Online Banking Supported Browser Summary

Transcription

1 Online Banking Supprted Brwser Summary Ggle Chrme: Supprted Mzilla Firefx: Supprted Safari Safari 9: Testing is currently underway. Certificatin pending usage statistics. Initial testing is psitive with n knwn issues. Safari 8: Supprted Safari 6 & 7: Unsupprted Internet Explrer IE 11: Supprted IE 8, IE 9, IE 10: Unsupprted Micrsft Edge Testing is currently underway. Certificatin pending usage statistics. Initial testing is psitive with n knwn issues. Nte regarding Brwser Settings Digital Insight prducts and features are designed t wrk with the default settings supplied by each brwser. There are a few instances where the default settings supplied by a brwser will cause issues with usability f varius websites, including Online Banking. Fr instance, by default, Safari blcks all third party ckies frm being accepted. This setting will cause parts f Online Banking, including FinanceWrks, Bill Pay and ther third party services t functin incrrectly. If there are any issues accessing these parts f Online Banking using Safari, please verify yur ckie settings by ging t Safari > Preferences r by hitting, (Cmmand key plus the cmma key) and lking at the Privacy tab. The ptin fr Blck ckies shuld be set t Never.

2 Situatins such as just described, which cannt be directly addressed by Digital Insight will have specific instructins called ut in the Brwser Plicy. Please nte nt all brwsers behave in the same way nr have the same default settings. Brwsers have in the past and likely will again in the future change their defaults fr a variety f reasns. We will cntinue t develp ur prducts based n a base level f defaults and secure functinality. We cannt guarantee all defaults will wrk all the time, especially when cnsidering the unpredictable changes sme brwser updates intrduce. Any issues with defaults will be analyzed by ur Security team and dcumented in this article, and addressed in future Brwser Plicy updates as needed. Nte regarding Ggle Chrme and Mzilla Firefx Ggle Chrme and Mzilla Firefx are released n extremely rapid release schedules. Because f this, Chrme and Firefx may release new versins f these brwsers between releases f Digital Insight s slutins; hwever, the cntent and functinally f these releases are highly unlikely t negatively affect Digital Insight s slutins. When testing a cnsumer release, Digital Insight s Quality Assurance teams will test the slutin in the latest available versin f the brwser at time f the release t ensure that the experience is ptimized fr that versin f the brwser. Nte regarding Internet Explrer Supprt fr Internet Explrer brwsers is based n market penetratin and user behavir. Internet Explrer 11 is free and available t dwnlad fr users f Internet Explrer 10. It is recmmended by Micrsft and is cnsidered the superir f the tw. Overall, internet usage statistics are als very lw fr IE10. Fr these reasns, we are n lnger supprting IE10 fr testing and develpment and recmmend all users upgrade t IE11. As f January 2016, Micrsft has made significant changes t their supprt strategy f Internet Explrer. Micrsft will nw nly supprt their latest and mst current versin f Internet Explrer. Click here fr mre infrmatin. What this means is that IE8 and IE9 are n lnger versins f IE that will be maintained r updated by Micrsft. Security patches, bugs, enhancements will nly be updated n the mst current versin f Internet Explrer. Micrsft has elected t fcus their

3 usability and supprt n their main brwser(s) and ffers free upgrades t all users. At the time f publicatin, IE11 and Micrsft Edge are the nly brwsers being maintained by Micrsft. Based n this change t plicy frm Micrsft, and als due t very lw usage statistics, Digital Insight will nly supprt the mst current versin f IE and Micrsft Edge fr Online Banking and Web Center Websites. Micrsft Edge Micrsft Edge is the Default brwser fr the new Windws 10 Operating System As a relatively new OS and brwser, verall usage as f February 2016 is belw 5% f ttal Online Banking users. Micrsft Edge testing f Online Banking is underway. Early results are psitive fr cre functinality. Final certificatin will depend n usage statistics. Internet Explrer 11 Basic settings and Trubleshting fr IB, CST, Admin Platfrm and ther issues are generally due t ne f tw things: make sure 3rd Party Ckies are enabled and select TLS 1.0 nly. Enable Third Party Ckies: 1. Click n TOOLS. 2. Select INTERNET OPTIONS. 3. Click the PRIVACY tab. 4. Click n the ADVANCED tab. a. Put a check mark next t "Override Autmatic Ckie Handling". b. Select ACCEPT fr "First-Party Ckies" and "Third Party Ckies". c. Put a check mark next t "Always Allw Sessin Ckies". TLS: 1. Access Tls > Internet Optins > Advanced tab. 2. Scrll dwn t the Security sectin. 3. Ensure that the bx fr "Use TLS 1.0" is checked. 4. Click OK. 5. Clse all pen brwser windws. Relaunch the brwser and try again.

4 Nte: Depending n the site/financial institutin there might be issues with using TLS 1.2 and Internet Explrer. If after ensuring that TLS 1.0 is checked and discvering that yu are still unable t cnnect t Online Banking, g ahead and uncheck the "Use TLS 1.2" bx t see if that addresses the issue. Checking r unchecking ther TLS bxes will nt have any effect with trubleshting nline banking and ding s may affect yur ability t successfully access ther sites, s please d nt check anything ther than the abve referred bxes. Update regarding SSL and Pdle: (Dec 2014) POODLE (Padding Oracle n Dwngraded Legacy Encryptin) is a new vulnerability expliting a flaw in SSL (Secure Sckets Layer) 3.0 that has been in the news. SSL 3.0 is a prtcl ver 15 years ld but still used by many web brwsers and servers t encrypt and secure data sent via the Internet between a client and server. While current web brwsers use the TLS (Transprt Layer Security) prtcl by default, mst brwsers will retry failed cnnectins with lder prtcls, including SSL 3.0 if initial cnnectin attempts fail. Older brwsers, such as Internet Explrer 6.0 and earlier, use SSL 3.0 by default and require manual enablement f TLS. POODLE attempts t intentinally fail an initial cnnectin, frcing an attempt t cnnect via SSL 3.0 and is mst likely when using public Wi-Fi r ther nn-trusted netwrks. Once the cnnectin is secured via SSL 3.0, the flaw can be explited t take malicius actin. Due t this vulnerability issues, we will be disabling SSL 3.0 it server side n the DI side. Even if end user wuld still have SSL3 r SSL2 checked in his brwser settings, it wuld still be disabled n ur side and wn t be used, TLS will be used instead. Other pssible settings: Under Optins -> Advanced the fllwing tw settings might alleviate lading issues. Make sure these are checked n. This will enable IE t display cntent mre effectively. "Use sftware rendering instead f GPU rendering" "Enable native XMLHTTP supprt" "Enable DOM Strage" Hw t enable ckies nly frm PremierAmerica.cm using Firefx:

5 1. Bring up the Firefx Brwser and click Optins at the bttm f the screen. 2. Click Privacy n the left menu bar. 3. Under the Histry sectin, select the drp dwn that states Remember Histry and select Use Custm Settings fr Histry. 4. Select Never frm the drp dwn that is titled Accept third-party ckies. Then click Exceptins. 5. Enter PremierAmerica.cm, click Allw and then click Save Changes. Yu will then be returned t the previus screen and nly ckies will be enabled fr the Premier America web site.