MCBDirect Corporate Logging on using a Soft Token Document issue: 2.1 Date of issue: September 2014
Contents About Soft Token authentication... 3 Logging onto MCBDirect Corporate online banking... 4 Soft Token maintenance... 7 Change the Soft Token PIN code... 7 Unlock your Soft Token after wrong PIN entry... 9 Page 2
About Soft Token authentication MCBDirect Corporate online banking requires two-factor authentication for logging on, first a User ID and Password authentication (1 st factor authentication), followed by Soft Token authentication (2 nd factor authentication). Two-factor authentication provides greater security than just a single factor of authentication. While 1 st factor authentication uses information the user knows - a User ID and Password 2 nd factor authentication challenges often also require something the user is holding, such as an egrid or (soft) token. Soft Token authentication involves authenticating using a Security Code dynamically generated by a Soft Token. A Soft Token is a small software application. See for example the Microsoft Windows Soft Token application below. Authenticating to the MCBDirect Corporate online banking application using Soft Token authentication requires the Soft Token software to be installed on a supported computer or mobile device. We have chosen the world-wide leading provider Entrust for our Soft Token solution. Entrust provides a user friendly application Entrust IdentityGuard Soft Token as a desktop solution supported by Microsoft Windows & Macintosh computers, or as the Mobile app Entrust IdentityGuard, supported on mobile devices running ios, Android, BlackBerry OS or Windows Mobile. This Soft Token software is easy to replace and maintain via the Self-Service Portal. Page 3
Logging onto MCBDirect Corporate online banking After downloading & activating a Soft Token via the Self-Service Portal, you can log onto MCBDirect Corporate online banking using the Soft Token. Step 1 Open a web browser and navigate to MCBDirect Corporate online banking by using the online banking link on www.cmbnv.com, or by entering the following URL into the Web browser: https://mcbdirect.mcbbonaire.com/corporate A Logon page appears. Enter your User ID and Password. Click Next, the Soft Token page appears. Page 4
The Soft Token page prompts you to provide a Security Code. Step 2 On your computer or mobile device, open the installed Soft Token application. Step 3 Enter the PIN code that you have chosen during the installation of the Soft Token application. Important: 1. Never give your PIN code to anyone. 2. In the event the computer or mobile device that holds the Soft Token is lost or stolen, immediately notify the bank. Page 5
The token displays a Security Code. Tip: On a PC/Mac you can copy and paste the Security Code using the small Copy to Clipboard icon. Step 4 Enter the Security Code (token response) into the Security Code field on the MCBDirect Corporate web page and click the Submit button. Important: You have 30 seconds to enter the Security Code on the web page before it expires. Congratulations! After a successful authentication, you are logged onto the MCBDirect Corporate online banking website. Page 6
Soft Token maintenance This section describes how to change your PIN code and how to unlock your Soft Token in case you have entered a wrong PIN code more than 5 consecutive times. Change the Soft Token PIN code You can change your PIN code after a successful user authentication. If you don t know your PIN code anymore, please refer to the Wrong PIN code entry section below. Step 1 To access the Settings menu, right-click at the moment that the mouse cursor is above the Soft Token application and select from the small pop-up menu. The Settings screen appears. Step 2 Click the Change PIN button and follow the instructions. First enter your current PIN code. Page 7
Important: The Soft Token application is configured to check for weak (that is, easy to guess) PIN codes and reject them. If you entered a weak PIN code, the Soft Token application displays a message telling you that the entered PIN is not secure enough and tells you to try a different new PIN code. Step 3 Enter a new PIN code, followed by a confirmation of your new PIN code. After a successful PIN code change, the Settings menu shows. Step 4 Click the Cancel button to go back to normal operations. Page 8
Unlock your Soft Token after wrong PIN entry Your Soft Token is configured to use the lock mechanism as a protection against wrong PIN code entries. After you enter 5 consecutive wrong PIN codes, the Soft Token will automatically lock. Important: Once the Soft Token is locked, you will have to obtain the unlock code from the bank before you can continue using the Soft Token. Before proceeding with the steps below, first contact the bank. Step 1 On your computer or mobile device, open the installed Soft Token application. Step 2 During contact with the bank, the support officer will ask you for the PIN Reset Code. This code is displayed in the Soft Token application, after you have clicked the Unlock button. In return, the support officer will give you an Unlock Code. Page 9
Step 3 Enter the code into the Soft Token application and click the Unlock button. If the unlock code is correct, the Soft Token unlocks and prompts you to enter a PIN code, followed by a re-entry of the same new PIN code. (refer to Change the Soft Token PIN code on page 7 for instructions.) Note: If the unlock code is incorrect, the Soft Token application displays an error message, and remains locked until a valid unlock code is entered. Page 10