HSBCnet User Guide · 1. From the My KCC home page, click . Issue Certificate, or click the Issue...

HSBCnet User Guide

My Korean Certificate Centre

January 2013


Published: January 2013 i

Disclaimer This document is issued by HSBC Bank plc (‘HSBC’). HSBC is authorised and regulated by the Financial Services Authority and is a member of the HSBC group of companies (‘HSBC Group’).

This document is for information purposes only and does not constitute or form any part of (i) any invitation or inducement to engage in investment activity, or (ii) any offer, solicitation or invitation by HSBC or any of the HSBC Group for the sale or purchase of any products, services and/or any investments.

HSBC provides this document to the recipient on an ‘as is’ basis and except as provided herein, does not warrant that the contents of this document is accurate, sufficient or relevant for the recipient’s purposes.

HSBC may have obtained information in this document from sources including from third party suppliers, it believes to be reliable but which have not been independently verified. In relation to information on products and/or services supplied by a third party supplier, the recipient should obtain further information on these products and/or services directly from the supplier.

Please note that this document may contain hypertext links to websites operated by other members of the HSBC group and third parties respectively. In relation to hypertext links to websites operated by members of the HSBC group, please read the terms and conditions of the linked website. In relation to hypertext links to websites operated by third parties, please note that: (1) the recipient should read the terms and conditions of the website; and (2) HSBC does not have any control whatsoever over these websites and shall not be liable for the recipient’s use of them.

HSBC will use its reasonable endeavours to ensure that the contents of this document are current at the date of its first publication. HSBC gives no undertaking and is under no obligation to provide the recipient with access to any additional information or to update all or any part of the contents of this document or to correct any inaccuracies in it which may become apparent.

HSBC is not responsible for providing the recipient with any legal, tax or other advice regarding the contents of this document and the recipient should make its own arrangements in respect of this accordingly. This document has not been prepared to address the specific requirements or objectives of any particular client. The recipient is solely responsible for making its own independent appraisal of an investigation into the products, services and other content referred to in this document.

This document should be kept confidential and shall be used for internal business purposes only by the recipient to whom it is provided and its officers, employees and agents. This document should be read in its entirety and shall not be photocopied, reproduced, distributed or disclosed in whole or in part to any other person without the prior written consent of the relevant HSBC Group member. This document is proprietary to HSBC and the recipient agrees on request to return or, if requested, to destroy this document and all other materials received relating to the information contained herein.

Except in the case of fraudulent misrepresentation and/or breach of these terms, no liability is accepted whatsoever by HSBC and the HSBC Group for any direct, indirect or consequential loss arising from the use of this document.

Please contact your local HSBC representative for further information on the availability of products and/or services discussed herein in your region.

© Copyright. HSBC Bank plc July 2012 ALL RIGHTS RESERVED.


Published: January 2013 ii

Contents Disclaimer ........................................................................................................................... i

About My Korean Certificate Centre ................................................................................ 1 What is Financial Supervisory Service compliance? .................................................................. 1 What is a Digital Certificate? ...................................................................................................... 1 Before you begin ........................................................................................................................ 1

Entitling Users ................................................................................................................... 3 Entitling System Administrators .................................................................................................. 4 Entitling End Users ..................................................................................................................... 4

Using My Korean Certificate Centre ................................................................................ 5

Accessing the tool ......................................................................................................... 5

My KCC home page ....................................................................................................... 5 Issuing a certificate..................................................................................................................... 5 Registering a certificate .............................................................................................................. 8 Renewing a certificate .............................................................................................................. 10 Managing a certificate .............................................................................................................. 11 Reviewing a certificate ............................................................................................................. 15

Using Korean Certificate Centre Admin ........................................................................ 16

Accessing the tool ....................................................................................................... 16

Korean Certificate Centre Admin Home Page .......................................................... 16 Revoking a Certificate .............................................................................................................. 17 Enquiring on Certificate Status ................................................................................................. 18

Transactions requiring Korean certificates .................................................................. 19 Payments ................................................................................................................................. 19 File Upload ............................................................................................................................... 20 Time Deposits .......................................................................................................................... 20


Published: January 2013 1

About My Korean Certificate Centre Korean regulations require all HSBCnet clients issuing electronic payments or term deposits from an account domiciled in Korea (Korean account) to digitally sign the instruction. My Korean Certificate Centre (My KCC) facilitates the digital signing of your HSBCnet transactions for compliance with Korean regulations.

What is Financial Supervisory Service compliance? Financial transactions made by HSBC Korean customers, must be digitally signed using certificates that comply with Korea’s Financial Supervisory Service (FSS) regulations. Under the Korean National Public Key Infrastructure (NPKI), certificates can only be issued by the six Certificate Authorities (CAs) licensed by the Korean Information Security Agency (KISA). The six licensed CAs are:

• Korean Securities Computer Corporation (KOSCOM)

• Korea Information Certificate Authority (KICA)

• Korea Financial Telecommunications & Clearings (KFTC)

• National Computerization Agency (NCA)

• Korea Electronic Certificate Authority (KECA)

• Korea Trade Network (KTNET)

HSBC acts as a Registration Authority and uses KFTC to issue corporate certificates to customers. However, in accordance with FSS guidelines, HSBC also accepts corporate certificates issued by any of the six licensed CAs, subject to registration for use with HSBCnet. Likewise, HSBC issued certificates are accepted by other financial services providers in Korea.

What is a Digital Certificate? A digital certificate is an electronic document that establishes your credentials when doing business or other transactions on the web. Digital certificates are issued by a certificate authority and contain the certificate holder's name, certificate expiration date, copy of the certificate holder's public key, and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real. Some digital certificates conform to a standard such as X.509.

Before you begin To do business in Korea, your company must first apply to the Korean Government for a Business Registration Number (BRN). Once approved, your company receives a Business Registration Certificate that includes the business registration number for the company. The Business Registration Certificate is a mandatory legal document that your company must present to open a bank account and an HSBCnet profile domiciled in Korea.



Business Registration Certificate Example

Depending on your role in the company, your System Administrator must entitle you to one or more of the following tools to digitally sign payments from a Korean account:

• The payments tool with authorisation rights

• My Korean Certificate Centre tool

• Korean Certificate Centre Admin tool

• Korea Accounts from which you are entitled to make payments.

For more information about User entitlements, refer to the System Administration—User Entitlement User Guide.

http://www.hsbcnet.com/online/attachments/user-guide/ug_sa_entitle.pdf

http://www.hsbcnet.com/online/attachments/user-guide/ug_sa_entitle.pdf



Entitling Users As a System Administrator, complete the following steps to entitle another System Administrator or End User to the My Korean Certificate Centre tool (MyKCC):

1. From the User and Account Management tab click Modify User Access Level in the User Management tool and authenticate yourself with your Security Device or Smart Card. The Search User page appears.

User Management tool

Search User page

2. Choose the user from the search results page by clicking the corresponding username. The Access Control Details page appears.

3. Depending on whether the user is a System Administrator or End User, complete the following steps:



Entitling System Administrators • In the Customer Administration—Administrative User Entitlements section, select the View

and/or Initiate checkboxes under KCC Certification Revocation.

Administrative User Entitlements: KCC Certification Revocation

• In the Customer Services section, select the My Korean Certificate Centre checkbox.

• Click Submit. The Access Control—Details page appears.

Modify User Access Level: My Korean Certificate Centre

Entitling End Users • In the Customer Services section, select the My Korean Certificate Centre checkbox. All

users entitled to authorise payments from a Korean account must be given this entitlement.

• Click Proceed.

4. The Access Control—Details page displays the details before and after the modification. Review the details and click Submit to process the changes.

5. An acknowledgement page confirms your action.



Using My Korean Certificate Centre

Accessing the tool My Korean Certificate Centre is accessible in the User and Account Management tab.


My KCC home page To access the My KCC home page, click MyKCC in the My Korean Certificate Centre tool.

MyKCC home page

From the My KCC home page you can:

• Issue your Certificate

• Register your Certificate

• Renew your Certificate

• Manage your Certificate

• Review your own certificate

Issuing a certificate If you require a certificate, you can obtain an FSS compliant Korean certificate issued by HSBC by clicking Issue Certificate.

To issue a new certificate to yourself,



1. From the My KCC home page, click Issue Certificate, or click the Issue Certificate tab. The My KCC Issue Certificate Terms and Conditions page appears.

2. Read the agreement carefully and click Accept to proceed.

Issue Certificate

3. A confirmation page appears, requiring you to review the details of your certificate. Enter your five-digit Passcode. Click Confirm to proceed.

Note: Your Passcode is the last five digits of your Business Registration Number (BRN). If you do not have this number, you can obtain this information from the My Enquiry feature of the MyKCC tool.

Issue Certificate: Confirmation Page

4. A dialog box appears requiring you to install the digital signing software. Click Install to install the software.



Digital Signing Software Installation

5. After the software is installed, click Issue to issue the new digital certificate. A dialog box appears and prompts you to indicate the location of the digital certificate (the only choice available is your computer’s hard disk). Click OK to proceed.

Certificate Location box

Note: Initially, the digital certificate is saved to the hard disk of the computer you are using. You can only authorise payments using the digital certificate from this computer.

To authorise payments from another computer, you can:

• Re-issue the certificate using the Issue Certificate link under the MyKCC tool from the other computer.

• Transfer the certificate using a portable device. Refer to Managing a certificate—Copying a certificate for more details.

• Export/Import the certificate. Refer to Managing a certificate—Export/Import a certificate for more details.



6. In the Private-key Password box that appears, enter an eight-character-long alphanumeric password. Click OK to generate the digital certificate. A status message appears.

Private-key Password box

Digital certificate generation status message

7. An acknowledgement page appears to confirm that your certificate has been successfully generated.

Certificate Generation: Acknowledgement page

Registering a certificate If you already have a valid certificate issued by a FSS compliant Korean CA, you must register it for use with HSBCnet by clicking Register Certificate. However, you do not need to register a certificate issued by HSBC.

To register your digital certificate, complete the following steps:

1. From the My KCC home page, click Register Certificate, or click the Register Certificate tab. The My KCC—Register Certificate page appears.



My KCC—Register Certificate page

2. Click Browse. The digital signing software dialog box appears. Select the appropriate certificate, enter the password, and click OK.

Digital Certificate Selection Window

3. A confirmation message appears and displays the selected valid certificate. Enter your five-digit Pass code and click Continue to register the digital certificate.

4. An acknowledgement page appears and confirms that the digital certificate has been successfully registered. You can now use this certificate to sign Korean payment transactions.



Registration Acknowledgement

Renewing a certificate A certificate is valid for one year from the date of issue. If your certificate is due to expire within the next 30 days you will receive a notice reminding you to renew it.

To renew the certificate, complete the following steps:

1. From the My KCC home page, click Renew Certificate, or click the Register Certificate tab. The My KCC—Renew Certificate Terms and Conditions page appears.

My KCC—Renew Certificate page

2. Read the terms and conditions carefully and click Accept to proceed.

3. On the My KCC—Renew Certificate Confirmation page, review the details of the certificate. Enter your five-digit Passcode and click Confirm to renew the certificate.



My KCC—Renew Certificate Confirmation page

4. An acknowledgement confirms that the certificate has been renewed.

Managing a certificate The My KCC Certificate Management function facilitates the following actions:

• Viewing and verifying a certificate

• Copying a certificate

• Exporting or Importing a certificate

• Deleting a certificate

• Changing a certificate password, or

• Viewing user details

To access the Certificate Management actions, complete the following steps:

1. From the My KCC home page, click Certificate Management, or click the Certificate Management tab. The Certificate Management page appears.

My KCC—Certificate Management page

2. Click Manage my Certificate. The Certificate Manager dialog box appears.

3. Click one of the six actions under File and Certificate Information.



Certificate Manager Dialog box

Copying a certificate You can copy a certificate to a different storage location (you can copy a certificate to a removable portable storage device for installation on a different computer).

To copy a certificate, complete the following steps:

1. From the Certificate Manager, click Copy. The Copy Certificate dialog box appears.

2. Choose Removable Disk (Floppy/USB) or Smart Card.

3. Enter the password for the certificate and click OK.

4. Select the drive you want to store your certificate on and click OK.



Deleting a certificate The Delete action facilitates the deletion of certificates that are no longer required. Select the certificate you wish to delete and click Delete. Click Yes in the confirmation box to complete the action.

Exporting or importing a certificate Certificates are transferred between computers in the following standardised file formats: .Pfx, .p12, or .Cer.

The Export / Import action stores your certificate in a standard file format (.Pfx, .p12, or .Cer) on the same personal computer or on a removable storage device. Select a certificate and click Export, enter the certificate password, create a password for the export. Then identify the location for the certificate file export.

This option allows you to import existing certificates stored on the PC or removable storage into the list of available certificates by clicking on Export/Import and selecting the import option. Then select the type of certificate file to import, identify the location of the certificate file(s) and click finish.



Viewing and verifying a certificate This action allows you to verify the authenticity of a certificate or view the details. Click the Copy option in the Certificate Manager to view the Certificate Information.

Changing a Certificate Password Use this option to change the password for a certificate. You can renew your password only if you still have/know your current password. Your password must be 8 to 56 alphanumeric characters.

Note: If you have forgotten your password, you System Administrator must revoke your certificate and issue a new one.

Viewing user details This option allows you to check that the certificate in the list correctly corresponds to you and your organisation, by verifying the certificate password and the company Business Registration Number



(BRN). Select a certificate, click User Details and enter the certificate password and BRN. If the certificate does not correspond with the details provided, a message notifies you of the error.

Reviewing a certificate You can review your certificate details and enquire about your certificate status by clicking My Enquiry.

My KCC—My Enquiry page



Using Korean Certificate Centre Admin

Accessing the tool System Administrators with entitlements to revoke digital certificates can access the tool’s administrative functions by clicking Korean Certificate Centre Admin in the User Management tool, under the User and Account Management tab.

Korean Certificate Centre Admin

Korean Certificate Centre Admin Home Page Your System Administrators have access to Korean Certificate Centre Admin functions to enable them to enquire on certificates and to revoke Digital Certificates of other System Administrators and End Users.

Korean Certificate Centre Admin



Revoking a Certificate To revoke a certificate, complete the following steps:

1. From the KCC Admin home page, click the Initiate Certificate Revocation link or the Certificate Revocation tab. The KCC Admin—Certificate Revocation Initiate User Search page appears.

KCC Admin—Certificate Revocation User Search page

2. Search for the user whose certificate you wish to revoke. To retrieve all users with certificates, leave the search text blank and click Search. The search results page displays the usernames matching the search criteria. Choose the user and click Continue.

3. The User Details page shows the certificate and BRN information. Enter the reason for revoking the certificate and click Revoke.

4. If your company follows dual authorisation control, this revocation needs to be authorised by another System Administrator. Otherwise, the certificate is immediately revoked.



Certificate Revocation—Pending Authorisation

Enquiring on Certificate Status To enquire on the status of a user’s certificate, complete the following steps:

1. From the KCC Admin home page, click the Certificate Enquiry link or the Enquiry tab. The KCC Admin—Enquiry page appears.

KCC Admin—Enquiry page

2. Search for a user you wish to perform the certificate enquiry for. To retrieve all users, leave the search criteria blank and click Search. The Search results page displays a chronological list of statuses for the selected user’s certificate.

KCC Admin User Certificate Status



Transactions requiring Korean certificates The following transaction types require signed certificates when made from a Korean account.

Payments Appropriate digitally-signed certificates are required for transactions made from Korean accounts for the following payment types.

• Priority Payments

• Inter-account transfer

• Customer transfer (for financial institutions only)

• Bank-to-bank transfer (for financial institutions only)

• ACH Credit/Debit

If a digitally-signed certificate is required, the Digital Signing dialog box appears when you click Authorise. Select your digital certificate from this window, enter your password and click OK. If the password is verified, the payment instruction is sent along with a digitally-signed certificate.

Bulk authorisation of payments

In bulk authorisation where more than one instruction is submitted, only one digital signature is necessary. Payment instructions requiring multiple authorisations will require a digital signature at each stage of authorisation.

Authorising Restricted Templates

When authorising a restricted template where the debit account is a Korean account, you do not need a digital certificate. However, if you are authorising a payment created using a restricted template with a Korean debit account, you will need to digitally sign the transaction even if your company follows sole transaction control.

Payment Authorisation—Digital Signing



File Upload Appropriate digitally-signed certificates are required when authorising payments using the File Upload tool made from Korean accounts.

If your company is assigned a BRN you will see the Digital Signing Indicator or Digital Signing dialog box for all pre-authorised File Upload payments regardless of where the debit account is domiciled. If you submit a File Level Authorisation (FLA) instruction that debits a Korean account, you require an appropriate digitally-signed certificate when authorising that instruction. The Digital Signing Indicator appears in the File Upload tool under the Reports and Files Download tab.

Note: Do not select the Digital Signing Indicator box if your file does not contain any transactions debiting a Korean account.

All file formats are only validated after Digital Signing Indicator is selected. An error message appears if a file instruction involving a Korean resident account is not digitally-signed.

Time Deposits Appropriate digitally-signed certificates are required for Time Deposit instructions that debit a Korean account, regardless of currency, with the following criteria:

• The debit account for new deposits is a Korean account



• Maturity Instructions are for a Korean Time Deposit account

• Maturity Instructions are for a Time Deposit with additional deposits from a Korean debit account


Issued by HSBC Bank plc © HSBC Bank plc 2012. All rights reserved.

Date post:	16-Jul-2020
Category:	Documents
Upload:	others
View:	1 times
Download:	0 times

HSBCnet User Guide · 1. From the My KCC home page, click . Issue Certificate, or click the Issue...

Documents