System Administration: User Management · System Administration: User Management Published: September 2017 2 User Management entitles System Administrators to access and modify profiles,

User Guide

System Administration: User Management

September 2017


Published: September 2017 i

Disclaimer

This document is issued by HSBC Bank plc (‘HSBC’). HSBC Bank Plc is authorised by the Prudential

Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation

Authority (Registration Number 114216). This document is for information purposes only and does not

constitute or form any part of (i) any invitation or inducement to engage in investment activity, or (ii) any

offer, solicitation or invitation by HSBC or any of the HSBC Group for the sale or purchase of any products,

services and/or any investments.

HSBC provides this document to the recipient on an ‘as is’ basis and except as provided herein, does not

warrant that the contents of this document is accurate, sufficient or relevant for the recipient’s purposes.

HSBC may have obtained information in this document from sources including from third party suppliers,

it believes to be reliable but which have not been independently verified. In relation to information on

products and/or services supplied by a third party supplier, the recipient should obtain further information

on these products and/or services directly from the supplier.

Please note that this document may contain hypertext links to websites operated by other members of the

HSBC group and third parties respectively. In relation to hypertext links to websites operated by members

of the HSBC group, please read the terms and conditions of the linked website. In relation to hypertext

links to websites operated by third parties, please note that: (1) the recipient should read the terms and

conditions of the website; and (2) HSBC does not have any control whatsoever over these websites and

shall not be liable for the recipient’s use of them.

HSBC will use its reasonable endeavours to ensure that the contents of this document are current at the

date of its first publication. HSBC gives no undertaking and is under no obligation to provide the recipient

with access to any additional information or to update all or any part of the contents of this document or

to correct any inaccuracies in it which may become apparent.

HSBC is not responsible for providing the recipient with any legal, tax or other advice regarding the

contents of this document and the recipient should make its own arrangements in respect of this

accordingly. This document has not been prepared to address the specific requirements or objectives of

any particular client. The recipient is solely responsible for making its own independent appraisal of an

investigation into the products, services and other content referred to in this document.

This document should be kept confidential and shall be used for internal business purposes only by the

recipient to whom it is provided and its officers, employees and agents. This document should be read in

its entirety and shall not be photocopied, reproduced, distributed or disclosed in whole or in part to any

other person without the prior written consent of the relevant HSBC Group member. This document is

proprietary to HSBC and the recipient agrees on request to return or, if requested, to destroy this

document and all other materials received relating to the information contained herein.

Except in the case of fraudulent misrepresentation and/or breach of these terms, no liability is accepted

whatsoever by HSBC and the HSBC Group for any direct, indirect or consequential loss arising from the

use of this document.

Please contact your local HSBC representative for further information on the availability of products and/or

services discussed herein in your region.

© Copyright. HSBC Bank plc 2017 ALL RIGHTS RESERVED.


Published: September 2017 ii

Contents Disclaimer ........................................................................................................................... i

About User Management .................................................................................................. 1

Before you begin ........................................................................................................... 1

Customising the User and Account Management tab .......................................................... 1

Authentication .......................................................................................................................... 2

Sole or Dual Administrative Control ....................................................................................... 2

Managing HSBCnet Users ................................................................................................ 3

Setting up new Users .................................................................................................... 3

User Authorisation Summary—Setting up new Users .......................................................... 4

User Authorisation Summary page .............................................................................. 4 Editing displayed content ............................................................................................. 5 Step-by-step setup process ......................................................................................... 6

Managing existing Users ............................................................................................ 14

User Management service ......................................................................................................14

Viewing User profiles ................................................................................................. 15 Viewing User Access Level ........................................................................................ 16 Modifying User Profile ................................................................................................ 18 Modifying User Access Level ..................................................................................... 18 Modifying Multi User Access Level by Account .......................................................... 20 Suspending User access ........................................................................................... 23 Reactivating User access........................................................................................... 24 Deleting Users ........................................................................................................... 24 New User Invitation .................................................................................................... 24 Managing Security Devices........................................................................................ 24

User Authorisation Summary—Managing Existing Users ...................................................25

Managing Security Devices ............................................................................................ 28

Setting up Security Devices ....................................................................................... 28

Accessing HSBCnet Security Device management functions ............................................28

Managing Security Devices by username .............................................................................29

Viewing Security Devices by username ..................................................................... 29 Setting up Security Devices by username.................................................................. 30 Maintaining Security Devices by username ............................................................... 30 Resetting Security Device PIN by username ............................................................. 31 Revoking Security Devices by username ................................................................... 33 Re-synchronising Security Devices by username ...................................................... 34 Deactivating Security Devices by username .............................................................. 34 Authorising Security Device maintenance .................................................................. 35

Managing Security Devices by serial number ......................................................................36

Viewing Security Devices by serial number ............................................................... 36 Options for maintaining Security Devices by serial number ....................................... 36 Setting up Security Devices by serial number ............................................................ 39 Resetting Security Device PINs by serial number ...................................................... 40 Revoking Security Devices by serial number ............................................................. 41 Re-synchronising Security Devices by serial number ................................................ 42 Deactivating Security Devices by serial number ........................................................ 42 Authorising Security Device maintenance .................................................................. 44

Ordering Security Devices .....................................................................................................44

Authorising Security Device orders ............................................................................ 45


Published: September 2017 iii

Troubleshooting Security Devices ............................................................................ 46

Resetting security information ...................................................................................... 50

Online Reset during Initial Log on ............................................................................. 50

Offline Reset (OFR) during Initial Log on ..............................................................................53

Resetting your memorable answer ........................................................................................55

Resetting your password .......................................................................................................56

Querying User Activities ................................................................................................. 58

Account Services Activity Log ................................................................................... 58

Account Maintenance .............................................................................................................58

Access Control for Account Services ...................................................................................59

Activity Log Query ....................................................................................................... 60

Administration Reports ............................................................................................... 61

Generating the report ..............................................................................................................61

Saving and Printing the report ...............................................................................................62

Types of Reports .....................................................................................................................63

Report Formats........................................................................................................................65


Published: September 2017 1

About User Management

HSBCnet System Administration provides customers with online access to a full suite of administrative

services to manage their registered Users. These include setting up and entitling other System

Administrators and End Users. This guide is intended as a reference for HSBCnet System Administrators

only.

Before you begin

Your HSBCnet System Administrator must entitle you with access to the System Administration services.

Rights to enquire on, prepare and authorise administrative instructions are entitled individually. Depending

on the setup at the User access level, you may be entitled to different roles as a User.

Customising the User and Account Management tab

This section describes the unique features of administration tab and the services available to you. You

can choose other operations from the User and Account Management tab and arrange these services to

meet your needs.

User and Account Management tab

Your System Administrator must entitle your access so that you can use HSBCnet for the following

functions:

Account Management permits account setup including signature limits, account

identification, and account grouping

Account Services Activity Log lists companywide transactions by account service

Activity Log Query lists session, change and deletion activity by User

Administration Reports entitles user to generate and download reports providing

information on Users, Accounts and entitlements.

User Authorisation Summary lists current information about registered Users that are

pending set up and approval by System Administrator(s)



User Management entitles System Administrators to access and modify profiles,

entitlement levels and Security Device management

Company Management entitles System Administrators to maintain companywide

parameters of daily transaction limits for different payment types. Refer to Maintain Daily

Transaction limits for Payments section in this guide.

User and Account Management tab and services

Note: Pages may look different depending on your region and other factors.

Authentication

Depending on your HSBCnet agreement, authentication requires a Security Device. For more information,

refer to the User Authentication Guide.

Sole or Dual Administrative Control

Your HSBCnet agreement with the Bank defines your System Administrator environment as either Sole

Administrative Control or Dual Administrative Control.

For Sole Administrative Control, all System Administrator functions are processed

immediately

For Dual Administrative Control, all System Administrator functions require a second

administrator’s approval. If a System Administrator has been entitled with only Prepare

entitlements, every operation initiated by that administrator requires two subsequent

approvals by System Administrators with Approve rights

Note: For detailed information on System Administrator entitlements, refer to the section on Administrative

Entitlements in the System Administration – User Entitlement User Guide.



Managing HSBCnet Users

This section deals with HSBCnet User management which involves two groups of activities to be

performed by System Administrators:

Setting up new Users

Managing existing Users

Setting up new Users

As a System Administrator, new User setup activities performed by you vary with the Bank unit that the

User primarily deals with. Newly registered Users can be classified into:

USER TYPE REGISTRATION TYPE

Initial System Administrator

Registrations without Customer ID

Global Transaction Banking User

Securities Service User

Trade Services User

HSBC Investments User

Registrations with Customer ID

Note: For detailed information on User registration, refer to the Registration and Navigation User Guide.

New User setup workflow: Registration without Customer ID

New User setup workflow: Registration with Customer ID



This guide is only for System Administrators performing setup tasks for Users registered with a reference

ID/New User Invitation e-mail. Accordingly, System Administrators can set up two types of Users:

Other System Administrators

End Users

User Authorisation Summary—Setting up new Users

The User Authorisation Summary service allows System Administrators to act on pending transactions

relating to User management.

In setting up new Users, use User Authorisation Summary to review, approve or reject new User

registrations.

For customers under Sole Administrative Control, the changes are processed immediately after the

System Administrator completes the setup and entitlement process.

For customers under Dual Administrative Control, a second System Administrator must approve changes

to User registration status, entitlements, and authorisation levels.

For customers under Dual Administrative Control with Preparer role, two System Administrators must

approve the changes initiated by a User with Preparer only entitlements.

User Authorisation Summary

To view additional registrations, select Open more. The User Authorisation Summary page appears.

User Authorisation Summary page

The User Authorisation Summary page displays up to 500 transactions in up to 10 pages of 50

transactions each. Transactions are sorted by date, with the most recent transaction appearing first and

grouped by User. Because Users could have more than one active transaction, there may be less than

50 Users displayed on a page.



User Authorisation Summary page

Editing displayed content

Use the Edit link located on the title bar to filter the pending records based on location of business, action

status, date range and number of records. The function type and action status displayed in the User

Authorisation Summary depend on your entitlements and company profile.

Select the desired location of business, function type, action status and activity date. You can also select

the number of records to be displayed in the User Authorisation Summary.

Select Apply to filter the records.

User Authorisation Summary Edit link—Dual Administrative Control example

Note: Depending on your company’s unique setup, some of the options may appear different when you

access the Edit Content page.



Step-by-step setup process

Selecting on any pending action in the User Authorisation Summary launches the step-by-step setup

process. The steps in the process vary depending on the type of pending action that is being processed.

A typical User setup scenario for a Dual Administrative Control customer is described below.

1. From the User Authorisation Summary select a link in the Pending Action column to launch the

step-by-step setup process. The User Setup—User Profile page appears.

User Authorisation Summary service

2. Review the information on the page. Under Section 6 - Further Registration Information, select

System Administrator or End User in the User Type field. The User Type selection is irreversible.

3. Select Next Step to approve the profile and proceed to Access Control page. Alternatively, you can

select Reject to reject the setup.



Step-by-step process for User Setup—User Profile

4. On the Access Control page, select the Administrative User Entitlements link to set up the

administrative entitlements of the User (for System Administrators only). To set up entitlements to

transactional services select the specific service link. You can also copy the access rights of an

existing User by selecting the Copy button. For detailed information on setting up User entitlements

refer to the System Administration—User Entitlement user guide.

5. Select Next Step to accept the changes and proceed to the Access Control review page. Review

the information and select Next Step to proceed to the Security page. Alternatively, you can select

Modify to return to the main Access Control page to modify the access information.

Step-by-step process for User Setup—Access Control review





6. If your company has a Mixed Security profile, you can choose to allocate one of three

authentication types for the specific user.

- OTP token (also known as One Time Password or Security Device)

- Password only

Depending on your selection, one of the following three pages appear. Complete any mandatory

fields.

7. Select Next Step to proceed. Alternatively, you can skip this step by selecting the Skip button. You

can allocate a Security Device for the User at any time from the options available under the User

Management service.

Mixed Security Device Profile

Step-by-step process for User Setup—OTP Token/Security Device example

Step-by-step process for User Setup—Password Only example



Note: The User with Password only authentication rights may not be able to access transactional or other

services. This authentication type is given to Users who only require access to enquiry services such as

Balance and Transaction Reporting, Report and File Download, etc. The User does not require a physical

security device and the only need to authenticate themselves during the logon process with their

memorable answer and the three requested characters of their current password.

8. An acknowledgement page confirms your action. The updated pending action status appears.

Step-by-step process for User Setup—Acknowledgement



Depending on your company profile and User entitlement, the following pending function type/access

status combinations for User setup are available.

List of UAS pending actions: User setup



CONTROL STATUS/ PENDING ACTION

DESCRIPTION ACTION REQUIRED

User setup

Sole Administrative Control

User Setup – Awaiting

New User has registered and the registration is awaiting entitlement and approval.

System Administrator must select this pending action, entitle the User and approve the setup.

Dual Administrative Control



System Administrator must select this pending action, entitle the User and approve the setup.

User Setup – Pending Approval

New User has registered, been entitled and approved by the first System Administrator and is awaiting final approval by second System Administrator.

Second System Administrator must select this pending action and approve the setup.

If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.

Dual (with preparer role) Administrative Control



Preparer must select this pending action, entitle the User and submit the setup for approval by first of two System Administrators.

Alternatively, first of two System Administrators can entitle and approve the setup.

User Setup – Pending Review

New User has registered; another User with Preparer role has entitled the User and is awaiting review and approval by the first of two System Administrators.

First of two System Administrators must select this pending action and approve the setup. If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.

User Setup – Pending Approval

New User has registered, been entitled by another User with Preparer role, has been reviewed and approved by the first System Administrator and is awaiting final approval by second System Administrator, OR

New User has registered, has been entitled and approved by first of two System Administrators and is awaiting approval by second administrator

Second of two System Administrators must select this pending action and approve the setup.

If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.

Common action for all types of Administrative Control

User Setup – Incomplete Approve

If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’.

The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.





User Setup – Incomplete Reject

If during the rejection process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Reject’.




User Setup – Pending Repair

New User has registered, been entitled and approved by the first System Administrator and is sent to repair at the setup stage by the final approving System Administrator. OR

New User has registered, another User with Preparer role has entitled the User and is sent to repair by first of two System Administrators at the first approval stage

New User has registered, another User with Preparer role, has entitled the User and is approved by first of two System Administrators but sent to repair by the second System Administrator at the final approval stage

The first System Administrator must select this pending action, repair the setup and resubmit it for final approval, OR

The User with Preparer role must select this pending action, repair the setup and resubmit it for approval by the first administrator, OR

The first System Administrator must select this pending action, repair the setup and resubmit it for final approval.

User Setup – Incomplete Send to Repair

New User has registered, been entitled and approved by the first System Administrator and is being sent to repair at the setup stage by the final approving System Administrator but the transaction (during the repair stage) is left incomplete (lost connection/timed out).




Managing existing Users

User Management service

The User Management service allows you to do the following System Administrator functions:

View User Profile – view-only access to user profile information such as the User’s first

and last name, address, etc.

View User Access Level – view-only access to the services the User is entitled to

Modify User Profile – modify non entitlement information such as the User’s first and last

name, address, etc.

Modify User Access Level – modify the services the User is entitled to

Modify Multi User Access Level by Account – entitle multiple users simultaneously by

account

Suspend User – prevents a User from logging on to the personal page

Reactivate Suspended User – reinstate access of suspended User

Delete User – permanently deletes the User from the system’s databases

Create New User Invitation Email – generate and send a New User Invitation e-mail to

your registered e-mail account. Forward this e-mail to potential new Users to register on

HSBCnet

Manage Security Devices – issue and manage Security Devices.

View User IP Address Restrictions — to view a list of User IP Addresses that are

permitted to access your HSBCnet profile

User Management service—Security Device Profile

The search feature, available for many User management activities, displays items related to your request.

Selecting a username provides information about the User’s profile.



Common User search page for User Management activities

Note: Users having unapproved pending changes are not shown. Use User Authorisation Summary

service to check for pending changes.

Viewing User profiles

From User Management service, choose View User Profile to view non-entitlement information about

Users in your company.



View User profile

Viewing User Access Level

From User Management service, choose View User Access Level to view entitlement information about

Users in your company. To view micro entitlements, choose a service.



View User Access Level



Modifying User Profile

From User Management service, choose Modify User Profile to access non-entitlement information

such as username and address.

Modify details as needed, and then select Submit to update changes.

Modify User Profile

An acknowledgement confirms your action. For Dual Administrative Control customers, the changes need

to be authorised by another System Administrator from the User Authorisation Summary.

Modifying User Access Level

From User Management service, choose Modify User Access Level to access entitlement information

about Users in your company.

For System Administrators, select Administrative User Entitlements to modify the administrative access

levels. For all Users, choose a service in the General Services or Account Services sections and modify

details as needed. Alternatively, you can select Copy to copy the access controls of an existing User.

Select Proceed to display the confirmation page. You can choose to Save as incomplete to save the

changes and complete them later.



Modify User access level

Review the access control information and select Submit to process the changes. Alternatively, you can

select Back to go back to the previous page to modify the changes.



Modify Access Control—Summary

An acknowledgment confirms your action. For customers with Dual Administrative Control, the changes

need to be authorised by another System Administrator from the User Authorisation Summary.

Modifying Multi User Access Level by Account

From the User Management service, choose Modify Multi-User Access Level by Account to

simultaneously modify service entitlements of multiple users for a particular account.

User Management Service: Modify Multi User Access Level by Account



1. Use the Quick Filter to select and view a list of accounts for which you wish to make service

entitlement modifications. The available options are: Account Criteria, Account Location, and Value.

Select Apply to apply your preferences.

2. From the Account Summary page select a specific account to view its Account Details.

Account Summary list for Modify Multi User Access Level by Account

3. The Account Details page displays a list of services available for that account. Select a service link

in the Account Services section to display a list of existing users.

Account Service link

4. Modify User entitlements by selecting the appropriate boxes. Select Confirm to submit your

modifications.



Modify Multi User Access Level by Account: User List for the selected Service

5. Continue selecting and modifying each account service as desired.

6. Once complete, select Proceed. A confirmation page displays a list of Users pending entitlement.

Modify Entitlements: Service by Service

7. Use the print icon on the page to print the confirmation. To check individual entitlements, select a

username.

8. If correct, select Submit to submit your modifications, or select Back to make further changes.



Multi User Access Control: Confirmation page

9. If you submitted your modifications, a final acknowledgement confirms your action.

If your company uses Dual Administrative Control (with or without Preparer role) the status of the

entitlement change in the User Authorisation Summary will be Multi-User Access Control – Pending

Approval. Subsequent approval(s) by one or more System Administrators is required to complete

the modification.

Multi User Access Control: Acknowledgement

Suspending User access

From User Management service, choose Suspend User to prevent access to a User's personal page.

Suspension is usually temporary, and performed, for example, when a User goes on leave. After

confirmation, suspension occurs immediately, even if a User is using the system.

Suspend User

An acknowledgement confirms your action. For customers with Dual Administrative Control, this function

does not require approval by a second System Administrator.



Reactivating User access

From the User Management service, choose Reactivate Suspended User to restore a suspended

User’s access to their personal page.

Reactivate suspended User


requires approval by a second System Administrator from the User Authorisation Summary.

Deleting Users

From User Management service, choose Delete User to delete a User. The User will no longer have

access to HSBCnet. Users must re-register if they are to be given access again.

Delete User


requires approval by a second System Administrator from the User Authorisation Summary.

New User Invitation

From the User Management service, choose New User Invitation to generate and send the Invitation e-

mail to your registered e-mail address. The e-mail contains the master registration link for your company.

As the System Administrator of your company, you are required to forward the e-mail to potential new

Users. The new User must register using the link in this Invitation e-mail to be linked to your company’s

HSBCnet profile.

Managing Security Devices

The User Management service also provides access to Security Device administration services.

Access the relevant services from the Manage Security Devices link under User Management service.

For information on these actions, Security Device sections in this guide.



User Authorisation Summary—Managing Existing Users

The User Authorisation Summary service allows you, as a System Administrator, to take action on pending

transactions relating to User management.

In managing existing Users, use User Authorisation Summary to approve, review modify or reject existing:

User profiles

User access level

Security Information Resets (SIRs)

User reactivation

User deletion

For customers with Sole Administrative Control, the changes are processed immediately after the System

Administrator completes the setup and entitlement process.

For customers with Dual Administrative Control, a second System Administrator must approve changes

to User registration status, entitlements, and authorisation levels. For customers under Dual

Administrative Control with Preparer role, two System Administrators must approve the changes initiated

by a User with Preparer status.

For detailed information on every type of pending action related to managing existing Users under User

Authorisation Summary, refer to the following table.

List of other pending actions: manage existing users



Security Information Reset


Security Information Reset – Awaiting

User has submitted new security information and is awaiting approval by System Administrator

System Administrator must select this pending action and approve the new security information


Security Information Reset – Awaiting

User has submitted new security information and is awaiting approval by System Administrator

System Administrator must select this pending action and approve the new security information

Security Information Reset – Pending Approval

User has submitted new security information, submission has been approved by first of two System Administrators and is awaiting approval by second System Administrator

Second System Administrator must select this pending action and approve the new security information

Access Control (entitlement changes)


Access Control – Incomplete Entitlements

A System Administrator has initiated User Entitlement changes that are yet to be completed

A System Administrator must select this link to complete the entitlement changes



A System Administrator has initiated User Entitlement changes and saved them as incomplete






Access Control – Pending Repair

A System Administrator has sent the User’s entitlement changes to be repaired

A System Administrator must select this link to repair the User entitlement changes

Access Control – Pending Approval

System Administrator has changed the entitlements for an existing User and is awaiting approval by second System Administrator

Second System Administrator must select this pending action and approve the entitlement changes

Access Control – Incomplete Approve

If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’

The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process



A System Administrator with Preparer role has initiated User Entitlement changes that are yet to be completed


Access Control – Pending Review

User with Preparer role has changed the entitlements of an existing User and submitted the changes for first of two approvals by a System Administrator

First of two System Administrators must select this pending action and approve the changes

Access Control – Pending Approval

User with Preparer role has changed the entitlements of an existing User, changes are approved by the first of two System Administrators and is awaiting approval by the second administrator

Second of two System Administrators must select this pending action and approve the changes

Access Control – Incomplete Approve



User Reactivation


User Reactivation – Pending Approval

A System Administrator has reactivated an existing User and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the reactivation

User Reactivation – Incomplete Approve



User Delete






User Delete – Pending Approval

A System Administrator has deleted an existing User and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the User deletion

User Delete – Incomplete Approve



Modify Multi-User Access Level by Account


Multi-User Access Control – Pending Approval

A System Administrator has made multi-user service entitlement changes for an account and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the entitlement changes

Dual (with Preparer role) Administrative Control

Multi-User Access Control – Pending Review

User with Preparer role has made multi-user service entitlement changes for an account and submitted the changes for first of two approvals by a System Administrator

First of two System Administrators must select this pending action and approve the changes

Multi-User Access Control – Pending Approval

User with Preparer role has made multi-user service entitlement changes for an account, changes are approved by the first of two System Administrators and is awaiting approval by the second administrator

Second of two System Administrators must select this pending action and approve the entitlement changes

Multi-User Access Control –

Incomplete Approval

If during the approval process, the transaction fails to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’ (Note: Approval for some individual entitlement changes in the transaction may have been processed)

The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the approval process.

Modify User (profile changes)


Modify User – Pending Approval

A System Administrator has modified the profile of an existing User and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the profile changes

Modify User – Incomplete Approve


The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process



Managing Security Devices

Access the Security Device options by selecting the Manage Security Devices link in the User

Management service.

The following are some HSBCnet System Administrator functions requiring Security Device

authentication:

HSBCnet log on

User Management

User Authorisation Summary

Account Management

Company Management

Other Transaction Banking services such as Payment creation and authorisation, File

Upload etc.

Setting up Security Devices

HSBCnet System Administrators set up Security Devices by assigning the serial number on the back of

the device to an HSBCnet username. HSBCnet System Administrators manage Security Devices by:

Viewing Security Device statuses

Maintaining Security Devices

Accessing HSBCnet Security Device management functions

To access the HSBCnet Security Device Management service, in the User and Account Management tab

view, under User Management service, select Manage Security Devices.

User Management Service with Manage Security Devices link



The Manage Security Devices link displays several tab views:

Users tab—for managing Security Devices by username

Security Devices tab—for managing Security Devices by serial number

Order tab—for ordering new Security Devices

Security Device Management views

Note: System Administrators can manage Security Devices in either the Users tab or the Security Devices

tab. Both tabs manage the same Security Device information. Changes made in either view automatically

update the other view.

Managing Security Devices by username

To manage Security Devices by username, select Manage Security Devices in the User Management

service.

Viewing Security Devices by username

To view User Security Device status under Users, select View Users. The list is sorted by username. It

shows the serial number and status of Security Devices for all Users including those who have not been

allocated a Security Device.

Security Device Management—View Users

Note: To align with industry security standards and further improve your online security, select information

will be partly obscured on HSBCnet.



Setting up Security Devices by username

To list all users in your company that do not have an allocated Security Device, in the Security Device

Management service, in the Users tab, select Set Up.

1. In the Set Up—User Summary page, select the username you wish to set up.

Set Up—User Summary

2. In the Set up Security Device page, review the User details.

Set up Security Device

3. Select OK.

4. Under Security Device, enter the serial number located on the back of the Security Device that is to

be allocated to the User. Do not include dashes or spaces.

Security Device Serial number

5. Select Submit. An acknowledgement confirms your action.

Maintaining Security Devices by username

To list all users in your company who have an allocated Security Device, select Maintain in the Users tab

in the Security Device Management service.

1. In the Maintain—User Summary page, select a username to maintain.



Maintain—User Summary

2. In the Maintain Security Device page, select one of the following maintenance options:

Reset User Security Device PIN, due to a lost or forgotten PIN.

Revoke User Security Device, due to staffing changes.

Resynchronise User Security Device, for malfunctions related to synchronisation problems.

Deactivate User Security Device, due to persistent malfunctions.

Maintenance options

Resetting Security Device PIN by username

Users are now able to reset their own Security Device PIN online. However, if for any reason they cannot,

they can request their System Administrator to do so for them.

As a System Administrator, reset a User Security Device PIN when a Security Device becomes locked

after three unsuccessful PIN attempts.

Important: To initiate PIN reset, you need the LOCK PIN that appears on the locked Security Device.

This is displayed on the User’s device. See figure below.

1. In the Manage Security Devices link, under Users, select Maintain.



2. In the Maintain User Summary page, select the username to maintain.

3. In the Maintain Security Device page, select Reset PIN.

4. In the Maintain Security Device – Reset PIN page, review the security profile of the selected User.

5. To review guidelines for unlocking a Security Device, select Need help finding the unlock code.

6. Enter the LOCK PIN in the Reset PIN section. This is the seven-digit number displayed on the

User’s locked Security Device.

7. Select Submit.

Maintain Security Device—Reset PIN

8. An acknowledgement confirms your action and displays the Unlock code. Provide this Unlock code

to the User.

Acknowledgement displaying the Unlock Code

The User then resets the Security Device by completing the following steps:

1. Turn on the locked Security Device.

2. Key in the unlock code received from the System Administrator.

3. The device page displays the New PIN message. Key in a new four to eight-digit PIN. Re-enter to

confirm.



4. The Security Device PIN reset is complete.

Revoking Security Devices by username

Revoke a Security Device when a User no longer needs the Security Device that has been allocated to

them.

To revoke a Security Device by username:

1. In the Security Device Management service, under Users, select Maintain.

2. In the Maintain – User Summary page, select the username to maintain.

3. In the Maintain Security Device page, select Revoke Security Device.

4. In the Maintain Security Device – Revoke page, review the security profile of the selected User.

5. To review revocation guidelines, select Revocation and re-use of Security Device.

6. Select the Reason for revocation:

User is leaving the company

User is moving their job/location

Other

7. Select Submit.

Maintain Security Device—Revoke

8. In the Confirm Revoke Security Device page, select Confirm to complete the process.

Maintain Security Device—Confirm Revoke



9. An acknowledgement confirms your action.

Re-synchronising Security Devices by username

Resynchronise a User Security Device when a Security Device is not currently time synchronised with

HSBCnet. This may occur if a Security Device has not been used for 90 days. If the system displays

repeated error messages when you submit the security code generated by your Security Device, you may

need to resynchronise your Security Device.

To resynchronise a Security Device by username:

1. In the Security Device Management service, under Users, select Maintain.

2. In the Maintain – User Summary page, select the username to maintain.

3. In the Maintain Security Device page, select Resynchronise Security Device.

4. In the Maintain Security Device – Resynchronise page, review the security profile of the selected

User.

5. Select Submit.

6. An acknowledgment confirms your action.

Maintain Security Device—Resynchronise

Deactivating Security Devices by username

Deactivate a User Security Device when a Security Device is lost or remains malfunctioning even after

resynchronisation.

Note: Deactivating permanently disables the Security Device. Once applied, this action cannot be

reversed and the Security Device cannot be reused.

To deactivate a Security Device by username:

1. In the Manage Security Device page, under Users, select Maintain.

2. In the Maintain—User Summary page, select the username to maintain.

3. In the Maintain Security Device page, select Deactivate Security Device.

4. In the Maintain Security Device—Deactivate page, review the security profile of the selected User.



5. Select the Reason for deactivation:

Security Device is lost or missing

Security Device is not working

6. Select Submit.

Maintain Security Device—Deactivate

7. In the Confirm Deactivate Security Device page, select Confirm to complete the process.

Maintain Security Device—Confirm Deactivate


Authorising Security Device maintenance

In dual administrative control environments, Security Device maintenance needs to be authorised by a

second System Administrator.

To authorise Security Device maintenance for a User under the Users tab:

1. Select Authorise from the drop-down list.

2. Select the username with the pending authorisation status you wish to authorise.

3. Select Submit to complete the authorisation.




Managing Security Devices by serial number

You can manage Security Devices in either the Users tab or the Security Devices tab. Both tabs manage

the same Security Device information. Changes made in either view automatically update the other view.

Viewing Security Devices by serial number

To view Security Device status by serial number:

1. Select View Security Devices under Security Devices tab. The list is sorted by serial number. It

shows the status of each Security Device in your Company and the names of Users that Security

Device have been allocated to.

2. To filter the listing by status, select a status option and select Go.

3. To view a different page, select a page number.

Viewing Security Devices by serial number

Security Device statuses

STATUS DESCRIPTION

Allocated Security Device is currently allocated to a User

Deactivated Security Device has been deactivated and User may not access HSBCnet

Free Security Device is free and available for allocation to a User

Options for maintaining Security Devices by serial number

There are two options for maintaining Security Devices by serial number:



Maintain Free (Unallocated) Security Devices

Maintain Allocated Security Devices

Maintaining Free (Unallocated) Security Devices

To maintain Free (Unallocated) Security Devices:

1. In the Security Device Management service, under Security Devices, select Maintain.

2. Select Free Security Devices.

3. Select Go.

4. Select the serial number of a Security Device to maintain.

5. Maintenance options for Free Security Devices include:

Set Up (Allocate) a free Security Device for a User. For more information, see Setting up

Security Devices by serial number in this Guide.

Deactivate a Free Security Device, due to persistent malfunctions. For more information,

see Deactivating Security Devices by serial number in this Guide.

Maintain options for Free (Unallocated) Devices



Maintaining Allocated Security Devices

To maintain Allocated Security Devices:


2. Select Allocated Security Devices.

3. Select Go.

4. Select the serial number of a Security Device to maintain.

Maintain Allocated Security Devices

5. Maintenance options for Allocated Security Devices include:

Reset an allocated Security Device PIN, due to lost or forgotten PIN. For more information,

see Resetting Security Device PINs by serial number in this Guide.

Revoke an allocated Security Device, due to staffing changes. For more information, see

Revoking Security Devices by serial number in this Guide.

Resynchronise an allocated Security Device, for malfunctions related to synchronisation

problems. For more information, see Resynchronising Security Devices by serial number

in this Guide.

Deactivate an allocated Security Device, due to persistent malfunctions. For more

information, see Deactivating Security Devices by serial number in this Guide.

Maintain options for Allocated Devices



Setting up Security Devices by serial number

To set up a Security Device by serial number:

1. Obtain a Security Device from your stock.

Note: If the device has not been used for several weeks, it may need to be resynchronised. For more

information, see Re-synchronising Security Devices by serial number in this Guide.

2. In the Security Device Management service, under Security Devices tab, select Maintain.

3. In the Maintain Security Devices Summary, select the Free Security Devices view.

4. Select Go.

5. In the list of Security Devices, select the serial number of a Free Security Device to set up.

6. In the Maintain Security Device page, review the Security Device details, and then select Set up

Security Device.

7. Setting up Security Device by serial number

8. In the Set up Security Device page, enter the username of the User to set up a Security Device.

9. Select Submit. An acknowledgment confirms your action.



Resetting Security Device PINs by serial number

Users are now able to reset their own Security Device PIN online. However, if for any reason they cannot,

they can request their System Administrator to do so for them.

As a System Administrator, reset a User Security Device PIN when a Security Device becomes locked

after three unsuccessful PIN attempts.

Important: To initiate PIN reset, you need the LOCK PIN that appears on the locked Security Device.

This is displayed on the User’s device. See figure below.

To reset a Security Device PIN by serial number, the System Administrator performs the following:

1. Choose Manage Security Devices under the User Management service; under Security Devices,

select Maintain.

2. In the Maintain Security Devices Summary, select the Allocated Security Devices view.

3. Select Go.

4. In the list of Security Devices, select the serial number of an Allocated Security Device to be reset.

5. In the Maintain Security Device page, select Reset PIN.

6. In the Maintain Security Device – Reset PIN page, review the Security Device details for the

selected Security Device.

7. To review guidelines for unlocking a Security Device, select Need help finding the unlock code.

8. Enter the LOCK PIN in the Reset PIN section. This is the seven-digit number displayed on the

User’s locked Security Device.

9. Select Submit.

10. An acknowledgement confirms your action and displays the Unlock code. Provide this Unlock code

to the User.

Acknowledgement with Unlock Code



The User then resets the Security Device by completing the following steps:

1. Turn on the locked Security Device.

2. Key in the unlock code received from the System Administrator.

3. The device page displays the New PIN message. Key in a new four to eight-digit PIN. Re-enter to

confirm.

4. The Security Device PIN reset is complete.

Revoking Security Devices by serial number

Revoke a Security Device when a User no longer needs the Security Device that has been allocated to

them.

To revoke a Security Device by serial number:



3. Select Go.

4. In the list of Security Devices, select the serial number of an Allocated Security Device to revoke.

5. In the Maintain Security Device page, select Revoke Security Device.

6. In the Maintain Security Device – Revoke page, review the Security Device details for the selected

Security Device.

7. Select the Reason for revocation:

User is leaving the company

User is moving their job/location

Other

8. Select Submit.



Maintain Security Device—Revoke

Re-synchronising Security Devices by serial number

Resynchronise a User Security Device when a Security Device is not currently time-synchronised with

HSBCnet. This may occur if a Security Device has not been used for 90 days.



3. Select Go.

4. In the list of Security Devices, select the serial number of an Allocated Security Device to

resynchronise.

5. In the Maintain Security Device page, select Resynchronise Security Device.

6. In the Maintain Security Device—Resynchronise page, review the Security Device details for the


7. Select Submit.

Maintain Security Device—Resynchronise

Deactivating Security Devices by serial number

Deactivate a User Security Device when a Security Device is lost or remains malfunctioning even after

resynchronisation.



Note: This permanently disables the Security Device. Once authorised, this action cannot be reversed

and the Security Device cannot be re-used.

To deactivate a Security Device by serial number:


2. In the Maintain Security Devices Summary, select either:

Free Security Devices view, if the Security Device to be deactivated is currently free

Allocated Security Devices view, if the Security Device to be deactivated is currently

allocated

3. Select Go.

4. In the list of Security Devices, select the serial number of a Security Device to deactivate.

5. In the Maintain Security Device page, select Deactivate Security Device.

6. In the Maintain Security Device – Deactivate page, review the Security Device details for the


7. Select the Reason for deactivation:

Security Device is lost or missing

Security Device is not working

8. Select Submit.

Maintain Security Device—Deactivate

9. In the Confirm Deactivate Security Device Page, select Confirm to complete the process.





In Dual Administrative Control environments, Security Device maintenance needs to be authorised by a


To authorise User Security Device maintenance (Security Device view), in Security Device Management,

under the Security Devices tab, complete the following steps:

1. Select Authorise from the drop-down list.

2. Select the pending authorisation status you wish to authorise from the drop-down list.

3. Select Submit to complete the authorisation.

Authorise Security Device Maintenance

Ordering Security Devices

To order additional Security Devices from the Bank:

1. Access the User Management service under the User and Account Management tab. Select

Manage Security Devices.

2. Authenticate yourself using your Security Device. Select Continue.

3. In Security Device Management, under the Order tab, select Order Security Devices.

4. In the Order Security Devices Page that appears, Complete the order form. Mandatory fields are

marked with an asterisk (*).

5. Select Submit when finished.

Note: If your company follows Sole administrative control and you are using a new Security Device

(DP270), you are required to authenticate your orders. Follow the on-screen instructions to do so.



Order Security Devices

6. An acknowledgement confirms your action. If your company follows dual administrative control, the

order status is pending and requires authorisation by another System Administrator before it is

processed.

Authorising Security Device orders

If your company follows dual authorisation control, Security Device orders need to be authorised by a


To authorise a Security Device order, in Security Device Management, under the Order tab, select

Authorise and select a Security Device order to authorise. Select Submit to process the order.

Authorise Security Device order


Published: February 2016 46

Troubleshooting Security Devices

Use the Information and examples in the table below to troubleshoot issues you may encounter when using your new Security

Device. This section only applies to Users with the Security Device shown here.

Message Displayed SYMPTOM PROBABLE CAUSES ACTION REQUIRED

bAtt 2 message followed by bAtt1 and bAtt0 messages appear in the device window

This is a low battery message. The low battery counter starts at 2 indicating a battery life of about 2 months.

After its first appearance, the bAtt message appears for 2 seconds each time the device is powered on. After 2 seconds the device resumes normal operation.

Request your System Administrator to allocate a new Security Device. Your existing Security Device must first be deactivated before a new device can be allocated.

Note: Please dispose of the deactivated device in an environmentally safe manner.

button message appears in the device window

This indicates that a button is being pressed and held (accidentally) for a certain time (between 7-9 seconds). It results in the device switching off to preserve battery life.

Ensure that a button is not being accidentally held down.

When selecting a new PIN a not SAFE message appears briefly in the device window before reverting to NEW PIN message.

The new PIN you have selected is unsafe or weak.

Resume selecting a new PIN and ensure that the PIN you select does not contain numbers that are repetitive or sequential (example 11111 or 123456).

Note: The new PIN should be 4 to 8 digits in length




PIN FAIL message appears in the device window (for example, PIN FAIL 1, PIN FAIL 2, PIN FAIL 3)

1. You have entered an invalid PIN.

1. Press the Green circle button briefly and when prompted, enter the correct PIN again

2. Lost or forgotten PIN

2. Reset your Security Device PIN.

To unlock the device, refer to the section on Resetting your Security Device PIN in the User Authentication User Guide.

3. The Security Device may not have been allocated to you.

3. Check with your System Administrator to ensure the device you are using is allocated to you.

When entering the unlock code into the device, it displays a LOCK PIN FAIL message. (for example, LOCK PIN FAIL 1, LOCK PIN FAIL 2)

You have entered the incorrect unlock code

Wait for the device to turn off. Press the Green Circle button briefly and, when prompted, enter the correct unlock code again.




1. When unlocking my Security Device, it displays a LOCK PIN FAIL 3 message which will not go away.

1. You have entered the unlock code incorrectly into the device three times. As a result, for security reasons, you will not be allowed to operate the device for one hour. (also called Unlock Retry Delay period)

If after one hour, you again enter the incorrect unlock code, the device will display a LOCK PIN FAIL 4 message preventing you from operating the device for an additional hour (you have to wait for two hours before you can again attempt to enter the unlock code).

This will continue to occur for up to 6 hours if you keep entering the incorrect unlock code.

1. Wait till the device turns off after the Unlock Retry Delay period. Press the Green Circle button to turn on the device. Then enter the correct Unlock Code.

Note: The Unlock Retry Delay period is determined by the number of unsuccessful attempts to enter the unlock code.

2. The Device displays a LOCK PIN FAIL 3 message briefly before displaying a 7-digit code.

2. You have entered the incorrect PIN three times and your device is locked for security reasons

2. Unlock your device and reset your Security Device PIN.

To unlock the device, refer to the section on Resetting your Security Device PIN in the User Authentication User Guide.

When entering a new PIN a second time to confirm, my Security Device displays a FAIL Pin message

The PIN you have entered does not match the previous PIN entry.

Ensure that the PIN you have entered matches the previous entry.




The Device window displays multiple incoherent messages one after another (see some sample messages on the left)

The device is no longer working.

1. Ask your System Administrator to deactivate the device and issue a new device.

2. Ask your System Administrator to contact your local HSBCnet Support Helpdesk to record this issue.

The Device window displays messages with incomplete characters

The device display is no longer working.

1. Ask your System Administrator to deactivate the device and issue a new device.

2. Ask your System Administrator to contact your local HSBCnet Support Helpdesk to record this issue.

This message appears on HSBCnet

“Error(s) occurred. The details you have entered do not match our records. We may suspend access to your service if there are too many unsuccessful attempts to log on. (LOG_0010)”

HSBCnet does not recognise the security code entered.

1. The Security Device may not have been allocated to you.

1. Check with your System Administrator to ensure the device you are using is allocated to you.

2. Security code has timed out. Each generated code is only valid for a few seconds.

2. Turn off and turn on the Security Device and generate a new code. Enter this code immediately into the on-screen field.

3. Security Device needs re-synchronising

3. System Administrator must resynchronise the Device. For information refer to Re-synchronising Security Devices by Username in this User Guide.

Not applicable User Security Device has been lost or cannot be accounted for

User has lost or not returned his/her Security Device.

Deactivate the Security Device, and if necessary, set up the User with a new Security Device. For information Refer to Deactivating Security Devices by Username in this User Guide.



Resetting security information

During initial log on, you are required to provide correct security information to authenticate yourself. If

your authentication is successful, you are only required to provide your security code to authenticate

subsequent log on attempts or allowed to reset your Security Device PIN.

However, if you forget or provide incorrect security information, you are directed to reset your security

information. Resetting security information involves two different processes.

Online Reset (performed by User)

Offline Reset (performed by System Administrators)

Note: After the initial log on, Security Device Users can update/reset their security information using Edit

My Profile feature.

Online Reset during Initial Log on

If during log on, you provide incorrect security information such as memorable answer and/or password,

you are directed to reset that security information online by answering the security questions selected by

you during registration. Such security information reset is immediate and does not require approval by

your System Administrator(s). This process of resetting security information is called Online Reset.

To do an Online Reset of your security information during initial log on, complete the following steps.

1. On the top right corner of the HSBCnet home page, select Log on/Register. A drop-down window

appears.

2. Enter your username and select Log on.



HSBCnet Home page

3. On the Capture Security Credentials page, enter your memorable answer. Then enter the three

requested characters of your current password. Select Continue to proceed.

Online Reset: Enter memorable answer and password

4. If you entered the incorrect security information (memorable answer, password) three times, the

following error message appears and you are presented with the Online Reset options.

Online Reset: Error message



5. Answer the first security question correctly. The second security question appears.

Online Reset: First security question

6. Answer the second security question. The memorable answer OR the password page (depending

on which one you entered incorrectly) appears.

Online Reset: Second security question

7. Enter the three requested characters of your current password.

Online Reset: Enter password

8. Depending on which security information you entered incorrectly (memorable answer or password),

you are required to reset that incorrect information. Accordingly, the memorable answer OR

password reset page appears.

Reset your password, OR

Reset your memorable answer

Online Reset: Reset your memorable answer

9. An acknowledgment confirms your action.



Online Reset: Successful reset acknowledgment

10. You can log on again with your new security information.

Offline Reset (OFR) during Initial Log on

If during initial log on, you provide incorrect security information such as memorable answer and/or

password, you are directed to reset that security information online (OLR) by answering the security

questions selected by you during registration.

However, if you are unable to provide correct answers to the security questions and memorable answer

or password, you are locked out of your HSBCnet account. Online Reset is not available. You can then

submit a Security Information Reset (SIR) form, allowing you to choose new security information. The SIR

requires approval by your System Administrator(s). This process of resetting security information is called

Offline Reset.

To do an Offline Reset of your security information, complete the following steps. Some steps may differ

depending on your unique log on status or when you are resetting your security information from the Edit

My Profile service.

1. On the top right corner of the HSBCnet home page, select Log on/Register.

2. Enter your username and select Log on.



HSBCnet Home Page

3. The Capture Security Credentials page appears. Enter your memorable answer. Enter the three

requested characters of your password. Select Continue to proceed.

Offline Reset: Enter memorable answer and password

4. If you entered the incorrect security information (memorable answer, password) and also failed the

Online Reset process, the following Account Locked error message appears. You are presented

with the Offline Security Information Reset (SIR) form requiring you to reset all security information.



Offline Reset: Account Locked error message

5. Complete the SIR form and select Continue. Mandatory information is marked with an asterisk (*).

Offline Reset: SIR form

6. An acknowledgement confirms your submission. Print, sign and submit the page to your System

Administrator.

Note: The remaining procedure is completed by your System Administrator

Resetting your memorable answer

During initial log on, if you do not remember your memorable answer, you can reset it from the Capture

Security Credentials page before making any attempts to log on.



Memorable answer: Online Reset

To reset your memorable answer, complete the following steps:

1. From the Capture Security Credentials page, select the reset memorable answer link.

2. In the pages that follow, answer the first and second security questions and provide the three

requested characters of your password.

3. Choose a new memorable question and answer in the next page.

4. An acknowledgement confirms the successful reset of your credentials.

5. Proceed to your HSBCnet personal page.

Memorable question and answer must conform to the following character rules:

• Memorable question must be one (1) to seventy-six (76) characters. Alphanumeric (A-

Z, 0-9) plus special characters underscore (_), hyphen (-), space ( ), apostrophe (‘), and

period (.)

• Memorable answer must be six (6) to thirty (30) characters. Alphanumeric (A-Z, 0-9)

plus special characters (@), underscore (_), hyphen (-), space ( ), apostrophe (‘) and period

(.). It must not be the same as the existing memorable answer

Resetting your password

During initial log on, if you do not remember your password, you can reset it from the Capture Security

Credentials page before making any attempts to log on.

Password: Online Reset



To reset your password, complete the following steps:

1. From the Capture Security Credentials page, select the reset your password link.

2. In the pages that follow, answer the first and second security questions, and provide your

memorable answer.

3. Choose a new password in the next page.

4. An acknowledgement confirms the successful reset of your credentials.

5. Proceed to your HSBCnet personal page.

New password chosen must be eight (8) to thirty (30) characters, alpha-numeric (A-Z, 0-9). It must not be

the same as the existing password.



Querying User Activities

You can use the Account Services Activity Log and Activity Log Query services to expand the view of

transactions related to accounts and services.

Account Services Activity Log

Account Services Activity Log entitles you to view activities performed by all Users in the company for a

period. Activities are categorised by activity type. The options available for User and account management

are:

Account Maintenance

Access Control for Account Services

Account Maintenance

From the Account Services Activity Log service, enter an optional activity date. If date is blank, the system

assumes today as the activity date. Select Account Maintenance in Activity Type and select Go.

Account Services Activity Log service

The Activity Log Summary shows an outline of each payment related activity for the given date range. All

actions that affect templates and instructions are time-stamped and may be used for audit.

Activity Log Summary for Account Management



Activity Log detail displays information for a selected account.

Activity Log detail for selected account

Access Control for Account Services

To view the activity log for User Entitlements, from Account Services Activity Log, select Access

Control for Account Services activity and select Go.

The Activity Log summary shows details for Administrative setup and changes.

Access Control for Account Services—Summary

For customers with Dual Administrative Control, the approvers are presented with before and after images

of the changes they are about to approve.



Activity Log Query

System Administrators use the Activity Log Query to query data relating to activity performed using

Administration services (User Management service and User Authorisation Summary) or performed by

Users relating to profile data recorded by them.

To view User activity related administrative changes, session usage or User deletion, complete the

following steps:

1. Access the Activity Log Query service under User and Account Management tab.

2. Enter the date range of the transactions you would like to query. The log displays up to 35 days of

activities.

3. Select an activity from Activity type. The available options are:

Session Activity: provides details of User log on activities for the last 35 days

Change Activity: provides details of User log on activities on administrative changes for

the last 35 days, or

Delete Activity: provides details of all deleted Users for the last 365 days

4. Select Change Activity (example) and select View summary.

5. The following Query Criteria page appears.



Activity Log Query Criteria: Change activity for Mixed Security Profile

Note: This is a sample page showing Change activity for customers with Mixed Security Profiles.

6. Select the required options and select Submit. The Activity Log—Query Results Page appears.

Administration Reports

The Administration Reports service allows you to generate and download reports providing information

on Users, Accounts and entitlements. These reports are available on-demand and in PDF, Excel or CSV

file formats and contain real time information.

This service is available under the User and Account Management tab. Depending on your working role,

your system administrator can entitle you to access the administration reports.

Refer to the Administration Reports User Guide for more information on Administration Reports.

To use the administrative reports service, complete the following steps:

Generating the report

1. From Report type, choose a report.



2. From Report format, choose a report file format to generate.

3. Select Go to generate and view the custom report.

Saving and Printing the report

4. To save your report, use the save feature of the specific application that opened the report.

5. Similarly, to print your report, open the saved report and use the print feature of the application.

Note: Please ensure that you have Adobe Acrobat Reader, Microsoft Excel, and a text editor such as

Notepad installed on your computer.



Types of Reports

The Report type lists the administrative reports to choose from. The available reports are:

Report Type Description

Changes to User Entitlements Lists all authorised entitlement changes to all Users of a Customer

Customer Summary Provides an overall summary of a Customer’s Users, entitlements, accounts and Security Devices.

Full List of Account Entitlements Displays a full list of a User’s entitlements by Account

Full List of Account Signature Limits Displays a full list of Account Signature limits sorted by Institution name/location and account number. The displayed columns are:

Transaction type

Account currency

Signature Group

Signature limit

Last modified date and time

Full List of Authentication Device Types

Lists all Security Devices associated with a Customer and their Users. It also lists all the Password Only users with the customer. This report is only available to Mixed Security Profile Customers.

Full List of Security Devices Lists all Security Devices currently associated with the Customer. This report is only available to Customers who use Security Devices

Full List of User Entitlements Provides a list of the selected User’s complete entitlements

Full List of User Entitlements by Account

Provides a list of the selected User’s complete entitlements by Account

Summary List of Accounts Provides a summary list of all accounts of the Customer in their HSBCnet portfolio of accounts

Summary List of All Users Displays a summary list of all users, both System Administrators and End Users, registered under the Customer ID. The displayed columns are:

Username

Last name, First name

User Type

User Status

Last Logon Date/Time

Last Modified Date

Registered Date

Summary List of All Authorisers Provides a list of Users entitled to Authorise any activity/transactions on any HSBCnet service (excluding Global Markets). Does not include deleted Users

Summary List of Deleted Users Lists deleted users within the period of 365 days and sorted first by User Type and second by User. The displayed columns are:

Username

Last Name, First Name

User Type

Registered Date

Deleted Date

Deleted By

Approved By



Report Type Description

Summary List of Dormant and Inactive Users

This report displays a summary list of Dormant and Inactive users. They include users

- whose status is not Active

- whose status is Active but never logged on, and

- who have not logged on during the last 30 days

The displayed columns are:

Username

Last Name, First Name

User Type

User Status

Last Logon Date/Time

Last Modified Date

Registered Date

User and Account Matrix Provides a detailed view of the Customer’s usernames and their associated account access

User and Signature Group Matrix This report lists the User and their assigned Signature Groups. The displayed columns are:

User ID

Name

Payment

Trade

Securities

Supply Chain

Note: HSBCnet header, report name, and end of report on last page are only available in the PDF format



Report Formats

The three available report formats are:

Report Format Description

PDF Portable Document Format is a file format created by Adobe Systems. To view reports in this format you need Adobe Acrobat Reader

Excel Excel Format is a file format created by Microsoft. To view reports in this format you need Microsoft Excel.

CSV Comma Separated Values is a file format that stores tabular data separated by commas. This format can be imported into various programs.

Sample Report - Excel Format

Sample Report—Comma Separated Value (CSV) Format


Issued by HSBC Bank plc

© HSBC Bank plc 2017. All rights reserved.

Documents

System Administration: User Management · System Administration: User Management Published: September 2017 2 User Management entitles System Administrators to access and modify profiles,