Certificate First steps with the certificate
CONTENTS: Before you start working with the certificate 4 Activating the certificate in file 6 Activating certificate on smart card 11 2
Dear client, thank you for your confidence in Komerční banka direct banking services. Congratulations on receiving your certificate. What is a personal certificate? Personal certificate is a file containing your identification data. It is used for access to Mojebanka, Profibanka and Direct channel services and for authorization of payments. The certificate is similar to an identity card. Clients prove their identity with the certificate when communicating electronically. Komerční banka offers two ways of storing your personal certificate: 1) Certificate stored in file the file with the certificate is stored on your PC or on storage media such as CD, USB flash disk, etc. Access to the certificate is protected by the password you selected; the certificate is valid for one year (validity can be extended online free of charge, no need to visit your KB branch). If you use the certificate in file to authorize payments, the bank sends you an additional SMS authorization code as extra authentication of your identity. The code is sent to the mobile phone number you have previously registered. The number can only be changed at the KB branch. 2) Certificate stored on smart card the file with the certificate is stored on smart card. Access to the certificate is protected by PIN; the certificate is valid for 2 years (validity can be extended online free of charge). The advantage of this mode of storage is that the certificate cannot be copied from the smart card in any way. This means misuse of the certificate is impossible unless the smart card is physically lost along with PIN. To be able to use the certificate on smart card, a reading device is necessary and utility software must be installed on the computer. For more information, see page 11. To be able to use direct banking applications, it is only necessary to own one Personal certificate, either stored in file on common data storage media or on a smart card. What is a company certificate? Company certificate is a file containing identification data of your company. It is only designed for passive operation within the Direct Channel application. It cannot be used to sign and send payments to the bank. The company certificate is protected by a password you select. It is valid for 2 years (validity can be extended online free of charge). It can be only stored on your PC or on storage media (CD, USB Flash disk...). 3
First steps with the certificate Step 1: Before you start working with the certificate Before running the Certification Wizard for the first time, i.e. when you download the certificate or before logging in to direct banking applications (Mojebanka,...) for the first time, it is recommended to test your computer for the correct configuration suitable for these applications. For more information, see bellow on this page. Step 2a: Activating the certificate in file If you have chosen the certificate in file, it is necessary to download your personal certificate using the Certification Wizard application before logging in to the application for the first time. For more information, see page 6. Step 2b: Activating the certificate on smart card If you have chosen the certificate on smart card, it is necessary to install utility software for your smart card reader before logging in to the application for the first time. For more information, see page 11. BEFORE YOU START WORKING WITH THE CERTIFICATE Before you run Certification Wizard or a direct banking application for the first time, it is recommended to check whether the configuration of your computer is suitable. To be able to change settings or install updates recommended by our configuration wizard, you must be logged in as the Administrator. Online configuration wizard (for users of all direct banking applications) To verify the correct settings of your computer, you can use our simple configuration wizard available from www.mojebanka.cz in the First login section (Test your computer). Configuration wizard will list necessary changes after completion of the test. 4
Important warning: If your computer works correctly, you can start working with the certificate (page 7 or 12). Local configuration wizard Local configuration wizard will help you if you do not succeed in setting the computer using Online configuration wizard. For Mojebanka users: If you wish to find Local configuration wizard, go to www.mojebanka.cz, section Download, Applications, update files. This wizard not only discovers insufficiencies in the settings of your computer, it can also repair them. For Profibanka users: Test your computer by pressing the Test PC button on the initial screen of the Profibanka installer. For Direct channel users: This application does not require any special settings. It is sufficient if your PC meets the requirements specified on www.mojebanka.cz, section Direct channel, option Do I have a compliant computer? 5
ACTIVATING THE CERTIFICATE IN FILE If your computer settings are correct, you can download your certificate in file using Certification Wizard available from www.mojebanka.cz, right menu. Selecting the type of certificate for download On the welcome screen of Certification Wizard, select the type of certificate you want to download, i.e. choose Personal certificate in file (1) or Company certificate in file (2). Your next steps in Certification Wizard will relate to the selected type of certificate. The steps below describe downloading the Personal certificate in file. Company certificate in file can be downloaded in the same way, only company data will be displayed on individual screens instead of personal data. 1. 2. 6
Downloading the certificate For downloading the certificate, click I want new certificate in Certification Wizard. Do the following steps to download your certificate: Step 1: Type in your client s identification number and password Enter your client s identification number (1) specified in the contract of certificate that you concluded at the KB branch. Enter your single-use password to download certificate (2) that you received via SMS. Enter the password exactly the same as it came via SMS, including upper case letters. Then press Send (3). 1. 2. 3. 7
Step 2: Checklist of entered data Your personal or company data that you entered when concluding the contract at the KB branch will appear on the screen. Check the data thoroughly. If it is correct, press Continue (1). If it is incorrect, contact your Relationship Manager and do not continue downloading the certificate. 1. Step 3: Collection of random data Move the mouse indicator inside the blue rectangle in the displayed window. This will generate random data to create your personal or company certificate. 8
Step 4: Location of your request, safety passwords Enter the directory in which you want to save your request for the certificate in the Target directory for request field (1). The working Personal or Company certificate will be saved to this location once you have completed all necessary steps. The default path is set to C:\KBcertifikat directory. This directory is located on your PC (hard disk drive). For safety reasons, it is recommended to manually change the path and save the certificate on portable media (CD, USB Flash disk...). Two safety passwords protect your Personal and Company certificate. Security password (2) of your certificate will be used at every login to Mojebanka, Profibanka and Direct channel services and when signing payments. Therefore, do not forget this password. It is recommended not to use familiar names (such as family members). Using unusual phrases including numbers and special symbols (dots, exclamation marks etc.) is recommended. The password must contain 8 to 14 characters without Czech diacritical marks and must differ from the password for certificate revocation / validity suspension. Password for possible later certificate revocation / validity suspension (3) will be used for online certificate revocation or validity change in case of worries about abuse or for other reasons. The minimum length of the password is 8 characters. It must contain at least 1 upper case letter, 1 lower case letter and 1 special symbol (such as!, @, #, $, %, ^, &, (, ),,,., _ ). Once you have verified the directory and entered all passwords, press Continue (4). 1. 2. 3. 4. 9
Step 5: Downloading certificates Important warning: Wait approximately one minute after sending data. Certificate is automatically downloaded to your computer. The file with Personal or Company certificate will be saved in the directory specified in the previous step. Step 6: Details of new certificate Once you have downloaded your Personal or Company certificate, a window displaying details of the certificate will appear. You have to confirm that your have taken over your Personal or Company certificate from KB. This confirmation will be sent by pressing Sign digitally and send to KB (1). Without sending this confirmation, you will not be able to use Personal or Company certificate. 1. 10
A confirmation will appear after successful sending to KB. From now on, you can fully use your new certificate in file and direct banking services of Komerční banka. For a detailed description of other operations with the certificate (validity extension, suspension, changing password ), it is recommended to use the user guide available on www.mojebanka.cz, section Download User guides and First steps guides. For assistance in working with your certificate and getting more information, you can also call our client line of Komerční banka direct banking on + 420 955 551 556. ACTIVATING CERTIFICATE ON SMART CARD The certificate has been saved on the můjklíč smart card you received in the KB branch. To be able to work with the certificate saved on a smart card, you must have a smart card reader and install the Cryptoplus utility on your PC before the reader is connected for the first time. You can get the smart card reader from your KB branch or use any of the readers specified in the list of readers supported by KB. (4) Once you have tested your computer for using the certificate, you only need to install the Cryptoplus utility on your PC. Important warning: Do not connect the reader before you install Cryptoplus! Installing the Cryptoplus utility on your PC Go to www.mojebanka.cz, section Certificates Certificates on smart cards (1) and under the item User s guide to smart card reader installation (2) you can download the guide taking you through complete installation. Under the item The smart card reader installation (3) to download the installation file for your type of reader. 11
1. 4. 3. 2. 12
Open the smart card reader installation guide and run the downloaded installation file. Follow the instructions of the installation guide and program. From now on, you can fully use your new certificate on smart card and direct banking services of Komerční banka. For a detailed description of other operations with the certificate (validity extension, suspension, changing password ), it is recommended to use the user guide available on www. mojebanka.cz, section Download User guides and First steps guides. For assistance in working with your certificate and getting more information, you can also call our client line of Komerční banka direct banking on +420 955 551 556. 13
12/08 Do you want more information? Just ask. Your Relationship Manager will be pleased to answer any questions you may have. If you wish, you may contact our telebankers on the toll-free KB Infoline at line 800 111 055 or visit www.kb.cz.