ID type (global, web, or mainframe) and the products you have been registered as Access Coordinator or Super Access Coordinator to manage. 4 Check the boxes of the products you want to add to the login ID and user type. For each product you check, the roles and/or accounts associated with that product will be CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 22

29 Adding/Modifying Products displayed: In this example, the product ACATS has roles and accounts associated with it. 5 If the product has roles, click on the dropdown arrow next to the roles. The roles associated with the product will be displayed: In this example, there are two roles associated with the ACATS product: ACATS ENTER and ACATS SUBMIT. 6 If the product has roles, click the check box for every role you want to register the user for. You can select/deselect all of the roles using the checkboxes on the upper left corner. Then click Submit to save your selections or Cancel to cancel them. The roles you have selected to register the user for will be displayed: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 23

30 Adding/Modifying Products In this example, we have selected both roles. Note: If a product has only one role, then that role is automatically selected. If the user type is AC or Super AC, then all roles are automatically selected. 7 If the product has accounts, click the dropdown arrow next to Accounts. The accounts associated with the product will be displayed: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 24

31 Adding/Modifying Products In this example, there are several accounts associated with ACATS. 8 If the product has accounts, click the check box for every account you want to register the user for. You can select/deselect all of the accounts using the checkboxes on the upper left corner. Then click Submit to save your selections or Cancel to cancel them. The accounts you have selected to register the user for will be displayed: In this example, we have selected the first three accounts. Note: If a product has only one account, then that account is automatically selected. 9 Click Confirm. CRS validates the products, roles, and accounts you have added or removed, and displays the results: If there is an error message, click Back, correct your selections, then click Confirm again. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 25

32 Adding/Modifying Products 10 If there are no errors, click Submit. Note: CRS will generate one transaction-request per product. For example, if you register the user for three products, CRS will generate three transaction-requests. See Searching For Transactions for further details. Note: CRS will automatically the user a notice that a product has been added. One is sent per product. See Existing User Registration Completion s for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 26

33 Emulating Login IDs Emulating Login IDs Emulating a login ID lets you copy the products, roles, and accounts from one login ID to another login ID. This can be convenient if you are creating multiple login IDs with similar products, roles, and accounts. The source login ID must be of the same type as the target login ID: global, web, or mainframe. Copying is done at the user type level: Super AC, AC, or Operator. You must review and confirm the target login ID s products, roles, and accounts before submitting them. Any products, roles, and accounts the target login ID had for that user level before emulation will be overwritten. The source login ID must be in the Completed (COM) state. You cannot emulate in-flight login IDs. 1 If the login ID you want to add/modify products for isn t already displayed, search for it. See Searching For User Profiles for further details. 2 Click S for Super AC, A for AC, or O for Operator. The products that are currently registered for that user type will be displayed: In this example, no products are currently registered for this login ID (jdoe@yahoo.com) and user type (Operator). CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 27

34 Emulating Login IDs 3 Click Add/Modify Products. The products you can register this login ID for will be displayed: 4 Enter the source login ID in the field on the lower left-hand corner of the page, and click Emulate. The source login ID s products, roles, and accounts will be copied to the target login ID for that user type: 5 If necessary, add or remove any products, roles, and accounts. 6 Click Confirm, then Submit, just as if you had added the products, roles, and accounts manually. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 28

35 Completing Registration Completing Registration Once a user s registration request has been approved, the user must complete registration for that login ID. The user will be ed two separate s, one containing the user s login ID and the other containing the user s temporary password and instructions on completing registration. The steps for completing registration vary, depending on the login ID type (global, mainframe, web) and product. See the Registration Completion Instructions for further details. You can access these instructions by clicking on the link on Help. See Help for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 29

36 Updating User Profiles Updating User Profiles You can update a user s profile information first name, last name, phone number, address--at any time. 1 Display the user profile you wish to update. See Searching For User Profiles for further details. 2 Click on the dropdown arrow to the left of the user profile. The user profile menu will be displayed: 3 Click Update Profile. You will be prompted to update the user s profile: 4 Edit the user s profile information as necessary, then click Update. The updated profile will be displayed: 5 Click Close. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 30

37 Deleting User Profiles Deleting User Profiles Periodically, you may need to delete a user profile. For example, an employee may leave your company. Deleting a user profile deletes all login IDs assigned to it. If you want to delete an individual login ID, use the Delete Login ID command instead. See Deleting Login IDs for further details. Note: Once you delete a user profile or login ID, you cannot undelete it. If you are unsure, try disabling the login ID(s) instead. See Disabling Login IDs for further details. 1 Display the user profile you wish to delete. See Searching For User Profiles for further details. 2 Click on the dropdown arrow to the left of the user profile. The user profile menu will be displayed: 3 Click Delete Profile. You will be prompted to confirm: 4 Click Delete to delete the user profile or Cancel to cancel. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 31

38 Adding Login IDs To Existing User Profiles Adding Login IDs To Existing User Profiles A user profile can have multiple login IDs. For example, you may wish to create a user profile with a web login ID for web products, then later add a mainframe login ID for mainframe products and a global login ID for global products. You can add more login IDs to an existing user profile at any time. There is no maximum number of login IDs that can be added to a user profile. 1 Display the user profile you wish to add a login ID to. See Searching For User Profiles for further details. 2 Click on the dropdown arrow to the left of the profile. The user profile menu will be displayed: 3 Click Add Login ID. You will be prompted to select either a web or mainframe login ID to add: 4 The remainder of the procedure is exactly the same as adding a login ID to a new user profile. See Creating User Profiles for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 32

39 Disabling Login IDs Disabling Login IDs Disabling a login ID temporarily prevents it from accessing any of its products, without removing the products. Disabling a login ID may be preferable to removing all of its products or permanently deleting the login ID. See Deleting Login IDs for further details. Enabling a login ID undoes disabling a login ID. See Enabling Login IDs for further details. A login ID that has been disabled by an AC or Super AC at your company can only be reenabled by an AC or Super AC at your company. The login ID cannot be re-enabled by DTCC Customer Support. You can display a list of all disabled login IDs from the Dashboard. See Dashboard for further details. 1 Display the login ID you wish to disable. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: Note: If the login ID is already disabled, then the Disable Login ID command will not be listed on the menu. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 33

40 Disabling Login IDs 3 Click Disable Login ID. You will be prompted to enter a reason for disabling the login ID: 4 Enter a reason and click Disable. The login ID will be disabled: 5 Click Close. The next time you display the login ID, the login ID type will be displayed with a red circle around it and a diagonal slash through it, indicating it is disabled: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 34

41 Enabling Login IDs Enabling Login IDs Enabling a login ID undoes disabling it. See Disabling Login IDs for further details. Once you enable a login ID, the login ID can access its products again. You can display a list of all active (enabled) login IDs from the Dashboard. See Dashboard for further details. 1 Display the login ID you wish to enable. See Searching For User Profiles for further details. Disable login IDs will be displayed with the login ID type surrounded by a red circle with a diagonal slash through it, indicating the login ID is disabled: 2 Click the dropdown arrow to the right of the login ID you wish to enable. The login ID menu will be displayed: Note: If the login ID is already enabled, then the Enable Login ID command will not be listed on the menu. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 35

42 Enabling Login IDs 3 Click Enable Login ID. You will be prompted to confirm you wish to enable this login ID: 4 Click Enable to enable the login ID. The login ID will be enabled: 5 Click Close. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 36

43 Deleting Login IDs Deleting Login IDs Periodically, you may need to delete a login ID. For example, an employee may be reassigned and no longer need a specific login ID. Once you delete a login ID, you cannot undelete it. If you are unsure, try disabling it instead. See Disabling Login IDs for further details. Note: If you delete the only login ID added to a user profile, then the user profile will also be deleted. A user profile must have at least one login ID. 1 Display the login ID you wish to delete. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: 3 Click Delete Login ID. You will be prompted to enter a comment: 4 Enter a comment and click Delete to delete the login ID, or Cancel to cancel. You will be informed the delete was successful: 5 Click Close. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 37

44 Resetting Passwords Resetting Passwords If a user forgets his/her password, the user may ask you to reset his/her password. Resetting a user s password issues a new, temporary password for a login ID. Note: A login ID will become locked (not allowed to login) if a user enters three incorrect passwords in a row. Resetting the login ID s password also unlocks the login ID. 1 Display the login ID you wish to reset the password for. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: 3 Click Reset Password. You will be prompted to reset the login ID s password: 4 Click Reset. A new temporary password will be generated for the login ID: Note: CRS will automatically this temporary password to the user. See Reset Password for further details. The next time the user logs in with this login ID and temporary password, he/she will be forced to change his/her password. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 38

45 Resetting Passwords Note: For security reasons, this is the only time the temporary password is displayed to you. The temporary password is not stored in the transaction history. See Searching For Transactions for further details. Once you click OK, only the recipient of the can see the temporary password. 5 Click OK. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 39

46 Reissuing Digital Certificates Reissuing Digital Certificates B2B Products Business-to-business (B2B) products require digital certificates. When a user completes a request the first time for a B2B product for a login ID, he/she downloads and installs a digital certificate. See Completing Registration for further details Dashboard Digital certificates expire and must be reissued annually. The Dashboard lists the number of users within your company that have unexpired digital certificates, digital certificates that will expire in the next 60 days, and digital certificates that have expired. See Dashboard for further details. In addition, digital certificates can be lost, damaged, or corrupted. 1 Display the login ID you wish to reissue the certificate for. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: Note: The Reissue Certificate command will be displayed only if the login ID is registered for a B2B product. In this example, the login ID is registered for the B2B product AIX-B2B Interface. Note: If the login ID has a certificate, then the name and expiration date of that certificate will be displayed when you click O for Operator. 3 Click Reissue Certificate. You will be prompted: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 40

47 Reissuing Digital Certificates 4 Select a reason from the Comments dropdown menu: 5 Click Reissue. CRS will generate a new digital certificate: Note: The new digital certificate, along with instructions on how to download and install it, will be ed to the user. See Reissued Digital Certificate for further details. Note: For security reasons, this is the only time the retrieval code is displayed to you. The retrieval code is not stored in the transaction history. See Searching For Transactions for further details. Once you click OK, only the recipient of the can see the retrieval code. 6 Click OK. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 41

48 Registering Computers Registering Computers The first time a new web or global login ID completes registration, its computer is registered. To complete registration, the user requires an activation code. Normally, a user is issued an activation code automatically, and AC intervention is not required. See Completing Registration for further details. This function covers a user who encountered problems registering his/her computer and requires help. The most common problems are: The user never received his/her activation code. The user s activation code expired before he/she had a chance to enter it. The user entered his/her activation code incorrectly three times in a row. The user s browser doesn t have cookies enabled. Note: Only web and global login IDs require activation codes. Mainframe login IDs do not require activation codes. 1 Display the login ID you wish to register the computer for. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: 3 Click Register Computer. You will be prompted to register the computer: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 42

49 Registering Computers 4 Click Register. A new activation code will be generated for the user: Note: CRS will automatically the new activation code to the user. See Reissued Activation Code for further details. Note: For security reasons, this is the only time the activation code is displayed to you. The activation code is not stored in the transaction history. See Searching For Transactions for further details. Once you click OK, only the recipient of the can see the activation code. 5 Click OK. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 43

50 Managing Your Worklist Managing Your Worklist If a request is submitted to create, modify, delete, enable, or disable a Super AC, then another Super AC must approve the request. The request will be routed to your worklist. The Super AC who approves the request must be different from the Super AC who submitted the request. Approving/Rejecting Requests 1 Choose My Worklist from the Worklist menu: 2 A list of items will be displayed: Items with a green arrow to the left of them can be checked out and require your attention. Items with a red arrow to the left of them have been checked out and must be checked in to complete processing. Items with a white page to the left of them are read only. If you are a Super AC, and have submitted a request to create, modify, delete, enable, or disable another Super AC, then the request will appear to you as read only. A different Super AC must check out the request to approve it. Items with a red exclamation mark (! ) to the right of them have been on the list for more than 48 hours. The dropdown menu defaults to All My Queues. There are two other options: Delegated Queue: an AC or Super AC enters a registration request on behalf of a user. All of your requests should be delegated requests. Self Reg Queue: a user enters a registration request on behalf of him/herself, then the request is routed to an AC or Super AC for approval. Only internal ACs and Super ACs have access to self-registration requests. None of your requests should be self-registration requests. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 44

51 Managing Your Worklist Killing/Resubmitting Requests 3 Click the green arrow next to an item to check it out. The item will be displayed: 4 If you want to approve the item, click Submit. You will be prompted: Click OK. The item will be approved and you will be returned to your worklist. The item will no longer appear on your worklist. 5 If you want to reject the item, click Reject. You will be prompted to enter a reason for your rejection: Enter a reason and click Submit. The item will be rejected and you will be returned to your worklist. The item will no longer appear on your worklist. The item will appear instead on the originator s worklist in the INC (incomplete) state. The originator can then either reject the item, which deletes it, or update it and resubmit it for approval. 6 If you don t want to approve or reject the item, click Retain. The item will be returned to your worklist unchanged. Killing/Resubmitting Requests If a request you entered is rejected by another AC or Super AC, it will be returned to your worklist with a status of INC (incomplete). When you open the request, you will have four CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 45

52 Managing Your Worklist Killing/Resubmitting Requests options: 1 If you want to kill the request, click Reject. The request will be deleted from your worklist. No further action can be taken on this request. 2 If you want to mark the request as awaiting further information, click Pending. The request will be returned to your worklist with a status of PEN (pending). You can check it out again when you are ready to work on it. An will be sent to the user including your comments. See Pending for further details. 3 If you want to keep the request on your worklist but not change the status, click Retain. The request will be returned to your worklist with the same status of INC. An will not be sent to the user. You can check it out again when you are ready to work on it. 4 If you want to resubmit the request for approval, optionally update the fields and click Update. The status of the request will be changed to ACC (accepted). Another AC or Super AC must check out the request to approve it. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 46