User Guide
System Administration: User Management
September 2017
System Administration: User Management
Published: September 2017 i
Disclaimer
This document is issued by HSBC Bank plc (‘HSBC’). HSBC Bank Plc is authorised by the Prudential
Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation
Authority (Registration Number 114216). This document is for information purposes only and does not
constitute or form any part of (i) any invitation or inducement to engage in investment activity, or (ii) any
offer, solicitation or invitation by HSBC or any of the HSBC Group for the sale or purchase of any products,
services and/or any investments.
HSBC provides this document to the recipient on an ‘as is’ basis and except as provided herein, does not
warrant that the contents of this document is accurate, sufficient or relevant for the recipient’s purposes.
HSBC may have obtained information in this document from sources including from third party suppliers,
it believes to be reliable but which have not been independently verified. In relation to information on
products and/or services supplied by a third party supplier, the recipient should obtain further information
on these products and/or services directly from the supplier.
Please note that this document may contain hypertext links to websites operated by other members of the
HSBC group and third parties respectively. In relation to hypertext links to websites operated by members
of the HSBC group, please read the terms and conditions of the linked website. In relation to hypertext
links to websites operated by third parties, please note that: (1) the recipient should read the terms and
conditions of the website; and (2) HSBC does not have any control whatsoever over these websites and
shall not be liable for the recipient’s use of them.
HSBC will use its reasonable endeavours to ensure that the contents of this document are current at the
date of its first publication. HSBC gives no undertaking and is under no obligation to provide the recipient
with access to any additional information or to update all or any part of the contents of this document or
to correct any inaccuracies in it which may become apparent.
HSBC is not responsible for providing the recipient with any legal, tax or other advice regarding the
contents of this document and the recipient should make its own arrangements in respect of this
accordingly. This document has not been prepared to address the specific requirements or objectives of
any particular client. The recipient is solely responsible for making its own independent appraisal of an
investigation into the products, services and other content referred to in this document.
This document should be kept confidential and shall be used for internal business purposes only by the
recipient to whom it is provided and its officers, employees and agents. This document should be read in
its entirety and shall not be photocopied, reproduced, distributed or disclosed in whole or in part to any
other person without the prior written consent of the relevant HSBC Group member. This document is
proprietary to HSBC and the recipient agrees on request to return or, if requested, to destroy this
document and all other materials received relating to the information contained herein.
Except in the case of fraudulent misrepresentation and/or breach of these terms, no liability is accepted
whatsoever by HSBC and the HSBC Group for any direct, indirect or consequential loss arising from the
use of this document.
Please contact your local HSBC representative for further information on the availability of products and/or
services discussed herein in your region.
© Copyright. HSBC Bank plc 2017 ALL RIGHTS RESERVED.
System Administration: User Management
Published: September 2017 ii
Contents Disclaimer ........................................................................................................................... i
About User Management .................................................................................................. 1
Before you begin ........................................................................................................... 1
Customising the User and Account Management tab .......................................................... 1
Authentication .......................................................................................................................... 2
Sole or Dual Administrative Control ....................................................................................... 2
Managing HSBCnet Users ................................................................................................ 3
Setting up new Users .................................................................................................... 3
User Authorisation Summary—Setting up new Users .......................................................... 4
User Authorisation Summary page .............................................................................. 4 Editing displayed content ............................................................................................. 5 Step-by-step setup process ......................................................................................... 6
Managing existing Users ............................................................................................ 14
User Management service ......................................................................................................14
Viewing User profiles ................................................................................................. 15 Viewing User Access Level ........................................................................................ 16 Modifying User Profile ................................................................................................ 18 Modifying User Access Level ..................................................................................... 18 Modifying Multi User Access Level by Account .......................................................... 20 Suspending User access ........................................................................................... 23 Reactivating User access........................................................................................... 24 Deleting Users ........................................................................................................... 24 New User Invitation .................................................................................................... 24 Managing Security Devices........................................................................................ 24
User Authorisation Summary—Managing Existing Users ...................................................25
Managing Security Devices ............................................................................................ 28
Setting up Security Devices ....................................................................................... 28
Accessing HSBCnet Security Device management functions ............................................28
Managing Security Devices by username .............................................................................29
Viewing Security Devices by username ..................................................................... 29 Setting up Security Devices by username.................................................................. 30 Maintaining Security Devices by username ............................................................... 30 Resetting Security Device PIN by username ............................................................. 31 Revoking Security Devices by username ................................................................... 33 Re-synchronising Security Devices by username ...................................................... 34 Deactivating Security Devices by username .............................................................. 34 Authorising Security Device maintenance .................................................................. 35
Managing Security Devices by serial number ......................................................................36
Viewing Security Devices by serial number ............................................................... 36 Options for maintaining Security Devices by serial number ....................................... 36 Setting up Security Devices by serial number ............................................................ 39 Resetting Security Device PINs by serial number ...................................................... 40 Revoking Security Devices by serial number ............................................................. 41 Re-synchronising Security Devices by serial number ................................................ 42 Deactivating Security Devices by serial number ........................................................ 42 Authorising Security Device maintenance .................................................................. 44
Ordering Security Devices .....................................................................................................44
Authorising Security Device orders ............................................................................ 45
System Administration: User Management
Published: September 2017 iii
Troubleshooting Security Devices ............................................................................ 46
Resetting security information ...................................................................................... 50
Online Reset during Initial Log on ............................................................................. 50
Offline Reset (OFR) during Initial Log on ..............................................................................53
Resetting your memorable answer ........................................................................................55
Resetting your password .......................................................................................................56
Querying User Activities ................................................................................................. 58
Account Services Activity Log ................................................................................... 58
Account Maintenance .............................................................................................................58
Access Control for Account Services ...................................................................................59
Activity Log Query ....................................................................................................... 60
Administration Reports ............................................................................................... 61
Generating the report ..............................................................................................................61
Saving and Printing the report ...............................................................................................62
Types of Reports .....................................................................................................................63
Report Formats........................................................................................................................65
System Administration: User Management
Published: September 2017 1
About User Management
HSBCnet System Administration provides customers with online access to a full suite of administrative
services to manage their registered Users. These include setting up and entitling other System
Administrators and End Users. This guide is intended as a reference for HSBCnet System Administrators
only.
Before you begin
Your HSBCnet System Administrator must entitle you with access to the System Administration services.
Rights to enquire on, prepare and authorise administrative instructions are entitled individually. Depending
on the setup at the User access level, you may be entitled to different roles as a User.
Customising the User and Account Management tab
This section describes the unique features of administration tab and the services available to you. You
can choose other operations from the User and Account Management tab and arrange these services to
meet your needs.
User and Account Management tab
Your System Administrator must entitle your access so that you can use HSBCnet for the following
functions:
Account Management permits account setup including signature limits, account
identification, and account grouping
Account Services Activity Log lists companywide transactions by account service
Activity Log Query lists session, change and deletion activity by User
Administration Reports entitles user to generate and download reports providing
information on Users, Accounts and entitlements.
User Authorisation Summary lists current information about registered Users that are
pending set up and approval by System Administrator(s)
System Administration: User Management
Published: September 2017 2
User Management entitles System Administrators to access and modify profiles,
entitlement levels and Security Device management
Company Management entitles System Administrators to maintain companywide
parameters of daily transaction limits for different payment types. Refer to Maintain Daily
Transaction limits for Payments section in this guide.
User and Account Management tab and services
Note: Pages may look different depending on your region and other factors.
Authentication
Depending on your HSBCnet agreement, authentication requires a Security Device. For more information,
refer to the User Authentication Guide.
Sole or Dual Administrative Control
Your HSBCnet agreement with the Bank defines your System Administrator environment as either Sole
Administrative Control or Dual Administrative Control.
For Sole Administrative Control, all System Administrator functions are processed
immediately
For Dual Administrative Control, all System Administrator functions require a second
administrator’s approval. If a System Administrator has been entitled with only Prepare
entitlements, every operation initiated by that administrator requires two subsequent
approvals by System Administrators with Approve rights
Note: For detailed information on System Administrator entitlements, refer to the section on Administrative
Entitlements in the System Administration – User Entitlement User Guide.
System Administration: User Management
Published: September 2017 3
Managing HSBCnet Users
This section deals with HSBCnet User management which involves two groups of activities to be
performed by System Administrators:
Setting up new Users
Managing existing Users
Setting up new Users
As a System Administrator, new User setup activities performed by you vary with the Bank unit that the
User primarily deals with. Newly registered Users can be classified into:
USER TYPE REGISTRATION TYPE
Initial System Administrator
Registrations without Customer ID
Global Transaction Banking User
Securities Service User
Trade Services User
HSBC Investments User
Registrations with Customer ID
Note: For detailed information on User registration, refer to the Registration and Navigation User Guide.
New User setup workflow: Registration without Customer ID
New User setup workflow: Registration with Customer ID
System Administration: User Management
Published: September 2017 4
This guide is only for System Administrators performing setup tasks for Users registered with a reference
ID/New User Invitation e-mail. Accordingly, System Administrators can set up two types of Users:
Other System Administrators
End Users
User Authorisation Summary—Setting up new Users
The User Authorisation Summary service allows System Administrators to act on pending transactions
relating to User management.
In setting up new Users, use User Authorisation Summary to review, approve or reject new User
registrations.
For customers under Sole Administrative Control, the changes are processed immediately after the
System Administrator completes the setup and entitlement process.
For customers under Dual Administrative Control, a second System Administrator must approve changes
to User registration status, entitlements, and authorisation levels.
For customers under Dual Administrative Control with Preparer role, two System Administrators must
approve the changes initiated by a User with Preparer only entitlements.
User Authorisation Summary
To view additional registrations, select Open more. The User Authorisation Summary page appears.
User Authorisation Summary page
The User Authorisation Summary page displays up to 500 transactions in up to 10 pages of 50
transactions each. Transactions are sorted by date, with the most recent transaction appearing first and
grouped by User. Because Users could have more than one active transaction, there may be less than
50 Users displayed on a page.
System Administration: User Management
Published: September 2017 5
User Authorisation Summary page
Editing displayed content
Use the Edit link located on the title bar to filter the pending records based on location of business, action
status, date range and number of records. The function type and action status displayed in the User
Authorisation Summary depend on your entitlements and company profile.
Select the desired location of business, function type, action status and activity date. You can also select
the number of records to be displayed in the User Authorisation Summary.
Select Apply to filter the records.
User Authorisation Summary Edit link—Dual Administrative Control example
Note: Depending on your company’s unique setup, some of the options may appear different when you
access the Edit Content page.
System Administration: User Management
Published: September 2017 6
Step-by-step setup process
Selecting on any pending action in the User Authorisation Summary launches the step-by-step setup
process. The steps in the process vary depending on the type of pending action that is being processed.
A typical User setup scenario for a Dual Administrative Control customer is described below.
1. From the User Authorisation Summary select a link in the Pending Action column to launch the
step-by-step setup process. The User Setup—User Profile page appears.
User Authorisation Summary service
2. Review the information on the page. Under Section 6 - Further Registration Information, select
System Administrator or End User in the User Type field. The User Type selection is irreversible.
3. Select Next Step to approve the profile and proceed to Access Control page. Alternatively, you can
select Reject to reject the setup.
System Administration: User Management
Published: September 2017 7
Step-by-step process for User Setup—User Profile
4. On the Access Control page, select the Administrative User Entitlements link to set up the
administrative entitlements of the User (for System Administrators only). To set up entitlements to
transactional services select the specific service link. You can also copy the access rights of an
existing User by selecting the Copy button. For detailed information on setting up User entitlements
refer to the System Administration—User Entitlement user guide.
5. Select Next Step to accept the changes and proceed to the Access Control review page. Review
the information and select Next Step to proceed to the Security page. Alternatively, you can select
Modify to return to the main Access Control page to modify the access information.
Step-by-step process for User Setup—Access Control review
System Administration: User Management
Published: September 2017 8
System Administration: User Management
Published: September 2017 9
6. If your company has a Mixed Security profile, you can choose to allocate one of three
authentication types for the specific user.
- OTP token (also known as One Time Password or Security Device)
- Password only
Depending on your selection, one of the following three pages appear. Complete any mandatory
fields.
7. Select Next Step to proceed. Alternatively, you can skip this step by selecting the Skip button. You
can allocate a Security Device for the User at any time from the options available under the User
Management service.
Mixed Security Device Profile
Step-by-step process for User Setup—OTP Token/Security Device example
Step-by-step process for User Setup—Password Only example
System Administration: User Management
Published: September 2017 10
Note: The User with Password only authentication rights may not be able to access transactional or other
services. This authentication type is given to Users who only require access to enquiry services such as
Balance and Transaction Reporting, Report and File Download, etc. The User does not require a physical
security device and the only need to authenticate themselves during the logon process with their
memorable answer and the three requested characters of their current password.
8. An acknowledgement page confirms your action. The updated pending action status appears.
Step-by-step process for User Setup—Acknowledgement
System Administration: User Management
Published: September 2017 11
Depending on your company profile and User entitlement, the following pending function type/access
status combinations for User setup are available.
List of UAS pending actions: User setup
System Administration: User Management
Published: September 2017 12
CONTROL STATUS/ PENDING ACTION
DESCRIPTION ACTION REQUIRED
User setup
Sole Administrative Control
User Setup – Awaiting
New User has registered and the registration is awaiting entitlement and approval.
System Administrator must select this pending action, entitle the User and approve the setup.
Dual Administrative Control
User Setup – Awaiting
New User has registered and the registration is awaiting entitlement and approval.
System Administrator must select this pending action, entitle the User and approve the setup.
User Setup – Pending Approval
New User has registered, been entitled and approved by the first System Administrator and is awaiting final approval by second System Administrator.
Second System Administrator must select this pending action and approve the setup.
If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.
Dual (with preparer role) Administrative Control
User Setup – Awaiting
New User has registered and the registration is awaiting entitlement and approval.
Preparer must select this pending action, entitle the User and submit the setup for approval by first of two System Administrators.
Alternatively, first of two System Administrators can entitle and approve the setup.
User Setup – Pending Review
New User has registered; another User with Preparer role has entitled the User and is awaiting review and approval by the first of two System Administrators.
First of two System Administrators must select this pending action and approve the setup. If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.
User Setup – Pending Approval
New User has registered, been entitled by another User with Preparer role, has been reviewed and approved by the first System Administrator and is awaiting final approval by second System Administrator, OR
New User has registered, has been entitled and approved by first of two System Administrators and is awaiting approval by second administrator
Second of two System Administrators must select this pending action and approve the setup.
If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.
Common action for all types of Administrative Control
User Setup – Incomplete Approve
If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’.
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.
System Administration: User Management
Published: September 2017 13
CONTROL STATUS/ PENDING ACTION
DESCRIPTION ACTION REQUIRED
User Setup – Incomplete Reject
If during the rejection process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Reject’.
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.
Dual Administrative Control
Dual (with preparer role) Administrative Control
User Setup – Pending Repair
New User has registered, been entitled and approved by the first System Administrator and is sent to repair at the setup stage by the final approving System Administrator. OR
New User has registered, another User with Preparer role has entitled the User and is sent to repair by first of two System Administrators at the first approval stage
New User has registered, another User with Preparer role, has entitled the User and is approved by first of two System Administrators but sent to repair by the second System Administrator at the final approval stage
The first System Administrator must select this pending action, repair the setup and resubmit it for final approval, OR
The User with Preparer role must select this pending action, repair the setup and resubmit it for approval by the first administrator, OR
The first System Administrator must select this pending action, repair the setup and resubmit it for final approval.
User Setup – Incomplete Send to Repair
New User has registered, been entitled and approved by the first System Administrator and is being sent to repair at the setup stage by the final approving System Administrator but the transaction (during the repair stage) is left incomplete (lost connection/timed out).
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.
System Administration: User Management
Published: September 2017 14
Managing existing Users
User Management service
The User Management service allows you to do the following System Administrator functions:
View User Profile – view-only access to user profile information such as the User’s first
and last name, address, etc.
View User Access Level – view-only access to the services the User is entitled to
Modify User Profile – modify non entitlement information such as the User’s first and last
name, address, etc.
Modify User Access Level – modify the services the User is entitled to
Modify Multi User Access Level by Account – entitle multiple users simultaneously by
account
Suspend User – prevents a User from logging on to the personal page
Reactivate Suspended User – reinstate access of suspended User
Delete User – permanently deletes the User from the system’s databases
Create New User Invitation Email – generate and send a New User Invitation e-mail to
your registered e-mail account. Forward this e-mail to potential new Users to register on
HSBCnet
Manage Security Devices – issue and manage Security Devices.
View User IP Address Restrictions — to view a list of User IP Addresses that are
permitted to access your HSBCnet profile
User Management service—Security Device Profile
The search feature, available for many User management activities, displays items related to your request.
Selecting a username provides information about the User’s profile.
System Administration: User Management
Published: September 2017 15
Common User search page for User Management activities
Note: Users having unapproved pending changes are not shown. Use User Authorisation Summary
service to check for pending changes.
Viewing User profiles
From User Management service, choose View User Profile to view non-entitlement information about
Users in your company.
System Administration: User Management
Published: September 2017 16
View User profile
Viewing User Access Level
From User Management service, choose View User Access Level to view entitlement information about
Users in your company. To view micro entitlements, choose a service.
System Administration: User Management
Published: September 2017 17
View User Access Level
System Administration: User Management
Published: September 2017 18
Modifying User Profile
From User Management service, choose Modify User Profile to access non-entitlement information
such as username and address.
Modify details as needed, and then select Submit to update changes.
Modify User Profile
An acknowledgement confirms your action. For Dual Administrative Control customers, the changes need
to be authorised by another System Administrator from the User Authorisation Summary.
Modifying User Access Level
From User Management service, choose Modify User Access Level to access entitlement information
about Users in your company.
For System Administrators, select Administrative User Entitlements to modify the administrative access
levels. For all Users, choose a service in the General Services or Account Services sections and modify
details as needed. Alternatively, you can select Copy to copy the access controls of an existing User.
Select Proceed to display the confirmation page. You can choose to Save as incomplete to save the
changes and complete them later.
System Administration: User Management
Published: September 2017 19
Modify User access level
Review the access control information and select Submit to process the changes. Alternatively, you can
select Back to go back to the previous page to modify the changes.
System Administration: User Management
Published: September 2017 20
Modify Access Control—Summary
An acknowledgment confirms your action. For customers with Dual Administrative Control, the changes
need to be authorised by another System Administrator from the User Authorisation Summary.
Modifying Multi User Access Level by Account
From the User Management service, choose Modify Multi-User Access Level by Account to
simultaneously modify service entitlements of multiple users for a particular account.
User Management Service: Modify Multi User Access Level by Account
System Administration: User Management
Published: September 2017 21
1. Use the Quick Filter to select and view a list of accounts for which you wish to make service
entitlement modifications. The available options are: Account Criteria, Account Location, and Value.
Select Apply to apply your preferences.
2. From the Account Summary page select a specific account to view its Account Details.
Account Summary list for Modify Multi User Access Level by Account
3. The Account Details page displays a list of services available for that account. Select a service link
in the Account Services section to display a list of existing users.
Account Service link
4. Modify User entitlements by selecting the appropriate boxes. Select Confirm to submit your
modifications.
System Administration: User Management
Published: September 2017 22
Modify Multi User Access Level by Account: User List for the selected Service
5. Continue selecting and modifying each account service as desired.
6. Once complete, select Proceed. A confirmation page displays a list of Users pending entitlement.
Modify Entitlements: Service by Service
7. Use the print icon on the page to print the confirmation. To check individual entitlements, select a
username.
8. If correct, select Submit to submit your modifications, or select Back to make further changes.
System Administration: User Management
Published: September 2017 23
Multi User Access Control: Confirmation page
9. If you submitted your modifications, a final acknowledgement confirms your action.
If your company uses Dual Administrative Control (with or without Preparer role) the status of the
entitlement change in the User Authorisation Summary will be Multi-User Access Control – Pending
Approval. Subsequent approval(s) by one or more System Administrators is required to complete
the modification.
Multi User Access Control: Acknowledgement
Suspending User access
From User Management service, choose Suspend User to prevent access to a User's personal page.
Suspension is usually temporary, and performed, for example, when a User goes on leave. After
confirmation, suspension occurs immediately, even if a User is using the system.
Suspend User
An acknowledgement confirms your action. For customers with Dual Administrative Control, this function
does not require approval by a second System Administrator.
System Administration: User Management
Published: September 2017 24
Reactivating User access
From the User Management service, choose Reactivate Suspended User to restore a suspended
User’s access to their personal page.
Reactivate suspended User
An acknowledgement confirms your action. For customers with Dual Administrative Control, this function
requires approval by a second System Administrator from the User Authorisation Summary.
Deleting Users
From User Management service, choose Delete User to delete a User. The User will no longer have
access to HSBCnet. Users must re-register if they are to be given access again.
Delete User
An acknowledgement confirms your action. For customers with Dual Administrative Control, this function
requires approval by a second System Administrator from the User Authorisation Summary.
New User Invitation
From the User Management service, choose New User Invitation to generate and send the Invitation e-
mail to your registered e-mail address. The e-mail contains the master registration link for your company.
As the System Administrator of your company, you are required to forward the e-mail to potential new
Users. The new User must register using the link in this Invitation e-mail to be linked to your company’s
HSBCnet profile.
Managing Security Devices
The User Management service also provides access to Security Device administration services.
Access the relevant services from the Manage Security Devices link under User Management service.
For information on these actions, Security Device sections in this guide.
System Administration: User Management
Published: September 2017 25
User Authorisation Summary—Managing Existing Users
The User Authorisation Summary service allows you, as a System Administrator, to take action on pending
transactions relating to User management.
In managing existing Users, use User Authorisation Summary to approve, review modify or reject existing:
User profiles
User access level
Security Information Resets (SIRs)
User reactivation
User deletion
For customers with Sole Administrative Control, the changes are processed immediately after the System
Administrator completes the setup and entitlement process.
For customers with Dual Administrative Control, a second System Administrator must approve changes
to User registration status, entitlements, and authorisation levels. For customers under Dual
Administrative Control with Preparer role, two System Administrators must approve the changes initiated
by a User with Preparer status.
For detailed information on every type of pending action related to managing existing Users under User
Authorisation Summary, refer to the following table.
List of other pending actions: manage existing users
CONTROL STATUS/ PENDING ACTION
DESCRIPTION ACTION REQUIRED
Security Information Reset
Sole Administrative Control
Security Information Reset – Awaiting
User has submitted new security information and is awaiting approval by System Administrator
System Administrator must select this pending action and approve the new security information
Dual Administrative Control
Security Information Reset – Awaiting
User has submitted new security information and is awaiting approval by System Administrator
System Administrator must select this pending action and approve the new security information
Security Information Reset – Pending Approval
User has submitted new security information, submission has been approved by first of two System Administrators and is awaiting approval by second System Administrator
Second System Administrator must select this pending action and approve the new security information
Access Control (entitlement changes)
Sole Administrative Control
Access Control – Incomplete Entitlements
A System Administrator has initiated User Entitlement changes that are yet to be completed
A System Administrator must select this link to complete the entitlement changes
Dual Administrative Control
Access Control – Incomplete Entitlements
A System Administrator has initiated User Entitlement changes and saved them as incomplete
A System Administrator must select this link to complete the entitlement changes
System Administration: User Management
Published: September 2017 26
CONTROL STATUS/ PENDING ACTION
DESCRIPTION ACTION REQUIRED
Access Control – Pending Repair
A System Administrator has sent the User’s entitlement changes to be repaired
A System Administrator must select this link to repair the User entitlement changes
Access Control – Pending Approval
System Administrator has changed the entitlements for an existing User and is awaiting approval by second System Administrator
Second System Administrator must select this pending action and approve the entitlement changes
Access Control – Incomplete Approve
If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process
Dual (with preparer role) Administrative Control
Access Control – Incomplete Entitlements
A System Administrator with Preparer role has initiated User Entitlement changes that are yet to be completed
A System Administrator must select this link to complete the entitlement changes
Access Control – Pending Review
User with Preparer role has changed the entitlements of an existing User and submitted the changes for first of two approvals by a System Administrator
First of two System Administrators must select this pending action and approve the changes
Access Control – Pending Approval
User with Preparer role has changed the entitlements of an existing User, changes are approved by the first of two System Administrators and is awaiting approval by the second administrator
Second of two System Administrators must select this pending action and approve the changes
Access Control – Incomplete Approve
If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.
User Reactivation
Dual Administrative Control
User Reactivation – Pending Approval
A System Administrator has reactivated an existing User and is awaiting approval by a second administrator
Second of two System Administrators must select this pending action and approve the reactivation
User Reactivation – Incomplete Approve
If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.
User Delete
System Administration: User Management
Published: September 2017 27
CONTROL STATUS/ PENDING ACTION
DESCRIPTION ACTION REQUIRED
Dual Administrative Control
User Delete – Pending Approval
A System Administrator has deleted an existing User and is awaiting approval by a second administrator
Second of two System Administrators must select this pending action and approve the User deletion
User Delete – Incomplete Approve
If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.
Modify Multi-User Access Level by Account
Dual Administrative Control
Multi-User Access Control – Pending Approval
A System Administrator has made multi-user service entitlement changes for an account and is awaiting approval by a second administrator
Second of two System Administrators must select this pending action and approve the entitlement changes
Dual (with Preparer role) Administrative Control
Multi-User Access Control – Pending Review
User with Preparer role has made multi-user service entitlement changes for an account and submitted the changes for first of two approvals by a System Administrator
First of two System Administrators must select this pending action and approve the changes
Multi-User Access Control – Pending Approval
User with Preparer role has made multi-user service entitlement changes for an account, changes are approved by the first of two System Administrators and is awaiting approval by the second administrator
Second of two System Administrators must select this pending action and approve the entitlement changes
Multi-User Access Control –
Incomplete Approval
If during the approval process, the transaction fails to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’ (Note: Approval for some individual entitlement changes in the transaction may have been processed)
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the approval process.
Modify User (profile changes)
Dual Administrative Control
Modify User – Pending Approval
A System Administrator has modified the profile of an existing User and is awaiting approval by a second administrator
Second of two System Administrators must select this pending action and approve the profile changes
Modify User – Incomplete Approve
If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’
The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process
System Administration: User Management
Published: September 2017 28
Managing Security Devices
Access the Security Device options by selecting the Manage Security Devices link in the User
Management service.
The following are some HSBCnet System Administrator functions requiring Security Device
authentication:
HSBCnet log on
User Management
User Authorisation Summary
Account Management
Company Management
Other Transaction Banking services such as Payment creation and authorisation, File
Upload etc.
Setting up Security Devices
HSBCnet System Administrators set up Security Devices by assigning the serial number on the back of
the device to an HSBCnet username. HSBCnet System Administrators manage Security Devices by:
Viewing Security Device statuses
Maintaining Security Devices
Accessing HSBCnet Security Device management functions
To access the HSBCnet Security Device Management service, in the User and Account Management tab
view, under User Management service, select Manage Security Devices.
User Management Service with Manage Security Devices link
System Administration: User Management
Published: September 2017 29
The Manage Security Devices link displays several tab views:
Users tab—for managing Security Devices by username
Security Devices tab—for managing Security Devices by serial number
Order tab—for ordering new Security Devices
Security Device Management views
Note: System Administrators can manage Security Devices in either the Users tab or the Security Devices
tab. Both tabs manage the same Security Device information. Changes made in either view automatically
update the other view.
Managing Security Devices by username
To manage Security Devices by username, select Manage Security Devices in the User Management
service.
Viewing Security Devices by username
To view User Security Device status under Users, select View Users. The list is sorted by username. It
shows the serial number and status of Security Devices for all Users including those who have not been
allocated a Security Device.
Security Device Management—View Users
Note: To align with industry security standards and further improve your online security, select information
will be partly obscured on HSBCnet.
System Administration: User Management
Published: September 2017 30
Setting up Security Devices by username
To list all users in your company that do not have an allocated Security Device, in the Security Device
Management service, in the Users tab, select Set Up.
1. In the Set Up—User Summary page, select the username you wish to set up.
Set Up—User Summary
2. In the Set up Security Device page, review the User details.
Set up Security Device
3. Select OK.
4. Under Security Device, enter the serial number located on the back of the Security Device that is to
be allocated to the User. Do not include dashes or spaces.
Security Device Serial number
5. Select Submit. An acknowledgement confirms your action.
Maintaining Security Devices by username
To list all users in your company who have an allocated Security Device, select Maintain in the Users tab
in the Security Device Management service.
1. In the Maintain—User Summary page, select a username to maintain.
System Administration: User Management
Published: September 2017 31
Maintain—User Summary
2. In the Maintain Security Device page, select one of the following maintenance options:
Reset User Security Device PIN, due to a lost or forgotten PIN.
Revoke User Security Device, due to staffing changes.
Resynchronise User Security Device, for malfunctions related to synchronisation problems.
Deactivate User Security Device, due to persistent malfunctions.
Maintenance options
Resetting Security Device PIN by username
Users are now able to reset their own Security Device PIN online. However, if for any reason they cannot,
they can request their System Administrator to do so for them.
As a System Administrator, reset a User Security Device PIN when a Security Device becomes locked
after three unsuccessful PIN attempts.
Important: To initiate PIN reset, you need the LOCK PIN that appears on the locked Security Device.
This is displayed on the User’s device. See figure below.
1. In the Manage Security Devices link, under Users, select Maintain.
System Administration: User Management
Published: September 2017 32
2. In the Maintain User Summary page, select the username to maintain.
3. In the Maintain Security Device page, select Reset PIN.
4. In the Maintain Security Device – Reset PIN page, review the security profile of the selected User.
5. To review guidelines for unlocking a Security Device, select Need help finding the unlock code.
6. Enter the LOCK PIN in the Reset PIN section. This is the seven-digit number displayed on the
User’s locked Security Device.
7. Select Submit.
Maintain Security Device—Reset PIN
8. An acknowledgement confirms your action and displays the Unlock code. Provide this Unlock code
to the User.
Acknowledgement displaying the Unlock Code
The User then resets the Security Device by completing the following steps:
1. Turn on the locked Security Device.
2. Key in the unlock code received from the System Administrator.
3. The device page displays the New PIN message. Key in a new four to eight-digit PIN. Re-enter to
confirm.
System Administration: User Management
Published: September 2017 33
4. The Security Device PIN reset is complete.
Revoking Security Devices by username
Revoke a Security Device when a User no longer needs the Security Device that has been allocated to
them.
To revoke a Security Device by username:
1. In the Security Device Management service, under Users, select Maintain.
2. In the Maintain – User Summary page, select the username to maintain.
3. In the Maintain Security Device page, select Revoke Security Device.
4. In the Maintain Security Device – Revoke page, review the security profile of the selected User.
5. To review revocation guidelines, select Revocation and re-use of Security Device.
6. Select the Reason for revocation:
User is leaving the company
User is moving their job/location
Other
7. Select Submit.
Maintain Security Device—Revoke
8. In the Confirm Revoke Security Device page, select Confirm to complete the process.
Maintain Security Device—Confirm Revoke
System Administration: User Management
Published: September 2017 34
9. An acknowledgement confirms your action.
Re-synchronising Security Devices by username
Resynchronise a User Security Device when a Security Device is not currently time synchronised with
HSBCnet. This may occur if a Security Device has not been used for 90 days. If the system displays
repeated error messages when you submit the security code generated by your Security Device, you may
need to resynchronise your Security Device.
To resynchronise a Security Device by username:
1. In the Security Device Management service, under Users, select Maintain.
2. In the Maintain – User Summary page, select the username to maintain.
3. In the Maintain Security Device page, select Resynchronise Security Device.
4. In the Maintain Security Device – Resynchronise page, review the security profile of the selected
User.
5. Select Submit.
6. An acknowledgment confirms your action.
Maintain Security Device—Resynchronise
Deactivating Security Devices by username
Deactivate a User Security Device when a Security Device is lost or remains malfunctioning even after
resynchronisation.
Note: Deactivating permanently disables the Security Device. Once applied, this action cannot be
reversed and the Security Device cannot be reused.
To deactivate a Security Device by username:
1. In the Manage Security Device page, under Users, select Maintain.
2. In the Maintain—User Summary page, select the username to maintain.
3. In the Maintain Security Device page, select Deactivate Security Device.
4. In the Maintain Security Device—Deactivate page, review the security profile of the selected User.
System Administration: User Management
Published: September 2017 35
5. Select the Reason for deactivation:
Security Device is lost or missing
Security Device is not working
6. Select Submit.
Maintain Security Device—Deactivate
7. In the Confirm Deactivate Security Device page, select Confirm to complete the process.
Maintain Security Device—Confirm Deactivate
8. An acknowledgement confirms your action.
Authorising Security Device maintenance
In dual administrative control environments, Security Device maintenance needs to be authorised by a
second System Administrator.
To authorise Security Device maintenance for a User under the Users tab:
1. Select Authorise from the drop-down list.
2. Select the username with the pending authorisation status you wish to authorise.
3. Select Submit to complete the authorisation.
System Administration: User Management
Published: September 2017 36
Authorising Security Device maintenance
Managing Security Devices by serial number
You can manage Security Devices in either the Users tab or the Security Devices tab. Both tabs manage
the same Security Device information. Changes made in either view automatically update the other view.
Viewing Security Devices by serial number
To view Security Device status by serial number:
1. Select View Security Devices under Security Devices tab. The list is sorted by serial number. It
shows the status of each Security Device in your Company and the names of Users that Security
Device have been allocated to.
2. To filter the listing by status, select a status option and select Go.
3. To view a different page, select a page number.
Viewing Security Devices by serial number
Security Device statuses
STATUS DESCRIPTION
Allocated Security Device is currently allocated to a User
Deactivated Security Device has been deactivated and User may not access HSBCnet
Free Security Device is free and available for allocation to a User
Options for maintaining Security Devices by serial number
There are two options for maintaining Security Devices by serial number:
System Administration: User Management
Published: September 2017 37
Maintain Free (Unallocated) Security Devices
Maintain Allocated Security Devices
Maintaining Free (Unallocated) Security Devices
To maintain Free (Unallocated) Security Devices:
1. In the Security Device Management service, under Security Devices, select Maintain.
2. Select Free Security Devices.
3. Select Go.
4. Select the serial number of a Security Device to maintain.
5. Maintenance options for Free Security Devices include:
Set Up (Allocate) a free Security Device for a User. For more information, see Setting up
Security Devices by serial number in this Guide.
Deactivate a Free Security Device, due to persistent malfunctions. For more information,
see Deactivating Security Devices by serial number in this Guide.
Maintain options for Free (Unallocated) Devices
System Administration: User Management
Published: September 2017 38
Maintaining Allocated Security Devices
To maintain Allocated Security Devices:
1. In the Security Device Management service, under Security Devices, select Maintain.
2. Select Allocated Security Devices.
3. Select Go.
4. Select the serial number of a Security Device to maintain.
Maintain Allocated Security Devices
5. Maintenance options for Allocated Security Devices include:
Reset an allocated Security Device PIN, due to lost or forgotten PIN. For more information,
see Resetting Security Device PINs by serial number in this Guide.
Revoke an allocated Security Device, due to staffing changes. For more information, see
Revoking Security Devices by serial number in this Guide.
Resynchronise an allocated Security Device, for malfunctions related to synchronisation
problems. For more information, see Resynchronising Security Devices by serial number
in this Guide.
Deactivate an allocated Security Device, due to persistent malfunctions. For more
information, see Deactivating Security Devices by serial number in this Guide.
Maintain options for Allocated Devices
System Administration: User Management
Published: September 2017 39
Setting up Security Devices by serial number
To set up a Security Device by serial number:
1. Obtain a Security Device from your stock.
Note: If the device has not been used for several weeks, it may need to be resynchronised. For more
information, see Re-synchronising Security Devices by serial number in this Guide.
2. In the Security Device Management service, under Security Devices tab, select Maintain.
3. In the Maintain Security Devices Summary, select the Free Security Devices view.
4. Select Go.
5. In the list of Security Devices, select the serial number of a Free Security Device to set up.
6. In the Maintain Security Device page, review the Security Device details, and then select Set up
Security Device.
7. Setting up Security Device by serial number
8. In the Set up Security Device page, enter the username of the User to set up a Security Device.
9. Select Submit. An acknowledgment confirms your action.
System Administration: User Management
Published: September 2017 40
Resetting Security Device PINs by serial number
Users are now able to reset their own Security Device PIN online. However, if for any reason they cannot,
they can request their System Administrator to do so for them.
As a System Administrator, reset a User Security Device PIN when a Security Device becomes locked
after three unsuccessful PIN attempts.
Important: To initiate PIN reset, you need the LOCK PIN that appears on the locked Security Device.
This is displayed on the User’s device. See figure below.
To reset a Security Device PIN by serial number, the System Administrator performs the following:
1. Choose Manage Security Devices under the User Management service; under Security Devices,
select Maintain.
2. In the Maintain Security Devices Summary, select the Allocated Security Devices view.
3. Select Go.
4. In the list of Security Devices, select the serial number of an Allocated Security Device to be reset.
5. In the Maintain Security Device page, select Reset PIN.
6. In the Maintain Security Device – Reset PIN page, review the Security Device details for the
selected Security Device.
7. To review guidelines for unlocking a Security Device, select Need help finding the unlock code.
8. Enter the LOCK PIN in the Reset PIN section. This is the seven-digit number displayed on the
User’s locked Security Device.
9. Select Submit.
10. An acknowledgement confirms your action and displays the Unlock code. Provide this Unlock code
to the User.
Acknowledgement with Unlock Code
System Administration: User Management
Published: September 2017 41
The User then resets the Security Device by completing the following steps:
1. Turn on the locked Security Device.
2. Key in the unlock code received from the System Administrator.
3. The device page displays the New PIN message. Key in a new four to eight-digit PIN. Re-enter to
confirm.
4. The Security Device PIN reset is complete.
Revoking Security Devices by serial number
Revoke a Security Device when a User no longer needs the Security Device that has been allocated to
them.
To revoke a Security Device by serial number:
1. In the Security Device Management service, under Security Devices, select Maintain.
2. In the Maintain Security Devices Summary, select the Allocated Security Devices view.
3. Select Go.
4. In the list of Security Devices, select the serial number of an Allocated Security Device to revoke.
5. In the Maintain Security Device page, select Revoke Security Device.
6. In the Maintain Security Device – Revoke page, review the Security Device details for the selected
Security Device.
7. Select the Reason for revocation:
User is leaving the company
User is moving their job/location
Other
8. Select Submit.
System Administration: User Management
Published: September 2017 42
Maintain Security Device—Revoke
Re-synchronising Security Devices by serial number
Resynchronise a User Security Device when a Security Device is not currently time-synchronised with
HSBCnet. This may occur if a Security Device has not been used for 90 days.
1. In the Security Device Management service, under Security Devices, select Maintain.
2. In the Maintain Security Devices Summary, select the Allocated Security Devices view.
3. Select Go.
4. In the list of Security Devices, select the serial number of an Allocated Security Device to
resynchronise.
5. In the Maintain Security Device page, select Resynchronise Security Device.
6. In the Maintain Security Device—Resynchronise page, review the Security Device details for the
selected Security Device.
7. Select Submit.
Maintain Security Device—Resynchronise
Deactivating Security Devices by serial number
Deactivate a User Security Device when a Security Device is lost or remains malfunctioning even after
resynchronisation.
System Administration: User Management
Published: September 2017 43
Note: This permanently disables the Security Device. Once authorised, this action cannot be reversed
and the Security Device cannot be re-used.
To deactivate a Security Device by serial number:
1. In the Security Device Management service, under Security Devices, select Maintain.
2. In the Maintain Security Devices Summary, select either:
Free Security Devices view, if the Security Device to be deactivated is currently free
Allocated Security Devices view, if the Security Device to be deactivated is currently
allocated
3. Select Go.
4. In the list of Security Devices, select the serial number of a Security Device to deactivate.
5. In the Maintain Security Device page, select Deactivate Security Device.
6. In the Maintain Security Device – Deactivate page, review the Security Device details for the
selected Security Device.
7. Select the Reason for deactivation:
Security Device is lost or missing
Security Device is not working
8. Select Submit.
Maintain Security Device—Deactivate
9. In the Confirm Deactivate Security Device Page, select Confirm to complete the process.
10. An acknowledgement confirms your action.
System Administration: User Management
Published: September 2017 44
Authorising Security Device maintenance
In Dual Administrative Control environments, Security Device maintenance needs to be authorised by a
second System Administrator.
To authorise User Security Device maintenance (Security Device view), in Security Device Management,
under the Security Devices tab, complete the following steps:
1. Select Authorise from the drop-down list.
2. Select the pending authorisation status you wish to authorise from the drop-down list.
3. Select Submit to complete the authorisation.
Authorise Security Device Maintenance
Ordering Security Devices
To order additional Security Devices from the Bank:
1. Access the User Management service under the User and Account Management tab. Select
Manage Security Devices.
2. Authenticate yourself using your Security Device. Select Continue.
3. In Security Device Management, under the Order tab, select Order Security Devices.
4. In the Order Security Devices Page that appears, Complete the order form. Mandatory fields are
marked with an asterisk (*).
5. Select Submit when finished.
Note: If your company follows Sole administrative control and you are using a new Security Device
(DP270), you are required to authenticate your orders. Follow the on-screen instructions to do so.
System Administration: User Management
Published: September 2017 45
Order Security Devices
6. An acknowledgement confirms your action. If your company follows dual administrative control, the
order status is pending and requires authorisation by another System Administrator before it is
processed.
Authorising Security Device orders
If your company follows dual authorisation control, Security Device orders need to be authorised by a
second System Administrator.
To authorise a Security Device order, in Security Device Management, under the Order tab, select
Authorise and select a Security Device order to authorise. Select Submit to process the order.
Authorise Security Device order
System Administration: User Management
Published: February 2016 46
Troubleshooting Security Devices
Use the Information and examples in the table below to troubleshoot issues you may encounter when using your new Security
Device. This section only applies to Users with the Security Device shown here.
Message Displayed SYMPTOM PROBABLE CAUSES ACTION REQUIRED
bAtt 2 message followed by bAtt1 and bAtt0 messages appear in the device window
This is a low battery message. The low battery counter starts at 2 indicating a battery life of about 2 months.
After its first appearance, the bAtt message appears for 2 seconds each time the device is powered on. After 2 seconds the device resumes normal operation.
Request your System Administrator to allocate a new Security Device. Your existing Security Device must first be deactivated before a new device can be allocated.
Note: Please dispose of the deactivated device in an environmentally safe manner.
button message appears in the device window
This indicates that a button is being pressed and held (accidentally) for a certain time (between 7-9 seconds). It results in the device switching off to preserve battery life.
Ensure that a button is not being accidentally held down.
When selecting a new PIN a not SAFE message appears briefly in the device window before reverting to NEW PIN message.
The new PIN you have selected is unsafe or weak.
Resume selecting a new PIN and ensure that the PIN you select does not contain numbers that are repetitive or sequential (example 11111 or 123456).
Note: The new PIN should be 4 to 8 digits in length
System Administration: User Management
Published: February 2016 47
Message Displayed SYMPTOM PROBABLE CAUSES ACTION REQUIRED
PIN FAIL message appears in the device window (for example, PIN FAIL 1, PIN FAIL 2, PIN FAIL 3)
1. You have entered an invalid PIN.
1. Press the Green circle button briefly and when prompted, enter the correct PIN again
2. Lost or forgotten PIN
2. Reset your Security Device PIN.
To unlock the device, refer to the section on Resetting your Security Device PIN in the User Authentication User Guide.
3. The Security Device may not have been allocated to you.
3. Check with your System Administrator to ensure the device you are using is allocated to you.
When entering the unlock code into the device, it displays a LOCK PIN FAIL message. (for example, LOCK PIN FAIL 1, LOCK PIN FAIL 2)
You have entered the incorrect unlock code
Wait for the device to turn off. Press the Green Circle button briefly and, when prompted, enter the correct unlock code again.
System Administration: User Management
Published: February 2016 48
Message Displayed SYMPTOM PROBABLE CAUSES ACTION REQUIRED
1. When unlocking my Security Device, it displays a LOCK PIN FAIL 3 message which will not go away.
1. You have entered the unlock code incorrectly into the device three times. As a result, for security reasons, you will not be allowed to operate the device for one hour. (also called Unlock Retry Delay period)
If after one hour, you again enter the incorrect unlock code, the device will display a LOCK PIN FAIL 4 message preventing you from operating the device for an additional hour (you have to wait for two hours before you can again attempt to enter the unlock code).
This will continue to occur for up to 6 hours if you keep entering the incorrect unlock code.
1. Wait till the device turns off after the Unlock Retry Delay period. Press the Green Circle button to turn on the device. Then enter the correct Unlock Code.
Note: The Unlock Retry Delay period is determined by the number of unsuccessful attempts to enter the unlock code.
2. The Device displays a LOCK PIN FAIL 3 message briefly before displaying a 7-digit code.
2. You have entered the incorrect PIN three times and your device is locked for security reasons
2. Unlock your device and reset your Security Device PIN.
To unlock the device, refer to the section on Resetting your Security Device PIN in the User Authentication User Guide.
When entering a new PIN a second time to confirm, my Security Device displays a FAIL Pin message
The PIN you have entered does not match the previous PIN entry.
Ensure that the PIN you have entered matches the previous entry.
System Administration: User Management
Published: February 2016 49
Message Displayed SYMPTOM PROBABLE CAUSES ACTION REQUIRED
The Device window displays multiple incoherent messages one after another (see some sample messages on the left)
The device is no longer working.
1. Ask your System Administrator to deactivate the device and issue a new device.
2. Ask your System Administrator to contact your local HSBCnet Support Helpdesk to record this issue.
The Device window displays messages with incomplete characters
The device display is no longer working.
1. Ask your System Administrator to deactivate the device and issue a new device.
2. Ask your System Administrator to contact your local HSBCnet Support Helpdesk to record this issue.
This message appears on HSBCnet
“Error(s) occurred. The details you have entered do not match our records. We may suspend access to your service if there are too many unsuccessful attempts to log on. (LOG_0010)”
HSBCnet does not recognise the security code entered.
1. The Security Device may not have been allocated to you.
1. Check with your System Administrator to ensure the device you are using is allocated to you.
2. Security code has timed out. Each generated code is only valid for a few seconds.
2. Turn off and turn on the Security Device and generate a new code. Enter this code immediately into the on-screen field.
3. Security Device needs re-synchronising
3. System Administrator must resynchronise the Device. For information refer to Re-synchronising Security Devices by Username in this User Guide.
Not applicable User Security Device has been lost or cannot be accounted for
User has lost or not returned his/her Security Device.
Deactivate the Security Device, and if necessary, set up the User with a new Security Device. For information Refer to Deactivating Security Devices by Username in this User Guide.
System Administration: User Management
Published: September 2017 50
Resetting security information
During initial log on, you are required to provide correct security information to authenticate yourself. If
your authentication is successful, you are only required to provide your security code to authenticate
subsequent log on attempts or allowed to reset your Security Device PIN.
However, if you forget or provide incorrect security information, you are directed to reset your security
information. Resetting security information involves two different processes.
Online Reset (performed by User)
Offline Reset (performed by System Administrators)
Note: After the initial log on, Security Device Users can update/reset their security information using Edit
My Profile feature.
Online Reset during Initial Log on
If during log on, you provide incorrect security information such as memorable answer and/or password,
you are directed to reset that security information online by answering the security questions selected by
you during registration. Such security information reset is immediate and does not require approval by
your System Administrator(s). This process of resetting security information is called Online Reset.
To do an Online Reset of your security information during initial log on, complete the following steps.
1. On the top right corner of the HSBCnet home page, select Log on/Register. A drop-down window
appears.
2. Enter your username and select Log on.
System Administration: User Management
Published: September 2017 51
HSBCnet Home page
3. On the Capture Security Credentials page, enter your memorable answer. Then enter the three
requested characters of your current password. Select Continue to proceed.
Online Reset: Enter memorable answer and password
4. If you entered the incorrect security information (memorable answer, password) three times, the
following error message appears and you are presented with the Online Reset options.
Online Reset: Error message
System Administration: User Management
Published: September 2017 52
5. Answer the first security question correctly. The second security question appears.
Online Reset: First security question
6. Answer the second security question. The memorable answer OR the password page (depending
on which one you entered incorrectly) appears.
Online Reset: Second security question
7. Enter the three requested characters of your current password.
Online Reset: Enter password
8. Depending on which security information you entered incorrectly (memorable answer or password),
you are required to reset that incorrect information. Accordingly, the memorable answer OR
password reset page appears.
Reset your password, OR
Reset your memorable answer
Online Reset: Reset your memorable answer
9. An acknowledgment confirms your action.
System Administration: User Management
Published: September 2017 53
Online Reset: Successful reset acknowledgment
10. You can log on again with your new security information.
Offline Reset (OFR) during Initial Log on
If during initial log on, you provide incorrect security information such as memorable answer and/or
password, you are directed to reset that security information online (OLR) by answering the security
questions selected by you during registration.
However, if you are unable to provide correct answers to the security questions and memorable answer
or password, you are locked out of your HSBCnet account. Online Reset is not available. You can then
submit a Security Information Reset (SIR) form, allowing you to choose new security information. The SIR
requires approval by your System Administrator(s). This process of resetting security information is called
Offline Reset.
To do an Offline Reset of your security information, complete the following steps. Some steps may differ
depending on your unique log on status or when you are resetting your security information from the Edit
My Profile service.
1. On the top right corner of the HSBCnet home page, select Log on/Register.
2. Enter your username and select Log on.
System Administration: User Management
Published: September 2017 54
HSBCnet Home Page
3. The Capture Security Credentials page appears. Enter your memorable answer. Enter the three
requested characters of your password. Select Continue to proceed.
Offline Reset: Enter memorable answer and password
4. If you entered the incorrect security information (memorable answer, password) and also failed the
Online Reset process, the following Account Locked error message appears. You are presented
with the Offline Security Information Reset (SIR) form requiring you to reset all security information.
System Administration: User Management
Published: September 2017 55
Offline Reset: Account Locked error message
5. Complete the SIR form and select Continue. Mandatory information is marked with an asterisk (*).
Offline Reset: SIR form
6. An acknowledgement confirms your submission. Print, sign and submit the page to your System
Administrator.
Note: The remaining procedure is completed by your System Administrator
Resetting your memorable answer
During initial log on, if you do not remember your memorable answer, you can reset it from the Capture
Security Credentials page before making any attempts to log on.
System Administration: User Management
Published: September 2017 56
Memorable answer: Online Reset
To reset your memorable answer, complete the following steps:
1. From the Capture Security Credentials page, select the reset memorable answer link.
2. In the pages that follow, answer the first and second security questions and provide the three
requested characters of your password.
3. Choose a new memorable question and answer in the next page.
4. An acknowledgement confirms the successful reset of your credentials.
5. Proceed to your HSBCnet personal page.
Memorable question and answer must conform to the following character rules:
• Memorable question must be one (1) to seventy-six (76) characters. Alphanumeric (A-
Z, 0-9) plus special characters underscore (_), hyphen (-), space ( ), apostrophe (‘), and
period (.)
• Memorable answer must be six (6) to thirty (30) characters. Alphanumeric (A-Z, 0-9)
plus special characters (@), underscore (_), hyphen (-), space ( ), apostrophe (‘) and period
(.). It must not be the same as the existing memorable answer
Resetting your password
During initial log on, if you do not remember your password, you can reset it from the Capture Security
Credentials page before making any attempts to log on.
Password: Online Reset
System Administration: User Management
Published: September 2017 57
To reset your password, complete the following steps:
1. From the Capture Security Credentials page, select the reset your password link.
2. In the pages that follow, answer the first and second security questions, and provide your
memorable answer.
3. Choose a new password in the next page.
4. An acknowledgement confirms the successful reset of your credentials.
5. Proceed to your HSBCnet personal page.
New password chosen must be eight (8) to thirty (30) characters, alpha-numeric (A-Z, 0-9). It must not be
the same as the existing password.
System Administration: User Management
Published: September 2017 58
Querying User Activities
You can use the Account Services Activity Log and Activity Log Query services to expand the view of
transactions related to accounts and services.
Account Services Activity Log
Account Services Activity Log entitles you to view activities performed by all Users in the company for a
period. Activities are categorised by activity type. The options available for User and account management
are:
Account Maintenance
Access Control for Account Services
Account Maintenance
From the Account Services Activity Log service, enter an optional activity date. If date is blank, the system
assumes today as the activity date. Select Account Maintenance in Activity Type and select Go.
Account Services Activity Log service
The Activity Log Summary shows an outline of each payment related activity for the given date range. All
actions that affect templates and instructions are time-stamped and may be used for audit.
Activity Log Summary for Account Management
System Administration: User Management
Published: September 2017 59
Activity Log detail displays information for a selected account.
Activity Log detail for selected account
Access Control for Account Services
To view the activity log for User Entitlements, from Account Services Activity Log, select Access
Control for Account Services activity and select Go.
The Activity Log summary shows details for Administrative setup and changes.
Access Control for Account Services—Summary
For customers with Dual Administrative Control, the approvers are presented with before and after images
of the changes they are about to approve.
System Administration: User Management
Published: September 2017 60
Activity Log Query
System Administrators use the Activity Log Query to query data relating to activity performed using
Administration services (User Management service and User Authorisation Summary) or performed by
Users relating to profile data recorded by them.
To view User activity related administrative changes, session usage or User deletion, complete the
following steps:
1. Access the Activity Log Query service under User and Account Management tab.
2. Enter the date range of the transactions you would like to query. The log displays up to 35 days of
activities.
3. Select an activity from Activity type. The available options are:
Session Activity: provides details of User log on activities for the last 35 days
Change Activity: provides details of User log on activities on administrative changes for
the last 35 days, or
Delete Activity: provides details of all deleted Users for the last 365 days
4. Select Change Activity (example) and select View summary.
5. The following Query Criteria page appears.
System Administration: User Management
Published: September 2017 61
Activity Log Query Criteria: Change activity for Mixed Security Profile
Note: This is a sample page showing Change activity for customers with Mixed Security Profiles.
6. Select the required options and select Submit. The Activity Log—Query Results Page appears.
Administration Reports
The Administration Reports service allows you to generate and download reports providing information
on Users, Accounts and entitlements. These reports are available on-demand and in PDF, Excel or CSV
file formats and contain real time information.
This service is available under the User and Account Management tab. Depending on your working role,
your system administrator can entitle you to access the administration reports.
Refer to the Administration Reports User Guide for more information on Administration Reports.
To use the administrative reports service, complete the following steps:
Generating the report
1. From Report type, choose a report.
System Administration: User Management
Published: September 2017 62
2. From Report format, choose a report file format to generate.
3. Select Go to generate and view the custom report.
Saving and Printing the report
4. To save your report, use the save feature of the specific application that opened the report.
5. Similarly, to print your report, open the saved report and use the print feature of the application.
Note: Please ensure that you have Adobe Acrobat Reader, Microsoft Excel, and a text editor such as
Notepad installed on your computer.
System Administration: User Management
Published: September 2017 63
Types of Reports
The Report type lists the administrative reports to choose from. The available reports are:
Report Type Description
Changes to User Entitlements Lists all authorised entitlement changes to all Users of a Customer
Customer Summary Provides an overall summary of a Customer’s Users, entitlements, accounts and Security Devices.
Full List of Account Entitlements Displays a full list of a User’s entitlements by Account
Full List of Account Signature Limits Displays a full list of Account Signature limits sorted by Institution name/location and account number. The displayed columns are:
Transaction type
Account currency
Signature Group
Signature limit
Last modified date and time
Full List of Authentication Device Types
Lists all Security Devices associated with a Customer and their Users. It also lists all the Password Only users with the customer. This report is only available to Mixed Security Profile Customers.
Full List of Security Devices Lists all Security Devices currently associated with the Customer. This report is only available to Customers who use Security Devices
Full List of User Entitlements Provides a list of the selected User’s complete entitlements
Full List of User Entitlements by Account
Provides a list of the selected User’s complete entitlements by Account
Summary List of Accounts Provides a summary list of all accounts of the Customer in their HSBCnet portfolio of accounts
Summary List of All Users Displays a summary list of all users, both System Administrators and End Users, registered under the Customer ID. The displayed columns are:
Username
Last name, First name
User Type
User Status
Last Logon Date/Time
Last Modified Date
Registered Date
Summary List of All Authorisers Provides a list of Users entitled to Authorise any activity/transactions on any HSBCnet service (excluding Global Markets). Does not include deleted Users
Summary List of Deleted Users Lists deleted users within the period of 365 days and sorted first by User Type and second by User. The displayed columns are:
Username
Last Name, First Name
User Type
Registered Date
Deleted Date
Deleted By
Approved By
System Administration: User Management
Published: September 2017 64
Report Type Description
Summary List of Dormant and Inactive Users
This report displays a summary list of Dormant and Inactive users. They include users
- whose status is not Active
- whose status is Active but never logged on, and
- who have not logged on during the last 30 days
The displayed columns are:
Username
Last Name, First Name
User Type
User Status
Last Logon Date/Time
Last Modified Date
Registered Date
User and Account Matrix Provides a detailed view of the Customer’s usernames and their associated account access
User and Signature Group Matrix This report lists the User and their assigned Signature Groups. The displayed columns are:
User ID
Name
Payment
Trade
Securities
Supply Chain
Note: HSBCnet header, report name, and end of report on last page are only available in the PDF format
System Administration: User Management
Published: September 2017 65
Report Formats
The three available report formats are:
Report Format Description
PDF Portable Document Format is a file format created by Adobe Systems. To view reports in this format you need Adobe Acrobat Reader
Excel Excel Format is a file format created by Microsoft. To view reports in this format you need Microsoft Excel.
CSV Comma Separated Values is a file format that stores tabular data separated by commas. This format can be imported into various programs.
Sample Report - Excel Format
Sample Report—Comma Separated Value (CSV) Format
System Administration: User Management
Issued by HSBC Bank plc
© HSBC Bank plc 2017. All rights reserved.