GLOBAL PAYMENTS AND CASH MANAGEMENT HSBCnet Application Guide August 2006
HSBCnet Application Guide TABLE OF CONTENT Page Overview 1 Step 1 Verifying the Minimum System Requirements 2 1.1 Operating System Browser 2 1.2 Minimum System Requirements 4 1.3 Firewall Requirement 4 Step 2 Completing the HSBCnet Customer Agreement 5 2.1 HSBCnet Customer Agreement 5 2.2 Customer Associates 9 2.3 Explanatory Notes 13 2.4 Document Checklist 14 Step 3 Initial System Administrator (ISA) Registration 15 3.1 ISA Registration 15 Step 4 Sending the Completed Customer Agreement & Smart Card Ordering 22 4.1 Sending Customer Agreement to the Bank 22 4.2 Smart Card Ordering 23 Step 5 Other SA/User Registration and Entitlement (by ISA) 27 5.1 Other SA/User Registration 27 5.2 User Entitlement 29
HSBCnet Application Guide OVERVIEW This Guide is tailored to lead you through the HSBCnet application process. To facilitate initial HSBCnet registration, a step-by-step approach has been adopted for this Guide along with the following five steps that will guide you through the application process. Step 1: Verify that you meet the minimum system requirements Step 2: Complete the HSBCnet Customer Agreement (for existing Hexagon customers) Step 3: Perform online registration (by Initial System Administrators [ISA]) Step 4: Send the completed Agreement to us Step 5: Set up the rest of your online profile (by ISA) Should you have any difficulties during the process, please feel free to contact us by the contact details attached/specified in the e-mail. 1
Step 1 VERIFY THE MINIMUM SYSTEM REQUIREMENTS 1.1 Operating System - Browser HSBCnet is designed to work with the following browser versions/operating systems. The best way to check if you have 128-bit encryption in Internet Explorer is to click on Help in the toolbar, then About Internet Explorer and check that the cipher strength is 128-bit. Operating System Windows 98/98SE/ME Windows NT 4.0 (SP6) Windows 2000 Pro (SP2 and above) Windows XP (SP1 and above) Browser IE 5.5 and above IE 5.5 and above IE 5.5 and above IE 6 and above Further information for installing smart card readers may be found in the smart card installation guide available on the CD that will be sent with your card reader, or your additional information can be found on www.hsbcnet.com. Click on Getting Started Guide and navigate to smart card installation. Fig 1.2 All browser versions must be protected by 128-bit encryption. To check the level of security being used, look for a security padlock at the bottom right of your browser this will establish the level of security being used. Fig 1.1 2
Step 1 VERIFY THE MINIMUM SYSTEM REQUIREMENTS Your Internet Explorer (IE) must allow cookies, the use of JavaScript, scripting, plugins enabled, ActiveX enabled and support 128-bit RC4 encryption. These are the suggested IE settings: Items Recommended setting Security Level for Zone Medium Download signed ActiveX Control Prompt Download unsigned ActiveX Control Disabled Initialise & script ActiveX control not marked as safe Disabled Grant ActiveX controls and plug-ins Enabled Script ActiveX marked as safe for scripting Enabled File download Enabled Font download Enabled Java Permissions High safety Access data server across domain Disabled Allow meta refresh Enabled Drag and drop copy and paste Enabled Installation desktop items Prompt Launching programs and files in an Iframe Prompt Navigate sub-frame across different domains Enable Software channel permissions Medium safety Submit non-encrypted form data Enable User data persistence Enable Scripting active Enable Allow paste op via script Enable Script of Java applets Enable User authorisation Enable SSL Version 2 Enable SSL Version 3 Enable If your Internet Explorer settings meet the above criteria, then you should have no problems accessing the service. However, if there are gaps in your system compatibility, then you can try some of the following: Download the latest browser from the Microsoft Web site http://www.microsoft.com/windows/ie Certain versions of Microsoft Internet Explorer may require additional patches, which are available from http:.//www.microsoft.com/technet/security/default.mspx 3
Step 1 VERIFY THE MINIMUM SYSTEM REQUIREMENTS 1.2 Minimum System Requirements 1.2.4 Microsoft JVM Build 2339, version 1.1 - Minimum 1.2.1 Hardware - PC Specification Pentium Processor: 500MHz (min) / 600MHz and above Main Memory (RAM): 256mb (min) / 512mb and above Disk Space (virtual memory): 384mb (min) / 768mb and above Temporary Internet Files Folder: +-50mb (min) / +-500mb (recommended) (recommended) (recommended) (recommended) Build 3802, version 1.1 - Supported Build 3805, version 1.1 - Supported Build 3810, version 1.1 - Recommended Further information for installing smart card readers may be found in the smart card installation guide available on the CD that will be sent with your card reader, or you can download it from Gemplus official Web site: http://support.gemplus.com/gemdownload/readers/index.aspx 1.2.2 Additionally for Smart Card Reader: Serial, USB, or PC Card port available CD-ROM drive 1.2.3 Browsers and Java Virtual Machines (JVMs) 1.3 Firewall Requirement The address of HSBCnet is: www.hsbcnet.com HSBCnet is on the public domain, therefore, users are not required to have a fixed IP nor they are required to specify the bank s IP address in their firewall Your firewall must allow HSBCnet to use port 80 for HTML and port 443 for SSL IE 5.5 - Recommended - ONLY with Microsoft JVM 3805 or higher. Service Pack 2 is recommended, but Service Packs 0 and 1 are supported IE 6.0 - Supported - Version 6.0 does not include a default JVM. If your IE 6.0 was updated from IE 5.0, the JVM from IE 5.0 is preserved. Otherwise, one can be downloaded from Sun Microsystems, or Microsoft as part of the IE Service Pack 1. NOTE: The JVM cannot be downloaded on its own from Microsoft Sun Java Plugins - 1.4.4_05 - Recommended 4
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.1 HSBCnet Customer Agreement Please use the same name as the one selected during the online registration process, with a minimum of eight alphanumeric characters Please nominate at least one ISA. An additional ISA is recommended for contingency purpose Fig 2.1 Initial System Administrators (ISAs) are employees of your organisation who are responsible for the setup and control of end users and other System Administrators 5
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.1 HSBCnet Customer Agreement Please refer to explanatory notes 2.3.2 Please refer to explanatory notes 2.3.1 Fig 2.2 6
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.1 HSBCnet Customer Agreement Tick the appropriate boxes to map your existing services over to HSBCnet For Time Deposit account Fig 2.3 7
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.1 HSBCnet Customer Agreement Must be signed by the authorised signatories of any of your accounts maintained with the Bank Please enter the currency in which you want payment authorisation limit to be represented Fig 2.4 8
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.2 Customer Associates Please complete Section 4 ONLY IF your Associates incorporated in and / or hold accounts with HSBC in India, Malaysia, Pakistan, Taiwan and Thailand. Please refer to explanatory notes 2.3.3 Must be signed by the authorised signatories of any of your accounts maintained with the Bank Fig 2.5 9
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.2 Customer Associates Fig 2.6 10
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.2 Customer Associates Please refer to explanatory notes 2.3.4 Please refer to the Note provided in the Certificate of Due Authorisation for Customer for completion guidelines Fig 2.7 11
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.2 Customer Associates Please refer to expalantory notes 2.3.5 Please refer to the Note provided in the Certificate of Due Authorisation for Customer Associate for completion guidelines Fig 2.8 12
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.3 Explanatory Notes 2.3.1 Principal Bank and Governing Law Please refer to the following table for completion: 2.3.2 Customer Associate Indemnity Various Asia-Pacific countries/locations accept the Customer Associate Indemnity, which simplifies your application process. Please complete Section 2 if your Customer Associates are incorporated in and/or hold accounts with HSBC in any countries other than in India, Malaysia, Pakistan, Taiwan and Thailand. Customer Location Principal Bank Governing Law Australia HSBC Bank Australia Limited Australia Bangladesh The Hongkong and Shanghai Banking Corporation Limited Bangladesh Brunei The Hongkong and Shanghai Banking Corporation Limited Brunei China The Hongkong and Shanghai Banking Corporation Limited P.R.C. Hong Kong The Hongkong and Shanghai Banking Corporation Limited Hong Kong 2.3.3 Section 4 Customer Associate Details As Customer Associate Indemnity is not accepted in India, Malaysia, Pakistan, Taiwan and Thailand, please complete Section 4 for each of your Customer Associates if they are incorporated in and/or hold accounts with HSBC in these countries. India The Hongkong and Shanghai Banking Corporation Limited India Indonesia The Hongkong and Shanghai Banking Corporation Limited Indonesia Japan The Hongkong and Shanghai Banking Corporation Limited Japan Korea The Hongkong and Shanghai Banking Corporation Limited Korea Macau The Hongkong and Shanghai Banking Corporation Limited Macau Malaysia HSBC Bank Malaysia Berhad Malaysia Mauritius The Hongkong and Shanghai Banking Corporation Limited Mauritius New Zealand The Hongkong and Shanghai Banking Corporation Limited New Zealand Pakistan The Hongkong and Shanghai Banking Corporation Limited Pakistan Philippines The Hongkong and Shanghai Banking Corporation Limited Philippines Singapore The Hongkong and Shanghai Banking Corporation Limited Singapore Sri Lanka The Hongkong and Shanghai Banking Corporation Limited Sri Lanka 2.3.4 Certificate of Due Authorisation for Customer Mandatory for all the customers, Certificate of Due Authorisation for Customer is a simplified form of the Board minutes in support of the execution of the HSBCnet Customer Agreement. 2.3.5 Certificate of Due Authorisation for Customer Associate If you have completed Section 4 for each of your Customer Associates incorporated in and/or hold accounts with HSBC in India, Malaysia, Pakistan, Taiwan and Thailand, please also complete this form for each of them, so as to support the execution of the HSBCnet Customer Agreement. Taiwan The Hongkong and Shanghai Banking Corporation Limited Taiwan Thailand The Hongkong and Shanghai Banking Corporation Limited Thailand Vietnam The Hongkong and Shanghai Banking Corporation Limited Vietnam 13
Step 2 COMPLETE THE HSBCnet CUSTOMER AGREEMENT 2.4 Document Checklist Applicable if you do not have India, Malaysia, Pakistan, Taiwan and Thailand accounts Section 1 + Section 2 + Section 3 + Certificate of Due Authorisation for Customer Applicable if you have India, Malaysia, Pakistan, Taiwan and Thailand accounts Section 1 + Section 2 + Section 3 + Section 4 + Certificate of Due Authorisation for Customer + Certificate of Due Authorisation for Customer Associate 14
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION 3.1 Initial System Administrator (ISA) Registration 3.1.1 Start internet browser and go to address http://www.hsbcnet.com 3.1.2 On the HSBCnet homepage, click Register on the top left hand corner box to reach the following screen (Fig 3.2): Click to register Once you select the preference, an information page will be prompted for input Fig 3.1 Fig 3.2 15
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION 3.1.3 Please enter the details of your Main HSBC Group Contact and click Continue Please enter your Hexagon Migration Team of Payment and Cash Management contact person Please select Global Payments and Cash Management Click Continue to proceed Fig 3.3 16
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION 3.1.4 Please enter your Personal Information and click Continue Building/apartment number can be up to 40 characters long and Street number can be up to 30 characters. Acceptable characters are letters, numbers, &, () # \. - and space Input 0000 for countries without postal code Fig 3.4 17
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION 3.1.5 Please enter your logon information. For HSBCnet, the credentials required to log a Username (8-36 alphanumeric characters with no space and non case sensitive) on to the System consist of three components: Please enter a unique Username Note: You will be prompted to enter another Username if the one you requested has already been used by an existing HSBCnet User. Once the Username is confirmed, please put this into the HSBCnet Username field on the HSBCnet Customer Agreement. b Password (8-36 alphanumeric characters with no space and non case sensitive) Please enter the Password twice c Note: The System will remind you to change this password every 90 days. You can choose to change the password or have it remain unchanged. Memorable Answer (at least 10 characters) Note: You need to set a question and answer that are memorable to you. The System will allow you to request for a reminder of the Memorable Question when you log on to the System in the future but it is important that you remember the Memorable Answer. Fig 3.5 Set a Memorable Question and enter the Memorable Answer twice Please click Continue to proceed 18
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION 3.1.6 Please select two Security Information Reset Questions and key in your answers. The Security Information Reset Questions are for you to reset your Password or Memorable Answer when forgotten or for security reason in the future. You can reset them by answering the two security questions. Please select two Security Questions and enter the Answer twice Please click Submit to proceed Fig 3.6 19
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION 3.1.7 If the Username you requested is available and all the essential information has been provided correctly, the Data Protection and Privacy statement will be displayed. Please read the HSBC Data Protection and Privacy Policy Statement and click Accept to proceed Click Accept to proceed Fig 3.7 Fig 3.8 20
Step 3 INITIAL SYSTEM ADMINISTRATOR (ISA) REGISTRATION Congratulation! Your registration is successful! The following screen will appear when your registration is successful. You may print this page out to remind yourself on Username, Memorable Questions and Security Information Reset Questions. Your Username, Memorable Question and the two Security Questions will be displayed as confirmation Click Finish to complete registration Fig 3.9 21
Step 4 SENDING THE COMPLETED CUSTOMER AGREEMENT AND SMART CARD ORDERING (BY ISA) 4.1 Sending the completed Customer Agreement to the Bank Please send the completed HSBCnet Customer Agreement (for existing Hexagon customers) for Asia-Pacific to the contact details attached/specified in the email. Points to Remember: The Terms and Conditions will form part of the Agreement Within 7 working days, your ISAs will receive a welcome e-mail from CIBMSupport@hsbc.com guiding them through how to setup additional users via the HSBCnet System 5 days after the receipt of welcome e-mail, your ISAs will receive two parcels containing the smart cards, card readers and PINs via courier 22
Step 4 SENDING THE COMPLETED CUSTOMER AGREEMENT AND SMART CARD ORDERING (BY ISA) 4.2. Smart Card Ordering 4.2.1 Upon ISA Approval by HSBC, a smart card package containing a reader and a smart card will be delivered by courier. PIN will be delivered separately. Expected delivery time is 5 working days. Please notify the Bank if you do not receive either of the packages within 7 working days. Note: Smart card contains a unique personal digital certificate in association with a PIN for a user to perform administrative function, file upload and authorization. When an ISA or a HSBCnet user accesses functions/tools such as User Management tool, Registration Status tool, Maintain Signature Limit and Payment Authorization, HSBCnet will prompt for smart card authentication. 4.2.2 You may check the status of delivery on your smart card by using the User Management Tool under the Administration tab. 23
Step 4 SENDING THE COMPLETED CUSTOMER AGREEMENT AND SMART CARD ORDERING (BY ISA) 4.2.3 Select Query Smart Card Information in the following screen and search for the user: Fig 4.1 24
Step 4 SENDING THE COMPLETED CUSTOMER AGREEMENT AND SMART CARD ORDERING (BY ISA) Search for the User by category Fig 4.2 25
Step 4 SENDING THE COMPLETED CUSTOMER AGREEMENT AND SMART CARD ORDERING (BY ISA) Details in the screen shows the status for your latest request: Fig 4.3 26
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.1 Other SA/User Registration 5.1.1 After the ISA s registrations have been approved by HSBC, a Welcome E-mail will be sent to the ISA s e-mail address provided during registration. 5.1.2 For registration of other System Administrators (SAs)/Users of the Company, the ISA needs to forward the URL provided in the Welcome E-mail to the SAs/Users to start. Please forward this URL for other users registration The URL is unique for every customer You may also regenerate this Welcome E-mail from HSBCnet by using the User Management Tool under the Administration function Fig 5.1 27
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.1.3 New end users should perform registration following the URL on the ISA s Welcome E-mail. The User Registration page is the same as the ISA registration page, except the HSBCnet profile ID of your company will be displayed. 5.1.4 After entering the HSBCnet website following the URL on the ISA s Welcome E-mail, click Register on the top left hand corner box to perform SA/user registration. The registration procedure is same as that of ISA registration. Please refer to Step 3 for details. Note: If you are nominated as end user for more than one HSBCnet Customer portfolios, please perform registration for each portfolio and use a unique Username for each portfolio. 28
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2 User Entitlement 5.2.1 Go to www.hsbcnet.com and key in your logon username as follows: Go to www.hsbcnet.com Key in your logon Username and click Go Fig 5.2 29
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.2 Key in your memorable answer and the required three random digits of your HSBCnet User profile as follows: Key in your memorable answer and the required three random digits of your HSBCnet User profile password Fig 5.3 30
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.3 Select the Administration tab when your personal page appears: Select the Administration tab when your personal page appears Fig 5.4 31
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.4 Click on the User whom you want to entitle. To display all the available user profiles, click the Open More. button. You can also edit the filtering criteria of the user profile by clicking the Edit Tool Pencil. Click the Edit Tool Pencil and proceed to filter user profile by status Click on the User whom you want to entitle Click Open More to display all the available User profiles Fig 5.5 32
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) Tick Submitted (for new user), Active or Approved (for ISA) and/or other appropriate statuses Click Apply to confirm Fig 5.6 33
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.5 For performing user entitlement, smart card authentication will be required by the system. Please proceed as follows: Fig 5.7 When the Insert Smart Card screen appears, insert the smart card into the reader and click Continue 34
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) On the Client Authentication screen, select the right certificate and click OK Fig 5.8 Enter your PIN and click OK to complete the process Fig 5.9 35
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.6 After smart card authentication, the following screen will appear. Click on the User whom you want to entitle Fig 5.10 36
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.7 If the status of the selected user is Submitted, Active or Approved, the Registration Status Tool will display the User profile details as follows: Review the User profile details by scrolling down the page Fig 5.11 37
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) Fig 5.12 Confirm User type, End User or System Admin as appropriate, and click Submit 38
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.8 The Registration Status Tool Acknowledgement appears. Click Go to Set up User Entitlement to entitle the User Fig 5.13 39
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.9 Entitle the HSBCnet online services to the User on the Maintain User Access Level screen as follows: The User status has been changed to Awaiting Entitlement You can entitle the HSBCnet online services to the user by clicking the appropriate links under the Service available section. Please refer to 5.2.10 for example You can further entitle other HSBCnet online tools to the User by checking the selection boxes Click Submit to proceed Note: If you are operating the system with Sole Authority, the User status will be changed to Approved. If you are operating the system with Dual Authority, the User Fig 5.14 status will be changed to Pending Setup Approval. 40
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.10 Clicking on the various links available displays the micro-entitlements for each service. For ACH micro-entitlement, input the appropriate details as follow: Input the Daily Authorisation Limit (if any) entitled by the user. Check the appropriate boxes under ACH Credit Authority Details and confirm to proceed Fig 5.15 41
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.11 If the User has been assigned a tool entitlement which requires a smart card, the following screen appears. Fill in the smart card collateral details for the User and click Submit after completion Note: For Submitted User, the User status will be changed to Pending Setup Approval. For Active/Approved user, the user status will be changed to Pending Entitlement Change. Fig 5.16 42
Step 5 OTHER SA/USER REGISTRATION AND ENTITLEMENT (BY ISA) 5.2.12 After the completion of the entitlement, request another SA to perform the following steps: Log on to HSBCnet Go to Registration Status Tool and filter those Pending Setup Approval and Pending Entitlement Change User profiles Review the User details Click Approve to approve the changes The User will receive an e-mail from CIBMSupport@hsbc.com confirming completion of HSBCnet registration. 43