------------------------------------------------------------------- Page -------------------------------------------------------------------- 1

Oct 19

Login ID & Password FAQs

1 How Do I Change My Password? 2 I Have Forgotten My Password, What Must I Do? 3 How Do I Resolve These Errors? 3.1 Your account is unacknowledged / disabled 3.2 Your account is suspended due to having exceeded violation count 3.3 Your account is de-activated/deleted due to inactivity for a period of time 4 How Do I Create a New User Account (i.e. login ID and Password)? 5 How Do I Re-activate a User Account 6 How Do I Get A New Password 7 How long does it take to create/re-activate a Login ID/password? 8 All my DSAs are unable to access PORTNET®, how to re-activate my Login ID

urgently? 9 How to fill the Login ID Service Request Form? 10 What are the DSA’s Functions?

10.1 Add User (create) new login ID 10.2 View User Particulars 10.3 Delete Login ID 10.4 Update User Profile 10.5 Get New Password 10.6 Maintain User Account Status

a) Acknowledge a new login ID or reactivate a disabled ID. b) Reactivate an ID that has exceeded violation count. c) Reactivate an ID that has been inactive for a period of time. d) Reactivate an expired password.

10.7 I’m a DSA, how do I check whether my user’s login ID is active? 10.8 I’m a DSA and I have accidentally deleted my login ID, what should I do?

11 How Do I Nominate a DSA?

12 What are the Security Guidelines on Login ID and Passwords? 13 How do I access the Portnet User Guide? 14 User Access

14.1 I am not authorised to access a transaction in PORTNET®, how do I grant the access rights?

14.2 Can I copy/duplicate roles from one user to another?

------------------------------------------------------------------- Page -------------------------------------------------------------------- 2

Oct 19

15 Portnet Second Factor Authentication (2FA)

15.1 What is Second Factor Authentication(2FA)? 15.2 Why is 2FA needed? 15.3 When is the use of the 2FA required

16 Installation of Google Authenticator (Pre-Requisite before 2FA) 16.1 How do I install Google Authenticator application? 16.2 Set up of 2FA

------------------------------------------------------------------- Page -------------------------------------------------------------------- 3

Oct 19

1 How Do I Change My Password

1.1 Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

You will see this screen:

1.2 Click “Change Password”. You will see this screen:

------------------------------------------------------------------- Page -------------------------------------------------------------------- 4

Oct 19

1.3 Enter the current password. Enter the new password. Enter the new password again to confirm. Click “Change Password”. You can start using the new password immediately.

Note: Your password should contain at least 8 alpha-numeric characters. Do not use passwords that contain in full or in part your login ID, your name or your NRIC number. Do not re-use the last 3 passwords.

Not sure what is a good and robust password? Click Here.

Back to Top

2 I Have Forgotten My Password, What Must I Do? If you are not the DSA: 2.1 Ask your DSA to process the “Get New Password” transaction to generate a new password for

you.

DSA is not sure how to generate a new password? Click Here . 2.2 If your DSA submits your office email address and business mobile number, you will receive

your new password via SMS. Please note that the password expires within 480 mins. If you fail to log in within the 480 mins, your DSA will have to process “Get New Password” again to generate another new password for you. You will be prompted to change your password the first time you log in.

2.3 If your DSA does not enter your office email address or business mobile number, your password

will be sent to your DSA via hardcopy mailer which takes 3-5 working days. Your DSA will have to activate your ID and pass the mailer to you. You will be prompted to change your password the first time you log in.

If you are the DSA and you have forgotten your password: 2.4 Your company should have at least 2 DSAs, please ask your other DSA to process the “Get New

Password” transaction to generate a new password for you. Your other DSA can refer here for instructions.

2.5 Your other DSA must ensure that your office email address and business mobile number are

correctly entered as the password will be sent via SMS to your business mobile number. Please note that the password expires within 480 mins. If you fail to log in within the 480 mins, your other DSA will have to process “Get New Password” again to generate another new password for you. You will be prompted to change your password the first time you log in.

2.6 If your office email address or business mobile number is not entered, your password will be sent to your other DSA via hardcopy mailer which takes 3-5 working days. Your other DSA will have to activate your ID and pass the mailer to you. You will be prompted to change your password the first time you log in.

2.7 If your other DSA’s ID is also inactive, he / she can request Portnet.com to reactivate your ID by

filling up this form and email it to csc@portnet.com stated therein. The process is similar to Manual Processing. After your own ID has been reactivated, you can reactivate your other DSA’s ID online.

http://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Portnet.com_User_Login_ID_Service_Request_Form.pdfmailto:csc@portnet.com

------------------------------------------------------------------- Page -------------------------------------------------------------------- 5

Oct 19

2.8 If you are the only DSA, you will have to ask your company’s Director or General Manager or an

authorised party of similar status to submit the form. To prevent encountering this same problem

in future, why not ask your company to nominate another DSA. Refer to Nomination of DSA.

Not sure what is Manual Processing? Click Here.

Back to Top

3 How Do I Resolve These Errors

3.1 Your account is unacknowledged/disabled. You will see this screen:

The account status could be “Unacknowledged” if it is a manually created new login ID or new password. The DSA needs to activate the login ID before the user can use it.

The account status could be “Disabled”. The DSA will be able to advise the reason for the account being disabled. If necessary, the DSA can activate the login ID and the user can use it.

DSA not sure how to activate a login ID? Click here for instruction.

Back to Top

3.2 Your account is suspended due to having exceeded violation count

To prevent unauthorised use of your account, your login ID is de-activated after 3 unsuccessful login attempts. You will see this screen:

If you are not the DSA: 3.2.1 Your DSA can re-activate your login ID and you can use it immediately.

DSA not sure how to re-activate a login ID? Click here.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 6

Oct 19

If you are the DSA: 3.2.2 Your company should have at least 2 DSAs, ask your other DSA to re-activate your login

ID and you can use it immediately.

3.2.3 If your other DSA’s ID is also inactive, he can request Portnet.com to reactivate your ID by filling

up this form and email it to csc@portnet.com stated therein. The process is similar to manual processing. After your own ID has been reactivated, you can reactivate your partner DSA’s ID.

Not sure what is Manual Processing? Click Here. 3.2.4 If you are the only DSA, you will have to ask your company’s Director or General

Manager or an authorised party of similar status to submit the form. To prevent encountering this same problem in future, why not ask your company to nominate another DSA.

Not sure how to nominate a DSA? Click here.

Back to Top

3.3 Your Account is De-activated/Deleted due to Inactivity for a Period of Time

In line with our security policies, login IDs that are inactive for 90 days will be de-activated and those that are inactive for 180 days will be deleted. You will see this screen:

If you are not the DSA:

3.3.1 Your DSA can re-activate your login ID if it has been de-activated or create a new login ID if it has been deleted.

DSA not sure how to re-activate a login ID? Click here.

DSA not sure how to create a new login ID? Click here. If you are the DSA:

3.3.2 Your company should have at least 2 DSAs, ask your other DSA to re-activate your login

ID, or create a new ID if it has been deleted.

Not sure how to re-activate a login ID? Click here.

Not sure how to create a new login ID? Click here.

3.3.3 If your other DSA’s ID is also inactive, he can request Portnet.com to reactivate your ID by

filling up this form and email it to csc@portnet.com stated therein. The process is similar

http://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Portnet.com_User_Login_ID_Service_Request_Form.pdfmailto:csc@portnet.comhttp://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Portnet.com_User_Login_ID_Service_Request_Form.pdfmailto:csc@portnet.com

------------------------------------------------------------------- Page -------------------------------------------------------------------- 7

Oct 19

to manual processing. After your own ID has been reactivated, you can reactivate your partner DSA’s ID.

Not sure what is Manual Processing? Click here. 3.3.4 If you are the only DSA, you will have to ask your company’s Director or General Manager

or an authorised party of similar status to submit the form. To prevent encountering this same problem in future, why not ask your company to nominate another DSA.

Not sure how to nominate a DSA? Click here.

Back to Top

4 How Do I Create a New User Account (i.e. Login ID and Password)?

Online Processing:

4.1 Only the DSA can create a new user account. A user account comprises the login ID (also known as the username) and the password. The fastest way is to process online via PORTNET®

and no administrative fee is chargeable, click here for instructions.

4.2 If a DSA is unable to access PORTNET® to create/reactivate a user account, he can request

Portnet.com to process on his behalf by filling up this form and email it to csc@portnet.com stated therein.

Processing incurs an administrative fee of $10 per ID.

By the end of that working day, latest by next working day.

PORTNET® will send the user the login ID using the office email address specified, and the password via an SMS to the business mobile number specified. The user must log on to the PORTNET® website within 480 minutes failing which, the password will expire. If this happens, the DSA will have to get another new password.

Back to Top

5 How to Reactivate a User Account

Online Processing:

5.1 Only the DSA can reactivate a user account. The fastest way is to process online via PORTNET® and no administrative fee is chargeable.

To reactivate with a new password for a current ID, use “Get New Password” to

generate a new password, refer here for instructions. To reactivate a current ID without a new password (i.e. the user can still remember

his current password), refer here for instructions.

http://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Portnet.com_User_Login_ID_Service_Request_Form.pdfmailto:csc@portnet.com

------------------------------------------------------------------- Page -------------------------------------------------------------------- 8

Oct 19

Manual Processing:

5.2 If a DSA is unable to access PORTNET® to reactivate the user account, he can request

Portnet.com to process on his behalf by filling up this form and email it to csc@portnet.com stated therein.

Processing incurs an administrative fee of $10 per ID.

By the end of that working day, latest by next working day.

PORTNET® will send the user the login ID using the office email address specified, and the password via an SMS to the business mobile number specified. The user must log on to the PORTNET® website within 480 minutes failing which, the password will expire. If this happens, the DSA will have to get another new password.

Back to Top

6 How to Get New Password

Only the DSA can perform the “Get New Password” function which will generate a new password. Upon generation, the user will receive: - An SMS to his business mobile phone containing the new password - An email informing him that a new password has been sent to his business mobile phone. Please note that the password will expire within 480 mins. The user will be prompted to change his password the first time he logs in.

Click here for details.

Back to Top

7 How long does it take to create/re-activate a Login ID/password?

On-line Processing Timeline Admin Fee

Without new password Immediate None

With new password Immediate None

Manual Processing Timeline Admin Fee

Without new password 1-2 working days upon receiving form. $10 per ID

With new password 1-2 working days upon receiving form. $10 per ID

Back to Top

8 All my DSAs’ user IDs are unable to access PORTNET®, how to re-activate

my ID urgently? 8.1 If all DSAs are unable to access PORTNET® to create the user account, any one of the

DSAs can request Portnet.com to process on his behalf by filling up this form and email it to csc@portnet.com.

Processing incurs an administrative fee of $10 per ID.

By the end of that working day, latest by next working day

http://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Portnet.com_User_Login_ID_Service_Request_Form.pdfmailto:csc@portnet.comhttp://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Portnet.com_User_Login_ID_Service_Request_Form.pdf

------------------------------------------------------------------- Page -------------------------------------------------------------------- 9

Oct 19

PORTNET® will send the user the login ID using the office email address specified, and the password via an SMS to the business mobile number specified. The user must log on to the PORTNET® website within 480 minutes failing which, the password will expire. If this happens, the DSA will have to get another new password.

Back to Top

9 How to fill the User Login ID Service Request Form.

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 10

Oct 19

10 What are the DSA’s Functions?

The following functions are performed only by DSAs to manage user login accounts. Click on the respective links to view details of each function:

Add User (Create) new login ID

View User Particulars

Delete Login ID

Update User Profile

Get New Password

Maintain User Account Status:

a) Acknowledge a new login ID or reactivate a disabled ID. b) Reactivate an ID that has exceeded violation count. c) Reactivate an ID that has been inactive for a period of time. d) Reactivate an expired password.

************************************************************************************************************

10.1 Add User (Create) New User Account - i.e. New Login ID and Password: Only the DSA can create a new user account.

Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

You will see this screen: Click “User Information Administration”.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 11

Oct 19

You will see this screen:

Click “Add User”. A notice showing the DSA responsibilities will be shown:

Click “Accept” to continue. A second notice showing the use of office email address and business mobile number for receiving the new account details will be shown.

Click “OK” to continue.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 12

Oct 19

On the next screen, enter the of the new user. For control and security reasons, the user’s business mobile number cannot be the same as any of his company’s DSAs’ business mobile number. After entering all click Add User to confirm.

If a valid office email address and business mobile number is entered, PORTNET® will send your user the login ID using the email address specified, and the password via an SMS to the mobile number specified. The user must log on to the PORTNET® website within 480 minutes failing which, the password will expire. If this happens, the DSA will have to get a new password.

If a valid office email address and business mobile number is not given, a hardcopy password mailer containing the login ID and password will be mailed to the DSA in 3-5 working days. Upon receipt of the mailer, the DSA has to activate the login ID and set the account status from “Unacknowledged/Disabled” to “Force Password Change”. Upon activation, the DSA will then pass the password mailer to the user for immediate use.

In either case, upon successful login, the user will be prompted to change the password. After the password has been changed, the “Account Status” will be reflected as “Active”.

Not sure how to activate a login ID? Click here.

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 13

Oct 19

10.2 View User Particulars

Only the DSA can view all users’. Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

You will see this screen:

Click “User Information Administration”. You will see this screen:

Select the user you wish to view by clicking on the checkbox. Click “View User”. The user’s will be displayed for your viewing. Click “Close” to end.

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 14

Oct 19

10.3 Delete User ID

Only the DSA can delete a user ID. Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

You will see this screen:

Click “User Information Administration”. You will see this screen:

Select the user you wish to delete by clicking on the checkbox. Click Delete.

The Confirmation screen will be displayed as shown below. You can delete multiple users by selecting multiple checkboxes. Click Confirm Delete.

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 15

Oct 19

10.4 Update User Profile

DSA can update any user profile. Individual users can also update their own profile. Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

You will see this screen:

Click “User Information Administration”. You will see this screen:

Select the user you wish to update by clicking on the checkbox.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 16

Oct 19

Click Update User Profile. You will see this screen:

Update the relevant information. Click “Update” to save the changes.

User profile is successfully updated. Click Close to end.

Back to Top 10.5 How to Get New Password

Only the DSA can perform the “Get New Password” function which will generate a new password. Upon generation, the user will receive: - An SMS to his business mobile phone containing the new password - An email informing him that a new password has been sent to his business mobile phone. Please note that the password will expire within 480 mins. The user will be prompted to change his password the first time he logs in.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 17

Oct 19

To perform the “Get New Password” function, the DSA must log in to PORTNET® and click “User Administration” (located on the right corner of the top orange bar):

You will see this screen: Click “User Information Administration”.

You will see this screen:

Select the login ID of the user whom you want to generate a new password by clicking on the checkbox. Click “Get New Password”.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 18

Oct 19

The following notice showing the DSA responsibilities will be shown.

Click “Accept” to continue.

A second notice showing the use of office email address and business mobile number for receiving the new account details will be shown. Click “Update Business Mobile No./Office Email” to update business mobile number / office email address.

On the next screen, you can enter office email address and business mobile number of the user and click “Update and Get New Password”. If there is more than 1 business mobile number / office email address, the 1st number will be used to receive the password and the 1st office email address will be used to receive an email informing the user that a new password has been generated for him.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 19

Oct 19

For control and security reason, user’s business mobile cannot be the same as his company’s DSA’s business mobile.

If a valid office email address and business mobile number is specified, PORTNET® will send the password via an SMS to the specified business mobile number. The user will also receive an email informing him that a new password has been sent to his mobile.

The user must log on to PORTNET® within 480 minutes failing which, the password will expire. If this happens, the DSA will have to repeat the same process to get another new password for the user.

If a valid office email address and business mobile number is not given, a hardcopy password mailer containing the login ID and password will be mailed to the DSA in 3-5 working days. Upon receipt of the mailer, the DSA has to activate the user’s login ID by changing the account status from “Unacknowledged/Disabled” to “Force Password Change”. Upon activation, the DSA will then pass the password mailer to the user for immediate use.

In either case, upon successful logon, the user will be prompted to change the password. After the password has been changed, the “Account Status” will be reflected as “Active”.

Not sure how to activate a login ID? Click here .

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 20

Oct 19

10.6 Maintain User Account Status

The maintain user account status functions are performed only by DSAs. Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

Click “User Information Administration”.

Select the user by clicking the respective checkbox. “Click Maintain User Status”.

Click on the following links to perform the respective functions:

a) Activate an ID, i.e. change the account status from “Unacknowledged/Disabled” to “Forced Password Change”.

b) Reactivate an ID that has exceeded violation count, i.e. change the account status from “Exceeded Violation Count” to “Active”.

c) Reactivate an ID that has been inactive for a period of time, i.e. change the account status from “Inactivity for a Period of Time” status to “Active”.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 21

Oct 19

d) Reactivate an ID for expired password, i.e. change the account status from “Password expired” to “Active”.

*********************************************************************************************************

a) To activate an ID by changing the account status from “Unacknowledged/Disabled” to “Forced Password Change”.

Only the DSA can activate an ID. DSA logs in to PORTNET® and click on “Support” on the menu bar. Then click “User Administration” under “Security”. For a new login ID and/or newly generated password, the “Account Status” will display “Unacknowledged/Disabled”. In the screen below, click the drop-down list and select “Force Password Change” to compel the user to change his password upon login. If you are not sure how to get to this screen, scroll up to start from Section 10.6.

Click “Update”.

Click Close to end. The user will be able to use the ID/new password immediately.

Back to Top

b) To reactivate an ID that has exceeded violation count, change the account status

from “Exceeded Violation Count” to “Active”.

The “Account Status” will display “Exceed violation count”, click the drop-down list and select “Active”. If you are not sure how to get to this screen, scroll up to start from Section 10.6.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 22

Oct 19

Click “Update”.

Click Close to end. The user will be able to use the ID immediately.

c) To reactivate an ID that has been inactive for a period of time, change the account status from “Inactivity for a Period of Time” status to “Active”.

The “Account Status” will display “Inactivity for a period of time”, click the drop-down list and select “Active”. If you are not sure how to get to this screen, scroll up to start from Section 10.6.

Click “Update”. Click “Close” to end. The user will be able to use the ID immediately. This is assuming that your user can still remember his password; If he has forgotten his password, you will

have to Get a New Password for him.

Back to Top

d) To reactivate an ID for expired password, change the account status from

“Password expired” to “Active

The “Current Account Status” will display “Password Expired”, click the drop-down list and select “Active” to change status to “Active”. If you are not sure how to get to this screen, scroll up to start from Section 10.6.

Click Update. When the user logs in with the old password, the system will ask the user to change his password. Click Close to end. The user will be able to use the ID immediately.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 23

Oct 19

This is assuming that your user can still remember his password; If he has forgotten his

password, you will have to Get a New Password for him. Back to Top

10.7 How to check whether my login ID status is active?

Only the DSA can see the user’s Account status.

The DSA login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

You will see this screen. Click User Information Administration.

You will be able to see the Account Status:

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 24

Oct 19

10.8 I’m a DSA and I’ve accidentally deleted my user ID, what should I do?

If the DSA’s user ID has been deleted, you will need to ask your company management to

nominate you again. The process is the same as the nomination of new DSA. Click here for instruction.

Back to Top

11 How to Nominate a DSA?

For the company: For user IDs administration and control, each company should nominate at least two DATA SECURITY ADMINISTRATORS (DSA) who must be at least of executive level. DSAs have the authority to create, activate, delete user IDs and grant user roles. They are deemed to act on behalf of the company. It is the responsibility of the company to ensure that user IDs of DSAs who have left the company or who no longer hold DSA rights are removed from PORTNET®. Portnet.com will not be responsible for any act or omission by the DSAs or the users.

To nominate DSAs, the Nomination Form is to be completed by the Company Director / General Manager / Current DSA holding a managerial position or an authorised party of similar status and email it to csc@portnet.com stated therein. The nominated DSA will receive a SMS to their business mobile phone containing the new password and an email containing the ID. Please note that the password will expire within 480 mins. The DSA will be prompted to change password the first time they login.

Note: We would like to emphasize that the Portnet DSAs you have appointed are the main contact persons for your company on Portnet matters and they are vested with the important responsibility of managing all Portnet user accounts and user roles for your company and deemed to act on

behalf of your company. As such, you may wish to regularly review your nomination of DSAs. Should you need to re-nominate a DSA, complete the Nomination Form. Please also ensure that DSAs who have left the company or who no longer need to use Portnet are promptly removed from the PORTNET® System. For the DSA: As DSA, please take adequate care in the management of login accounts:

Assign a separate login account to each member of staff for proper accountability (there should be no sharing of login accounts among staff as it leads to problem in accountability).

Maintain a proper and updated record of all persons who have been given access and regularly review it. For those who have left your company or no longer require access to Portnet, their login accounts must be deleted immediately.

http://www.portnet.com/WWWPublic/readContent.jsp?/portnet_forms/Nomination_of_New_DSA_Form.pdfmailto:csc@portnet.com

------------------------------------------------------------------- Page -------------------------------------------------------------------- 25

Oct 19

Keep your own Portnet login account active by logging into Portnet at least once every 90 days. There should be two DSAs in a company, hence your company should nominate a new DSA as and when one leaves the company.

Back to Top

12 Security Guidelines on Login IDs and Passwords 12.1 You have been given a login ID and password for PORTNET® access; please abide by the

following security guidelines:

Do not use passwords that contain in full or in part your user ID, your name, your NRIC number.

Do not re-use the last 3 passwords.

Do not use the login ID and password of other users.

Do not write your login ID and password in places where others can see.

Do not save your password in your local PC e.g. selecting the option “save password”.

Do keep your ID and password secret and not disclose them to others.

Do use good and robust passwords as stated in the security guidelines in (5.2).

Be accountable for all actions performed with your login ID.

Some systems may display login message which indicate your last login date & time and the number of failed logins since the last successful login. Do take note of these messages to detect any unauthorised attempts to use your login ID.

Do not leave your signed-on workstation unattended.

Do sign off when you leave your workstation for a long period of time or are no longer using it.

Do lock your work-station using a password protected screen saver when leaving for a short duration.

Do change your passwords regularly (at least once every 90 days). The system will prompt you to change your passwords after 90 days.

Do maintain active usage of your ID (e.g. sign on at least once every 90 days). The system will lock IDs that have been inactive for more than 90 days, and housekeep them if they have been inactive for more than 180 days.

12.2 Security guidelines on good and robust passwords: A good password:

must include a number, an UPPERCASE (CAPITAL) letter and a lowercase letter

should not contain in full or in part your user ID, your name or your NRIC number.

should not be one of your last 3 passwords.

should not be made up of all numeric or alpha characters

should not be the same as or reverse of your login ID, or contain part of your login ID.

should not be a concatenation of your login ID and name

should not be based on personal information such as your name, name of family members, friends or relatives, birth dates, license plate number, phone number, employee number etc.

should not use common fun names such as Batman, Snoopy, Garfield

should not use Christian names

should not use dictionary words

should not contain more than 3 consecutive identical characters e.g. AAbbbb88 or aaaaB123

should not use consecutive keys on a keyboard e.g. asdfghjk, poiuytre

should be at least 8 characters long

should be easy enough to remember so that you don’t have to it write down

should be one that you can type quickly, without having to look at the keyboard

should contain non-alphabetic characters or digits or punctuation.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 26

Oct 19

Back to Top

13 How do I access the Portnet User Guides?

13.1 Login to PORTNET® and click on “User Guides” (located on the right corner of the top orange bar). You will see this screen containing all the User Guides:

Back to Top

14 User Access

14.1 I am not authorised to access a transaction in PORTNET®, how do I grant the access rights?

Please approach your DSA to grant you with access rights. Your DSA will need to: Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

------------------------------------------------------------------- Page -------------------------------------------------------------------- 27

Oct 19

To manage your users’ accesses, click on “User Information Administration”.

Select the User ID that you would need to manage, click on “Maintain User Role”.

Select the “Product” from the drop-down list.

Click the “Assign role?” box and click “Update”.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 28

Oct 19

Back to Top

14.2 Question: Can I copy / duplicate roles from one user to another?

Only your DSA can copy / duplicate roles. Your DSA will need to:

Login to PORTNET® and click on “User Administration” (located on the right corner of the top orange bar):

To manage your users’ accesses, click on “User Information Administration”.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 29

Oct 19

Select the User ID that you wish to copy the roles (to another User ID), click on “Copy Roles”.

Click “Ok”.

Next, select the User ID that you wish to paste the roles, click on “Assign Copied Roles”.

Click on “Copy Roles” to confirm.

------------------------------------------------------------------- Page -------------------------------------------------------------------- 30

Oct 19

Back to Top

15 Portnet Second Factor Authentication (2FA) 15.1 What is Second Factor Authentication (2FA)?

2FA can be based on any two of the factors: (i) What you know (e.g. PIN); (ii) What you have (e.g. One-Time-Pin (OTP) token); (iii) Who you are (e.g. Biometrics). A common form of 2FA involves you entering your password as the first factor, together with a One-Time-Pin (OTP) generated by token to log in to an online system (in this case Portnet).

15.2 Why is 2FA needed?

The primary objective of 2FA to secure the authentication process and to protect your online Portnet account against unauthorised access. When implemented, 2FA offers much greater protection against hacking than single-factor password authentication and helps to safeguard your account from unauthorised access even when the passwords have been compromised. Online fraud and mischief are becoming increasingly sophisticated and as they evolve, online security itself must advance to combat these threats. The usage of 2FA will mean a greater peace of mind for you when using Portnet.

15.3 When is the use of the 2FA required?

2FA is required for each login to Portnet, in addition to your usual login credentials which is the Portnet User ID and Password.

Back to Top

------------------------------------------------------------------- Page -------------------------------------------------------------------- 31

Oct 19

16 Installation of Google Authenticator (Pre-Requisite before 2FA)

16.1 How do I install the Google Authenticator application?

(i) Open the App Store or Google Play application in your mobile phone; (ii) Search for Google Authenticator; (iii) Install the application in your mobile phone.

(Note: This installation is a pre-requisite before you do the 2FA setup)

Back to Top 16.2 Portnet Second Factor Authentication Setup

Pls click on the link below and you will be redirected to the FAQs that contains sections on: (i) Setup of 2FA (ii) Reset of 2FA (iii) Open the App Store or Google Play application in your mobile phone (iv) Search for Google Authenticator;

Click Here

Back to Top

End

https://www.portnet.com/WWWPublic/readContent.jsp?/useful_tips/Portnet_Second_Factor_Authentication_2FA_FAQs.pdf