Enhanced Online Security Q & A

Why did First Ipswich Bank institute Enhanced Online Security?

In keeping with our commitment to protect your personal information by providing state-of-the-art privacy and security solutions, and in accordance with federal banking regulations, First Ipswich Bank is instituting the new enhanced online security solution. This new solution provides First Ipswich Bank customers with the best-in-breed security while maintaining convenience and ease-of-use.

Tell me about First Ipswich Bank's solution.

Encrypted Digital Certificate.

What is an encrypted digital certificate?

A digital certificate is a way of establishing one's credentials when doing business or conducting transactions on the Web. Digital certificates are a superior means of providing trusted authentication between our customer's computers and e-First Ipswich Bank online banking.

Is installing an encrypted digital certificate safe for a computer?

Yes, when installed from a trusted source such as First Ipswich Bank.

Why is First Ipswich Bank choosing a solution that involves encrypted digital certificates?

There are many solutions out there that would meet the compliance guidelines of the FFIEC. First Ipswich Bank is implementing a security solution that preserves the greatest amount of convenience for customers, while improving protections against fraud.

What are the benefits of computer registration to our customers?

Security - Computer registration dramatically reduces any chance of identity theft. Instead of millions of computers potentially accessing your accounts, only the few that you register will have the power to access your accounts

Convenience - You only have to register once. After that, you simply log in as normal because Online Banking will recognize your trusted computer.

Flexibility - We recognize that there may be times when you are not using a trusted computer to access your accounts. When that happens, you can still access Online Banking by entering the activation code we send to you through one of the communication modes of your choosing. (ie. the phone numbers and e-mail you entered upon setting up your Enhanced Online Security.

What are the changes that First Ipswich Bank customers can expect?

On January 14th, 2008, customers logging into Online Banking will be requested to provide contact phone numbers and a contact email address. In the future, we will use these details to contact you with an activation code whenever you login from a computer that is not registered with us.

Customers will have the option of “registering” computers they use for Online Banking as trusted/safe to access their accounts. When customers visit Online Banking from a registered computer, e-First Ipswich Bank will confirm the presence of the digital certificate, customer user id and password, before granting access. When customers visit Online Banking from a non-registered computer, (like a library computer), e-First Ipswich Bank will require the member enter an activation code upon logging in.

How will the Sign-On page change?

The initial signon page will be the same. On your first login, you will be asked to provide phone numbers and an e-mail address. This process is easy, will only take a few minutes, and will only have to be done one time. We will ask you to download a digital certificate that will uniquely identify your computer and prevent you from having to enter an activation code with each login. Please do not install certificates on a public computer (library, Internet cafe, etc.). If you need to login from a public computer, you will be allowed access by entering an activation code that will be sent to you using either an e-mail address or one of the phone numbers your provided during your initial setup. You will be given a choice as to which method or number you would like to receive your activation code at the time you are requesting it.

How many computers can a customer register?

Customers may register up to three computers – and are encouraged to do so for all those computers they normally use for their e-First Ipswich Bank online banking needs.

Will a customer be able to “opt-out” of this additional authentication control?

No. e-First Ipswich Bank Online Banking customers are not required to install the encrypted digital certificate on their computers. However, if they choose to not register their primary computers, they will be required to enter an activation code (along with their SignOn ID and password) each time they attempt to access their account.

Who can I contact for any further questions?

Online Banking, as well as your local branch, is always available during banking hours to answer your questions.

Why is the “Choose a digital certificate” box empty?

This happens because you have not registered that particular computer (but have registered another computer at some point). Once you have installed a digital certificate on that particular computer, there will be a digital certificate to choose from the list. Click continue even though the box is blank. This will take you to where you need to enter your activation code and where you can also choose to install the certificate or not depending on if you are on a private or public computer.

Why am I being asked for an activation code when I installed the certificate?

Did you install the certificate on the same computer you are using to access Online Banking right now? The certificate installed was only for that one computer that you installed it to. If you are accessing Online Banking from a different computer, like from work, you will have to install a certificate there also, or just enter an activation code every time.

Do I need to install more than one Digital Certificate?

If you normally use more than one computer or use more than one type of browser, then you will need to install a Digital Certificate for each of these situations.

How can I tell which certificate to use if I have installed more than one certificate on a computer?

The certificate description will display the last 3 digits of your SignOn ID.

How do I remove a Digital Certificate in Internet Explorer?

Select Tools, then Internet options, click on the Content tab, select the certificate you want to remove, click Remove, then click Yes.

How do I remove a Digital Certificate in Mozilla Firefox?

Select Tools, then Options (If on a Mac, click on Firefox, then Preferences), click on the Advanced icon, click on the Encryption tab, click on the View Certificates button, click on the Your Certificates tab, click on the digital certificate you want to remove, click Delete, then click OK. Click OK two more times in order to exit out of the Options area.

Can I use another browser besides Internet Explorer or Mozilla Firefox?

Yes; however, if the browser is not fully compatible with the digital certificates, you may need to revert to the option of receiving an activation code each time you sign on.

How do I stop Internet Explorer from prompting me to select a certificate when only one certificate exists on my pc?

Select Tools, then Internet Options, then the Security tab, then Custom level, then select Enable under "Don't prompt for client certificate selection when no certificate or only one certificate exists".

Why do I get security warning questions when I go to install a Digital Certificate?

Certain browsers such as Internet Explorer display these questions to make sure you are aware of the need to install a Digital Certificate from a trusted site. As long as you make sure you are actually on e-First Ipswich Bank's Website, you are safe to install the certificate. Other browsers such as Mozilla Firefox do not ask the security warning questions.